Secure consent management system

• US 9,934,544 B1
• Filed: 03/13/2017
• Issued: 04/03/2018
• Est. Priority Date: 05/12/2015
• Status: Active Grant

• Current Assignee: Andre Dior Whitfield, Kathryn M. Garvy
• Original Assignee: CADG Partners, LLC
• Inventors: Whitfield, Andre Dior, Garvy, Kathryn M.
• Primary Examiner(s): Rahman, Mahfuzur
• Assistant Examiner(s): Golriz, Arya
• Application Number:
  US15/457,822
• Time in Patent Office: 386 Days
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Features are disclosed relating to a network-based consent management system that securely manages various aspects of consenting and agreeing to engage in physical relationships, including sexual relationships. For example, the system can manage processes such as requesting and obtaining consent, agreeing to provide consent, declining to provide consent, preemptively providing or declining consent without a consent request, verifying identities of individual users, verifying users'"'"' capacity to consent, and the like. In addition, the system can securely maintain a record of consent agreements and refusals. Thus, users of the system can initiate or otherwise participate in certain physical interactions with other users, secure in the knowledge that the participants have provided unambiguous informed consent and that a record of such consent has been created and securely stored by a third party.

Claims

1. A system comprising:

a first client-side application;

a second client-side application; and

a server comprising one or more hardware processors, wherein the server is programmed by executable instructions to at least;

receive, from the first client-side application executing on a first computing device, first consent request data regarding a request for consent, wherein the first client-side application is associated with a first user profile, and wherein the request targets a second user profile;

generate second consent request data regarding the request for consent, the second consent request data generated using data regarding the first user profile and the second user profile;

determine that the second user profile is associated with the second client-side application;

transmit the second consent request data via a network to the second client-side application, wherein the second client-side application is executing on a second computing device;

receive, from the second client-side application, first consent data regarding approval of the consent request;

receive, from the first client-side application, scan data representing a scan by the first computing device of an encoded representation of information associated with the approval of the consent request displayed by the second computing device; and

store second consent data regarding approval of the consent request, the first user profile, and the second user profile;

wherein the first client-side application is configured cause the first computing device to at least;

transmit the first consent request data to the server;

generate the scan data representing the scan by the first computing device of the encoded representation of information associated with the approval of the consent request displayed by the second computing device; and

transmit the scan data to the server; and

wherein the second client-side application is configured to cause the second computing device to at least;

receive the second consent request data;

present a user identity prompt;

validate a response to the user identity prompt based at least partly on the second user profile;

generate the encoded representation of the information associated with the approval of the consent request using user identity validation information representing validation of the response to the user identity prompt; and

display the encoded representation of information associated with the approval of the consent request.

2. The system of claim 1, wherein the server is further programmed by the executable instructions to at least transmit user interface data regarding a visual presentation of an option to initiate the request for consent.

3. The system of claim 2, wherein the executable instructions to transmit the user interface data comprise executable instructions to transmit the user interface data to at least one of:

the first computing device or a computing system that serves as an intermediary between the server and the second computing device.

4. The system of claim 1, wherein the server is further programmed by the executable instructions to at least transmit user interface data regarding a visual presentation of an option to approve the request for consent.

5. The system of claim 4, wherein the executable instructions to transmit the user interface data comprise executable instructions to transmit the user interface data to at least one of:

the second computing device or a computing system that serves as an intermediary between the server and the second computing device.

6. The system of claim 1, wherein the executable instructions to generate the second consent request data comprise executable instructions to at least generate a consent form comprising information regarding a first user associated with the first user profile and a second user associated with the second user profile.

7. A non-transitory computer readable medium having stored thereon a mobile application comprising executable instructions, wherein the executable instructions are configured to cause a mobile device to at least:

present a user interface comprising a first option to select a user profile associated with an individual from whom consent to engage in a physical relationship is to be requested;

generate and transmit a first consent request to a server system, the first consent request comprising information indicating selection of the user profile;

generate scan data representing a scan by the mobile device of a first encoded representation, displayed by a second mobile device, of information associated with an approval of the first consent request;

transmit the scan data to the server system;

present, in response to receipt of a second consent request from the server system, at least a second option to provide consent and a third option to refuse consent;

generate and transmit a consent response comprising at least an indication of selection of the second option and user identity verification information;

generate a second encoded representation of information associated with an approval of the second consent request using the user identity verification information, wherein the user identity verification information represents verification of an identity of a user of the mobile device;

present the second encoded representation of information associated with the approval of the second consent request;

present, subsequent to generating the first consent request or the consent response, at least a fourth option to cancel consent associated with the approval of the second consent request; and

generate and transmit a consent cancellation comprising at least an indication of a consent record associated with approval of the second consent request to be canceled.

8. The non-transitory computer readable medium of claim 7, wherein the executable instructions are further configured to cause the mobile device to at least present, subsequent to generating and transmitting the consent cancellation, a notification regarding receipt of consent cancellation data by a third mobile device.

9. The non-transitory computer readable medium of claim 7, wherein the executable instructions are further configured to cause the mobile device to at least present, subsequent to generating and transmitting the first consent request, a notification regarding cancellation of a consent record associated with the first consent request.

10. The non-transitory computer readable medium of claim 7, wherein the user identity verification information comprises at least one of:

password information;

biometric information;

or encoded information scanned by the mobile device.

11. The non-transitory computer readable medium of claim 7, wherein the executable instructions are further configured to cause the mobile device to at least present an option to retrieve a consent record regarding a previously generated content request or a previously generated consent response.

12. The non-transitory computer readable medium of claim 7, wherein the executable instructions are further configured to cause the mobile device to at least present a user interface indication of a consent network to which a user of the mobile device belongs.

13. A computer-implemented method comprising:

as performed by a server computer system comprising one or more hardware processors configured to execute specific computer-executable instructions;

receiving, from a first client-side application executing on a first computing device, first consent request data regarding a request for consent, wherein the first client-side application is associated with a first user profile, and wherein the request targets a second user profile;

generating second consent request data regarding the request for consent, the second consent request data generated using data regarding the first user profile and the second user profile;

determining that the second user profile is associated with a second client-side application;

transmitting the second consent request data via a network to the second client-side application, wherein the second client-side application is executing on a second computing device;

receiving, from the second client-side application, first consent data regarding approval of the consent request;

receiving, from the first client-side application, scan data representing a scan by the first computing device of an encoded representation of information associated with the approval of the consent request displayed by the second computing device; and

storing second consent data regarding approval of the consent request, the first user profile, and the second user profile; and

as performed by the second client computing device comprising one or more hardware processors configured to execute the second client-side application;

presenting a user identity prompt;

verifying a response to the user identity prompt based at least partly on the second user profile;

generating the encoded representation of the information associated with the approval of the consent request using user identity verification information representing verification of the response to the user identity prompt; and

displaying the encoded representation of information associated with the approval of the consent request.

14. The computer-implemented method of claim 13, further comprising transmitting user interface data regarding a visual presentation of an option to initiate the request for consent.

15. The computer-implemented method of claim 14, wherein the transmitting the user interface data comprises transmitting the user interface data to at least one of:

the first computing device, or a computing system that serves as an intermediary between the server and the second computing device.

16. The computer-implemented method of claim 13, further comprising transmitting user interface data regarding a visual presentation of an option to approve the request for consent.

17. The computer-implemented method of claim 16 wherein the transmitting the user interface data comprises transmitting the user interface data to at least one of:

the second computing device, or a computing system that serves as an intermediary between the server and the second computing device.

18. The computer-implemented method of claim 13, wherein the generating the second consent request data comprises generating a consent form comprising information regarding a first user associated with the first user profile and a second user associated with the second user profile.