# US 8,752,196 B2 · Protecting privacy of shared personal information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,752,196 B2 - Document ID: US8752196B2 - Status: Granted - Kind: B2 - Application number: 13/734,766 - Filed: 2013-01-04 - Published: 2013-08-08 - Granted: 2014-06-10 - Earliest claimed: 2009-02-02 - Assignees: Yahoo! Inc. - Applicants: Yahoo! Inc. - Inventors: Simon P. King - Web page: https://patentgrep.com/patent/US8752196B2 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 2209/42: Anonymization, e.g. involving pseudonyms - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods and apparatus are described to protect personal information by decoupling it from user identity. According to specific embodiments, this is accomplished by associating each user with an anonymous token that is decoupled from the user's identity. Personal information (e.g., a user's physical or geographic location) is stored in association with this anonymous token, with no apparent connection to the user. Those allowed to access the personal information—including the owner himself—are granted the ability through a variety of mechanisms to connect the anonymous token back to the owner. The personal information can then be retrieved by locating the data stored in association with the anonymous token in the data store. ## Claims ### Claim 1 A system, comprising: one or more data stores configured to store first personal information about a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user in the system; one or more computing devices configured to implement: a data sharing component configured to determine whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first anonymous token and the first user ID such that the second user is allowed to access personal information about the first user, and send the first personal information associated with the first anonymous token to a second user device associated with the second user for display if the key associated with the second user ID corresponding to the second user unlocks the connection between the first anonymous token and the first user ID. ### Claim 2 (depends on 1) The system of claim 1, the first user being associated with a first user device. ### Claim 3 (depends on 2) The system of claim 2, wherein the one or more computing devices are further configured to implement a login component, the login component configured to receive a first user ID and credentials from the first user device, and return the first anonymous token to the first user device if the credentials authorize the first user device corresponding to the first user ID to access the system. ### Claim 4 (depends on 3) The system of claim 3, wherein the credentials comprise a password, and wherein the first anonymous token is derived from the password. ### Claim 5 (depends on 3) The system of claim 3, wherein the first user device communicates with the login component, and the login component is configured to communicate with one or more of the data sharing component or the one or more data stores on behalf of the first user device. ### Claim 6 (depends on 1) The system of claim 1, wherein the one or more computing devices are further configured to implement a permissions component, the permissions component being configured to encrypt a connection between the first user ID and the first anonymous token such that the key associated with the second user decrypts the connection between the first anonymous token and the first user ID. ### Claim 7 (depends on 6) The system of claim 6, wherein the one or more computing devices are further configured to implement a privacy enhancing component, the privacy enhancing component being configured to connect a second anonymous token with the second user ID corresponding to the second user, the connection between the second anonymous token and the second user ID being unlocked by the key associated with the second user ID, wherein the permissions component is further configured to associate the second anonymous token with the connection between the first anonymous token and the first user ID. ### Claim 8 (depends on 2) The system of claim 2, wherein the one or more computing devices include the first user device and the data sharing component resides on the first user device. ### Claim 9 (depends on 1) The system of claim 1, wherein the first personal information is stored unencrypted in the data store. ### Claim 10 An apparatus, comprising: a memory; and one or more processors, at least one of the memory or the processors being adapted for: storing first personal information related to a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user; determining whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first user ID and the first anonymous token such that the second user is allowed to access personal information about the first user; and sending the personal information associated with the first anonymous token to the second user device associated with the second user for display if the key connects the first user ID to the first anonymous token. ### Claim 11 (depends on 10) The apparatus of claim 10, at least one of the memory or the processors being further adapted for: receiving the first user ID and credentials from a first user device corresponding to the first user; and returning the first anonymous token to the first user device if the credentials authorize access by the first user device corresponding to the first user ID. ### Claim 12 (depends on 10) The apparatus of claim 10, wherein the first personal information comprises a geographic or physical location of the first user. ### Claim 13 (depends on 10) The apparatus of claim 10, wherein the second user is a contact or friend of the first user. ### Claim 14 (depends on 10) The apparatus of claim 10, wherein the first personal information is stored unencrypted. ### Claim 15 A method, comprising: storing first personal information about a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user; determining whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first anonymous token and the first user ID such that the second user is allowed to access personal information about the first user; and sending the first personal information associated with the first anonymous token to a second user device associated with the second user for display if the key associated with the second user ID corresponding to the second user unlocks the connection between the first anonymous token and the first user ID. ### Claim 16 (depends on 15) The method of claim 15, wherein the first personal information comprises a geographic or physical location of the first user. ### Claim 17 (depends on 15) The method of claim 15, wherein the second user is a contact or friend of the first user. ### Claim 18 (depends on 15) The method of claim 15, wherein the first personal information is stored unencrypted. ### Claim 19 (depends on 15) The method of claim 15, further comprising: receiving the first user ID and credentials from a first user device corresponding to the first user; and returning the first anonymous token to the first user device if the credentials authorize access by the first user device corresponding to the first user ID. ### Claim 20 (depends on 19) The method of claim 19, wherein the credentials comprise a password, and wherein the first anonymous token is derived from the password.