Personal information security and exchange tool

• US 7,289,971 B1
• Filed: 07/15/1999
• Issued: 10/30/2007
• Est. Priority Date: 07/22/1996
• Status: Expired due to Fees

• Current Assignee: CYVA Research Holdings LLC
• Original Assignee: CYVA Research Corporation
• Inventors: Seidman, Glenn R., O'Neil, Kevin P.
• Primary Examiner(s): Alvarez; Raquel
• Application Number:
  US09/354,287
• Time in Patent Office: 3,029 Days
• Field of Search: 705/39, 705/44, 705/51, 705/64, 361/91, 380/23, 707/9
• US Class Current: 705/44
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0242 Determining effectiveness of advertisements
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

Utilization of the E-Metro Community and Personal Information Agents assure an effective and comprehensive agent-rule based command and control of informational assets in a networked computer environment. The concerns of informational privacy and informational self-determination are addressed squarely by the invention affording persons and entities a trusted means to author, secure, search, process, and exchange personal and/or confidential information in a networked computer environment. The formation of trusted electronic communities wherein members command and control their digital persona, exchanging or brokering for value the trusted utility of their informational assets is made possible by the invention. The present invention provides for the trusted utilization of personal data in electronic markets, providing both communities and individuals aggregate and individual rule-based control of the processing of their personal data.

Claims

1. A computer-implemented system for securely exchanging and controlling personal information objects over a distributed, electronic network, comprising:

a plurality of personal information agent software objects capable of being sent over the distributed, electronic network and interacting with one another, each of the personal information agent objects being composed of a set of methods and variables and each of the personal information agent objects securely encapsulating in an encrypted format one or more personal information objects of an owner of the personal information agent object and one or more rule objects containing privilege rules governing the processing of the personal information objects, each of the personal information objects and rule objects being composed of a respective set of methods and variables, the rule objects being bound to and moving across the network with the personal information objects; and

at least one server connected to the network executing an electronic broker computer program for providing trusted processing of interactions between the personal information agent objects, the electronic broker computer program including;

means for maintaining the privacy and integrity of the personal information objects and rule objects encapsulated within the personal information agent objects during the processing of the interactions, and

means for allowing only a trusted process to securely access each interacting personal information agent object'"'"'s personal information and rule objects to ensure that the privilege rules are satisfied before permitting any exchange of personal information objects between the interacting personal information agent objects.

2. The computer-implemented system of claim 1, further comprising:

at least one certification authority that asserts and certifies the trustworthiness of personal information asserted by system users and contained in the personal information objects.

3. The computer-implemented system of claim 1, wherein each of the personal information objects corresponds to a respective one of the rule objects, in a one-to-one relationship.

4. The computer-implemented system of claim 1, wherein each of the personal information objects corresponds to a plurality of the rule objects in a one-to-many relationship.

5. The computer-implemented system of claim 1, wherein the privilege rules include at least one transitive rule for restricting interaction with their encapsulating personal information agent object and processing of the bound personal information objects by third parties after transference of the encapsulating personal information agent object to a receiving personal information agent object.

6. The computer-implemented system of claim 1, wherein at least one of the personal information agents includes an itinerary for directing the activities of the at least one of the personal information agents as it moves over the network.

7. The computer-implemented system of claim 1, wherein one of the rule objects contains a privilege rule that retracts interaction with or usage of the owner'"'"'s personal information agent object and encapsulated personal information objects at a future point in time after an exchange with a receiving personal information agent object.

8. The computer-implemented system of claim 1, wherein interaction with or usage of the owner'"'"'s personal information agent object and encapsulated personal information objects is denied at a future point in time because one of the privilege rules is no longer satisfied.

9. The computer-implemented system of claim 1, further comprising a community administrator for managing the personal information agent objects and the electronic broker program.

10. The computer-implemented system of claim 1, wherein the personal information agent objects seek to exchange personal information processing privileges for value or benefit.

11. The computer-implemented system of claim 1, wherein at least one of the personal information agent objects securely encapsulates in the encrypted format a certificate object associated with one of the encapsulated personal information objects, the certificate object for affirming the trustworthiness of the personal information contained in the associated personal information object.

12. The computer-implemented system of claim 1, wherein at least one of the personal information agent objects securely encapsulates in the encrypted format an audit trail object for tracking usage of any exchanged personal information objects of the at least one personal information agent object after the electronic broker computer program processes an interaction involving the at least one personal information agent object.

13. The computer-implemented system of claim 12, wherein the audit trail object is securely accessible by the owner over the electronic network while the audit trail object resides at a remote location of a receiving personal information agent object.