公开(公告)号：US07962962B2

公开(公告)日：2011-06-14

申请号：US09884311

申请日：2001-06-19

申请人： Steven B. Adler ,  Endre Felix Bangerter ,  Kathryn Ann Bohrer ,  Nigel Howard Julian Brown ,  Jan Camenisch ,  Arthur M. Gilbert ,  Dogan Kesdogan ,  Matthew P. Leonard ,  Xuan Liu ,  Michael Robert McCullough ,  Adam Charles Nelson ,  Charles Campbell Palmer ,  Calvin Stacy Powers ,  Michael Schnyder ,  Edith Schonberg ,  Matthias Schunter ,  Elsie Van Herreweghen ,  Michael Waidner

发明人： Steven B. Adler ,  Endre Felix Bangerter ,  Kathryn Ann Bohrer ,  Nigel Howard Julian Brown ,  Jan Camenisch ,  Arthur M. Gilbert ,  Dogan Kesdogan ,  Matthew P. Leonard ,  Xuan Liu ,  Michael Robert McCullough ,  Adam Charles Nelson ,  Charles Campbell Palmer ,  Calvin Stacy Powers ,  Michael Schnyder ,  Edith Schonberg ,  Matthias Schunter ,  Elsie Van Herreweghen ,  Michael Waidner

IPC分类号： G06F21/00 ,  G06F7/04 ,  G06F17/30

CPC分类号： G06Q10/10

摘要： In a computer, a first set of object classes are provided representing active entities in an information-handling process and a second set of object classes are provided representing data and rules in the information-handling process. At least one object class has rules associated with data. The above-mentioned objects are used in constructing a model of an information-handling process, and to provide an output that identifies at least one way in which the information-handling process could be improved. One aspect is a method for handling personally identifiable information. Another aspect is a system for executing the method of the present invention. A third aspect is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

摘要翻译： 在计算机中，提供第一组对象类，表示信息处理过程中的活动实体，并且提供表示信息处理过程中的数据和规则的第二组对象类。 至少有一个对象类具有与数据相关联的规则。 上述目的用于构建信息处理过程的模型，并且提供一种识别可以改进信息处理过程的至少一种方式的输出。 一个方面是处理个人身份信息的方法。 另一方面是用于执行本发明的方法的系统。 第三方面是用于执行本发明的方法的计算机可用介质或驻留在计算机系统中的一组指令。

公开(公告)号：US07069427B2

公开(公告)日：2006-06-27

申请号：US09884153

申请日：2001-06-19

申请人： Steven B. Adler ,  Endre Felix Bangerter ,  Nigel Howard Julian Brown ,  Jan Camenisch ,  Arthur M. Gilbert ,  Guenter Karjoth ,  Dogan Kesdogan ,  Michael Robert McCullough ,  Adam Charles Nelson ,  Charles Campbell Palmer ,  Martin Joseph Clayton Presler-Marshall ,  Michael Schnyder ,  Elsie Van Herreweghen ,  Michael Waidner

发明人： Steven B. Adler ,  Endre Felix Bangerter ,  Nigel Howard Julian Brown ,  Jan Camenisch ,  Arthur M. Gilbert ,  Guenter Karjoth ,  Dogan Kesdogan ,  Michael Robert McCullough ,  Adam Charles Nelson ,  Charles Campbell Palmer ,  Martin Joseph Clayton Presler-Marshall ,  Michael Schnyder ,  Elsie Van Herreweghen ,  Michael Waidner

IPC分类号： G06F9/00

CPC分类号： G06F21/6254 ,  G06F21/6245

摘要： The present invention is a system and method for handling personally identifiable information, using a rules model. The invention involves defining a limited number of privacy-related actions regarding personally identifiable information; constructing a rule for each circumstance in which one of said privacy-related actions may be taken or must be taken; allowing for the input of dynamic contextual information to precisely specify the condition for evaluation of a rule; creating a programming object containing at least one of said rules; associating the programming object with personally identifiable information; processing a request; and providing an output. The invention does not merely give a “yes-or-no answer. The invention has the advantage of being able to specify additional actions that must be taken. The invention may use a computer system and network. One aspect of the present invention is a method for handling personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

公开(公告)号：US07603317B2

公开(公告)日：2009-10-13

申请号：US09884296

申请日：2001-06-19

申请人： Steven B. Adler ,  Nigel Howard Julian Brown ,  Arthur M. Gilbert ,  Charles Campbell Palmer ,  Michael Schnyder ,  Michael Waidner

发明人： Steven B. Adler ,  Nigel Howard Julian Brown ,  Arthur M. Gilbert ,  Charles Campbell Palmer ,  Michael Schnyder ,  Michael Waidner

IPC分类号： G06Q99/00

CPC分类号： G06F21/6245

摘要： The invention entails identifying the parties involved in a process of handling personally identifiable information; identifying the data involved in said process; classifying the data; expressing each relationship between each pair of said parties in terms of a privacy agreement; and representing the parties, data, and privacy agreements graphically in one or more privacy agreement relationship diagrams. The invention has the advantage of identifying opportunities to reduce privacy-related risks, including identifying unnecessary exchanges of data, for possible elimination, and identifying opportunities to transform data into a less sensitive form. Privacy agreements are based on a limited set of privacy-related actions: access, disclose, release, notify, utilize, update, withdrawConsent, giveConsent, delete, anonymize, depersonalize, and repersonalize. One aspect of the present invention is a method for improving the handling of personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

摘要翻译： 本发明需要确定涉及处理个人身份信息的过程中的各方; 识别所述过程中涉及的数据; 数据分类; 根据隐私协议表达每对所述各方之间的每个关系; 并在一个或多个隐私协议关系图中以图形方式表示各方，数据和隐私协议。 本发明具有以下优点：识别减少隐私相关风险的机会，包括识别不必要的数据交换，以便可能消除，以及识别将数据转换成较不敏感的形式的机会。 隐私协议是基于一组有限的隐私相关行为：访问，披露，发布，通知，利用，更新，撤销等等，授权，删除，匿名化，个人化和个人化。 本发明的一个方面是改善个人身份信息处理的方法。 本发明的另一方面是用于执行本发明的方法的系统。 本发明的第三方面是用于执行本发明的方法的计算机可用介质或驻留在计算机系统中的一组指令。