Information security and privacy system and method

• US 9,509,674 B1
• Filed: 11/24/2014
• Issued: 11/29/2016
• Est. Priority Date: 06/27/2007
• Status: Active Grant

• Current Assignee: Enorcom Corporation
• Original Assignee: Enorcom Corporation
• Inventors: Nasserbakht, Gitty N., Nasserbakht, Mitra
• Primary Examiner(s): TRAN, MONG-THUY THI
• Application Number:
  US14/551,624
• Time in Patent Office: 736 Days
• Field of Search: 455/410, 455/411, 455/414.1, 455/418, 455/419, 455/420, 455/412.1, 709/225
• US Class Current: 1/1
• CPC Class Codes: G06F 1/1647 including at least an additional display G06F1/1692 takes precedence
• CPC Class Codes: G06F 1/1654 the display being detachable, e.g. for remote use
• CPC Class Codes: G06F 1/3218 of display devices
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: G06Q 30/0261 based on user location
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04M 1/72451 according to schedules, e.g. using calendar applications
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A programmable management method and system provides mechanism for processing, viewing and transactions of secure and private information allowing user of the system the ability to control access to and viewing of personal information.

Claims

1. A programmable management method for an electronic system, the method comprising:

authenticating a user on said system,

receiving a request by said user for generation of a unique identification code (unique ID) for conditional access permission to said user'"'"'s stored information,

wherein said user'"'"'s personal information is stored in one or more files or databases in one or more repositories on the system or on a data network,

wherein a database includes at least one user identifying field corresponding to a specific user and one or more fields containing files, links to files or databases containing stored information corresponding to said specific user,

receiving from said user, specification regarding disclosure conditions associated with said unique ID,

generating said unique ID corresponding to said request,

wherein said disclosure conditions include access to specific portion of said files, or databases, duration and frequency of said access, and granting said access to a specific service provider,

wherein said unique ID includes conditional access information for granting access to said user'"'"'s data on said one or more repositories, wherein said user disclosing said generated unique ID to said service provider, enabling access to said portion of said files or databases,

wherein upon said service provider presenting said unique ID to said system, decoding said unique ID to identify disclosure conditions,

upon matching said disclosure conditions, disclosing said specific portions of said files or databases to said service provider according to said disclosure conditions.

2. The method of claim 1, and further comprising making visible or accessible part of a private file or record associated with said user, and making invisible or inaccessible other part of a private file or record associated with said user to said service provider.

3. The method of claim 1, and further comprising using said unique ID to authorize said service provider prior to granting access to requested information relating to said unique ID.

4. The method of claim 3, and further comprising using third-party service providers or authority agencies for said authentication, and wherein said third-party performs one or more of said authentication actions.

5. The method of claim 1, wherein said unique ID is supplied to the user directly or in encrypted form.

6. An electronic system, the system comprising:

a processing element;

a memory element operably connected to the processing element;

a programmable management system;

one or more data repositories;

wherein each of said one or more data repositories contain one or more information databases,

wherein a database includes at least one user identifying field corresponding to a specific user and one or more fields containing files, links to files or databases containing stored information corresponding to said user,

wherein said data repositories reside on the system or on a data network,

wherein said programmable management system, upon request of said user, generates a unique identification code (unique ID),

wherein said unique ID includes conditional access information for granting access to said user'"'"'s data included in said one or more repositories,

wherein said unique ID contains instructions to the programmable management system as to the disclosure conditions, wherein said disclosure conditions include access to specific portion of said files or databases, duration and frequency of said access, and granting access to a specific service provider,

wherein said user discloses said generated unique ID to said service provider to enable access to said portion of said files or databases,

wherein upon said service provider presenting said unique ID to said system, said system decodes said unique ID to identify disclosure conditions, upon meeting said disclosure conditions, said system discloses said specific information to said service provider according to said disclosure conditions.

7. The system of claim 6, wherein said programmable management system makes visible or accessible part of a private file or record associated with said user and makes invisible or inaccessible other part of a private file or record associated with said user to said service provider.

8. The system of claim 6, wherein said programmable management system uses said unique ID to authenticate said service provider prior to granting access to requested information relating to said unique ID.

9. The system of claim 8, wherein said authentication includes using third-party service providers or authority agencies, and wherein said third-party performs one or more of said authentication actions.

10. The system of claim 6, wherein said unique ID is supplied to the user directly or in encrypted form.

11. A method for an electronic system, the method comprising:

authenticating a user via an authentication system;

wherein said user'"'"'s personal information is stored in one or more files or databases in one or more data repositories on said system or on a data network,

upon said user'"'"'s request, prompting the user to identify access limitations and conditions to said user'"'"'s information on said one or more data repositories by a receiving party, upon said identification, selecting portions of said user'"'"'s information permitted by said user to be conditionally accessed by a receiving party according to said access limitations and conditions;

identifying a receiving party'"'"'s access limitations and conditions requested by said user;

wherein said access limitations include specific portions of said specific user'"'"'s information to be allowed to be accessed by a receiving party,

wherein said access conditions include duration of time of access, number of accesses to said information by a receiving party,

generating a unique identification code (unique ID) for said authenticated user;

associating the information permitted to be accessed by a receiving party according to said access limitations and conditions with said unique ID, upon receiving said unique ID from a receiving party, decoding said unique ID, identifying access limitations and access conditions to said user'"'"'s information; and

upon meeting said access conditions, allowing access to said receiving party to specific portions of said user'"'"'s information in accordance with said access limitations associated with said unique ID.

12. The method of claim 11, and further comprising making visible or accessible part of a private file or record associated with said user and making invisible or inaccessible other part of a private file or record associated with said user to said receiving party.