US 7,353,532 B2Granted

Secure system and method for enforcement of privacy policy and protection of confidentiality

AssigneeInternational Business Machines Corporation

InventorsSastry S. Duri, Xuan Liu, Paul A. Moskowitz, Ronald Perez, Edith G. Schonberg, Moninder Singh, Charles P. Tresser

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

The invention includes various systems, architectures, frameworks and methodologies that can securely enforce a privacy policy. A method is include for securely guaranteeing a privacy policy between two enterprises, comprising: creating a message at a first enterprise, wherein the message includes a request for data concerning a third party and a privacy policy of the first enterprise; signing and certifying the message that the first enterprise has a tamper-proof system with a privacy rules engine and that the privacy policy of the first entity will be enforced by the privacy rules engine of the first enterprise; sending the message to a second enterprise; and running a privacy rules engine at the second enterprise to compare the privacy policy of the first enterprise with a set of privacy rules for the third party.

Claims14

Dependent claims

A data repository system that can securely guarantee a privacy policy of a user, comprising:

an initialization system, wherein the initialization system includes:
a system for providing the user with a privacy policy of the data repository and a mechanism for validating the privacy policy of the data repository, wherein the mechanism for validating the privacy policy includes providing to the user a public signature key and means to access at least one validator, wherein the validator is a guarantor of hardware for the data repository system, the public signature key is a key generated by the hardware, and the validator can validate the key, and
a system for collecting user data from the user, wherein the user data comprises a description of expirable validity tokens authorizing a third party access to a subset of the user data from the data repository, wherein the expirable validity tokens are expirable after one of a limited time or a limited number of requests from the third party;
and
a referral system for providing the third party access to the subset of the user data upon the third party providing a valid expirable validity token, wherein the referral system digitally signs and digitally encrypts the subset of data, including:
a system for checking that a privacy policy of the third party is compatible with the privacy policy of the user;
a system for digitally encoding the subset of data;
a system for requesting an expirable validity token from the third party;
and
a system for verifying the validity of the expirable validity token from the third party.

7 more elements

A method of controlling user data in a data repository subject to a privacy policy of the user, comprising:

providing the user with a privacy policy of the data repository, a public signature key, and a site of a validator, wherein the validator is a guarantor of hardware for the data repository system, the public signature key is a key generated by the hardware, and the key is validated by one from the group consisting of the validator, a consumer group, and a publication in printed media;
communicating with the validitor to validate the public signature key;
validitating the privacy policy of the data repository with the public signature key;
submitting the privacy policy of the user to the data repository;
checking to determine if the privacy policy of the user matches the privacy policy of the data repository;
sending user data from the user to the data repository, wherein the user data includes a description of expirable validity tokens that authorizes a third party access to a subset of the user data from the data repository, wherein the expirable validity tokens are expirable after one of a limited time or a limited number of requests from the third party;
requesting an expirable validity token from the third party;
verifying the validity of the expirable validity token from the third party;
providing the third party access to the subset of the user data upon the verifying requesting a subset of data from a third party to the user;
checking that a privacy policy of the third party is compatible with the privacy policy of the user;
providing a validity token to the third party from the user;
requesting from the data repository a validity token from the third party;
and
providing to the third party the requested subset of data, wherein the step of providing a validity token to the third party from the user, includes:
providing a public key/private key encryption pair;
sending an encoded message to the third party signed with the public key, wherein the encoded message includes a password and validation information;
providing the data repository with the private key;
and
passing the encoded message to the data repository from the third party, along with the location of the private key.

16 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/233,340Filed 30 Aug 2002
Published: US 2004/0054919 A118 Mar 2004
Granted: 1 Apr 2008
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06Q 40/02
Finance; Insurance; Tax strategies; Processing of corporate or income taxes: banking, e.g. interest calculation or account maintenance
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06Q 20/389
Payment protocols; Details thereof: keeping log of transactions for guaranteeing non-repudiation of a transaction
G06Q 20/4016
Transaction verification: involving fraud or risk level assessment in transaction processing