Back to results
US 10,757,092 B2Granted
Controlling access to personal data
AssigneeAmazon Technologies, Inc.
InventorAnurag Sharma
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for controlling access to personal data of a user. Content can be requested from a network site using an authentication token. A determination can be made that the network site requires personal data. A portion of the personal data can be received from a personal data service. The personal data can be sent to the network site. The network site can send content including the personal data. The content can be rendered for presentation.
Claims20
A system, comprising:
- a client computing device;
- and
- at least one application executable in the client computing device, wherein when executed the at least one application causes the client computing device to at least:
- receive an authentication token from a federated identity provider;
- request content from a network site using the authentication token;
- receive a response from the network site indicating that personal data is required to provide the content;
- generate a user interface requesting user consent to transmit the personal data;
- receive the user consent via the user interface;
- receive at least a portion of the personal data from a personal data service,
- wherein the user consent is received prior to receiving the personal data from the personal data service;
- send the personal data to the network site;
- receive the content including the personal data from the network site;
- and
- render the content for presentation.
11 more elements
A system, comprising:
- a client computing device;
- and
- at least one application executable in the client computing device, wherein when executed the at least one application causes the client computing device to at least:
- request content from a network site using an authentication token from an identity provider;
- determine that the network site requires personal data based at least in part on a response from the network site to the request for the content;
- request at least a portion of the personal data from a personal data service;
- send the personal data to the network site;
- generate a user interface requesting consent to transmit additional personal data;
- receive a denial of consent via the user interface;
- receive the content including the personal data from the network site;
- limit at least one feature of the content based at least in part on the denial of consent;
- and render the content for presentation.
9 more elements
A method, comprising:
- receiving, via a client computing device, an authentication token from an identity provider;
- requesting, via the client computing device, content from a network site using the authentication token;
- receiving, via the client computing device, a response from the network site indicating that personal data is required to provide the content;
- generating, via the client computing device, a request for user consent to transmit the personal data;
- receiving, via the client computing device, the user consent prior to requesting the personal data from the personal data service;
- requesting, via the client computing device, a portion of the personal data from a personal data service;
- sending, via the client computing device, the personal data to the network site;
- receiving, via the client computing device, the content including the personal data from the network site;
- and
- rendering, via the client computing device, the content for presentation.
7 more elements
Dependencies are inferred from the claim text.