Systems and methods for managing secure sharing of online advertising data

A system for managing online user data secure sharing, the system including:

• a data storage device storing instructions for securely managing online user data sharing;
• and
• a processor configured to execute the instructions to perform a method managing online user data secure sharing, the method including:
• receiving, at a server, a request for online user data from a data consumer device, the request including a data consumer identifier of the data consumer device;
• determining, based on the request and the data consumer identifier, privileges associated with the data consumer device;
• retrieving, from a database, the online user data based on the data consumer identifier of the request and the determined privileges associated with the data consumer device;
• determining, by the server, whether the online user data is designated to be processed and/or designated to have privileges set, the determining whether the online user data is designated to be processed being based on the determined privileges associated with the data consumer device;
• upon the determining that the online user data is designated to be processed, based on the determined privileges associated with the data consumer device, removing user-identifiable information from the online user data, and applying data aggregation processing to the online user data to convert the online user data to non-user-identifiable aggregated metadata;
• encrypting the non-user-identifiable aggregated metadata by using a certificate associated with the data consumer identifier;
• upon the determining that the online user data is designated to have privileges set, setting one or more privileges of the online user data using the certificate associated with the data consumer identifier of the request, the one or more privileges comprising a duration of data accessibility, and/or a data access revocation condition;
• encrypting the online user data for which the one or more privileges were set by using the certificate associated with the data consumer identifier;
• and
• providing the encrypted online user data and/or the encrypted non-user-identifiable aggregated metadata to the data consumer device.

A non-transitory computer-readable medium storing instructions that, when executed by a computer, cause the computer to perform a method for managing online user data secure sharing, the method including:

• receiving, at a server, a request for online user data from a data consumer device, the request including a data consumer identifier of the data consumer device;
• determining, based on the request and the data consumer identifier, privileges associated with the data consumer device;
• retrieving, from a database, the online user data based on the data consumer identifier of the request and the determined privileges associated with the data consumer device;
• determining, by the server, whether the online user data is designated to be processed and/or designated to have privileges set, the determining whether the online user data is designated to be processed being based on the determined privileges associated with the data consumer device;
• upon the determining that the online user data is designated to be processed, based on the determined privileges associated with the data consumer device, removing user-identifiable information from the online user data, and applying data aggregation processing to the online user data to convert the online user data to non-user-identifiable aggregated metadata;
• encrypting the non-user-identifiable aggregated metadata by using a certificate associated with the data consumer identifier;
• upon the determining that the online user data is designated to have privileges set, setting one or more privileges of the online user data using the certificate associated with the data consumer identifier of the request, the one or more privileges comprising a duration of data accessibility, and/or a data access revocation condition;
• encrypting the online user data for which the one or more privileges were set by using the certificate associated with the data consumer identifier;
• and
• providing the encrypted online user data and/or the encrypted non-user-identifiable aggregated metadata to the data consumer device.