Systems and methods for managing permissions for information ownership in the cloud

• US 8,447,630 B2
• Filed: 09/28/2010
• Issued: 05/21/2013
• Est. Priority Date: 02/26/2004
• Status: Active Grant

• Current Assignee: Intercontinental Exchange Holdings, Inc. (Intercontinental Exchange, Inc.)
• Original Assignee: Payment Pathways Incorporated
• Inventors: O'Brien, Richard J., Gallant, Andrew M.
• Primary Examiner(s): Pauls, John A.
• Application Number:
  US12/892,187
• Publication Number:
  US 20110016536A1
• Time in Patent Office: 966 Days
• Field of Search: 705/3, 705/9, 705/14, 705/21
• US Class Current: 705/3
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records

Abstract

The present invention relates to a central (root) directory and the synchronization of unique identifiers associated with a payment addresses and permission preferences at different institutions. In a preferred embodiment, each unique identifier associates an account owner'"'"'s permissions preference for the release of personal identifying information without the need for transaction-by-transaction explicit permissions or blanket implicit permissions. An asset transfer deposit account (for information and/or monetary assets) may be set up as a deposit only account. In this way, the present invention can be effective in eliminating many privacy concerns of account owners and security requirements of an information asset repository.

Claims

1. A computer-implemented method comprising:

storing, in a non-transitory computer-readable storage medium, a database comprising information for an authenticated registrant comprising;

(i) authenticated information identifying at least one linked credit account of the registrant, and (ii) a rule set, wherein the rule set comprises at least one explicit permission to allow customer transaction information associated with the registrant to be transferred to at least one community of interest, wherein the customer transaction information is related to a purchased item;

providing a portion of the database to a financial institution computer, the portion comprising the authenticated information identifying the at least one linked credit account, wherein the financial institution computer is configured to transmit a payment directly from a payor'"'"'s account at the financial institution to the registrant'"'"'s linked credit account located at a second financial institution, without using an intermediary to transfer the payment;

receiving, via at least one computer connected to a communication network, from a requestor, a request for customer transaction information associated with the registrant;

determining, via the at least one computer, based on the rule set associated with the registrant, whether requestor has permission to receive the requested customer transaction information, wherein the determination is based at least in part on which community of interest the requestor belongs to; and

transferring electronically the requested customer transaction information to the requestor, if the requestor is determined to have permission to receive the requested customer transaction information.

2. The method of claim 1 wherein said at least one explicit permission comprises the level of information that may be released and/or categories of information that may be released.

3. The method of claim 1 further comprising the step of notifying said registrant when said request from requestor is received.

4. The method of claim 3 wherein said determination of permission to receive is based at least in part on a response from said registrant to said notification.

5. The method of claim 1 wherein said information received by said requestor is used to provide a tangible benefit to said registrant.

6. The method of claim 5 wherein said tangible benefit is a coupon or rebate.

7. The method of claim 1 wherein said information received by said requestor is used for at least one of the following:

authorization of a transaction, determination of payment authorization, and determination of delivery information.

8. The method of claim 1 wherein communities of interest are selected from the group of:

merchants, manufacturers of goods, providers of services, and financial institutions.

9. The method of claim 1 further comprising the step of determining said at least one explicit permission for said rule set.

10. The method of claim 9 wherein said determination of said at least one explicit permission is made based on said registrant'"'"'s response to one or more questions provided to said registrant.

11. The method of claim 1 wherein said registrant is an entity or person.

12. The method of claim 1 wherein said transferred information is restricted from being further transferred beyond said at least one community of interests associated with said information.

13. The method of claim 1 wherein an authorized agent may act on behalf of said registrant and/or an authorized agent may act on behalf of said requestor.

14. The method of claim 1 wherein said information related to the purchased item comprises stock-keeping unit data.

15. A system comprising:

at least one server, connected to a communication network, comprising executable programming contained on a non-transitory storage medium, said programming when executed operable to;

store a database comprising information for an authenticated registrant comprising;

(i) authenticated information identifying at least one linked credit account of the registrant, and (ii) a rule set, wherein the rule set comprises at least one explicit permission to allow customer transaction information associated with the registrant to be transferred to at least one community of interest, wherein the customer transaction information is related to a purchased item;

provide a portion of the database to a financial institution computer, the portion comprising the authenticated information identifying the at least one linked credit account, wherein the financial institution computer is configured to transmit a payment directly from a payor'"'"'s account at the financial institution to the registrant'"'"'s linked credit account located at a second financial institution, without using an intermediary to transfer the payment;

receive, via the communication network, from a requestor, a request for customer transaction information associated with the registrant;

determine, via the server, based on the rule set associated with the registrant, whether requestor has permission to receive the requested customer transaction information, wherein the determination is based at least in part on which community of interest the requestor belongs to; and

transfer electronically the requested customer transaction information to the requestor, if the requestor is determined to have permission to receive the requested customer transaction information.

16. The system of claim 15 wherein said at least one explicit permission comprises the level of information that may be released and/or categories of information that may be released.

17. The system of claim 15 further operable to notify said registrant when said request from requestor is received.

18. The system of claim 17 wherein said determination of permission to receive is based at least in part on response from said registrant to said notification.

19. The system of claim 15 wherein said information received by said requestor is used to provide a tangible benefit to said registrant.

20. The system of claim 19 wherein said tangible benefit is a coupon or rebate.

21. The system of claim 15 wherein said information received by said requestor is used for at least one of the following:

authorization of a transaction, determination of payment authorization, and determination of delivery information.

22. The system of claim 15 wherein communities of interest are selected from the group of:

merchants, manufacturers of goods, providers of services, and financial institutions.

23. The system of claim 15 further operable to determine said at least one explicit permission for said rule set.

24. The system of claim 23 wherein said determination of said at least one explicit permission is made based on said registrant'"'"'s response to one or more questions provided to said registrant.

25. The system of claim 15 wherein said registrant is an entity or person.

26. The system of claim 15 wherein said transferred information is restricted from being further transferred beyond said at least one community of interests associated with said information.

27. The system of claim 15 wherein an authorized agent may act on behalf of said registrant and/or an authorized agent may act on behalf of said requestor.

28. The system of claim 15 wherein said information related to the purchased item comprises stock-keeping unit data.

29. A non-transitory computer-readable storage medium comprising executable programming, wherein the executable programming instructs a computer processor to perform the following steps:

store a database comprising information for an authenticated registrant comprising;

(i) authenticated information identifying at least one linked credit account of the registrant, and (ii) a rule set, wherein the rule set comprises at least one explicit permission to allow customer transaction information associated with the registrant to be transferred to at least one community of interest, wherein the customer transaction information is related to a purchased item;

provide a portion of the database to a financial institution computer, the portion comprising the authenticated information identifying the at least one linked credit account, wherein the financial institution computer is configured to transmit a payment directly from a payor'"'"'s account at the financial institution to the registrant'"'"'s linked credit account located at a second financial institution, without using an intermediary to transfer the payment;

receive, via the communication network, from a requestor, a request for customer transaction information associated with the registrant;

determine, via the computer processor, based on the rule set associated with the registrant, whether requestor has permission to receive the requested customer transaction information, wherein the determination is based at least in part on which community of interest the requestor belongs to; and

transfer electronically the requested customer transaction information to the requestor, if the requestor is determined to have permission to receive the requested customer transaction information.

30. The non-transitory computer-readable storage medium of claim 29 wherein said information provided in response to said request for information is used to provide a tangible benefit to said registrant.

31. The non-transitory computer-readable storage medium of claim 30 wherein said tangible benefit is a coupon or rebate.

32. The non-transitory computer-readable storage medium of claim 29 wherein said received customer transaction information comprises information about a purchased item.

33. The non-transitory computer-readable storage medium of claim 29 further operable to determine at least one explicit permission to allow transaction information to be transferred to at least one community of interest, wherein said at least one explicit permission is associated with said unique identifier.

34. The non-transitory computer-readable storage medium of claim 33 wherein said at least one explicit permission comprises the level of information that may be released and/or categories of information that may be released.

35. The non-transitory computer-readable storage medium of claim 33 wherein said determination of said at least one explicit permission is made based on said registrant'"'"'s response to one or more questions provided to said registrant.

36. The non-transitory computer-readable storage medium of claim 29 further operable to notify said registrant when said request from requestor is received.

37. The non-transitory computer-readable storage medium of claim 36 wherein said determination of permission is based at least in part on response from said registrant to said notification.

38. The non-transitory computer-readable storage medium of claim 29 wherein said information received by said requestor is used for at least one of the following:

authorization of a transaction, determination of payment authorization, and determination of delivery information.

39. The non-transitory computer-readable storage medium of claim 29 wherein communities of interest are selected from the group of:

merchants, manufacturers of goods, providers of services, and financial institutions.

40. The non-transitory computer-readable storage medium of claim 29 wherein said transferred information is restricted from being further transferred beyond said community of interest.

41. The non-transitory computer-readable storage medium of claim 29 wherein said customer is an entity or person.

42. The non-transitory computer-readable storage medium of claim 29 wherein an authorized agent may act on behalf of said registrant and/or an authorized agent may act on behalf of said requestor.

43. The non-transitory computer-readable storage medium of claim 29 wherein said information related to the purchased item comprises stock-keeping unit data.