Systems and methods for guaranteeing the protection of private information

• US 6,839,689 B2
• Filed: 01/10/2001
• Issued: 01/04/2005
• Est. Priority Date: 09/21/1999
• Status: Active Grant

• Current Assignee: LF Capital Partners, LLC
• Original Assignee: AGB2 Inc.
• Inventors: Beldock, James G., Beldock, Donald T., Aieta, Mario A.
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): BAYAT, BRADLEY B
• Application Number:
  US09/671,883
• Publication Number:
  US 20010010044A1
• Time in Patent Office: 1,455 Days
• Field of Search: 705/80, 705/54, 705/1, 705/51, 705/57, 707/9, 707/103
• US Class Current: 705/51
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system protects private information provided in an exchange between a client and a server. The system receives the private information from the client and determines whether it is of a type for which a guarantee may be issued. The guarantee provides an indemnity for the benefit of the client for misuse of the private information. The system then issues a guarantee for the private information, if it is determined to be of the type for which a guarantee may be issued, and provides the private information to the server with a guarantee.

Claims

1. A method for protecting private information provided in an exchange between a client and a server, comprising:

receiving private information from the client;

determining whether the private information is of a type for which a guarantee may be issued, the guarantee providing an indemnity for benefit of the client for use of the private information that is unauthorized by the client;

issuing a guarantee for the private information determined to be of the type for which a guarantee may be issued; and

providing the private information to the server with a guarantee.

2. The method of claim 1, further comprising:

encrypting the private information; and

sending the encrypted private information to the client.

3. The method of claim 2, wherein the sending includes:

storing the encrypted private information as a cookie at the client.

4. The method of claim 1, wherein the determining includes:

determining that a type of the private information corresponds to at least one category of information, and

identifying an amount of the indemnity to associate with the private information based on the determined category.

5. The method of claim 4, wherein the issuing includes:

associating the identified amount of indemnity with the private information based on the determined category.

6. The method of claim 1, wherein the receiving includes:

receiving a request from the server for private information of the client to complete the exchange, and

obtaining the private information from the client.

7. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving authorization from the client to provide the intended response to the server.

8. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving modifications to the intended response from the client.

9. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving additions to the intended response from the client.

10. The method of claim 9, wherein the obtaining further includes:

assessing whether the additions are coverable by a guarantee, and

informing the client of a result of the assessment.

11. The method of claim 1, wherein the providing includes:

encrypting the private information, and

sending the encrypted information to the server.

12. The method of claim 1, wherein the receiving includes:

transmitting an executable object to the client,

activating the object at the client, and

receiving the private information at the object.

13. The method of claim 1, wherein the receiving includes:

activating an executable object at the client, and

receiving the private information at the object.

14. The method of claim 13, wherein the receiving further includes:

sending the private information to an external object to determine whether the private information is coverable by a guarantee.

15. The method of claim 13, wherein the determining includes:

assessing, by the object, whether the private information is coverable by a guarantee.

16. A system for protecting private information provided in an exchange between a client and a server, comprising:

means for receiving private information from the client;

means for determining whether the private information is of a type for which a guarantee may be issued, the guarantee providing an indemnity for benefit of the client for unauthorized use of the private information;

means for issuing a guarantee for the private information determined to be of the type for which a guarantee may be issued; and

means for providing the private information to the server with a guarantee.

17. A system for protecting private information provided in an exchange between a client and a server, comprising:

a memory that stores data; and

a processor, connected to the memory, that receives private information from the client, determines whether the private information is of a type for which a guarantee may be issued, the guarantee providing an indemnity for benefit of the client for use of the private information that is unauthorized by the client, issues a guarantee for the private information determined to be of the type for which a guarantee may be issued, and provides the private information to the server with a guarantee.

18. The system of claim 17, wherein the processor is further configured to encrypt the private information and send the encrypted private information to the client.

19. The system of claim 17, wherein when determining whether the private information is of a type for which a guarantee may be issued, the processor is further configured to determine that a type of the private information corresponds to at least one category of information, and identify an amount of the indemnity to associate with the private information based on the determined category.

20. The system of claim 19, wherein when issuing a guarantee for the private information, the processor is further configured to associate the identified amount of indemnity with the private information based on the determined category.

21. The system of claim 17, wherein when receiving the private information, the processor is further configured to receive a request from the server for private information of the client to complete the exchange, and obtain the private information from the client.

22. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive authorization from the client to provide the intended response to the server.

23. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive modifications to the intended response from the client.

24. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive additions to the intended response from the client.

25. The system of claim 24, wherein when obtaining the private information, the processor is further configured to assess whether the additions are coverable by a guarantee, and inform the client of a result of the assessment.

26. The system of claim 17, wherein when providing the private information, the processor is further configured to encrypt the private information and send the encrypted information to the server.

27. The system of claim 17, wherein when receiving the private information, the processor is further configured to transmit an executable object to the client and receive the private information from the object after the object is activated at the client.

28. The system of claim 17, wherein the private information includes at least one of a purchase history and preference data.

29. The system of claim 17, wherein the private information includes at least one of a social security number, credit card data, bank account data, a personal identification number, a password, a name, an address, a telephone number, and an email address.

30. The system of claim 17, wherein the memory is configured to further store a data structure including at least one of a social security number, credit card data, bank account data, a personal identification number, a password, a name, an address, a telephone number, an email address, a purchase history, and preference data corresponding to the client.

31. In a network connecting a plurality of client entities to a plurality of server entities, a registration agent, connected to the client entities and server entities, comprising:

a memory that stores instructions for determining whether private information received from one of the client entities is of a type for which a guarantee may be issued, the guarantee providing an indemnity for benefit of a user of the one client entity for use of the private information that is unauthorized by the user, issuing a guarantee for the private information determined to be of the type for which a guarantee may be issued, and providing the private information to one of the server entities with a guarantee as part of an information exchange; and

a processor that executes the instructions in the memory.

32. The registration agent of claim 31, wherein the memory is further configured to store instructions for encrypting the private information and sending the encrypted private information to the one client entity.

33. The registration agent of claim 31, wherein the memory is further configured to store instructions for determining that a type of the private information corresponds to at least one category of information, and identifying an amount of the indemnity to associate with the private information based on the determined category.

34. The registration agent of claim 33, wherein the memory is further configured to store instructions for associating the identified amount of the indemnity with the private information based on the determined category.

35. The registration agent of claim 31, wherein the memory is further configured to store instructions for obtaining the private information from the one client entity in response to a request received from the one server entity for private information of the user to complete the exchange.

36. The registration agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, and providing the intended response to the one server entity when authorized by the one client entity.

37. The registration agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, and issuing a guarantee for modifications to the intended response received from the one client entity.

38. The registration agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, assessing whether additions to the intended response received from the one client entity are coverable by a guarantee, and informing the one client entity of a result of the assessment.

39. The registration agent of claim 31, wherein the memory is further configured to store instructions for encrypting the private information and sending the encrypted information to the one server entity.

40. An executable object within a computer device communicating with a client entity and a plurality of server entities, the executable object comprising:

instructions for obtaining private information from a user associated with the client entity for use in an information exchange with one of the server entities;

instructions for sending the private information to an external object to obtain an assessment of whether the private information is coverable by a guarantee, the assessment indicating whether an indemnity will be paid to the user when the private information is used in a manner unauthorized by the user;

instructions for obtaining the assessment from the external object; and

instructions for providing the private information to the one server entity with a guarantee.

41. The executable object of claim 40, further comprising:

instructions for encrypting the private information; and

instructions for storing the encrypted private information as an object on the client entity.

42. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity; and

instructions for providing the intended response to the one server entity when authorized by the client entity.

43. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity; and

instructions for issuing a guarantee for modifications to the intended response received from the client entity.

44. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity;

instructions for obtaining an assessment of whether additions to the private information from the external object are coverable by a guarantee; and

instructions for informing the client entity of a result of the assessment.

45. The executable object of claim 40, further comprising:

instructions for encrypting the private information; and

instructions for sending the encrypted information to the one server entity.

46. A computer-readable medium storing instructions for causing a processor to perform a method, the method comprising:

determining whether private information received from a client object is of a type for which a guarantee may be issued, the guarantee providing an indemnity for benefit of a user associated with the client object for unauthorized use of the private information;

issuing a guarantee for the private information determined to be of the type for which a guarantee may be issued; and

providing the private information to a server object with a guarantee as part of an information exchange.

47. A computer-readable medium storing instructions for causing a processor to perform a method, the method comprising:

obtaining private information from a client object for use in an exchange with a server object;

sending the private information to a registration object to obtain an assessment of whether the private information is coverable by a guarantee, the assessment indicating whether an indemnity will be paid to a user associated with the client object when the private information is used in a manner unauthorized by the user; and

providing the private information to the server object with a guarantee.

48. An executable object within a computer device communicating with a client entity and at least one server entity, the executable object comprising:

instructions for obtaining private information from a user associated with the client entity;

instructions for assessing whether the private information is coverable by a guarantee, the assessment indicating whether an indemnity will be paid to the user when the private information is used in a manner that is unauthorized by the user; and

instructions for providing the private information to the server entity with a guarantee.

49. A system for providing private information of a client to a server during an information exchange, comprising:

a memory that stores data; and

a processor, connected to the memory, that receives a request for private information of the client from the server, generates an intended response to the request, the intended response including the requested private information with a guarantee, the guarantee providing an indemnity for benefit of the client for use of the private information in a manner unauthorized by the client, provides the intended response to the client, receives authorization from the client to send the intended response to the server, and sends the intended response to the server in response to the received authorization.

50. A method for providing privacy in a transaction, comprising:

providing at least one of information, services, and products for browsing and purchase by consumers during a transaction;

requesting private information from the consumers prior to completing the transaction;

receiving the requested information with a guarantee, the guarantee providing an indemnity for benefit of the consumers for unauthorized use of the requested information; and

completing the transaction.

51. The method of claim 50, wherein the guarantee includes at least one of a commitment, a contract, and a surety bond.

52. The method of claim 50, wherein the guarantee includes a surety bond.

53. A method for protecting private information in a transaction, comprising:

providing at least one of information, services, and products for browsing and purchase by a consumer during a transaction;

requesting private information from the consumer prior to completing the transaction, the private information having an associated guarantee, the guarantee providing an indemnity for benefit of the consumer for use of the private information in a manner that is unauthorized by the consumer; and

completing the transaction.

54. The method of claim 53, wherein the guarantee includes at least one of a commitment, a contract, and a surety bond.

55. The method of claim 53, wherein the guarantee includes a surety bond.

56. A system that protects private information of consumers obtained during transactions with the consumers, comprising:

a processor configured to;

provide at least one of information, services, and products for browsing and purchase by consumers,

obtain private information from the consumers prior to completing the transactions with the consumers, the private information having an associated guarantee, the guarantee providing an indemnity for benefit of the consumers for use of the private information in a manner that is unauthorized by the consumers, and

complete the transaction; and

a memory configured to store at least some of the private information.

57. The system of claim 56, wherein the guarantee includes at least one of a commitment, a contract, and a surety bond.

58. The system of claim 56, wherein the guarantee includes a surety bond.

59. A method for protecting private information in a transaction, comprising:

providing at least one of information, services, and products for browsing and purchase by a consumer during a transaction;

requesting private information from the consumer prior to completing the transaction;

associating a guarantee with the private information, the guarantee providing an indemnity for benefit of the consumer for use of the private information in a manner that is unauthorized by the consumer; and

completing the transaction.

60. A method for protecting private information provided by a client to a server, comprising:

identifying private information of the client;

associating a guarantee with the private information, the guarantee providing an indemnity for benefit of the client for use of the private information that is unauthorized by the client; and

providing the private information to the server with the associated guarantee.

61. The method of claim 60, wherein the guarantee includes at least one of a commitment, a contract, and a surety bond.

62. The method of claim 60, wherein the guarantee includes a surety bond.

63. A system for protecting private information provided by a client to a server, comprising:

means for identifying private information from the client;

means for associating a guarantee with the private information, the guarantee providing an indemnity for benefit of the client for use of the private information that is unauthorized by the client; and

means for informing the server of the private information and the associated guarantee.

64. The system of claim 63, wherein the guarantee includes at least one of a commitment, a contract, and a surety bond.

65. The system of claim 63, wherein the guarantee includes a surety bond.