Data-privacy management technique
AssigneeIntuit Inc.
InventorAlex G. Balazs
Life of this patent
Estimating the term…
Abstract
A technique for controlling release of data associated with an account is described. During this data-privacy management technique, a computer system provides at least a subset of data associated with an account to a third party based on a first consent (which may be received from a user of the account). This subset may have a first classification based on a taxonomy. Subsequently, the third party may notify the computer system that additional data has been derived from the data. In response, the computer system may determine a second classification of the additional data based on a taxonomy. If this second classification is other than a subset of the first classification, the computer system may request a second consent (for example, from the user).
Claims15
A computer-implemented method for controlling release of data associated with a user of an account, the method comprising:
- receiving the data from the user at a computer;
- defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
- receiving, from the user, at the computer, a first electronic consent for release of at least a first subset of the data that has a first classification based on the taxonomy;
- storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing the first subset of the data that has the first classification;
- receiving a first request for accessing the first subset of the data from a first application of a third party, wherein the first application is executed on a first electronic platform;
- and
- when the first application falls into one of the respective subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.
A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:
- receiving the data from the user at a computer;
- defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
- receiving, from the user, at the computer, a first electronic consent for release of at least a first subset of the data that has a first classification based on the taxonomy;
- storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing the first subset of the data that has the first classification;
- receiving a first request for accessing the first subset of the data from a first application of a third party, wherein the first application is executed on a first electronic platform;
- and
- when the first application falls into one of the respective subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.
A computer system, comprising:
- one or more processors;
- and
- a non-transitory computer-readable storage medium storing instructions that, when executed by the one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:
- receiving the data from the user at a computer;
- defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
- receiving, from the user, at the computer, a first electronic consent for release of at least a first subset of the data that has a first classification based on the taxonomy;
- storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing the first subset of the data that has the first classification;
- receiving a first request for accessing the first subset of the data from a first application of a third party, wherein the first application is executed on a first electronic platform;
- and
- when the first application falls into one of the respective subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.
Dependencies are inferred from the claim text.