US 11,144,674 B2 · Method and system for risk identification of personal information

Abstract

In some embodiments, a method for risk identification of personal information of a service/platform provider side is provided. A specification is received related to data usage for at least one among service and application of a third party side from a device of the third party side, and is stored in data storage of the service/platform provider side. User consent information is received from a user side using at least one among the service and application. The received information is stored in the data storage of the service/platform provider side. A process is inspected and monitored related to data storing and processing in user environment or platform environment of the user side using at least one among the service and application. A monitoring function is provided for data stored in the data storage of the service/platform provider side in connection with at least one among the service and application.

Claims19

Dependent claims

A method for risk identification of personal information of a service/platform provider side comprising:

receiving a specification related to data usage for at least one among service and application of a third party side from a device of the third party side and storing the received specification in data storage of the service/platform provider side, wherein the specification specifies at least one network address used by a server with which data will be communicated;
receiving user consent information from a user side using at least one among the service and application and storing the received user consent information in the data storage of the service/platform provider side;
inspecting and monitoring a process related to data storing and processing in user environment or platform environment of the user side using at least one among the service and application;
providing a monitoring function for data stored in the data storage of the service/platform provider side in connection with at least one among the service and application;
and
examining communication with a server using a network address which is not specified on the specification.

3 more elements

A computer device comprising at least one processor implemented to execute computer-readable instructions, and

wherein the computer device, by executing the computer-readable instructions with the at least one processor,
receives a specification related to data usage for at least one among service and application of a third party side from a device of the third party side and stores the received specification in data storage of a service/platform provider side, wherein the specification specifies at least one network address used by a server with which data will be communicated,
receives user consent information from a user side using at least one among the service and application and stores the received user consent information in the data storage of the service/platform provider side,
inspects and monitors a process related to data storing and processing in user environment or platform environment of the user side using at least one among the service and application,
provides a monitoring function for data stored in the data storage of the service/platform provider side in connection with at least one among the service and application, and
examines communication with a server using a network address which is not specified on the specification.

3 more elements

Dependencies are inferred from the claim text.

Method and system for risk identification of personal information

Life of this patent

Method and system for risk identification of personal information

Life of this patent

Abstract

Claims19