User privacy framework

A system for implementing a privacy policy, the system comprising:

• a first data storage unit for storing one or more policies,
• wherein each policy of the one or more policies comprise a privacy level and one or more rules,
• wherein each rule of the one or more rules each comprises a condition,
• wherein the condition comprises one or more dimensions selected from a plurality of dimensions, and
• wherein the condition comprises one or more elements associated with the one or more dimensions selected from a plurality of elements;
• a second data storage unit for storing information of a user;
• and
• an authorization server coupled to at least one of the first data storage unit and the second data storage unit and configured to receive a request from a requester for viewing the information of the user and for returning the information of the user if one or more policies are satisfied,
• wherein the authorization server comprises a processor for evaluating the one or more policies against the request,
• wherein the authorization server is configured to provide a user interface for allowing the user to develop the one or more policies by providing a plurality of conditions, dimensions, elements and privacy levels for selection by the user and for allowing the user to add, modify, or delete the one or more policies,
• wherein the authorization server is configured to anticipate the policy desired by the user based on location information of the first user for which the policy is created,
• wherein the authorization server is configured to suggest a policy template, and
• wherein the authorization server is configured to receive the policy created by the first user.

A non-transitory computer readable storage medium having computer readable program code embodied therein for implementing a policy for a first user, the computer readable program code representing instructions to cause a processor to perform operations comprising:

• providing a user interface for allowing the first user to create and manage a condition of a first rule and a privacy level for determining if a second user is allowed access to information of the first user, wherein the condition comprises one or more dimensions selected from a plurality of dimensions;
• and
• anticipating the policy desired by the first user based on location information of the first user for which the policy is created;
• suggesting a policy template from a plurality of policy templates based on the anticipation, wherein the suggested policy template is displayed in the user interface;
• receiving the first rule and the privacy level;
• storing the first rule and the privacy level;
• evaluating the first rule and the privacy level against a request from the second user upon receiving the request, wherein the request by the second user is to access the information of the first user;
• and
• permitting access to the second user if the second user satisfies the at least one of the condition of the first rule and the privacy level.