Using a privacy agreement framework to improve handling of personally identifiable information
    3.
    发明授权
    Using a privacy agreement framework to improve handling of personally identifiable information 失效
    使用隐私协议框架来改善对个人身份信息的处理

    公开(公告)号:US07603317B2

    公开(公告)日:2009-10-13

    申请号:US09884296

    申请日:2001-06-19

    IPC分类号: G06Q99/00

    CPC分类号: G06F21/6245

    摘要: The invention entails identifying the parties involved in a process of handling personally identifiable information; identifying the data involved in said process; classifying the data; expressing each relationship between each pair of said parties in terms of a privacy agreement; and representing the parties, data, and privacy agreements graphically in one or more privacy agreement relationship diagrams. The invention has the advantage of identifying opportunities to reduce privacy-related risks, including identifying unnecessary exchanges of data, for possible elimination, and identifying opportunities to transform data into a less sensitive form. Privacy agreements are based on a limited set of privacy-related actions: access, disclose, release, notify, utilize, update, withdrawConsent, giveConsent, delete, anonymize, depersonalize, and repersonalize. One aspect of the present invention is a method for improving the handling of personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

    摘要翻译: 本发明需要确定涉及处理个人身份信息的过程中的各方; 识别所述过程中涉及的数据; 数据分类; 根据隐私协议表达每对所述各方之间的每个关系; 并在一个或多个隐私协议关系图中以图形方式表示各方,数据和隐私协议。 本发明具有以下优点:识别减少隐私相关风险的机会,包括识别不必要的数据交换,以便可能消除,以及识别将数据转换成较不敏感的形式的机会。 隐私协议是基于一组有限的隐私相关行为:访问,披露,发布,通知,利用,更新,撤销等等,授权,删除,匿名化,个人化和个人化。 本发明的一个方面是改善个人身份信息处理的方法。 本发明的另一方面是用于执行本发明的方法的系统。 本发明的第三方面是用于执行本发明的方法的计算机可用介质或驻留在计算机系统中的一组指令。

    Consulting assessment environment
    4.
    发明授权
    Consulting assessment environment 有权
    咨询评估环境

    公开(公告)号:US07739141B2

    公开(公告)日:2010-06-15

    申请号:US10617528

    申请日:2003-07-10

    IPC分类号: G06Q90/00

    摘要: A method, apparatus, and computer program product for providing a consulting assessment environment. Consultants may use the environment to define templates that encode questionnaires and domain knowledge regarding business practices, as well as reporting criteria to specify the content and format of the assessment results. Consultants or their clients may use the environment to automate the process of performing assessments and generating reports from those assessments. These assessments may analyze the current state of the business, compare the business's current state with desired states or with best practices, and perform risk/benefit and/or cost/benefit analyses, according to the specifications made in the templates on a real-time basis for producing immediate assessment results and actions. An information hiding feature is provided to allow sensitive domain knowledge encoded within the templates, such as trade secrets, to be made inaccessible to clients.

    摘要翻译: 一种用于提供咨询评估环境的方法,设备和计算机程序产品。 顾问可以使用环境来定义模板,编码关于商业实践的问卷调查和领域知识,以及报告标准以指定评估结果的内容和格式。 顾问或其客户可以使用环境来自动执行评估过程并从这些评估中生成报告。 这些评估可以分析当前的业务状况,将业务目前的状态与期望的状态或最佳实践进行比较,并根据实时模板中的规范执行风险/收益和/或成本/效益分析 立即评估结果和行动的基础。 提供了一种信息隐藏功能,以允许在模板中编码的敏感域知识(如商业秘密)使客户无法访问。