Methods and systems for facilitating personal data propagation

• US 9,984,252 B2
• Filed: 08/24/2015
• Issued: 05/29/2018
• Est. Priority Date: 01/20/2009
• Status: Active Grant

• Current Assignee: Titanium Fire Ltd Executive Pension Scheme
• Original Assignee: Titanium Fire Ltd Executive Pension Scheme
• Inventors: Pollard, Stephen M.
• Primary Examiner(s): Kim, Tae K
• Application Number:
  US14/834,134
• Publication Number:
  US 20170068825A1
• Time in Patent Office: 1,009 Days
• CPC Class Codes: G06F 16/273 Asynchronous replication or reconciliation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

Methods and systems for facilitating the propagation of personal data are provided. Example embodiments provide a Personal Data Propagation Environment (“PDP environment”), which facilitates the propagation of personal data items between secure personal data stores and various consumers of the personal data items. In one embodiment, the PDP environment includes a personal data manager and a personal data subscriber. The personal data manager manages personal data items on a secure data store associated with a user computing device. The personal data manager provides access to personal data items stored on the secure data store in accordance with a personal data subscription associated with the personal data subscriber. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Claims

1. A personal data propagation service computing system configured to facilitate propagation of personal data, comprising:

a memory; and

a personal data propagation service module stored on the memory and configured, when executed, to;

associate a personal data subscriber module with a personal data subscription data structure including indicators of a plurality of personal data items and entitling the personal data subscriber module to access the plurality of personal data items stored on a secure data store communicatively coupled to a personal data manager module, wherein the plurality of personal data items stored on the secure data store represent personal information about a user, and wherein the personal data subscription data structure includes an indication of a category of personal data items, the category indicating at least one of address information, credit card information, and bank account information;

provide the personal data subscriber module to a first computing system, the personal data subscriber module configured, when executed on the first computing system, to;

receive, from the personal data manager module, personal data in accordance with the personal data subscription data structure associated with the personal data subscriber module; and

initiate an electronic transaction based on the received personal data;

store an association of an identifier of the first computing system with the personal data subscription data structure; and

provide the personal data manager module to a second computing system, the personal data manager module configured, when executed on the second computing system, to;

receive from a user a specification of a maximum amount of time during which local determinations may be made before current subscription information should be obtained from the personal data propagation service computing system;

receive from the personal data subscriber module a request for the personal data;

determine whether the request for the personal data is in accord with the personal data subscription data structure associated with the personal data subscriber module based upon an indication received from the personal data propagation service computing system that the requested personal data includes one or more of the plurality of personal data items to which the personal data subscription data structure entitles access, wherein the determination is made locally by the personal data manager module without an intervening interaction with the personal data propagation service computing system when the specified maximum amount of time has not expired and wherein the determination is otherwise made in cooperation with the personal data propagation service module; and

transmit the requested personal data to the personal data subscriber module when the request for the personal data is determined to be in accord with the personal data subscription data structure associated with the personal data subscriber module as determined in cooperation with the personal data propagation service module,

wherein the second computing system is a personal computing device of the user and the requested personal data represents personal information about the user, and

wherein the personal data propagation service computing system, the first computing system, and the second computing system are distinct and remote from one another.

2. The personal data propagation service computing system of claim 1, wherein the personal data propagation service module is further configured, when executed, to provide authentication services to personal data subscriber modules and personal data manager modules, wherein the personal data subscriber module is further configured, when executed, to interact with the personal data propagation service module to authenticate the personal data manager module, and wherein the personal data manager module is further configured, when executed, to interact with the personal data propagation service module to authenticate the personal data subscriber module.

3. The personal data propagation service computing system of claim 1 further comprising a Web service that includes the personal data propagation service module.

4. The personal data propagation service computing system of claim 1, wherein the personal data propagation service module is further configured, when executed, to initiate distribution of the secure data store to the user of the personal computing device, the secure data store configured to securely store the plurality of personal data items.

5. The personal data propagation service computing system of claim 1, wherein the personal data propagation service module is further configured, when executed, to indicate to the personal data manager module whether the personal data subscriber module is entitled to access the requested personal data item managed by the personal data manager module, by transmitting to the personal data manager module the indication that the requested personal data item is includes the one or more of the plurality of plurality of personal data items to which the personal data subscription data structure entitles access, the personal data propagation service having stored an association of an identifier of the personal data subscriber module with the personal data subscription data structure.

6. A non-transitory computer-readable storage medium whose including non-transitory contents including instructions that, when executed by a personal data propagation service computing system, cause the personal data propagation service computing system to facilitate propagation of personal data by performing a method comprising:

associating a personal data subscriber module with a personal data subscription data structure that includes indicators of a plurality of personal data items and that entitles the personal data subscriber module access to the plurality of personal data items stored on a secure data store communicatively coupled to a personal data manager module, wherein the plurality of personal data items stored on the secure data store represent personal information about a user, wherein the personal data subscription data structure includes an indication of a category of personal data items, the category indicating at least one of address information, credit card information, and bank account information, and wherein the personal data subscriber module executes on a personal data subscriber computing system;

storing an association of an identifier of the personal data subscriber computing system with the personal data subscription data structure;

when the personal data subscriber module requests from the personal data manager module a personal data item that is one of the plurality of personal data items and that is stored on the secure data store to which the personal data subscription data structure entitles access, causing the personal data manager module to transmit the requested personal data item to the personal data subscriber module, wherein the personal data manager module is configured to;

receive from a user a specification of a maximum amount of time during which local determinations may be made before current subscription information should be obtained from the personal data propagation service computing system;

receive from the personal data subscriber module the request for the personal data item;

determine whether the request for the personal data item is in accord with the personal data subscription data structure based upon an indication received from the personal data propagation service computing system that the requested personal data item is one of the plurality of personal data items to which the personal data subscription data structure entitles access, wherein the determination is made locally by the personal data manager module without an intervening interaction with the personal data propagation service computing system when the specified maximum amount of time has not expired and wherein the determination is otherwise made in cooperation with the personal data propagation service module; and

transmit the requested personal data item to the personal data subscriber module when the request for the personal data item is determined to be in accord with the personal data subscription data structure, as determined in cooperation with the personal data propagation service computing system; and

when the personal data subscriber module requests from the personal data manager module a personal data item that is not one of the plurality of personal data items and that is stored on the secure data store to which the personal data subscription data structure entitles access, causing the personal data manager module to not transmit the requested personal data item to the personal data subscriber module,

wherein the personal data manager module executes on a personal data manager computing device of the user and the requested personal data represents personal information about the user, and

wherein the personal data propagation service computing system, the personal data manager computing device, and the personal data subscriber module computing system are distinct and remote from one another.

7. The non-transitory computer-readable storage medium of claim 6, wherein the method further comprises authenticating the personal data subscriber module and the personal data manager module to one another.

8. The non-transitory computer-readable storage medium of claim 7, wherein authenticating the personal data subscriber module and the personal data manager module to one another includes providing a first secret to the personal data subscriber module and providing a second secret to the personal data manager module.

9. The non-transitory computer-readable storage medium of claim 6, wherein causing the personal data manager module to transmit one of the requested personal data items stored on the secure data store item to the personal data subscriber module includes informing the personal data manager module that the personal data subscription data structure entitles the personal data subscriber module to access the one requested personal data item.

10. The non-transitory computer-readable storage medium of claim 9, wherein informing the personal data manager module that the personal data subscription data structure entitles the personal data subscriber module to access the one requested personal data item includes receiving a request from the personal data manager module, the request from the personal data manager module including an indication of the personal data manager module and an indication of the one requested personal data item.

11. The non-transitory computer-readable storage medium of claim 6, wherein causing the personal data manager module to not transmit one of the requested personal data items stored on the secure data store item to the personal data subscriber module includes informing the personal data manager module that the personal data subscription data structure does not entitle the personal data subscriber module to access the one requested personal data item.

12. The non-transitory computer-readable storage medium of claim 6, wherein the method further comprises:

when one of the plurality of personal data items stored on the secure data stored store has been modified, causing the personal data manager module to transmit the modified personal data item stored on the secure data store to the personal data subscriber module.

13. The non-transitory computer-readable storage medium of claim 12, wherein the modified personal data item includes at least one of contact information for the user of the personal data manager module, financial information associated with the user of the personal data manager module, or transaction information associated with the user of the personal data manager module.

14. The non-transitory computer-readable storage medium of claim 6, wherein the method further comprises:

when a data item stored on a data store associated with the personal data subscriber module has been modified, causing the personal data subscriber module to transmit the modified data item to the personal data manager module, thereby causing the personal data manager module to store the modified data item as a personal data item in the secure personal data store.

15. The non-transitory computer-readable storage medium of claim 14, wherein the modified data item includes at least one of account information associated with the user of the personal data manager module, contact information for an entity associated with the personal data subscriber module, marketing information for an entity associated with the personal data subscriber module, or terms and conditions associated with use of the personal data subscriber module.

16. The non-transitory computer-readable storage medium of claim 6, wherein associating storing an association of the personal data subscriber module with the personal data subscription data structure includes receiving payment from the personal data subscriber module in exchange for use of the personal data subscription data structure.

17. The non-transitory computer-readable storage medium of claim 6, wherein the personal data subscription data structure includes access rights corresponding to the plurality of personal data items and/or data type descriptions associated with the plurality of personal data items.

18. A computer-implemented method performed by a personal data propagation service computing system for facilitating propagation of personal data, the method comprising:

electronically providing to a personal data manager computing device of a user a personal data manager module that is configured, when executed by the personal data manager computing device, to;

receive from a user a specification of a maximum amount of time during which local determinations may be made before current subscription information should be obtained from a personal data propagation service computing system;

receive from a personal data subscriber computing system a request for one or more personal data items of a plurality of personal data items stored on a secure data store communicatively coupled to the personal data manager module;

determine whether the request for the one or more personal data items is in accord with a personal data subscription data structure associated with the personal data subscriber computing system, the personal data subscription data structure including indicators of the plurality of personal data items and entitling the personal data subscriber computing system to access the plurality of personal data items from the secure data store, wherein determining whether the request is in accord with the personal data subscription data structure is based upon an indication received from the personal data propagation service computing system that the requested one or more personal data items include one or more of the plurality of personal data items to which the personal data subscription data structure entitles access, wherein the determination is made locally by the personal data manager module without an intervening interaction with the personal data propagation service computing system when the specified maximum amount of time has not expired and wherein the determination is otherwise made in cooperation with the personal data propagation service module; and

when the request for the one or more personal data items is determined to be in accord with the personal data subscription data structure, as determined in cooperation with the personal data propagation service computing system, cause the personal data subscriber computing system to initiate an electronic transaction by initiating transmission of the one or more requested personal data items to the personal data subscriber computing system; and

storing an association of an identifier of the personal data subscriber computing system with the personal data subscription data structure,

wherein the requested one or more personal data items represent personal information about the user,

wherein the personal data subscription data structure includes an indication of a category of personal data items, the category indicating at least one of address information, credit card information, and bank account information, and

wherein the personal data propagation service computing system, the personal data manager computing device and the personal data subscriber computing system are distinct and remote from one another.

19. The method of claim 18, wherein the personal data manager module is further configured, when executed, to:

transmit to the personal data propagation service computing system an indication of the request for the one or more personal data items; and

receive from the personal data propagation service computing system an indication of whether the request for the one or more personal data items is in accord with the personal data subscription data structure.

20. The method of claim 18, wherein the personal data manager module is further configured, when executed, to automatically synchronize personal data items between the secure data store and a data store associated with the personal data sub scriber computing system.

21. The method of claim 20, wherein the personal data manager module is further configured to automatically synchronize the personal data items between the secure data store and the data store associated with the personal data subscriber computing system by transmitting a modified personal data item stored on secure data store to the personal data subscriber computing system.

22. The method of claim 20, wherein the personal data manager module is further configured to automatically synchronize the personal data items between the secure data store and the data store associated with the personal data subscriber computing system by receiving from the personal data subscriber computing system a modified personal data item stored on the data store associated with the personal data subscriber computing system.

28. The method of claim 18, wherein the personal data manager module determines whether the request for the one or more personal data items is in accord with the personal data subscription data structure based on an indication that associates the personal data subscriber computing system with the personal data subscription data structure, the indication being previously received from a personal data propagation service computing system and stored by the personal data manager module.

29. The method of claim 28, wherein the indication that associates the personal data subscriber computing system with the personal data subscription data structure is out of date with respect to the personal data subscription data structure as currently stored by the personal data propagation service computing system, and wherein the personal data manager module further determines the request for the one or more personal data items is in accord with the personal data subscription data structure based on a user-specified indication that the personal data manager module may share the one or more personal data item items even when the indication that associates the personal data subscriber computing system with the personal data subscription data structure is out of date.

30. The method of claim 28, wherein the personal data manager module is configured to receive from the user a specification of one or more personal data items that may be shared based on a cached determination of whether a personal data subscriber computing system is entitled to access the specified one or more personal data items.

31. The method of claim 28, wherein the personal data manager module is configured to receive from the user a specification of one or more sensitive personal data items that may be shared only responsive to an indication currently received from the personal data propagation service computing system.

32. The method of claim 18, wherein the personal data manager module is configured to:

notify the user that a local determination of the propriety of a personal data request is out of date; and

provide the user with an option to deny access by the personal data subscriber computing system.

23. A computer-implemented method performed by a personal data propagation service computing system for facilitating propagation of personal data, the method comprising:

electronically providing to a personal data subscriber computing system a personal data subscriber module that is configured, when executed by the personal data subscriber computing system, to;

become associated with a personal data subscription data structure that includes indications of a plurality of personal data items and that entitles the personal data subscriber computing system to access the plurality of personal data items stored on a secure data store communicatively coupled to a personal data manager computing device of a user, wherein the plurality of personal data items stored on the secure data store represent personal information about the user, and wherein the personal data subscription data structure includes an indication of a category of personal data items, the category indicating at least one of address information, credit card information, and bank account information;

cause a personal data manager computing device to;

receive from a user a specification of a maximum amount of time during which local determinations may be made before current subscription information should be obtained from a personal data propagation service computing system; and

receive from the personal data subscriber module a request for personal data;

determine whether the request for personal data access by the personal data subscriber computing system to at least one of the plurality of personal data items stored on the secure data store is in accord with the personal data subscription data structure based upon an indication received from the personal data propagation service computing system that the requested personal data includes one or more of the plurality of personal data items to which the personal data subscription data structure entitles access, wherein the determination is made locally without an intervening interaction with the personal data propagation service computing system when the specified maximum amount of time has not expired; and

transmit the requested personal data to the personal data subscriber computing system in accordance with the personal data subscription data structure associated with the personal data subscriber module, as determined in cooperation with the personal data propagation service computing system; and

when access by the personal data subscriber computing system to the at least one personal data item the request for personal data is determined to be in accord with the personal data subscription data structure;

receive from the personal data manager computing device the at least one requested personal data item; and

initiate an electronic transaction based on the received personal data item; and

storing an association of an identifier of the personal data subscriber computing system with the personal data subscription data structure,

wherein the plurality of personal data items represent personal information about the user of the personal data manager computing device, and

wherein the personal data propagation service computing system, the personal data manager computing device, and the personal data subscriber computing system are distinct and remote from one another.

24. The method of claim 23, wherein the personal data subscriber module is further configured, when executed, to transmit to the personal data propagation service computing system a request to become associated with the personal data subscription data structure.

25. The method of claim 23, wherein the personal data subscriber module is further configured, when executed, to automatically synchronize personal data items between the secure data store and a data store associated with the personal data sub scriber module.

26. The method of claim 25, wherein the personal data subscriber module is further configured to automatically synchronize the personal data items between the secure data store and the data store associated with the personal data subscriber module by transmitting a modified personal data item stored on the data store associated with the personal data subscriber module to the personal data manager computing device.

27. The method of claim 25, wherein the personal data subscriber module is further configured to automatically synchronize the personal data items between the secure data store and the data store associated with the personal data subscriber module by receiving from the personal data manager computing device a modified personal data item stored on the secure data store.