Method, system, and computer program product for digital verification of collected privacy policies in electronic transactions

• US 8,577,806 B2
• Filed: 11/12/2003
• Issued: 11/05/2013
• Est. Priority Date: 11/12/2003
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Kuehr-McLaren, David G., Presler-Marshall, Martin, Powers, Calvin S., Shoriak, Timothy, Walczyk, John H. III
• Primary Examiner(s): Augustin, Evens J
• Application Number:
  US10/706,334
• Publication Number:
  US 20050102155A1
• Time in Patent Office: 3,646 Days
• Field of Search: 709/228, 705/10, 705/80, 705/26, 726/24
• US Class Current: 705/50
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

Parties involved in transacting business in an E-marketplace (E-marketplace participants) each identify and submit to the E-marketplace their P3P policy and/or other relevant characteristics related to their privacy policy needs (those that they adhere to, referred to as “privacy policies”; those that they require, referred to as “privacy preferences”, or both). Submitted with the privacy policy is a digital signature that is tied to the owner of the web objects to which the privacy policy pertains. Using a digital signature assures the integrity of the privacy policy since it travels with the privacy policy and thus refers back to the original sender of the policy rather than the middleman (the E-marketplace), and if the document (the privacy policy) to which it is attached has been tampered with, the digital signature will be invalidated.

Claims

1. A computer-implemented method of conducting electronic commerce transactions among a plurality of participants in an E-marketplace, comprising the steps of:

the E-marketplace obtaining, via a computer, digitally-signed privacy-use information for each participant, wherein the digitally-signed privacy-use information is obtained separate from a business transaction between participants; and

the E-marketplace sharing, via said computer, the digitally-signed privacy-use information with any participants interested in doing business with each other in the E-marketplace, wherein the sharing allows the participants to verify that the digitally-signed privacy-use information has not been tampered with since being submitted to the E-marketplace.

2. The method of claim 1, wherein said privacy information comprises a P3P policy.

3. The method of claim 1, wherein said step of obtaining digitally-signed privacy-use information for each participant comprises at least the steps of:

requesting, via said computer, each participant to submit said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

storing, via said computer, all of said submitted digitally-signed privacy-use information by the E-marketplace.

4. The method of claim 1, wherein said step of obtaining digitally-signed privacy-use information for each participant comprises at least the steps of:

requiring each participant to submit, via said computer, said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

storing, via said computer, all of said submitted digitally-signed privacy-use information by the E-marketplace.

5. The method of claim 4, wherein said step of sharing the digitally-signed privacy-use information comprises at least the step of:

said E-marketplace making available, via said computer, all of said stored digitally-signed privacy-use information to all participants upon request.

6. The method of claim 4, wherein said step of sharing the digitally-signed privacy-use information comprises at least the step of:

said E-marketplace making available to participants in a particular transaction, via said computer, the stored digitally-signed privacy-use information of all participants in said particular transaction.

19. The method of claim 1, wherein sharing the digitally-signed privacy-use information comprises the E-marketplace sending the digitally-signed privacy-use information of a potential business partner to a buyer in conjunction with the buyer requesting information regarding the potential business partner, prior to the buyer selecting to do business with the potential business partner.

20. The method of claim 1, wherein sharing the digitally-signed privacy-use information comprises the E-marketplace sending the digitally-signed privacy-use information of a business partner to a buyer after the buyer selects to do business with the business partner.

7. A computer program product recorded on computer-readable medium for conducting electronic commerce transactions among a plurality of participants in an E-marketplace, comprising:

computer-readable means for the E-marketplace obtaining digitally-signed privacy-use information for each participant, wherein the digitally-signed privacy-use information is obtained separate from a business transaction between participants; and

computer-readable means for the E-marketplace sharing the digitally-signed privacy-use information with any participants interested in doing business with each other in the E-marketplace, wherein the sharing allows the participants to verify that the digitally-signed privacy-use information has not been tampered with since being submitted to the E-marketplace.

8. The program product of claim 7, wherein said privacy information comprises a P3P policy.

9. The program product of claim 7, wherein said computer-readable means for obtaining digitally-signed privacy-use information for each participant comprises at least:

computer-readable means for requesting each participant to submit said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

computer-readable means for storing all of said submitted digitally-signed privacy-use information by the E-marketplace.

10. The program product of claim 7, wherein said computer-readable means for obtaining digitally-signed privacy-use information for each participant comprises at least:

computer-readable means for requiring each participant to submit said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

computer-readable means for storing all of said submitted digitally-signed privacy-use information by the E-marketplace.

11. The program product of claim 10, wherein said computer-readable means for sharing the digitally-signed privacy-use information comprises at least:

computer-readable means for making available by said E-marketplace all of said stored digitally-signed privacy-use information to all participants upon request.

12. The program product of claim 10, wherein said computer-readable means for sharing the digitally-signed privacy-use information comprises at least:

computer-readable means for making available to participants in a particular transaction, by said E-marketplace, the stored digitally-signed privacy-use information of all participants in said particular transaction.

13. A computer system for conducting electronic commerce transactions among a plurality of participants in an E-marketplace, comprising logic for:

obtaining digitally-signed privacy-use information for each participant, wherein the digitally-signed privacy-use information is obtained separate from a business transaction between participants; and

sharing the digitally-signed privacy-use information with any participants interested in doing business with each other in the E-marketplace, wherein the sharing allows the participants to verify that the digitally-signed privacy-use information has not been tampered with since being submitted to the E-marketplace.

14. The computer system of claim 13, wherein said privacy information comprises a P3P policy.

15. The computer system of claim 13, wherein said logic for obtaining digitally-signed privacy-use information for each participant comprises at least logic for:

requesting each participant to submit said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

storing all of said submitted digitally-signed privacy-use information by the E-marketplace.

16. The computer system of claim 13, wherein said logic for obtaining digitally-signed privacy-use information for each participant comprises at least logic for:

requiring each participant to submit said digitally-signed privacy-use information to the E-marketplace as part of a registration procedure for the E-marketplace; and

storing all of said submitted digitally-signed privacy-use information by the E-marketplace.

17. The computer system of claim 16, wherein said logic for sharing the digitally-signed privacy-use information comprises at least logic for:

making available by said E-marketplace all of said stored digitally-signed privacy-use information to all participants upon request.

18. The computer system of claim 16, wherein said logic for sharing the digitally-signed privacy-use information comprises at least logic for:

making available to participants in a particular transaction, by said E-marketplace, the stored digitally-signed privacy-use information of all participants in said particular transaction.