Method and system for electronic delivery of sensitive information

• US 20070261122A1
• Filed: 07/11/2007
• Published: 11/08/2007
• Est. Priority Date: 02/12/1998
• Status: Active Grant

• Current Assignee: Broadridge Investor Communication Solutions, Inc. (Broadridge Financial Solutions Incorporated)
• Original Assignee: Newriver Incorporated (Broadridge Financial Solutions Incorporated)
• Inventors: Magary, Alex, Wiley, Garett, Driscoll, Leonard, Fein, Robert, Burakoff, Stephen, Simmel, Sergiu
• Granted Patent: US 7,890,401 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 40/134 Hyperlinking
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 40/06 Asset management; Financial planning or analysis
• CPC Class Codes: G06Q 99/00 Subject matter not provided for in other groups of this subclass
• CPC Class Codes: H04L 51/18 Commands or executable codes

Abstract

A method and related system obtains consent from a user for electronic delivery of sensitive information. The user operating a first computer accesses a web page on a server system to input the consent. The web page prompts for the consent from the user. Once the consent is received at the server system, the consent is stored and sensitive information is delivered electronically to an e-mail address specified by the user. Once consent is indicated, it is communicated from the individual'"'"'s computer to another computer such as a server over, for example, a modem connection. Having secured the individual'"'"'s consent, the additional sensitive information may be delivered to the individual'"'"'s computer as, for example, a URL attachment to an email message.

Claims

1. A system of obtaining consent to electronically send sensitive information to a user, the method comprising:

under control of a server system;

sending a communication to a first client system, the communication comprising computer executable instructions for obtaining a consent response from the user for electronic delivery of the sensitive information;

receiving the consent response from the first client system;

storing the consent response; and

if the consent response is positive, causing the sensitive information to be electronically delivered the user.

2. The method as recited in claim 1, further comprising:

under control of the server system;

wherein the communication comprises a consent request form.

3. The method as recited in claim 2, further comprising:

under control of the first client system;

receiving the consent request form;

displaying the consent request form;

accepting data from the user for at least one field in the consent request form; and

sending the accepted data to the server system.

4. The method as recited in claim 3, further comprising:

under control of the server system;

determining whether the data received from the first client system indicates consent to electronically send sensitive information to the user; and

if the received data indicates consent, electronically sending sensitive information to the user.

5. The method as recited in claim 4, wherein the step of electronically sending sensitive information comprises at least one of:

(i) sending a first e-mail message to a destination address associated with the user, the first e-mail message including a URL pointing to the sensitive information; and

(ii) sending a second e-mail message to the destination address associated with the user, the second e-mail message including the sensitive information.

6. The method as recited in claim 1, 2, 3 or 4 wherein the server system and first client system communicate over a computer network.

7. A system for obtaining consent to electronically send sensitive information to a user, the system comprising:

a server system programmed to;

send a communication to the user, the communication comprising instructions for the user to consent to electronic delivery of the sensitive information;

receive the consent from the user;

store the received consent; and

cause the sensitive information to be sent to the user.

8. The system as recited in claim 7, wherein the communication comprises disclosure information regarding electronic delivery of sensitive information.

9. The system as recited in claim 7, wherein the communication comprises a message sent over a network.

10. The system as recited in claim 7, wherein the communication comprises a computer readable device.

11. The system as recited in claim 7, 9, or 10 wherein the communication comprises a link which the user can follow to indicate consent.

12. The system as recited in claim 7, 9, or 10, wherein the communication comprises a link which points to a document containing sensitive information.

13. The system as recited in claim 7, 9, 10, or 11, wherein a user'"'"'s ability to access sensitive information is recorded.

14. The system as recited in claim 7, wherein:

the server system is further operative to;

cause a consent request form to be sent to a first client system.

15. The system as recited in claim 14, wherein:

the first client system is operative to;

receive the consent request form from the server system;

display the consent request form;

accept data from the user for at least one field in the consent request form; and

send the accepted data to the server system.

16. The system as recited in claim 14 or 15, wherein the server system and first client system communicate over a computer network.

17. The system as recited in claim 15, wherein:

the server system is further operative to;

determine whether the data received from the first client system indicates consent to electronically send sensitive information to the user; and

if the received information indicates consent, electronically send sensitive information to the user.

18. The system as recited in claim 17, wherein the step of electronically sending sensitive information comprises at least one of:

(i) sending a first e-mail message to a destination address associated with the user, the first e-mail message including a URL pointing to the sensitive information; and

(ii) sending a second e-mail message to the destination address associated with the user, the second e-mail message including the sensitive information.

19. A computer-implemented method of obtaining consent from a user on a first computer for electronic delivery of sensitive information, the computer-implemented method comprising:

displaying, on the first computer, a consent form having at least one field to be completed with data from the user;

transmitting the data in the at least one completed field from the first computer to a second computer;

receiving, at the second computer, the transmitted data; and

storing the received data in the second computer, the received data being associated with the user.

20. The computer-implemented method of claim 19, wherein the consent form is an HTML document.

21. The computer-implemented method of claim 19, wherein the information in the at least one completed field is transmitted over a computer network.

22. A computer-implemented method of obtaining consent for electronic delivery of sensitive information the method comprising:

obtaining a user'"'"'s consent to receive the sensitive information in electronic format; and

providing the user with access to the sensitive information in electronic format.