Information Sharing Method and Apparatus

• US 20090300355A1
• Filed: 05/27/2009
• Published: 12/03/2009
• Est. Priority Date: 05/28/2008
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Gray, Daniel, Crane, Stephen J.
• Application Number:
  US12/472,584
• Publication Number:
  US 20090300355A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Embodiments of the present invention relate to methods and apparatus for sharing information with third parties and providing mechanisms whereby those third parties may legitimately pass the personal information on to other, for example affiliated, third parties. In one example of information sharing, information is shared electronically between an information provider and an information requester, the information provider storing a body of information and associated sharing criteria provided by an originator, receiving a first information request from a first requestor and revealing the information and the sharing criteria to the first requestor if the first request is authorised by the originator, receiving a second information request from a second requestor and revealing the information to the second requestor if the second request contains an information identifier obtained from the first requester and the sharing criteria so permits, and storing evidence of information requests.

Claims

1. A method of sharing information electronically between an information provider and an information requester, the information provider:

storing a body of information and associated sharing criteria provided by an originator;

receiving a first information request from a first requester and revealing the information and the sharing criteria to the first requester if the first request is authorised by the originator;

receiving a second information request from a second requester and revealing the information to the second requester if the second request contains an information identifier obtained from the first requestor and the sharing criteria so permits; and

storing evidence of information requests.

2. A method according to claim 1, wherein the first request includes a first token obtained by the first requester from the originator, the first token serving as authorisation from the originator to reveal the information.

3. A method according to claim 1, wherein the second request includes a second token obtained by the second requester from the first requestor.

4. A method according to claim 3, wherein the second token is obtained by the first requester from the information provider, if the sharing criteria so permits.

5. A method according to claim 4, wherein the second token is provided by the information provider when revealing the information and the sharing criteria to the first requester.

6. A method according to claim 5, wherein the second token is bound to the identity of the first requester, whereby the first requestor can be identified as having provided the token in subsequent uses of the token.

7. A method according to claim 4, wherein the second token is provided by the information provider in response to a subsequent request by the first requester in which the second requester is identified.

8. A method according to claim 7, wherein the second token is bound to the identity of the first requester, whereby the first requestor can be identified as having provided the token in subsequent uses of the token.

9. A method according to claim 7, wherein the token is bound to the identity of the second requester, whereby the second requester can be identified in subsequent uses of the token.

10. A method according to claim 1, wherein the information is revealed to the second requester by communicating the information to the second requester in response to a respective request therefor.

11. A method according to claim 1, wherein the information is revealed to the second requestor by communicating a key to the second requestor, the key unlocking information that has already been communicated to the second requester, in an encoded state, by the first requestor.

12. A method according to claim 1, wherein the first requestor informs the second requester of what information is available from the information provider.

13. A method according to claim 12, wherein the second information request includes an indication of the information that is required by the second requestor.

14. A method according to claim 1, wherein information transfer between the originator and any requester is brokered by a federated identity management system, for example Windows CardSpace.

15. Information provider apparatus adapted for use in a system for sharing information electronically between the information provider and an information requester, wherein the information provider apparatus comprises:

a store storing a body of information and associated sharing criteria provided by an originator;

an input for receiving a first information request from a first requestor and a second information request from a second requester; and

a processing unit arranged, where the first request is determined to be authorised by the originator, to reveal the information and the sharing criteria to the first requestor, and, where the second information request contains an information identifier obtained from the first requester and the sharing criteria so permits, to reveal the information to the second requestor;

the processing unit being further arranged to store evidence of the information requests.

16. Apparatus according to claim 15, wherein the first request includes a first token obtained by the first requester from the originator, the processing unit being arranged to treat the first token as providing authorisation from the originator to reveal the information.

17. Apparatus according to claim 15, wherein the second request includes a second token obtained by the second requester from the first requestor.

18. Apparatus according to claim 17, wherein the processing unit is arranged to provide the second token to the first requestor only if the sharing criteria so permits.

19. Apparatus according to claim 18, wherein the processing unit is arranged to provide the second token to the first requestor when revealing the information and the sharing criteria to the first requestor.

20. Apparatus according to claim 19, wherein the processing unit is arranged to check that the second token is bound to the identity of the first requester, whereby the first requestor can be identified as having provided the second token.

21. Apparatus according to claim 18, wherein the processing unit is arranged to provide the second token to the first requester in response to a subsequent request by the first requestor in which the second requester is identified.

22. Apparatus according to claim 15, wherein the processing unit is arranged to provide the information to the second requestor by communicating the information to the second requester in response to a respective request therefor.

23. Apparatus according to claim 15, wherein the processing unit is arranged to provide the information to the second requestor by communicating a key to the second requester thereby to enable the second requestor to unlock an encoded version of the information communicated to it by the first requestor.