Back to results
US 11,238,169 B2Granted
Privacy score
OwnerSiddharth Daftary, Marvin Lu +5inventors
InventorsSiddharth Daftary, Marvin Lu, Jessica Schapiro, Jacob Stewart, Shashin Patel, Michael Sharp, Jhanani Dhakshnamoorthy
Life of this patent
Estimating the term…
Abstract
Methods, computer-readable media, software, and apparatuses may calculate and inform a consumer of company privacy scores corresponding to companies with which the consumer has a corresponding account, or for a company associated with a website that a consumer may visit. A consumer privacy score may also be determined, based on the company privacy scores. The company privacy scores may be based on a calculation including elements of a privacy practice of the corresponding company and elements of a privacy policy of the corresponding company.
Claims18
A method comprising:
- executing, by a processor, computer executable instructions stored in a memory connected thereto, the execution causing a computing device of a cyber-privacy system to:
- receive, from a user, personally identifying information, wherein the user is a consumer;
- electronically collect data from interactions and transactions between the user and device applications and associated remote software including using an email scanning engine to scan a plurality of emails of the user that contain a listing of user account information and including analyzing the user's web browser cache;
- discover a plurality of accounts and online subscriptions of the user by using only the received personally identifying information and collected data;
- determine a plurality of companies with which the user has a corresponding account, using primarily the discovered primarily of accounts and online subscriptions;
- create a respective company specific privacy practice dataset for each company of the plurality of companies each of the respective datasets based on:
- a number of data breach events at a given respective company to which the respective dataset corresponds and a timeframe for each data breath event,
- whether the given company uses any personally identifying data of the user for target advertising,
- whether the given company uses secure data storage to store all of the any personally identifying data,
- whether the given company shares any of the personally identifying data with third parties,
- an indication of a time duration that the given company retains any of the personally identifying data, and
- an indication of a time duration that each of the third patties retains any of the personally identifying data,
- determine a plurality of company privacy scores by, for each company, using the respective company specific dataset to determine, for the given company to which the respective dataset corresponds, a corresponding company privacy score indicative of a measure of protection, provided by the given company, of the personally identifying data used, shared, or stored by the given company;
- and
- determine a user privacy score for the user based on each of the plurality of company privacy scores;
- determine a relationship between the user privacy score and a risk of loss to an insurance company;
- determine an insurance premium price for the user;
- increase the insurance premium price when the user privacy score indicates an increase to the risk of loss;
- and
- decrease the insurance premium when the user privacy score indicates a decrease to the risk of loss.
17 more elements
An apparatus of a cyber-privacy system, comprising:
- a processor;
- a memory unit storing computer-executable instructions, which when executed by the processor, cause the apparatus to:
- receive, from a user, personally identifying information, wherein the user is a consumer;
- electronically collect data from interactions and transactions between the user and device applications and associated remote software including using an email scanning engine to scan a plurality of emails of the user that contain a listing of user account information and including analyzing the user's web browser cache;
- discover a plurality of accounts and online subscriptions of the user by using only the received personally identifying information and collected data;
- determine a plurality of companies with which the user has a corresponding account, using primarily the discovered primarily of accounts and online subscriptions;
- create a respective company specific privacy practice dataset for each company of the plurality of companies, each of the respective datasets based on:
- a number of data breach events at a given respective company to which the respective dataset corresponds and a timeframe for each data breach event,
- whether the given company uses any personally identifying data of the user for target advertising,
- whether the given company uses secure data storage to store all of the any personally identifying data,
- whether the given company shares any of the personally identifying data with third parties,
- an indication of a time duration that the given company retains any of the personally identifying data, and
- an indication of a time duration that each of the third parties retains any of the personally identifying data;
- determine a plurality of company privacy scores by, for each company, using the respective company specific dataset to determine, for the given company to which the respective dataset corresponds, a corresponding company privacy score indicative of a measure of protection, provided by the given company, of the personally identify data used, shared, or stored by the given company;
- determine a user privacy score for the user based on each of the plurality of company privacy scores;
- determine a relationship between the user privacy score and a risk of loss to an insurance company;
- determine an insurance premium price for the user;
- increase the insurance premium price when the user privacy score indicates an increase to the risk of loss;
- and
- decrease the insurance premium when the user privacy score indicates a decrease to the risk of loss.
17 more elements
One or more non-transitory computer-readable media of a cyber-privacy system storing instructions that, when executed by a computing device, cause the computing device to:
- receive, from a user, personally identifying information, wherein the user is a consumer;
- electronically collect data from interactions and transactions between the user and device applications and associated remote software including using an email scanning engine to scan a plurality of emails of the user that contain a listing of user account information and including analyzing the user's web browser cache;
- discover a plurality of accounts and online subscriptions of the user by using only the received personally identifying information and collected data;
- determine a plurality of companies with which the user has a corresponding account, using primarily the discovered primarily of accounts and online subscriptions;
- create a respective company specific privacy practice dataset for each company of the plurality of companies, each of the respective datasets based on:
- a number of data breach events at a given respective company to which the respective dataset correspond and a timeframe for each data breach event,
- whether the given company uses any personally identifying data of the user for target advertising,
- whether the given company uses secure data storage to store all of the any personally identifying data,
- whether the given company shares any of the personally identifying data with third parties,
- an indication of a time duration that the given company retains any of the personally identifying data, and
- an indication of a time duration that each of the third parties retains any of the personally identifying data;
- determine a plurality of company privacy scores by, for each company, using the respective company specific dataset to determine, for the given company to which the respective dataset corresponds, a corresponding company privacy score indicative of a measure of protection, provided by the given company, of the personally identifying data used, shared, or stored by the given company;
- determine a user privacy score for the user based on each of the plurality of company privacy scores;
- determine a relationship between the user privacy score and a risk of loss to an insurance company;
- determine an insurance premium price for the user;
- increase the insurance premium price when the user privacy score indicates an increase to the risk of loss;
- and
- decrease the insurance premium when the user privacy score indicates a decrease to the risk of loss.
15 more elements
Dependencies are inferred from the claim text.