Personal information security and exchange tool

• US 5,987,440 A
• Filed: 07/22/1997
• Issued: 11/16/1999
• Est. Priority Date: 07/22/1996
• Status: Expired due to Term

• Current Assignee: CYVA Research Holdings LLC
• Original Assignee: CYVA Research Corporation
• Inventors: O'Neil, Kevin, Seidman, Glenn R.
• Primary Examiner(s): Voeltz, Emanuel Todd
• Assistant Examiner(s): Alvarez, Raquel
• Application Number:
  US08/898,160
• Time in patent office: 847 Days
• Field of Search: 705/44, 705/39, 361/91, 380/23
• US Class Current: 705/44
• CPC Class Codes: G06Q 10/10 Office automation, e.g. computer aided management of electronic mail or groupware electronic mail protocols H04L29/06 ; arrangements for user-to-user messaging in packet-switching networks, e.g. e-mail or instant messages, H04L41/00; Time management, e.g. calendars, reminders, meetings or time accounting organizing, planning, scheduling or allocating time G06Q10/06
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/02 Marketing, e.g. market research and analysis, surveying, promotions, advertising, buyer profiling, customer management or rewards; Price estimation or determination
• CPC Class Codes: G06Q 30/0242 Determination of advertisement effectiveness
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 29/06 characterised by a protocol
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters configuration management of network or network elements H04L41/08; remote booting G06F9/4416; programme loading or initiating G06F9/445
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04L 69/329 : in the application layer, i.e. layer seven network arrangements or network communication protocols for networked applications H04L67/00; data processing systems and methods specially adapted for administrative, commercial, financial or managerial purposes G06Q

Abstract

Utilization of the E-Metro Community and Personal Information Agents assure an effective and comprehensive agent-rule based command and control of informational assets in a networked computer environment. The concerns of informational privacy and informational self-determination are addressed squarely by the invention affording persons and entities a trusted means to author, secure, search, process, and exchange personal and/or confidential information in a networked computer environment. The formation of trusted electronic communities wherein members command and control their digital persona, exchanging or brokering for value the trusted utility of their informational assets is made possible by the invention. The present invention provides for the trusted utilization of personal data in electronic markets, providing both communities and individuals aggregate and individual rule-based control of the processing of their personal data.

Claims

1. An electronic bazaar for the purpose of facilitating electronic commerce by auction comprising:

an electronic bazaar electronic broker which securely processes a transaction to ensure that rules are satisfied before a transaction is processed;

an electronic personal information agent which securely encapsulates entities'"'"' personal information objects and rules governing processing;

a commercial activity dispatcher which handles all incoming transaction requests with said electronic bazaar electronic broker;

a public product database which persistently stores product information processed by said electronic bazaar electronic broker;

a trusted token processor which stores and processes public keys from said electronic personal information agents and issues and validates trusted tokens presented by said electronic personal information agents;

an advertiser directory which stores and processes orders, product information and order forms as initiated by transaction requests; and

a private activities database which stores advertiser pending orders, inventories, and information necessary to carry out transactions.

2. An electronic bazaar as in claim 1 which operates on a semi real-time basis.

3. An electronic bazaar as in claim 1, further comprising computer-implemented means for aggregating individual orders of the same product into bulk units, said individual orders received from a plurality of electronic personal information agents, and for facilitating a bulk unit transaction between a bulk unit buyer or seller and the individual orders from said electronic personal information agents.

4. A computer-implemented system for securely asserting and enforcing the informational privacy and informational self-determination rights and responsibilities of an entity by providing secure and private storage as well as secure and private information exchange via trusted processes and cryptographic mechanisms, the computer-implemented system comprising:

means to securely store an entity'"'"'s personal information in the form of a self-determining digital persona such that it is accessible only to the entity or trusted processes, said personal information being stored in an encrypted manner;

trusted process means for securely and privately exchanging some or all the personal information between entities in a manner so as to prevent access by other processes to the personal information being exchanged as well as to the personal information not being exchanged;

wherein said trusted process means bases an exchange of personal information on personal privilege rules of each entity so as to permit an incremental exchange of personal information stored in the entity'"'"'s self-determining digital persona as each individual or set of personal privilege rules are incrementally satisfied;

wherein said trusted process means further assures that entities involved in a potential or partially performed exchange are unaware of each other'"'"'s identities unless information concerning their identities is intentionally exchanged, and are unaware of why specific personal privilege rules have failed, if any; and

means to assure that any exchanged personal data is delivered to the receiving entity privately in such a manner that the receiving entity can process only that data which the personal privilege rules allow it.

5. The computer-implemented system of claim 4, wherein the entity'"'"'s personal information is encrypted by a key that is securely stored, said computer-implemented system having exclusive access to said key and, therefore, exclusive capability to decrypt said personal information for a trusted and secure process.

6. The computer-implemented system of claim 4, wherein the incremental exchange of personal information occurs within a single continuous exchange session between the entities.

7. The computer-implemented system of claim 4, wherein the incremental exchange of personal information occurs in multiple exchange sessions separated by arbitrary amounts of time, each of said exchange sessions independently initiated by one of the exchanging entities, and each exchange session involving the satisfaction of a different set of one or more personal privilege rules.

8. The computer-implemented system of claim 4, wherein said trusted process means for securely and privately exchanging some or all personal information between entities further comprises means for providing trusted exchange of an initiating entity'"'"'s personal information with another trusting entity with which it has established, in a previous interaction, trust to exchange information at a different location or a future time.

9. The computer-implemented system of claim 4, wherein said means for providing trusted exchange at a future time further comprises means for the trusting entity to provide a trusted token that denotes trust in the initiating entity for future interaction and exchange of information.

10. The computer-implemented system of claim 9, wherein said trusted token is double encrypted, first by a private key of the initiating entity, and then with a public key of the trusting entity, so as to ensure that only the trusting entity can decrypt the trusted token with its private key and then use the initiating entity'"'"'s public key to validate that the trusted token was in fact supplied to it earlier.

11. The computer-implemented system of claim 4, further comprising means for asserting and enforcing transitive trust to govern the onward transfer of exchanged personal information, said means for asserting and enforcing transitive trust comprising means to replicate the self-determining digital persona in one or more versions, each replicated version securely encapsulating personal information and privilege rules governing access to the personal information during exchange transactions, and each replicated version capable of interacting autonomously with other entities, but on behalf of the originating entity, with ongoing dynamic interactions or negotiations based on its personal privilege rules.

12. The computer-implemented system of claim 4, wherein said privilege rules are capable of performing general processing functions or requiring that arbitrary criteria be met, said general processing functions including the ability to exchange monetary value for permitting the receiving entity to have a privilege of processing transferred personal information.

13. The computer-implemented system of claim 4, wherein said means to securely store an entity'"'"'s personal information in the form of a self-determining digital persona comprises means for securely authoring and encapsulating personal information electronically as secured personal information comprising informational assets of the entity, the personal information comprising one or more information objects and one or more personal privilege rules governing each information object'"'"'s trusted brokering and its trusted onward utilization, said personal privilege rules comprising computer readable program code and collectively governing whether or not a self-determining digital persona will allow interaction with another self-determining digital persona and whether or not specific personal information will be exchanged with the other self-determining digital persona;

means for encapsulating one or more digital certificates along with said personal information to establish the originating entity as a non-reputiatable source of the personal information or to corroborate the reliability of the personal information objects.

14. The computer-implemented system of claim 13, further comprising means for asserting and enforcing transitive trust to govern the onward transfer of exchanged personal information, said means for asserting and enforcing transitive trust comprising means to replicate the self-determining digital persona in one or more versions, each replicated version encapsulating said one or more digital certificates, personal information objects and privilege rules governing access to the personal information objects during exchange transactions, and each replicated version capable of interacting autonomously with other entities, but on behalf of the originating entity, with ongoing dynamic interactions or negotiations based on its personal privilege rules.

15. The computer-implemented system of claim 14, further comprising means for maintaining a secured audit trail recording of each attempted and actual secured interaction and the information, if any, exchanged in each interaction.

16. The computer-implemented system of claim 14, further comprising means for securely and accountably commanding and controlling the replicated versions of the self-determining digital persona wherever they are currently located.

17. The computer-implemented system of claim 14, wherein said self-determining digital persona further comprises a plurality of interaction protocols governing specific secured personal behaviors or interactions with other self-determining digital personas.

18. The computer-implemented system of claim 17, wherein said interaction protocols each comprise:

computer readable program code representing specific personal behaviors;

one or more secured privilege rules which determine if the self-determining digital persona has the rights necessary to begin information processing; and

one or more transitive privilege rules governing onward transfer of any securely and trustfully exchanged personal data, whereby said self-determining digital persona defines what conditions its information objects, if passed onto another entity in the form of another version of the original self-determining digital persona, must maintain, protecting and enforcing the originating entity'"'"'s command and control.

19. The computer-implemented system of claim 14, further comprising means for establishing a trusted network community that represents a secure and trusted environment for a plurality of electronic personal information agent members effectively maintaining shared informational privacy and informational self-determination rights and responsibilities individually and corporately as a group in order to assert and enforce the informational privacy and self-determination rights of the community, said trusted network community comprising:

a trusted network community name;

secured persistent storage for storing self-determining digital personas which are members of the trusted network community and their respective electronic manifestations, said electronic manifestations including the replicated versions associated with each self-determining digital persona, each replicated version functioning as an electronic personal information agent on behalf of its associated self-determining digital persona;

active electronic personal information agents whose self-determining digital personas desire secure, private, and trusted interaction with one or more members of the trusted network community; and

active visiting electronic personal information agents that do not belong to the trusted network community but which desire secure, private, and trusted interaction with one or more members of the trusted network community;

wherein said trusted process means comprises an electronic broker, said electronic broker constituting a specially trusted electronic personal information agent member of the trusted network community which acts as a third party on community members'"'"' behalf for secure, private, and trusted processing of privilege rules and interact protocols of electronic personal information agent members against active or visiting electronic personal information agents requesting interaction, said electronic broker further comprising;

privilege or exchange rules for visiting electronic personal information agent'"'"'s eligibility for interaction with said trusted network community;

computer readable program code for implementing interact protocols, including means to securely and trustfully search and collect on active electronic personal information agent'"'"'s request, a plurality subset of electronic personal information agent members according to;

a) said trusted network community exchange rules;

b) the personal privilege rules from each of the active electronic personal information agents; and

c) the privilege rules from the electronic personal information agent members;

an interact protocol directory comprising a list of public interact protocols offered by the community; and

means for maintaining a secured audit trail recording interactions that take place between active electronic personal information agents, whether members of the trusted network community or visiting from another trusted network community.

20. The computer-implemented system of claim 19, further comprising means for independently verifying said secured audit trail.

21. The computer-implemented system of claim 19, further comprising a computer network server, said computer network server connected to other trusted computer network servers so as to form a computer-networked system comprising the means for trusted and secured exchange of electronic personal information agents, said trusted network servers each comprising:

computer-implemented means for dispatching and packaging securely electronic personal information agents containing digital certificates representing the originating computer network server to allow confirmation that the electronic personal information agent originated from its computer network server; and

computer-implemented means for utilizing said electronic broker upon verification that said electronic personal information agent satisfies destination community network interaction rules.

22. The computer-networked system of claim 21, wherein said computer network is selected from the group consisting of the Internet, wireline telecomputing devices and wireless telecomputing devices.

23. The computer-implemented means of claim 19 wherein said trusted network community contains a plurality of additional contained trusted network communities wherein:

said trusted network community is a parent community to the contained communities;

said contained communities are each a child community;

said child community may contain their own plurality of child communities, forming a hierarchical trusted network community structure;

said child community membership requires membership in the parent community; and

secured and trusted interaction between electronic personal information agents in a child community requires all rules of the parent community to be met.

24. The computer-implemented system of claim 19, wherein said trusted computer network further comprises a trusted network utility, said trusted network utility comprising:

computer-implemented means for allowing entities to securely author and encapsulate personal information objects and processing rules governing the exchange and processing of personal information;

computer-implemented means for administrating personal information and rules governing said information;

computer-implemented means for empowering the entity to securely and accountably command and control all of said entity'"'"'s personal information agents wherever they are located; and

computer-implemented means for securely browsing the audit trail of any or all of said entity'"'"'s electronic personal information agent versions wherever they are located.

25. The computer-implemented system of claim 24, wherein said trusted network utility further comprises computer-implemented means for indicating to the author whether a particular search implied by privilege rules will be fast or slow, depending on whether the search is capable of being mapped to a database query.

26. The computer-implemented system of claim 14, wherein said self-determining digital persona further comprises one or more trusted tokens which may be delivered to another entity as a symbol of pre-established trust for a future interaction.

27. The computer-implemented system of claim 4, wherein the self-determining digital persona comprises an autonomous electronic personal information agent (Auto EPIA), said autonomous electronic personal information agent comprising one or more itineraries, each itinerary comprising interact instructions for directing actions of said autonomous electronic personal information agent.

28. The computer-implemented system of claim 27, wherein said interact instructions comprise:

a target or destination trusted network community name for interaction;

a predefined interact protocol specifying the interaction;

a dictionary of parameters allowing invocation of said predefined interact protocol;

privilege rules which must be checked and satisfied on all interact instructions; and

transitive privilege rules related to the encapsulated information objects, said transitive privilege rules defining necessary conditions for the processing of said information objects by parties subsequent to the original receiving entity.

29. The computer-implemented system of claim 4, further comprising a forms repository for storing a plurality of information object templates and privilege rules templates, each privilege rules template comprising a default set of rules and corresponding to a predefined behavior type.

30. The computer-implemented system of claim 4, further comprising an electronic bazaar for conducting electronic commerce by auction or direct offer while asserting and enforcing participating entities'"'"' digital rights and responsibilities, said digital rights and responsibilities including informational privacy and informational self-determination rights and responsibilities, the electronic bazaar comprising:

an electronic personal information agent structure which provides member entity-merchants or entity-buyers with the ability to search, interact and collectively bargain collective and individual personal information processing privileges in exchange for value;

an electronic bazaar electronic broker which securely processes transactions to ensure that exchange rules are satisfied before a transaction is processed, while maintaining the privacy of personal information encapsulated in the electronic personal information agents during a processing transaction;

a commercial activity dispatcher for handling incoming transaction requests with said electronic bazaar electronic broker;

a public product database which persistently stores product information processed by said electronic bazaar electronic broker;

a trusted token processor which stores and processes public keys from said electronic personal information agents and issues and validates trusted tokens presented by said electronic personal information agents; and

an advertiser directory which stores and processes orders, product information and order forms as initiated by transaction requests; and

a private activities database which stores advertiser pending orders, inventories, and information needed for carrying out transactions.

31. The computer-implemented system of claim 30, wherein the electronic bazaar operates on a semi real-time basis.

32. The computer-implemented system of claim 31, wherein the electronic bazaar further comprises computer-implemented means for aggregating into bulk units individual orders of same product, so that bulk unit buyers and sellers can transact without having to find a corresponding single bulk unit seller or buyer.

33. A trusted electronic exchange process operating on a programmable computer system, the process comprising the steps of:

receiving, at the computer system, a communication from an originating source, said communication comprising

a) a digital certificate binding a public key to the originating source;

b) information in the form of information objects relating to said originating source;

c) privilege rules associated with said information objects, said privilege rules defining if and under what conditions said information objects may be processed by a receiving electronic entity; and

d) one or more interaction instructions collectively defining a set of search criteria;

verifying, at the computer system, that said communication was originated by said originating source;

securely identifying, at the computer system, and without access to said originating source, home electronic personal information agents that satisfy said search criteria, said home electronic personal information agents encapsulating secured information and privilege rules governing access to said information;

securely executing privilege rules encapsulated within the home electronic personal information agents on the information objects from said originating source, so as to determine if the information objects encapsulated within said home electronic personal information agents meet the conditions for further processing;

replicating the home electronic personal information agents satisfying said criteria and having at least one information object whose privilege rule has been satisfied, thereby generating a plurality of autonomous electronic personal information agents; and

securely dispatching said autonomous electronic personal information agents to the originating source.

34. A distributed object resource management system for use in a personal security and exchange tool fixed in a computer readable medium, comprising:

a messaging subsystem which receives and dispatches electronic autonomous personal information agents, said electronic autonomous personal information agents comprising secured information and rules governing access to said information by other electronic autonomous personal information agents;

an electronic broker which securely intermediates between two or more electronic autonomous personal information agents;

an interaction processor which processes requests from said electronic autonomous personal information agents through said electronic broker;

a rules processor which processes rules from electronic autonomous personal information agents and determines that the rules are satisfied prior to permitting an exchange of information between the electronic autonomous personal information agents;

an object repository where the electronic brokers and the electronic personal agents are maintained persistently; and

a secure remote method invocation system and messaging system for permitting home electronic personal information agents to communicate with replicated electronic personal information agent counterparts.

35. An electronic bazaar for the purpose of asserting and enforcing digital rights and responsibilities of participating entities based electronic commerce by auction and direct offer, said digital rights and responsibilities including informational privacy and informational self-determination rights and responsibilities, the electronic bazaar comprising:

an electronic personal information agent structure which provides member entity-merchants or entity-buyers to search, interact and collectively bargain collective and individual personal information processing privileges in exchange for value;

a plurality of electronic personal information agents, each securely encapsulating personal information objects for a specific entity as well as exchange rules governing processing the personal information objects;

an electronic bazaar electronic broker which securely processes transactions to ensure that exchange rules are satisfied before a transaction is processed, the electronic bazaar electronic broker maintaining the privacy of the personal information objects encapsulated within said personal information agents during a processing transaction;

a commercial activity dispatcher for handling incoming transaction requests with said electronic bazaar electronic broker;

a public product database which persistently stores product information processed by said electronic bazaar electronic broker; and

an advertiser directory which stores and processes orders, product information and order forms as initiated by transaction requests; and

a private activities database which stores advertiser pending orders, inventories, and information needed for carrying out transactions.

36. The electronic bazaar of claim 35 which operates on a semi real-time basis.

37. The electronic bazaar as in claim 36 further comprising

computer-implemented means for aggregating into bulk units individual orders of same product, so that bulk unit buyers and sellers can transact without having to find a corresponding single bulk unit seller or buyer.

38. The electronic bazaar of claim 35, further comprising a trusted token processor which stores and processes public keys from said electronic personal information agents and issues and validates trusted tokens presented by said electronic personal information agents.

39. A computer-implemented system for asserting informational privacy and self-determination rights and responsibilities of network members, comprising:

a plurality of electronic entities, each electronic entity comprising secured personal data and exchange rules governing access to said information; and

computer-implemented means for providing trusted processing between two interacting electronic entities such that only a trusted process is able to securely access each interacting electronic entity'"'"'s personal data for the purpose of securely computing each entity'"'"'s privilege rules and determining whether an exchange of some or all personal data will occur.

40. A computer-implemented system for asserting and enforcing transitive trust of information exchange between entities by way of their self-determining digital personas, the computer-implemented system comprising:

a plurality of self-determining digital personas, each self-determining digital persona securely encapsulating an entity'"'"'s personal information and privilege rules governing access to said personal information;

means for securely determining whether some or all of an entity'"'"'s personal information will be transferred to another entity or entities based upon the privilege rules governing access to the personal information; and

means for trusted onward transfer of the personal information to be transferred, said means for trusted onward transfer comprising means for transforming the personal information to be transferred into an automatically created new version of the self-determining digital persona encapsulating both the personal information and privilege rules governing the personal information, and for dispatching the new version of the self-determining digital persona to the receiving entity;

wherein a separate new version of the self-determining digital persona is created for each receiving entity;

wherein each new version of the self-determining digital persona is capable of acting autonomously but on behalf of the originating self-determining digital persona with ongoing dynamic interactions or negotiations based on its encapsulated privilege rules; and

wherein the personal information encapsulated within the new version of the self-determining digital persona can be onwardly transferred only when its encapsulated privilege rules are satisfied.

41. A computer-implemented system for representing an entity with its securely authored self-determining digital persona which allows assertion and enforcement of the entity'"'"'s informational privacy and self-determination rights and responsibilities within a trusted community network, the computer-implemented system comprising:

means for securely authoring and encapsulating personal information electronically as secured personal data in the form of a self-determining digital persona representing informational assets of the entity, the personal information comprising one or more information objects and one or more personal privilege rules governing each information object'"'"'s trusted brokering and its trusted onward utilization,

said personal privilege rules comprising computer readable program code and collectively governing whether or not a electronic personal information agent will allow interaction with another electronic personal information agent and whether or not specific personal information will be exchanged with the other electronic personal information agent;

means for providing both secure and private storage as well as secure and private information exchange for the entity'"'"'s encapsulated personal information, said means comprising

means to securely store the entity'"'"'s personal information such that only the entity or trusted processes have access to it, the information being encrypted using a key which is securely stored and accessible only to secured processes within the computer-implemented system;

means to securely exchange some or all of an entity'"'"'s encapsulated personal information with another entity in a manner so as to ensure the encapsulated personal information, whether or not exchanged, is inaccessible to other processes, the exchange being based on the encapsulated personal privilege rules of each entity using a trusted process which securely accesses each interacting entity'"'"'s personal information for the purpose of computing each entity'"'"'s privilege rules, whereby the entities may incrementally exchange an increasing amount of personal information as an increasing number of privilege rules are satisfied;

means to ensure that entities involved in an attempted or partially performed exchange are unaware of each other'"'"'s identities unless information concerning their identities is intentionally exchanged;

means to ensure that entities involved in an attempted or partially performed exchange are unaware of why specific privilege rules, if any, were not met; and

means to assure that any exchanged personal information is delivered as a replicated electronic personal information agent version to the receiving entity privately in such a manner that only the receiving entity can process that information allowed by the other entity'"'"'s personal privilege rules;

means for providing trusted information exchange such that an initiating entity may exchange some or all of its personal information with another trusting entity that it has established, in a previous interaction, trust to exchange information at a different location or at a future time;

means for asserting and enforcing transitive trust to govern the onward transfer of exchanged personal information, said means for asserting and enforcing transitive trust comprising means to replicate the digital persona in one or more versions, each replicated digital persona encapsulating personal information and privilege rules governing access to the personal information during exchange transactions, and each replicated digital persona capable of interacting autonomously with other entities, but on behalf of the originating entity, with ongoing dynamic interactions or negotiations based on its personal privilege rules;

means for encapsulating one or more digital certificates in each replicated digital persona so that any further exchanges of the entity'"'"'s personal information by one of its replicated digital personas is assured to have originated from the entity; and

means for corroborating the reliability of the encapsulated personal information objects.