Systems and methods for permission arbitrated transaction services

• US 8,931,058 B2
• Filed: 07/01/2011
• Issued: 01/06/2015
• Est. Priority Date: 07/01/2010
• Status: Active Grant

• Current Assignee: Experian Information Solutions Incorporated (Experian plc)
• Original Assignee: Experian Information Solutions Incorporated (Experian plc)
• Inventors: DiChiara, Christer J., LeFevre, Kristin M., Mitchum, Randall P., Wresinski, Bryan David
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): FIELDS, COURTNEY D
• Application Number:
  US13/175,401
• Publication Number:
  US 20120017266A1
• Time in Patent Office: 1,285 Days
• Field of Search: 726/4, 726/12, 726/26, 713/182, 705/27.1, 705/38, 705/1, 709/204
• US Class Current: 726/4
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Systems and methods disclosed allow a permitting party to share personal information with a receiving party. The receiving party may use the information to authenticate the permitting party, assess the permitting party, determine if the permitting party is compatible with one or more other users associated with the receiving party, or validate the permitting party. The permitting party may define how much of the permitting party'"'"'s personal information is shared, and/or limit the use of the information for one or more specific purposes. A requesting party may also set up criteria for the types of information it wants to review along with the intended use of the information. The systems and methods disclosed also enables permitting parties the ability to grant requesting parties access to requested information.

Claims

1. An arbitration entity computer system comprising:

a hardware processor; and

a memory storing a plurality of processing instructions configured for execution by the hardware processor in order to cause the arbitration entity computer system to;

receive, by the arbitration entity computer system, from at least one requesting party a request for personal information about a permitting party, wherein the request includes one or more types of personal information and a purpose for the personal information;

receive, by the arbitration entity computer system, first authentication information from the at least one requesting party;

receive, by the arbitration entity computer system, second authentication information from the permitting party;

authenticate, by the arbitration entity computer system, identities of the at least one requesting and permitting parties based on the authentication information received from the at least one requesting and permitting parties;

send a request, by the arbitration entity computer system, to the permitting party, the request asking the permitting party for permission to provide the personal information requested by each of the requesting parties;

receive, by the arbitration entity computer system, permission from the permitting party to provide at least some of the personal information requested by each of the requesting parties, wherein the permission indicates one or more types of personal information for which access is not granted for each requesting party;

access, by the arbitration entity computer system, personal information of the permitting party that is of the one or more requested type; and

prepare, by the arbitration entity computer system, a separate set of output data for each of the requesting parties based on the respective purpose for the information,

wherein an entity controlling the arbitration entity computer system is separate from the requesting parties and the permitting party.

2. The arbitration entity computer system of claim 1, wherein the one or more types of personal information comprises at least one of credit information, demographic information, and criminal background.

3. The arbitration entity computer system of claim 1, wherein the purpose for the personal information comprises at least one of compatibility between the permitting and requesting parties, assessment of the permitting party'"'"'s character, authentication of the permitting party'"'"'s identity, legitimacy of information provided by the permitting party, and validation of information provided by the permitting party.

4. The arbitration entity computer system of claim 1, wherein, for a first purpose for the personal information, the output data comprises a transformation of the personal information.

5. The arbitration entity computer system of claim 4, wherein the transformation comprises truncating the personal information.

6. The arbitration entity computer system of claim 4, wherein the transformation comprises an abstraction of the personal information.

7. The arbitration entity computer system of claim 6, wherein the personal information comprises a credit score.

8. The arbitration entity computer system of claim 7, wherein the abstraction comprises an expression representative of the credit score.

9. The arbitration entity computer system of claim 8, wherein the expression comprises an icon that ranges from a smile to a frown.

10. The arbitration entity computer system of claim 4, wherein the transformation comprises an indication of whether the permitting party would be a suitable tenant or an indication of whether the permitting party would be romantically compatible with the respective requesting party.

11. The arbitration entity computer system of claim 10, wherein the transformation is based on a default algorithm that is based on one or more attributes of the permitting party that are not publicly available.

12. The arbitration entity computer system of claim 10, wherein the transformation is customizable by the respective requesting party.

22. The arbitration entity computer system of claim 1, wherein the one or more types of personal information comprises at least one of:

a credit score, a credit profile with a decision, a full credit profile with personally identifying information removed, a credit profile with some information removed or information regarding the character of the permitting party.

13. A method comprising:

receiving, at an arbitration entity computing device, at least one request for personal information about a permitting party, wherein the at least one request includes one or more types of information and an intended use of the personal information by at least one requesting party;

receiving, by the arbitration entity computer system, authentication information from the at least one requesting party;

receiving, by the arbitration entity computer system, authentication information from the permitting party;

authenticating, by the arbitration entity computer system, identities of the at least one requesting and permitting parties based on the authentication information received from the at least one requesting and permitting parties;

sending, from the arbitration entity computing device, a request for permission to the permitting party;

receiving permission by the arbitration entity computing device, from the permitting party, to provide the at least one requesting party access to at least some of the requested personal information, wherein the permission indicates one or more portions of the requested personal information for which access is not granted for each requesting party;

accessing, by the arbitration entity computing device, the one or more portions of the requested personal information of the permitting party; and

providing, by the arbitration entity computing device, a separate set of at least some of the accessed personal information to each of the requesting parties based on a respective purpose for the information,

wherein an entity controlling the arbitration entity computing device is separate from the requesting party and the permitting party.

14. The method of claim 13, further comprising:

authenticating the permitting party;

authenticating the at least one requesting party; and

providing the separate set of at least some of the accessed personal information to each requesting party only after authenticating the at least one requesting and permitting parties'"'"' identities by determining that there is no identity theft or fraud.

15. The method of claim 13, wherein the permitting party comprises a potential tenant, and the at least one requesting party comprises a landlord.

16. The method of claim 13, wherein the permitting party comprises a first social networker, and the at least one requesting party comprises at least one second social networker seeking personal information regarding the first social networker.

17. The method of claim 13, further comprising receiving, by the arbitration entity computing device, from the permitting party, restrictions on an amount of personal information to provide to each requesting party.

18. An arbitration entity computer system for authenticated transactions, comprising:

a processor; and

a memory in communication with the processor, the memory for storing a plurality of processing instructions for directing the processor to;

receive, by the arbitration entity computer system from a permitting party, permission to provide at least some personal information about the permitting party to one or more receiving parties having attributes provided by the permitting party, wherein the permission indicates one or more types of the personal information for which access is not granted;

receive, by the arbitration entity computer system, authentication information from the one or more requesting parties;

receive, by the arbitration entity computer system, authentication information from the permitting party;

authenticate, by the arbitration entity computer system, identities of the one or more requesting and permitting parties based on the authentication information received from the one or more requesting and permitting parties;

access, by the arbitration entity computer system, the one or more types of the personal information about the permitting party;

transform, by the arbitration entity computer system, the accessed one or more types of personal information about the permitting party based on a purpose for the information for each requesting party; and

send, by the arbitration entity computer system, the transformed personal information to one or more of the permitting party, a third party, a credit bureau, an information service provider, a financial institution or a party that stores personal information on the permitting party, wherein a separate set of the transformed personal information is accessible to each of the requesting parties having the attributes provided by the permitting party,

wherein an entity controlling the arbitration entity computer system is separate from the one or more requesting parties and the permitting party.

19. The arbitration entity computer system of claim 18, wherein the attributes include one or more of a name of an individual, a name of a company, a location, or an intended use of personal information.

20. The arbitration entity computer system of claim 18, wherein the processor transforms the personal information by providing an abstraction representative of the personal information.

21. The arbitration entity computer system of claim 20, wherein the abstraction comprises an icon.