Method and apparatus for controlling the transfer of private information in a communication system

• US 8,040,921 B2
• Filed: 01/04/2008
• Issued: 10/18/2011
• Est. Priority Date: 06/15/2007
• Status: Expired due to Fees

• Current Assignee: Sony Ericsson Mobile Communications USA Incorporated (Sony Group Corp.)
• Original Assignee: Sony Ericsson Mobile Communications USA Incorporated (Sony Group Corp.)
• Inventors: Vasa, Yojak Harshad, Sammarco, Anthony J., Camp, William O. Jr.
• Primary Examiner(s): Lai; Andrew
• Application Number:
  US11/969,285
• Publication Number:
  US 20080313080A1
• Time in Patent Office: 1,383 Days
• Field of Search: 370/230, 370/352, 370/335, 370/487, 370/497, 709/203, 709/217, 709/223, 709/246, 709/204, 709/335, 709/245, 709/203.204, 726/11, 726/15, 705/10, 705/37, 705/65, 705/75, 705/80, 705/1, 380/270, 455/426.1, 455/456.2, 340/7.21
• US Class Current: 370/497
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Methods and systems for selectively transferring confidential or private information to a user of a communication device are disclosed. In an exemplary method, a trigger event is detected at a first communication device, resulting in the retrieval of a data object for transmission to a second communication device. If the data object includes private or confidential information, consent of a user of the first communication device is required before the data object may be sent to the second communication device. In some embodiments, consent is obtained by explicitly requesting consent from a user. In others, consent may be deemed under pre-determined circumstances.

Claims

1. A method for selectively transferring private information to a user of a communication device, comprising:

detecting an occurrence of a trigger event at a first mobile terminal;

retrieving or forming a data object at the first mobile terminal, in response to the trigger event;

determining whether the data object that was retrieved or formed in response to the trigger event includes private information;

determining whether a user of the first mobile terminal has consented to transfer of the data object, if the data object includes private information;

sending the data object from the first mobile terminal to a second mobile terminal, responsive to the trigger event, if the user of the first mobile terminal has consented or if the data object does not include private information.

2. The method of claim 1, wherein retrieving or forming a data object in response to the trigger event comprises requesting the data object from a data object server and receiving the data object in response to the request.

3. The method of claim 1, wherein determining whether the data object includes private information comprises inspecting the data object for a confidentiality indicator.

4. The method of claim 1, wherein determining whether the data object includes private information comprises providing a confidentiality query to the user of the first mobile terminal and evaluating a response, if any, to the confidentiality query.

5. The method of claim 4, wherein determining whether the user of the first mobile terminal has consented to transfer of the data object is based on the response to the confidentiality query.

6. The method of claim 1, wherein determining whether the user of the first mobile terminal has consented to transfer of the data object comprises evaluating a pre-determined consent profile for the user of the first mobile terminal.

7. The method of claim 1, wherein determining whether the user of the first mobile terminal has consented to transfer of the data object comprises providing a consent query to the user of the first mobile terminal and evaluating a response, if any, to the consent query.

8. The method of claim 1, wherein the trigger event indicates acceptance of an electronic sales offer by the user of the first mobile terminal and the data object comprises private financial information, and wherein determining whether the user has consented to transfer of the data object comprises deeming consent based on said indication of acceptance.

9. The method of claim 1 wherein the trigger event comprises an establishing of a communication session, a change in communication status, the expiration of a timer, or a manual activation of a device key by a user of the first mobile terminal.

10. A first mobile terminal configured for communication with a second mobile terminal, wherein the first mobile terminal comprises processing logic configured to:

detect an occurrence of a trigger event at the first mobile terminal;

retrieve or form a data object in response to the trigger event;

determine whether the data object includes private information;

determine whether a user of the first mobile terminal has consented to transfer of the data object, if the data object includes private information;

send the data object to the second mobile terminal, responsive to the trigger event, if the user of the first mobile terminal has consented or if the data object does not include private information.

11. The first mobile terminal of claim 10, wherein the processing logic is configured to retrieve the data object by requesting the data object from a data object server and receiving the data object in response to the request.

12. The first mobile terminal of claim 10, wherein the processing logic is configured to form the data object by assembling the data object using one or more stored data items selected in view of the triggering event.

13. The first mobile terminal of claim 10, wherein the processing logic is configured to determine whether the data object includes private information by inspecting the data object for a confidentiality indicator.

14. The first mobile terminal of claim 10, wherein the processing logic is configured to determine whether the user of the first mobile terminal has consented to transfer of the first data object by evaluating a pre-determined consent profile for the user of the first mobile terminal.

15. The first mobile terminal of claim 10, wherein the processing logic is configured to determine whether the user of the first mobile terminal has consented to transfer of the data object by querying the user of the first mobile terminal and evaluating a response to the query.