Consumer-controlled limited and constrained access to a centrally stored information account

• US 7,487,130 B2
• Filed: 01/06/2006
• Issued: 02/03/2009
• Est. Priority Date: 11/07/2000
• Status: Expired due to Term

• Current Assignee: CXT Systems, Inc. (Quest Patent Research Corporation)
• Original Assignee: Grdn Net Solutions LLC (Intellectual Ventures LLC)
• Inventors: Bradnan, Andrew, Steele, Nick, Maranville, Joe, Hawkins, Stan
• Primary Examiner(s): Worjloh; Jalatee
• Application Number:
  US11/327,160
• Publication Number:
  US 20060179003A1
• Time in Patent Office: 1,124 Days
• Field of Search: 705 50- 79, 713182-186, 726 26- 30, 380200-203, 707/9, 707/10
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

Consumer authentication information is associated with an information account stored in a central database, such that access to the information account by the consumer is conditioned upon receipt and verification of the consumer authentication information. A temporary authorization may also be associated with the information account. The temporary authorization has consumer-defined attributes that define access privileges to be granted to a person who presents the temporary authorization along with a request for further access to the information account. The temporary authorization may be transmitted to the consumer for presentation to a third-party of the consumer'"'"'s choice. Alternately, the temporary authorization may be transmitted to a designated third-party or device on behalf of the consumer.

Claims

1. A computer-implemented method for providing access to consumer information comprising:

associating consumer authentication information with an information account comprising consumer information elements stored in a data repository using a server, the server conditioning access to the information account by the consumer upon receipt and verification of the consumer authentication information by the server;

associating a temporary authorization with the information account using an authentication module running on the server;

receiving the temporary authorization from an authorized party who is not the consumer, the temporary authorization having been provided to the authorized party by the consumer, the authorized party including at least one person, business, enterprise, and entity that makes products available for or provides services to consumers;

comparing the temporary authorization to data in an authentication table associated with the information account using the authentication module in order to determine at least one of;

whether the temporary authorization is being used by the authorized party who is not the consumer, whether the temporary authorization has expired, and what level of access to the information account is associated with the temporary authorization; and

granting the authorized party a level of access to the consumer information elements in the information account by the authentication module based on the temporary authorization.

2. The method of claim 1, wherein the information account comprises consumer information elements that are changed by the consumer.

3. The method of claim 1, wherein the temporary authorization comprises consumer-defined attributes that define access privileges.

4. The method of claim 3, wherein the consumer-defined attributes comprise at least one of the access privileges relating to:

a number of times that the temporary authorization may be used to access the information account, a period of validity associated with the temporary authorization, a type of the consumer information elements that can be accessed, and a specification of read, write and/or modify privileges.

5. The method of claim 3, wherein the consumer-defined attributes include a filter identifier that identifies a filter to be used to ensure that only authorized data is filtered for release to the party who presents the temporary authorization.

6. The method of claim 1, further comprising the step of transmitting the temporary authorization to the consumer;

and

wherein the consumer presents the temporary authorization to the authorized party.

7. The method of claim 1, further comprising transmitting the temporary authorization to the authorized party by embedding the temporary authorization as a parameter in a uniform resource locator.

8. A computer readable medium having stored thereon computer executable instructions for performing the following steps:

associating consumer authentication information with an information account comprising consumer information elements stored in a data repository using a server, the server conditioning access to the information account by the consumer upon receipt and verification of the consumer authentication information by the server;

associating a temporary authorization with the information account using an authentication module running on the server;

receiving the temporary authorization from an authorized party who is not the consumer, the temporary authorization having been provided to the authorized party by the consumer, the authorized party including at least one person, business, enterprise, and entity that makes products available for or provides services to consumers;

comparing the temporary authorization to data in an authentication table associated with the information account using the authentication module in order to determine at least one of;

whether the temporary authorization is being used by the authorized party who is not the consumer, whether the temporary authorization has expired, and what level of access to the information account is associated with the temporary authorization; and

granting the authorized party a level of access to the consumer information elements in the information account by the authentication module based on the temporary authorization.

9. A computer-implemented method for providing access to consumer information comprising:

presenting to a host server a request for access by a consumer to an information account and consumer authentication information, the information account comprising consumer information elements and being stored in a central data repository that is accessible by the host server via the distributed computer network;

receiving from the host server an acknowledgment that the consumer has been authenticated based on the consumer authentication information;

in response to the acknowledgment, transmitting to the host server from the consumer a request for generation of a temporary authorization that defines access privileges and that is shared with an entity different than the consumer who presents the temporary authorization along with a subsequent request for access to the information account, the entity different than the consumer including at least one person, business, enterprise, and entity that makes products available for or provides services to consumers;

comparing the temporary authorization to data in an authentication table associated with the information account using an authentication module in order to determine at least one of;

whether the temporary authorization is being used by an authorized party who is not the consumer, whether the temporary authorization has expired, and what level of access to the information account is associated with the temporary authorization; and

granting to the entity different than the consumer a level of access to the consumer information elements in the information account with the authentication module based on the temporary authorization.

10. The method of claim 9, farther comprising receiving the temporary authorization from the distributed computer network with the authentication module running on the host server.

11. The method of claim 9, wherein the information account comprises at least one of the access privileges relating to:

a number of times that the temporary authorization may be used to access the information account, a period of validity associated with the temporary authorization, a type of the consumer information elements that can be accessed, and a specification of read, write and/or modify privileges.

12. The method of claim 9, wherein the information account comprises a filter identifier that identifies a filter to be used to ensure that only authorized data is filtered for release to the party who presents the temporary authorization.

13. A computer readable medium having stored thereon computer executable instructions for performing the following steps:

presenting to a host server a request for access by a consumer to an information account and consumer authentication information, the information account comprising consumer information elements and being stored in a central data repository that is accessible by the host sewer via the distributed computer network;

receiving from the host server an acknowledgment that the consumer has been authenticated based on the consumer authentication information;

in response to the acknowledgment, transmitting to the host server from the consumer a request for generation of a temporary authorization that defines access privileges and that is shared with an entity different than the consumer who presents the temporary authorization along with a subsequent request for access to the information account, the entity different than the consumer including at least one person, business, enterprise, and entity that makes products available for or provides services to consumers;

comparing the temporary authorization to data in an authentication table associated with the information account using an authentication module in order to determine at least one of;

whether the temporary authorization is being used by an authorized party who is not the consumer, whether the temporary authorization has expired, and what level of access to the information account is associated with the temporary authorization; and

granting to the entity different than the consumer a level of access to the consumer information elements in the information account with the authentication module based on the temporary authorization.

14. A computer system for providing access to consumer information comprising:

a communication device receiving consumer authentication information, and receiving from the consumer a request for a temporary authorization and consumer-defined attributes defining access privileges that are granted to an entity different from the consumer who presents the temporary authorization along with a request for access to an information account containing consumer information elements, the entity different than the consumer including at least one person, business, enterprise, and entity that makes products available for or provides services to consumers; and

a processor programmed to execute computer-executable instructions that generate the temporary authorization having attributes defined by the consumer, programmed to receive the temporary authorization, programmed to compare the temporary authorization to data in the authentication table associated with the information account in order to determine at least one of;

whether the temporary authorization is being used by the entity, whether the temporary authorization has expired, and what level of access to the information account is associated with the temporary authorization, and programmed to grant to the entity different from the consumer a level of access to the consumer information elements in the information account based on the temporary authorization if the temporary authorization is found valid by the processor.

15. The computer system of claim 14, wherein the processor in response to receiving the consumer authentication information, accesses an authentication table to determine whether the consumer authentication information is associated with the information account, such that the consumer may be provided with access to the information account.

16. The system of claim 14, wherein the attributes defined by the consumer comprise at least one of the access privileges relating to:

a number of times that the temporary authorization may be used to access the information account, a period of validity associated with the temporary authorization, a type of the consumer information elements that can be accessed, and a specification of read, write and/or modify privileges.

17. The system of claim 14, wherein the attributes defined by the consumer comprise a filter identifier that identifies a filter to be used to ensure that only authorized data is filtered for release to the party who presents the temporary authorization.

18. The system of claim 14, wherein the processor transmits the temporary authorization to the entity by emailing the temporary authorization to an email account designated by the consumer.

19. The system of claim 14, wherein the processor transmits the temporary authorization to the entity by embedding the temporary authorization as a parameter in a uniform resource locator.

20. The method of claim 14, wherein the information account comprises a filter identifier that identifies a filter to be used to ensure that only authorized data is filtered for release to the party who presents the temporary authorization.