Method and apparatus for authorizing the transfer of information

• US 8,225,388 B2
• Filed: 01/19/2007
• Issued: 07/17/2012
• Est. Priority Date: 09/20/2000
• Status: Active Grant

• Current Assignee: United Parcel Service Of America Incorporated (United Parcel Service Incorporated)
• Original Assignee: United Parcel Service Of America Incorporated (United Parcel Service Incorporated)
• Inventors: Vogel, Robert, Franz, Daniel, Klingenberg, Robert, Barnes, Dave, Schenken, Chris
• Primary Examiner(s): Popham, Jeffrey D
• Application Number:
  US11/625,004
• Publication Number:
  US 20070277229A1
• Time in Patent Office: 2,006 Days
• Field of Search: 726/10, 726/28, 713/185, 705/330, 705/331, 705/332, 705/336, 705/341
• US Class Current: 726/10
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G06Q 10/083 Shipping

Abstract

The present invention overcomes deficiencies in the prior art by providing a PIN-based system for managing delivery of privileged information, which utilizes “third-party” authorization. In one embodiment this system includes the use of three separate parties, a First Party, a Second Party, and a Third Party. The First Party initially “registers” with the Second Party by providing self-authenticating core registration information. This registration provides the First Party with a first set of privileges. The First Party may then ask for a PIN number in order to obtain a second set of privileges to observe information provided by the Second Party which is related to a Third Party. In requesting the PIN, the First Party must provide additional registration information (beyond the core information) to the Second Party relating to the Third Party, which the Second Party can authenticate due to an existing relationship which can be checked. The Second Party then forwards the PIN request to the Third Party along with the First Party'"'"'s basic registration information. A PIN administrator at the Third Party'"'"'s location can be designated by the First or the Third party. The Third Party then can decide whether to forward the PIN to the First Party. If the PIN is so forwarded, the First Party then may use the PIN to gain the requested additional access privileges. The second set of privileges can be dynamically modified by the Third Party. Although at least three parties can be involved, two of these parties could be the same.

Claims

1. A computer system for authorizing access to shipment information for an entity, said shipment information being stored by the computer system and comprising core shipment information and privileged shipment information, the system comprising memory and a processor, wherein said computer system is adapted to:

(a) host a website;

(b) receive, from a shipping customer, information that identifies the shipping customer;

(c) store the information in the memory in order to register the shipping customer;

(d) after successfully registering the shipping customer, activate access to the core shipment information related to the entity for the shipping customer;

(e) receive a request from the shipping customer for an authorization code to gain access to at least a portion of the privileged shipment information related to the entity;

(f) generate the authorization code, the authorization code being unique with respect to the request from the shipping customer;

(g) after receiving the request, send a message to the entity, the message comprising;

(1) the request;

(2) at least a portion of the information that identifies the shipping customer; and

(3) the authorization code; and

(h) after receiving the authorization code from the shipping customer accessing the website, (1) activate access to at least the portion of the privileged shipment information for the shipping customer, and (2) associate the authorization code with at least the portion of the privileged shipment information stored in the memory for the shipping customer, wherein the entity, upon receipt of the message, forwards the authorization code to the shipping customer to use as input on the website and permission for subsequent requests by the shipping customer to gain access to at least the portion of the privileged shipment information is automatically provided without the shipping customer having to further provide the authorization code upon association of the authorization code with at least the portion of the privileged shipment information stored in the memory for the shipping customer.

2. The system of claim 1, wherein the computer system is further adapted to activate access to at least the portion of the privileged shipment information in response to receiving, from the shipping customer accessing the website, the authorization code, a shipping customer identifier identifying the shipping customer, and a password associated with the shipping customer identifier.

3. The system of claim 1, wherein the computer system is further adapted to withdraw the shipping customer'"'"'s access to at least the portion of the privileged shipment information after a predetermined time period.

4. The system of claim 1, wherein, in response to activating access to at least the portion of the privileged shipment information for the shipping customer, the computer system is further adapted to send a report to the entity that the shipping customer has activated access to at least the portion of the privileged shipment information.

5. The system of claim 1, wherein the entity is a shipper and the privileged shipment information comprises delivery information for shipments made by the shipper to the shipping customer, and the computer system is further adapted to activate access to the delivery information in response to receiving, from the shipping customer accessing the website, the authorization code and an identifier identifying the shipper.