Arrangement and a method relating to protection of end user data

• US 20050188220A1
• Filed: 06/25/2003
• Published: 08/25/2005
• Est. Priority Date: 07/01/2002
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Nilsson, Mikael, Lindskog, Helena
• Application Number:
  US10/603,447
• Publication Number:
  US 20050188220A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The present invention relates to an arrangement (and a method) for protection of end user personal profile data in a communication system comprising a number of end user stations and a number of service/information/content providers or holding means holding end user personal profile data. It comprises an intermediate proxy server supporting a first communication protocol for end user station communication and comprising means for providing published certificates, a personal profile data protection server supporting a second communication protocol for communication with the intermediary proxy server and a third communication protocol for communication with a service/information/content provider, and an application programming interface (API) allowing service/information/content provider queries/interactions, and comprising storing means for storing of end user specific data and end user personal profile data. The intermediary proxy server comprises means for verifying the genuinity of a certificate requested over said second communication protocol from the personal profile protection server against a published certificate and the service/information/content server can request, via the API, personal profile data and personal profile data is delivered according to end user preferences or in such a manner that there is no association between the actual end user and the personal profile data of the end user.

Claims

1. An arrangement for protection of end user personal profile data in a communication system including a number of end user stations and a number of service/information/content providers or holding means holding end user personal profile data, comprising:

an intermediate proxy server supporting a first communication protocol for end user station communication;

means for providing published certificates;

a personal profile data protection server supporting a second communication protocol for communication with the intermediary proxy server and a third communication protocol for communication with one of said service/information/content providers, said personal profile data protection server further comprises an application programming interface (API) allowing service/information/content provider queries/interactions, and storing means for storing of end user specific data and end user personal profile data; and

wherein the intermediary proxy server further comprises means for verifying the genuinity of a certificate requested over said second communication protocol from the personal profile protection server against a published certificate and in that the service/information content server can request, via the API, personal profile data and in that personal profile data is delivered according to end user preferences or in such a manner that there is no association between the actual end user and the personal profile data of the end user.

2. An arrangement according to claim 1, wherein the first communications protocol is a secure protocol.

5. An arrangement according to claim 1, wherein the second protocol is a secure protocol.

7. An arrangement according to claim 1, wherein the intermediary proxy server is a HTTP proxy.

8. An arrangement according to claim 1, wherein the intermediary proxy server comprises holding means for holding published certificates.

9. An arrangement according to claim 1, wherein the intermediary proxy server is in communication with external holding means holding published certificates.

11. An arrangement according to claim 1, wherein the intermediary proxy server is located within an intranet or at the operator'"'"'s premises.

12. An arrangement according to claim 1, wherein the intermediary proxy server comprises a functionality for establishing a security communication agreement with the protection server.

13. An arrangement according to claim 12, wherein the user preferences are stored in the end user station.

14. An arrangement according to claim 12, wherein the user preferences relating to privacy level are stored in the intermediary proxy server.

15. An arrangement according to claim 13, wherein the user preferences relating to privacy level are stored in separate fast access storing means after completion of the security communication agreement.

16. An arrangement according to claim 15, wherein the protection server comprises an API allowing service provider control of site and page policies, and in that if the end user privacy level is increased, data below the privacy level is deleted.

17. An arrangement according to claim 16, wherein the protection proxy server provides certificates, and preferably signatures upon request by said intermediary proxy server.

20. An arrangement according to claim 1, wherein the protection server storing means comprises at least three tables containing information about end user specific data, personal profile data information and statistical data respectively.

21. An arrangement according to claim 20, wherein the end user specific data and end user personal profile data is provided to the service provider in such a manner that the end user cannot be traced by the service provider.

22. An arrangement according to claim 21, wherein the protection proxy server comprises means for pseudonymizing statistical information and personal profile information by using a unique pseudo for each URL of the service provider that is requested.

3-4. -4. (canceled)

6. (canceled)

10. (canceled)

18-19. -19. (canceled)

23. A method for protection of end user personal profile data in a communication system with a number of end user stations and a number of service/information/content providers, comprising the steps of:

registering a certificate for an end user personal profile protection server with a trusted third party,

providing a request for the certificate from an intermediary proxy server in communication with an end user station using a first communication protocol, to the protection server over a second communication protocol,

providing a response from the protection server to the intermediary server,

verifying, in the intermediary proxy server that the certificate is genuine, thereby belonging to the respective protection server and is registered with the trusted third party,

after confirmation that the protection server/certificate is genuine,

allowing the service provider having acquired the protection server to retrieve end user data and personal profile data according to policy setting and end user privacy level over an Application Programming Interface and a third communication protocol.

24. The method according to claim 23, further comprising the step of establishing an end user personal profile data security agreement between the intermediary proxy server and the protection server (on behalf of the end user and the service provider).

25. The method according to claim 24, wherein the agreement comprises a P3P agreement.

29. The method according to claim 23, wherein the end user preferences (privacy levels) are stored in the end user station or in the intermediary proxy server, and in that they can be separately stored after confirmation of the agreement.

30. The method according to claim 23, further comprising the steps of:

providing an API at the protection server,

using the API for queries to the protection servers from the service provider,

providing responses over a third communication protocol to the service provider.

31. The method of claim 30, further comprising the step of storing data in a number of tables in the protection server relating to user specific data, end user personal profile data and statistical data.

32. The method of claim 31, further comprising the step of pseudonymizing statistical data and profile information such that end user personal data cannot be associated or tied to the actual end user.

26-28. -28. (canceled)