# US 2025/0165643 A1 · Systems and methods for protecting data using a personal data store controlled by the data subject > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0165643 A1 - Document ID: US20250165643A1 - Status: Published application - Kind: A1 - Application number: 18/513,002 - Filed: 2023-11-17 - Published: 2025-05-22 - Earliest claimed: 2023-11-17 - Assignees: Google Inc. - Applicants: Google LLC - Inventors: Benjamin Kaplan; Frankie Lamar, JR.; Radhika Ravindranath; Dev Narendrabhai Patel; Jacques Mouton - Web page: https://patentgrep.com/patent/US20250165643A1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/31: User authentication - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method includes receiving, by a processing device, a request to provide an entity with access to data associated with a user. A reference to location of the data within a data store controlled by the user and an access key associated with the data store is generated. Upon receiving an indication of user approval of the request, a response package is sent to the entity. The response package includes the reference to the location of the data, an obscured version of the data, and the access key. The data is obtained from the data store using the reference to the data and the access key provided by the entity. The data is provided to the entity. ## Claims ### Claim 1 A method comprising: receiving a request to provide an entity with access to data associated with a user; generating a reference to the data within a data store controlled by the user and an access key associated with the data store, wherein the reference to the data indicates a location of the data within the data store; upon receiving an indication of user approval of the request, sending a response package to the entity, wherein the response package comprises the reference to the location of the data, an obscured version of the data, and the access key; obtaining the data from the data store using the reference to the location of the data and the access key provided by the entity; and providing the data to the entity. ### Claim 2 (depends on 1) The method of claim 1, wherein obtaining the data from the data store using the obscured version of the data and the access key provided by the entity comprises: authenticating the entity using the access key; and obtaining the data from the location of the data within the data store indicated by the reference to the data. ### Claim 3 (depends on 1) The method of claim 1, wherein the request to provide the entity with access to the data associated with the user is received via a privacy gateway. ### Claim 4 (depends on 1) The method of claim 1, further comprising revoking access privileges of the entity to the data associated with the user. ### Claim 5 (depends on 4) The method of claim 4, wherein revoking access privileges of the entity to the data is performed in response to a user indication to revoke the access privileges of the entity to the data. ### Claim 6 (depends on 4) The method of claim 4, wherein revoking access privileges of the entity to the data is performed in response to exceeding a threshold amount of time. ### Claim 7 (depends on 4) The method of claim 4, wherein revoking access privileges of the entity to the data associated with the user comprises deleting the reference to the data from the data store. ### Claim 8 (depends on 1) The method of claim 1, further comprising: receiving a user request from a client device associated with the user to modify the data, wherein the request is received responsive to a user interaction with one or more GUI elements of an application associated with the data store; and updating the data within the data store in response to the user request. ### Claim 9 A system comprising: a memory device; and a processing device coupled to the memory device, the processing device to perform operations comprising: receiving a request to provide an entity with access to data associated with a user; responsive to receiving an indication of user approval of the request, sending a response package to the entity, wherein the response package comprises a reference to a location of the data within a data store controlled by the user, an obscured version of the data, and an access key associated with the data store; receiving the reference to the location of the data and the access key from the entity; authenticating the entity using the access key; obtaining the data from the data store using the location of the data within the data store; and providing the data to the entity. ### Claim 10 (depends on 9) The system of claim 9, wherein the request to provide the entity with access to the data associated with the user is received via a privacy gateway. ### Claim 11 (depends on 9) The system of claim 9, further comprising revoking access privileges of the entity to the data associated with the user. ### Claim 12 (depends on 11) The system of claim 11, wherein revoking access privileges of the entity to the data is performed in response to a user indication to revoke the access privileges of the entity to the data. ### Claim 13 (depends on 11) The system of claim 11, wherein revoking access privileges of the entity to the data is performed in response to exceeding a threshold amount of time. ### Claim 14 (depends on 11) The system of claim 11, wherein revoking access privileges of the entity to the data associated with the user comprises deleting the reference to the data from the data store. ### Claim 15 (depends on 9) The system of claim 9, further comprising, providing, for presentation on a client device associated with the user, one or more GUI elements of an application associated with the data store that allow the user to perform one or more of indicating user approval or denial of the request, revoking access to the data, or modifying the data. ### Claim 16 (depends on 15) The system of claim 15, wherein modifying the data comprises: receiving a user request from a client device associated with the user to modify the data, wherein the request is received responsive to a user interaction with the one or more GUI elements of the application associated with the data store; and updating the data within the data store in response to the user request. ### Claim 17 A non-transitory computer-readable storage medium comprising instructions for a server that, when executed by a processing device, cause the processing device to perform operations comprising: receiving a request to provide an entity with access to data associated with a user; generating a reference to the data within a data store controlled by the user and an access key associated with the data store, wherein the reference to the data indicates a location of the data within the data store; upon receiving an indication of user approval of the request, sending a response package to the entity, wherein the response package comprises the reference to the location of the data, an obscured version of the data, and the access key; obtaining the data from the data store using the reference to the location of the data and the access key provided by the entity to obtain the data; and providing the data to the entity. ### Claim 18 (depends on 17) The non-transitory computer-readable storage medium of claim 17, wherein obtaining the data from the data store using the obscured version of the data and the access key provided by the entity comprises: authenticating the entity using the access key; and obtaining the data from the location of the data within the data store indicated by the reference to the data. ### Claim 19 (depends on 17) The non-transitory computer-readable storage medium of claim 17, wherein the request to provide the entity with access to the data associated with the user is received via a privacy gateway. ### Claim 20 (depends on 17) The non-transitory computer-readable storage medium of claim 17, further comprising revoking access privileges of the entity to the data associated with the user.