Dynamic de-identification and anonymity
First Claim
1. A device, comprising:
- a communication interface for sending data;
one or more memory elements having, stored therein, computer program code; and
one or more processing units operatively coupled to the one or more memory elements and configured to execute instructions in the computer program code that cause the one or more processing units to;
request a first dynamically-changing, temporally unique identifier and a second dynamically-changing, temporally unique identifier from a first privacy server;
associate the first dynamically-changing, temporally unique identifier with a first data subject and a first one or more data attributes of the first data subject;
associate the second dynamically-changing, temporally unique identifier with the first data subject and a second one or more data attributes of the first data subject;
generate first time period data, wherein the first time period data comprises information defining a first time period during which the first dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated first one or more data attributes;
generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated second one or more data attributes;
wherein the first time period is different from the second time period;
wherein the first dynamically-changing, temporally unique identifier is different from the second dynamically-changing, temporally unique identifier;
wherein the first dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated first one or more data attributes during the second time period, andwherein the second dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated second one or more data attributes during the first time period, thereby providing anonymity of the first data subject;
store, in at least one of the one or more memory elements, the first and second dynamically-changing, temporally unique identifiers, the first and second one or more data attributes, and the first and second time period data;
send, in response to a determination that a first condition has been met, the first dynamically-changing, temporally unique identifier, the first time period data, and the first one or more data attributes to the first privacy server; and
send, in response to a determination that a second condition has been met, the second dynamically-changing, temporally unique identifier, the second time period data, and the second one or more data attributes to the first privacy server.
3 Assignments
0 Petitions
Accused Products
Abstract
Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and/or erase data with increased privacy, anonymity and security, thereby facilitating the availability of more qualified and accurate information. When data is authorized by subjects to be shared with third parties, embodiments may facilitate sharing information in a dynamically controlled manner that enables delivery of temporally-, geographically-, and/or purpose-limited information to the receiving party. In one example, anonymity measurement scores may be calculated for the shared data elements so that a level of consent/involvement required by the Data Subject before sharing the relevant data elements to third parties may be specified.
-
Citations
30 Claims
-
1. A device, comprising:
-
a communication interface for sending data; one or more memory elements having, stored therein, computer program code; and one or more processing units operatively coupled to the one or more memory elements and configured to execute instructions in the computer program code that cause the one or more processing units to; request a first dynamically-changing, temporally unique identifier and a second dynamically-changing, temporally unique identifier from a first privacy server; associate the first dynamically-changing, temporally unique identifier with a first data subject and a first one or more data attributes of the first data subject; associate the second dynamically-changing, temporally unique identifier with the first data subject and a second one or more data attributes of the first data subject; generate first time period data, wherein the first time period data comprises information defining a first time period during which the first dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated first one or more data attributes; generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated second one or more data attributes; wherein the first time period is different from the second time period; wherein the first dynamically-changing, temporally unique identifier is different from the second dynamically-changing, temporally unique identifier; wherein the first dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated first one or more data attributes during the second time period, and wherein the second dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated second one or more data attributes during the first time period, thereby providing anonymity of the first data subject; store, in at least one of the one or more memory elements, the first and second dynamically-changing, temporally unique identifiers, the first and second one or more data attributes, and the first and second time period data; send, in response to a determination that a first condition has been met, the first dynamically-changing, temporally unique identifier, the first time period data, and the first one or more data attributes to the first privacy server; and send, in response to a determination that a second condition has been met, the second dynamically-changing, temporally unique identifier, the second time period data, and the second one or more data attributes to the first privacy server. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A non-transitory computer readable medium comprising computer executable instructions stored thereon to cause one or more processing units to:
-
request a first dynamically-changing, temporally unique identifier and a second dynamically-changing, temporally unique identifier from a first privacy server; associate the first dynamically-changing, temporally unique identifier with a first data subject and a first one or more data attributes of the first data subject; associate the second dynamically-changing, temporally unique identifier with the first data subject and a second one or more data attributes of the first data subject; generate first time period data, wherein the first time period data comprises information defining a first time period during which the first dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated first one or more data attributes; generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated second one or more data attributes, wherein the first time period is different from the second time period, wherein the first dynamically-changing, temporally unique identifier is different from the second dynamically-changing, temporally unique identifier, wherein the first dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated first one or more data attributes during the second time period, and wherein the second dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated second one or more data attributes during the first time period, thereby providing anonymity of the first data subject; store, in at least one or more memory elements of a first client device, the first and second dynamically-changing, temporally unique identifiers, the first and second one or more data attributes, and the first and second time period data; send, in response to a determination that a first condition has been met, the first dynamically-changing, temporally unique identifier, the first time period data, and the first one or more data attributes to the first privacy server; and send, in response to a determination that a second condition has been met, the second dynamically-changing, temporally unique identifier, the second time period data, and the second one or more data attributes to the first privacy server. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. A device, comprising:
-
a communication interface for sending data; one or more memory elements having, stored therein, computer program code; and one or more processing units operatively coupled to the one or more memory elements and configured to execute instructions in the computer program code that cause the one or more processing units to; obtain a first dynamically-changing, temporally unique identifier from a first privacy server, during a first time period, with a first data subject; associate a first one or more data attributes of the first data subject with the first dynamically-changing, temporally unique identifier; generate first time period data, wherein the first time period data comprises information defining a first time period during which the first dynamically-changing, temporally unique identifier is used to identify the first data subject and retrieve the associated first one or more data attributes; store in at least one of the one or more memory elements, the first dynamically-changing, temporally unique identifier, the first one or more data attributes, and the first time period data; send, the first dynamically-changing, temporally unique identifier, the first time period data, and the first one or more data attributes to the first privacy server; and receive a second dynamically-changing, temporally unique identifier from the first privacy server, wherein the second dynamically-changing, temporally unique identifier is associated at the first privacy server, during a second time period, with the first data subject and a second one or more data attributes, wherein the first time period is different from the second time period, wherein the first dynamically-changing, temporally unique identifier is different from the second dynamically-changing, temporally unique identifier, wherein the first dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated first one or more data attributes during the second time period, and wherein the second dynamically-changing, temporally unique identifier is not used to identify the first data subject and retrieve the associated second one or more data attributes during the first time period, thereby providing anonymity of the first data subject. - View Dependent Claims (22, 23, 24, 25, 26, 27, 28, 29, 30)
-
Specification