Privacy management method and apparatus

• US 20060047605A1
• Filed: 08/18/2005
• Published: 03/02/2006
• Est. Priority Date: 08/27/2004
• Status: Abandoned Application

• Current Assignee: TrustedID Incorporated (Equifax, Inc.)
• Original Assignee: TrustedID Incorporated (Equifax, Inc.)
• Inventors: Ahmad, Omar
• Application Number:
  US11/207,475
• Publication Number:
  US 20060047605A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A computer implemented method describes managing privacy information. Initially, a request is received from a requester for the privacy information of an entity. The request is often the result of an applicant submitting a form or application to the requester. Next, implementations of the present invention create a privacy transaction in a database for the privacy information including one or more identity qualities from the applicant and one or more characteristics for the submission. These identity qualities, characteristics for the submission and other pieces of information are used to score the privacy transaction according to the one or more identity qualities from the applicant and the one or more characteristics for the submission. The score provides a confidence level indicative of the authenticity and authorization associated with the submission.

Claims

1. A computer implemented method for managing privacy information, comprising:

receiving a request from a requestor for the privacy information of an entity as a result of a submission by an applicant;

creating a privacy transaction in a database for the privacy information including one or more identity qualities from the applicant and one or more characteristics for the submission; and

scoring the privacy transaction according to the one or more identity qualities from the applicant and the one or more characteristics for the submission to provide a confidence level indicative of the authenticity and authorization of the submission.

2. The method of claim 1 further comprising:

comparing the confidence level with a confidence threshold as a guide for managing the privacy information; and

providing the requester access to the privacy information of the entity when the comparison indicates that confidence level is less than the confidence threshold.

3. The method of claim 2 further comprising:

providing the requestor the ability to use the privacy information of the entity in conjunction with responding to the submission by the applicant when the comparison indicates that confidence level is at least equal or greater than the confidence threshold.

4. The method of claim 1 wherein the requestor is selected from set of requesters including:

a credit reporting agency, a credit processing agency, a banking institution, a medical institution, a retail sales company and a prospective employer.

5. The method of claim 1 wherein the submission is selected from a set of submissions including:

a credit card application, a rental application, a job application, a loan application and a medical admission application.

6. The method of claim 1 wherein the privacy information includes one or more types of information selected from a set including:

a social security number, a mortgage payment history, a credit card payment history, a list of landlord-tenant disputes and evictions, a payment delinquency, a charge-off, a physical medical condition, a mental medical condition and a criminal record.

7. The method of claim 1 wherein the entity is selected from a set including:

a real person, a corporation, a partnership and other legal entities.

8. The method of claim 1 wherein the applicant is seeking something from the requester by way of the submission.

9. The method of claim 1 wherein the applicant is a representative of the entity associated with the privacy information.

10. The method of claim 1 wherein the applicant is the same as the entity associated with the privacy information.

11. The method of claim 1 wherein the one or more identity qualities from the applicant includes one or more qualities selected from a set including:

a social security number, a first name, a last name, a home address, a business address, a previous home address, a previous business address, employment related information and names associated with related family members.

12. The method of claim 1 wherein the one or more characteristics for the submission includes information that can be cross-referenced with privacy information of the entity.

13. A computer implemented method of managing privacy information comprising:

receiving a request from an applicant for a privacy management provider to manage privacy information of an entity;

verifying an identity of the applicant'"'"'s identity as authentic against an identification database and further verifying authorization against an authorization database to ensure applicant'"'"'s authority to delegate management of the privacy information for the entity; and

generating an indication in a database holding the privacy information that managing the privacy information has been delegated to a privacy management provider.

14. The method of claim 13 further comprising:

registering one or more rules in a database for the privacy management provider to provide the access and use of privacy information; and

marking the privacy information to indicate access and use is condition according to access and use rules in the database.

15. The method of claim 14 wherein registering the one or more rules further comprises:

creating rules that depend upon classifications associated with a type of transaction and a type of requester.

16. A computer program product for managing privacy information, tangibly stored on a computer-readable medium, comprising instructions operable to cause a programmable processor to:

receive a request from a requestor for the privacy information of an entity as a result of a submission by an applicant;

create a privacy transaction in a database for the privacy information including one or more identity qualities from the applicant and one or more characteristics for the submission; and

score the privacy transaction according to the one or more identity qualities from the applicant and the one or more characteristics for the submission to provide a confidence level indicative of the authenticity and authorization of the submission.

17. The computer program product of claim 16 further comprising instructions to:

compare the confidence level with a confidence threshold as a guide for managing the privacy information; and

provide the requestor access to the privacy information of the entity when the comparison indicates that confidence level is less than the confidence threshold.

18. The computer program product of claim 17 further comprising instructions to:

provide the requestor the ability to use the privacy information of the entity in conjunction with responding to the submission by the applicant when the comparison indicates that confidence level is at least equal or greater than the confidence threshold.

19. The computer program product of claim 16 wherein the one or more characteristics for the submission includes information that can be cross-referenced with privacy information of the entity.

20. A computer program product for managing privacy information, tangibly stored on a computer-readable medium, comprising instructions operable to cause a programmable processor to:

receive a request from an applicant for a privacy management provider to manage privacy information of an entity;

verify an identity of the applicant'"'"'s identity as authentic against an identification database and further verifying authorization against an authorization database to ensure applicant'"'"'s authority to delegate management of the privacy information for the entity; and

generate an indication in a database holding the privacy information that managing the privacy information has been delegated to a privacy management provider.

21. The computer program product of claim 20 further comprising instructions to:

register one or more rules in a database for the privacy management provider to provide the access and use of privacy information; and

mark the privacy information to indicate access and use is condition according to access and use rules in the database.

The computer program product of claim 21 wherein instructions that register one or more rules further comprise instructions to;

create rules that depend upon classifications associated with a type of transaction and a type of requester.