# US 2019/0319932 A1 · Secure and anonymous data sharing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0319932 A1 - Document ID: US20190319932A1 - Status: Published application - Kind: A1 - Application number: 16/178,919 - Filed: 2018-11-02 - Published: 2019-10-17 - Earliest claimed: 2018-04-16 - Assignees: Samsung Electronics Co., Ltd. - Applicants: Samsung Electronics Co., Ltd. - Inventors: Naga R. KANDREGULA - Web page: https://patentgrep.com/patent/US20190319932A1 ## CPC - H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer} - H04L 63/102: {Entity profiles} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 67/146: Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding - H04L 67/306: User profiles - H04L 67/53: using third party service providers - H04L 2209/80: Wireless - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and system for sharing data anonymously between a user's electronic device and a third-party host is provided. A data vault receives, from the electronic device, information about the electronic device and a third-party identifier. The third-party identifier uniquely identifies the third-party host. Using the information about the electronic device and the third-party identifier, the data vault validates the authenticity of the electronic device and the third-party host and identifies a user preference. The data vault server creates an authenticated baton payload that includes the user preference and does not contain user identification information. The data vault receives from the third-party host a request for user data with the authenticated baton payload previously provided to the electronic device. Upon verification of the request for user data and the authenticated baton payload, the data vault provides the requested data to the third-party host without the user identification information. ## Claims ### Claim 1 A method for anonymous data sharing, the method comprises: receiving, by a backend server, client device information and a third-party data package; identifying, based on the client device information and the third-party data package, a personal user preference from a plurality of personal user preferences; creating an authenticated payload (AP) including a session identifier and the personal user preference without including a user identification; sending the AP to a client device based on the client device information; receiving, from a third-party server, a request for data and the AP previously sent to the client device; and providing, to the third-party server, requested data when the request for data corresponds with the personal user preference. ### Claim 2 (depends on 1) The method of claim 1, wherein the third-party data package comprises a third-party identifier and third-party data, the method further comprising certifying an identity of a third-party host based on the third-party identifier. ### Claim 3 (depends on 2) The method of claim 2, wherein the client device information further comprises at least one user option, and wherein the method further comprises corresponding the at least one user option with the third-party data. ### Claim 4 (depends on 1) The method of claim 1, wherein the personal user preference includes specific personal information, without including user identification information, associated with the client device information that can be provided to a third-party host associated with the third-party data package. ### Claim 5 (depends on 1) The method of claim 1, further comprising storing, in memory, the identified personal user preference in an access condition matrix and associating the access condition matrix with the session identifier. ### Claim 6 (depends on 5) The method of claim 5, wherein receiving the request for data and the AP further comprises verifying the received AP corresponds to the access condition matrix. ### Claim 7 (depends on 6) The method of claim 6, wherein verifying the received AP corresponds to the access condition matrix includes terminating an anonymous data sharing session based on the session identifier. ### Claim 8 A backend server providing anonymous data sharing, the server comprising: a memory; and at least one processor connected to the memory, the at least one processor configured to: receive, from a client device, client device information and a third-party data package; identify, based on the client device information and the third-party data package, a personal user preference from a plurality of personal user preferences; create an authenticated payload (AP) including a session identifier and the personal user preference without including a user identification; send the AP to a client device based on the client device information; receive, from a third-party server, a request for data and the AP previously sent to the client device; and provide, to the third-party server, requested data when the request for data corresponds with the personal user preference. ### Claim 9 (depends on 8) The server of claim 8, wherein the third-party data package comprises a third-party identifier and third-party data, and wherein the processor is further configured to certify an identity of a third-party host based on the third-party identifier. ### Claim 10 (depends on 9) The server of claim 9, wherein the client device information further comprises at least one user option, and wherein the processor is further configured to correspond the at least one user option with the third-party data. ### Claim 11 (depends on 8) The server of claim 8, wherein the personal user preference includes specific personal information, without including user identification information, associated with the client device information, that can be provided to a third-party host associated with the third-party data package. ### Claim 12 (depends on 8) The server of claim 8, wherein the processor is further configured to store, in the memory, the identified personal user preference in an access condition matrix and to associate the access condition matrix with the session identifier. ### Claim 13 (depends on 12) The server of claim 12, wherein when the processor receives the request for data and the AP, the processor is further configured to verify that the received AP corresponds with the access condition matrix. ### Claim 14 (depends on 13) The server of claim 13, wherein when the processor cannot verify that the AP corresponds to the access condition matrix, the processor is configured to terminate an anonymous data sharing session based on the session identifier. ### Claim 15 A non-transitory computer-readable medium comprising a plurality of instructions that, when executed by a processor of a backend server system, is configured to cause the processor to: receive, from a client device, client device information and a third-party data package; identify, based on the client device information and the third-party data package, a personal user preference from a plurality of personal user preferences; create an authenticated payload (AP) including a session identifier and the personal user preference without including a user identification; send the AP to a client device based on the client device information; receive, from a third-party server, a request for data and the AP previously sent to the client device; and provide, to the third-party server, requested data when the request for data corresponds with the personal user preference. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the third-party data package comprises a third-party identifier and third-party data, and further comprising instructions that when executed by the processor, cause the processor to certify an identity of a third-party host based on the third-party identifier. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the client device information further comprises at least one user option, and further comprising instructions that, when executed by the processor, cause the processor to correspond the at least one user option with third-party data. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the personal user preference include specific personal information, without user identification information, associated with the client device information, that can be provided to a third-party host associated with the third-party data package. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, further comprising instructions that, when executed by the processor, further cause the processor to store, in a memory, the identified personal user preference in an access condition matrix; and associate the access condition matrix with the session identifier. ### Claim 20 (depends on 19) The non-transitory computer-readable medium of claim 19, further comprising instructions that, when executed by the processor, further cause the processor to: verify whether the received AP corresponds with the access condition matrix when the processor receives the request for data with the AP; and terminate an anonymous data sharing session based on the session identifier when the processor cannot verify that the AP corresponds to the access condition matrix.