Mediating customer-driven exchange of access to personal data for personalized merchant offers

• US 8,655,719 B1
• Filed: 07/25/2007
• Issued: 02/18/2014
• Est. Priority Date: 07/25/2007
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Li, Jun, Karp, Alan H.
• Primary Examiner(s): Bekerman, Michael
• Assistant Examiner(s): Iosif, Mario
• Application Number:
  US11/828,090
• Time in Patent Office: 2,400 Days
• Field of Search: 705/14, 705/14.1, 705/14.25, 705/14.35, 705/14.54
• US Class Current: 705/14.1
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0631 Item recommendations
• CPC Class Codes: G06Q 30/0641 Shopping interfaces

Abstract

A purchase objective is received from a customer. A merchant is notified of the purchase objective. One or more queries for personal information associated with the customer are received from the merchant. Ones of the received queries that are associated with the purchase objective are validated. For each of the validated queries, information matching the query is retrieved from personal data relating to the customer subject to data access restrictions specified by a privacy policy established by the customer, and the retrieved information is transmitted to the merchant. An offer that satisfies the purchase objective is received from the merchant. The offer is presented to the customer.

Claims

1. A method, comprising computer hardware performing operations comprising:

receiving a purchase objective from a customer;

assigning to the purchase objective a respective customer session identifier that uniquely identifies the purchase objective;

associating the customer session identifier with a privacy policy established by the customer;

notifying a merchant of the purchase objective;

receiving from the merchant one or more queries for personal information associated with the customer;

validating ones of the received queries that are associated with the purchase objective;

for each of the validated queries,

retrieving the privacy policy based on the customer session identifier,

retrieving information matching the query from personal data relating to the customer and comprising historical data relating to prior purchases by the customer from different merchants, subject to data access restrictions specified by the privacy policy established by the customer, wherein the retrieving comprises identifying merchant-specific data access restrictions associated with a merchant identifier identifying the merchant, and applying the identified data access restrictions to the information matching the validated ones of the queries, and

transmitting the retrieved information to the merchant;

receiving from the merchant an offer that satisfies the purchase objective; and

presenting the offer to the customer.

2. The method of claim 1, further comprising prompting the customer to input the description of the purchase objective, wherein the prompting comprises prompting the customer to specify in the purchase objective a promotion to be associated with any merchant offer presented in satisfaction of the purchase objective.

3. The method of claim 1, wherein the notifying comprises sending to the merchant a message comprising an authorization token linked to the customer session identifier.

4. The method of claim 3, wherein the validating comprises verifying that the received queries are associated with respective identifiers that match the authorization token.

5. The method of claim 4, wherein the retrieving comprises determining the customer-merchant identifier from the authorization token, determining the customer session identifier from the customer-merchant session identifier, and retrieving the information matching the one or more queries based on the customer session identifier.

6. The method of claim 1, wherein the notifying comprises sending a message comprising a customer-merchant session identifier linked to the customer session identifier to the merchant over an encrypted communications channel.

7. The method of claim 1, wherein the validating comprises verifying that each of the queries is received from the merchant notified of the purchase objective.

8. The method of claim 1, wherein the retrieving comprises retrieving the matching information from data relating to prior purchases by the customer.

9. The method of claim 1, further comprising classifying the purchase objective into a purchase category selected from a set of predetermined purchase categories, matching the selected purchase category to one of a set of purchase-category-specific privacy policies, and prompting the customer to establish a privacy policy for the purchase objective based on the matched purchase-category-specific privacy policy.

10. The method of claim 1, further comprising brokering a purchase transaction between the customer and the merchant to protect the privacy of at least one of the customer and the merchant.

11. A method, comprising computer hardware performing operations comprising:

receiving a purchase objective from a customer;

notifying a merchant of the purchase objective;

receiving from the merchant one or more queries for personal information associated with the customer;

validating ones of the received queries that are associated with the purchase objective, wherein the validating comprises invalidating those queries that are received outside a finite customer-merchant session time period;

for each of the validated queries, retrieving information matching the query from personal data relating to the customer subject to data access restrictions specified by a privacy policy established by the customer, and transmitting the retrieved information to the merchant;

receiving from the merchant an offer that satisfies the purchase objective; and

presenting the offer to the customer.

12. The method of claim 11, further comprising dynamically updating the privacy policy in response to a request from the customer to modify the privacy policy, wherein the retrieving comprises retrieving the matching information subject to data access restrictions specified by the updated privacy policy in response to validated queries received during the customer-merchant session time period and after the privacy policy was updated.

13. The method of claim 11, further comprising issuing to the merchant an authorization token that is valid only during the customer-merchant session time period, wherein the validating comprises declaring as valid only those queries that are accompanied by a valid copy of the authorization token.