Means and method for control of personal data

Abstract

In the setting of policies for personal data, instructions originating from a primary user and defining a privacy policy for a selected piece of personal data are communicated, via an application unit (220), to a privacy-setting node (258) of a service broker (250). The instruction define possible data providers (240) for the data. The policy is stored at a database (254) in a privacy tree for the primary user comprising hierarchically arranged personal data with associated policies. Upon receiving a request for the personal data, the privacy-setting node determines whether there is a privacy policy defined from the data by checking the privacy tree of the primary user. If there is a policy for a requested data, it selects a data provider among the possible data providers and returns a response to the application unit, providing access to the requested personal data at this provider.

Description

technical field [0001] The present invention relates generally to security in communication systems, and more particularly to the process of enforcing end-user control over personal data on the Internet and similar networks. Background technique [0002] In recent years, the development of mobile Internet services has grown explosively, bringing out a large number of services and applications such as games, calendars, chat groups, news, and e-commerce. Specifically, for personalized services (i.e. services that rely on personal data, such as providing the requester with the weather at his location, schedules to / from his work, electronic commerce, charging his credit card, etc.) is in high demand. [0003] In order to be able to provide personalized services, some level of information about individuals (location, demographics, biometrics, etc.) must be provided, and this makes privacy protection measures key. Privacy protection policies are increasingly important to persona...

AI Technical Summary

Problems solved by technology

[0006] While classic lockboxes provide a common mechanism and network for handling personal data on, for example, the Internet, there are still problems to be solved in the connections between them

There will be a very large amount of personal data involved, and many operators wanting to utilize this data to perform different actions, which complicates the system and still leaves the question of how to properly store and structure access to such data

Images