# US 2023/0054446 A1 · Systems and methods for functionally separating geospatial information for lawful and trustworthy analytics, artificial intelligence and machine learning

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2023/0054446 A1
- Document ID: US20230054446A1
- Status: Published application
- Kind: A1
- Application number: 17/937,997
- Filed: 2022-10-04
- Published: 2023-02-23
- Earliest claimed: 2013-11-01
- Assignees: Anonos Innovations LLC
- Applicants: Anonos IP LLC
- Inventors: Malcolm Gary LaFever; Ted N. Myerson; Mark Little; Steven Mason; Samantha LaFever; Howard Kaushansky
- Web page: https://patentgrep.com/patent/US20230054446A1

## CPC

- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G16H 10/60: for patient-specific data, e.g. for electronic patient records
- G16H 40/67: for remote operation
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/16: the keys or algorithms being changed during operation
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 12/75: Temporary identity
- G06F 2221/2115: Third party
- H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication}
- H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/101: {Access control lists [ACL]}
- H04L 2209/42: Anonymization, e.g. involving pseudonyms
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Various systems, computer-readable media, and computer-implemented methods of providing improved data privacy, anonymity and security by enabling subjects to which data pertains to remain “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent that is desired—are disclosed herein. Embodiments include systems that create, access, use, store and/or erase data with increased privacy, anonymity, and security—thereby facilitating the availability of more qualified and accurate information. When personal data is authorized by data subjects to be shared with third parties, embodiments described herein may facilitate the sharing of information in a dynamically-controlled manner that also enables the delivery of temporally-, geographically-, and/or purpose-limited information to the receiving party. In one example, the disclosed techniques may be used to functionally separate geospatial information, such that it remains “dynamically anonymous,” i.e., anonymous for as long as is desired—and to the extent or degree that is desired.

## Claims

### Claim 1

A system, comprising:
a communication interface for sending data;
one or more memory elements having, stored therein, computer program code; and
one or more processing units operatively coupled to the one or more memory elements and configured to execute instructions in the computer program code that cause the one or more processing units to:
generate or receive one or more dynamically-changing, temporally unique identifiers;
receive a first request from a first client for one or more dynamically-changing, temporally unique identifiers related to a first data subject;
associate, in response to the first request, one or more dynamically-changing, temporally unique identifiers with the first data subject;
generate first time period data, wherein the first time period data comprises information defining a first time period during which a first one of the one or more dynamically-changing, temporally unique identifiers associated with the first data subject is used to identify the first data subject;
store, in at least one of the one or more memory elements, the one or more dynamically-changing, temporally unique identifiers and the first time period data; and
send the one or more dynamically-changing, temporally unique identifiers to the first client.

### Claim 2 (depends on 1)

The system of claim 1, wherein the instructions in the computer program code further cause the one or more processing units to:
associate one or more data attributes with the first dynamically-changing, temporally unique identifier of the one or more dynamically-changing, temporally unique identifiers.

### Claim 3 (depends on 2)

The system of claim 2, wherein at least one of the one or more data attributes associated with the first dynamically-changing, temporally unique identifier relates to an action, activity, process, purpose, identity, geospatial location, or other trait of the first data subject.

### Claim 4 (depends on 3)

The system of claim 3, wherein the instructions in the computer program code further cause the one or more processing units to:
receive a second request from a second client for at least one of the one or more data attributes associated with the first dynamically-changing, temporally unique identifier during the first time period;
determine that the second request is authorized; and
grant the ability of the second client to determine the requested one or more data attributes associated with the first dynamically-changing, temporally unique identifier during the first time period.

### Claim 5 (depends on 1)

The system of claim 1, wherein the instructions in the computer program code further cause the one or more processing units to:
associate the first dynamically-changing, temporally unique identifier of the one or more dynamically-changing, temporally unique identifiers with a second data subject during the first time period or during a second time period.

### Claim 6 (depends on 1)

The system of claim 1, wherein the instructions in the computer program code further cause the one or more processing units to:
associate, in response to the first request, a second dynamically-changing, temporally unique identifier of the one or more dynamically-changing, temporally unique identifiers with the first data subject;
generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing, temporally unique identifier is used to identify the first data subject,
wherein the second time period is different from the first time period,
wherein the second dynamically-changing, temporally unique identifier is different from the first dynamically-changing, temporally unique identifier,
store, in at least one of the one or more memory elements, the second dynamically-changing, temporally unique identifier and the second time period data; and
send the second dynamically-changing, temporally unique identifier to the first client.

### Claim 7 (depends on 6)

The system of claim 6, wherein the instructions in the computer program code further cause the one or more processing units to:
associate one or more data attributes with the second dynamically-changing temporally unique identifier,
wherein at least one of the one or more data attributes associated with the second dynamically-changing temporally unique identifier relates to an action, activity, process, purpose, identity, geospatial location, or other trait of the first data subject.

### Claim 8 (depends on 7)

The system of claim 7, wherein at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier is different from at least one of the one or more data attributes associated with the second dynamically-changing temporally unique identifier.

### Claim 9 (depends on 3)

The system of claim 3, wherein the instructions in the computer program code further cause the one or more processing units to:
associate the first dynamically-changing temporally unique identifier with a second data subject during a second time period,
wherein at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier during the first time period is the same as one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier during the second time period.

### Claim 10 (depends on 1)

The system of claim 1, wherein the instructions in the computer program code further cause the one or more processing units to:
receive from a second client, a second dynamically-changing temporally unique identifier related to a second data subject;
associate the second dynamically-changing temporally unique identifier with the second data subject;
generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing temporally unique identifier is used to identify the second data subject; and
store, in at least one of the one or more memory elements, the second dynamically-changing temporally unique identifier and the second time period data.

### Claim 11 (depends on 3)

The system of claim 3, wherein:
at least one of the one or more data attributes associated with the first dynamically-changing, temporally unique identifier comprises a first attribute related to a first geospatial location of the first data subject, and
the first attribute comprises at least one of the following:
(a) a rounded version of actual latitude or longitude coordinates of the first data subject;
(b) a reduced-precision version of date-time stamps associated with an actual geospatial location of the first data subject at a particular date or time; or
(c) a generalized location name of the actual geospatial location of the first data subject at the particular date or time.

### Claim 12

A non-transitory computer readable medium comprising computer executable instructions stored thereon to cause one or more processing units to:
generate or receive one or more dynamically-changing, temporally unique identifiers;
receive a first request from a first client for one or more dynamically-changing temporally unique identifiers related to a first data subject;
associate, in response to the first request, one or more dynamically-changing temporally unique identifiers with the first data subject;
generate first time period data, wherein the first time period data comprises information defining a first time period during which a first one of the one or more dynamically-changing temporally unique identifiers associated with the first data subject is used to identify the first data subject;
store, in one or more memory elements, the one or more dynamically-changing temporally unique identifiers and the first time period data; and
send the first dynamically-changing temporally unique identifier to the first client.

### Claim 13 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
associate one or more data attributes with the first dynamically-changing temporally unique identifier of the one or more dynamically-changing temporally unique identifiers.

### Claim 14 (depends on 13)

The non-transitory computer readable medium of claim 13, wherein at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier relates to an action, activity, process, purpose, identity, geospatial location, or other trait of the first data subject.

### Claim 15 (depends on 14)

The non-transitory computer readable medium of claim 14, wherein the instructions further cause the one or more processing units to:
receive a second request from a second client for at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier during the first time period;
determine that the second request is authorized; and
grant the ability of the second client to determine the requested one or more data attributes associated with the first dynamically-changing temporally unique identifier during the first time period.

### Claim 16 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
associate the first dynamically-changing temporally unique identifier of the one or more dynamically-changing temporally unique identifiers with a second data subject during a second time period.

### Claim 17 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
associate the first dynamically-changing temporally unique identifier of the one or more dynamically-changing temporally unique identifiers with a second data subject during the first time period.

### Claim 18 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
associate, in response to the first request, a second dynamically-changing temporally unique identifier of the two or more dynamically-changing, temporally unique identifiers with the first data subject;
generate second time period data, wherein the second time period data comprises information defining a second time period during which the second dynamically-changing temporally unique identifier is used to identify the first data subject,
wherein the second time period is different from the first time period,
wherein the second dynamically-changing, temporally unique identifier is different from the first dynamically-changing, temporally unique identifier,
store, in at least one of the one or more memory elements, the second dynamically-changing temporally unique identifier and the second time period data; and
send the second dynamically-changing temporally unique identifier to the first client.

### Claim 19 (depends on 18)

The non-transitory computer readable medium of claim 18, wherein the first time period and the second time period do not overlap.

### Claim 20 (depends on 18)

The non-transitory computer readable medium of claim 18, wherein the first time period and the second time period at least partially overlap.

### Claim 21 (depends on 18)

The non-transitory computer readable medium of claim 18, wherein the instructions further cause the one or more processing units to:
associate one or more data attributes with the second dynamically-changing temporally unique identifier,
wherein at least one of the one or more data attributes associated with the second dynamically-changing temporally unique identifier relates to an action, activity, process, purpose, identity, geospatial location, or other trait of the first data subject.

### Claim 22 (depends on 21)

The non-transitory computer readable medium of claim 21, wherein at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier is different from at least one of the one or more data attributes associated with the second dynamically-changing temporally unique identifier.

### Claim 23 (depends on 14)

The non-transitory computer readable medium of claim 14, wherein the instructions further cause the one or more processing units to:
associate the first dynamically-changing temporally unique identifier with a second data subject during a second time period,
wherein at least one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier during the first time period is the same as one of the one or more data attributes associated with the first dynamically-changing temporally unique identifier during the second time period.

### Claim 24 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
receive from a second client, a second dynamically-changing temporally unique identifier related to a second data subject;
associate the second dynamically-changing temporally unique identifier with the second data subject;
generate second time period data, wherein the second time period data comprises information defining a third time period during which the second dynamically-changing temporally unique identifier is used to identify the second data subject; and
store, in at least one of the one or more memory elements, the second dynamically-changing temporally unique identifier and the second time period data.

### Claim 25 (depends on 24)

The non-transitory computer readable medium of claim 24, wherein the second dynamically-changing temporally unique identifier comprises a Hypertext Transfer Protocol (HTTP) cookie.

### Claim 26 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions further cause the one or more processing units to:
receive a second request from a second client for an identity of the first data subject associated with a first dynamically-changing temporally unique identifier of the one or more dynamically-changing temporally unique identifiers during the first time period;
determine that the second request is authorized; and
grant the ability of the second client to determine the identity of the first data subject during the first time period.

### Claim 27 (depends on 26)

The non-transitory computer readable medium of claim 26, wherein the instructions further cause the one or more processing units to:
revoke the ability of the second client to determine the identity of the first data subject during the first time period.

### Claim 28 (depends on 14)

The non-transitory computer readable medium of claim 14, wherein:
at least one of the one or more data attributes associated with the first dynamically-changing, temporally unique identifier comprises a first attribute related to a first geospatial location of the first data subject, and
the first attribute comprises at least one of the following:
(a) a rounded version of actual latitude or longitude coordinates of the first data subject;
(b) a reduced-precision version of date-time stamps associated with an actual geospatial location of the first data subject at a particular date or time; or
(c) a generalized location name of the actual geospatial location of the first data subject at the particular date or time.

### Claim 29

A method, comprising:
generating or receiving one or more dynamically-changing, temporally unique identifiers;
receiving a first request from a first client for one or more dynamically-changing temporally unique identifiers related to a first data subject;
associating, in response to the first request, one or more dynamically-changing temporally unique identifiers with the first data subject;
generating first time period data, wherein the first time period data comprises information defining a first time period during which a first one of the one or more dynamically-changing temporally unique identifiers associated with the first data subject is used to identify the first data subject;
storing, in one or more memory elements, the one or more dynamically-changing temporally unique identifiers and the first time period data; and
sending the first dynamically-changing temporally unique identifier to the first client.

### Claim 30 (depends on 29)

The method of claim 29, wherein:
a first attribute related to a first geospatial location of the first data subject is associated with the first dynamically-changing, temporally unique identifier, and
the first attribute comprises at least one of the following:
(a) a rounded version of actual latitude or longitude coordinates of the first data subject;
(b) a reduced-precision version of date-time stamps associated with an actual geospatial location of the first data subject at a particular date or time; or
(c) a generalized location name of the actual geospatial location of the first data subject at the particular date or time.