Personal information platforms

Patent metadata

Field	Value
Publication number	US-10198464-B2
Application number	US-201514980414-A
Country	US
Kind code	B2
Filing date	Dec 28, 2015
Priority date	Dec 28, 2015
Publication date	Feb 5, 2019
Grant date	Feb 5, 2019

Abstract

Various systems, mediums, and methods herein describe aspects of personal information platforms accessible with client devices over communication networks in data infrastructures. A system may determine data associated with a user. The system may determine a personal information platform (PIP) based on the data associated with the user, where the PIP is configured to identify a number of data types from the data associated with the user. The system may determine accesses for one or more entities to the number of data types based on one or more services provided by the one or more entities to the user. The system may cause a client device to display an indication of the PIP, where the indication provides the one or more accesses of the one or more entities.

First claim

The invention claimed is:

1. A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
obtaining first personal data and second personal data associated with a user, wherein the first personal data corresponds to a first data type, wherein the second personal data corresponds to a second data type;
receiving, from a first entity, a data request for the first personal data and the second personal data, wherein the data request is associated with providing a first service for the user;
determining that the second personal data is not required for providing the first service for the user;
in response to determining that the second personal data is not required for providing the first service for the user, determining a first data access policy for the first entity, wherein the first data access policy restricts the first entity from accessing the second personal data;
receiving, via an interface of a user device associated with the user, one or more user inputs indicating an assignment of the second personal data to a second entity;
determining, based at least on the one or more user inputs, a second data access policy for the second entity, wherein the second data access policy provides the second entity access to the second personal data; and
presenting, via the interface of the user device, a personal data report indicating one or more data accesses of the first and second entities to the first and second personal data.

2. The system of claim 1 , wherein operations further comprise:
receiving, via the interface of the user device, second one or more user inputs indicating a modification of the first data access policy associated with the first entity, wherein the modification provides the first entity access to the second data type; and
in response to receiving the second one or more user inputs, granting the first entity access to the second personal data based on the modified first access policy.

3. The system of claim 1 , wherein the operations further comprise determining that the first data type is required by the first entity to provide the first service for the user, and wherein the first data access policy is determined further based on the determining that the first data type is required by the first entity to provide the first service.

4. The system of claim 1 , wherein the operations further comprise:
determining a plurality of rules associated with accessing the first and second data types by the first and second entities; and
determining at least one change to the first access policy or the second data access policy based at least on the plurality of rules, wherein the at least one change restricts accesses to at least one of the first data type or the second data type.

5. The system of claim 1 , wherein the one or more data accesses of the first and second entities to the first and second personal data are first one or more data accesses of the first and second entities to the first and second data types during a first time period, wherein the operations further comprise:
updating the personal data report based on detecting second one or more data accesses of the first and second entities to the first and second data types during a second time period; and
presenting, via the interface of the user device, the updated personal data report, wherein the updated personal data report to a difference between the first one or more data accesses and the second one or more data accesses.

6. The system of claim 1 , wherein the operations further comprise:
determining a value for the second data type based at least on the first and second entities requesting for the second personal data, and wherein the personal data report further indicates the value for the second data type.

7. The system of claim 6 ,
wherein the personal data report further indicates a level of trust associated with a transfer of the second data type to the first entity.

8. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
determining a plurality of first account associated with a user with a first entity, wherein the first entity has access to first personal data associated with a first data type and second personal data associated with a second data type according to a first data access policy determined for the first entity;
receiving, from a second entity, a data request for the first personal data and the second personal data, wherein the data request is associated with the second entity providing a service for a second account associated with the user;
determining that the second personal data is not required for providing the service for the second account;
in response to determining that the second personal data is not required for providing the service for the second account, determining a second data access policy for the second entity, wherein the second data access policy restricts the second entity from accessing the second personal data; and
presenting, on a user device associated with the user, a personal data report indicating one or more data accesses of the first and second entities to the first and second personal data.

9. The non-transitory machine-readable medium of claim 8 , wherein the first data access policy is determined based at least on one or more user inputs received on the user device.

10. The non-transitory machine-readable medium of claim 8 , wherein the operations further comprise:
determining that the first data type is required by the second entity to provide the service for the second account associated with the user, wherein the second data access policy is determined further based on the determining that the first data type is required by the second entity to provide the service.

11. The non-transitory machine-readable medium of claim 8 , wherein the operations further comprise:
determining one or more rules associated with accessing the first and second data types through the first and second accounts, wherein the first and second data access policies are determined further based on the one or more of rules.

12. The non-transitory machine-readable medium of claim 8 , wherein the one or more data accesses of the first and second entities to the first and second personal data are first one or more data accesses of the first and second entities to the first and second data types during a first time period, wherein the operations further comprise:
updating the personal data report based on detecting second one or more data accesses of the first and second entities to the first and second data types during a second time period; and
presenting, on the client device, the updated personal data, wherein the updated personal data report indicates a change from the first one or more data accesses and to the second one or more data accesses.

13. The non-transitory machine-readable medium of claim 8 , wherein the operations further comprise:
determining a value for the second data type based at least on the first and second entities requesting for the second personal data, wherein the personal data report further indicates the value for the second data type; and
receiving, from the second entity, a request to access the second personal data for a fee and modifying the second data access policy to provide the second entity access to the second personal data based on the request.

14. The non-transitory machine-readable med

Assignees

• Paypal Inc

Inventors

• Aoki Norihiro Edwin
• Tsai John

Classifications

• G06F16/2358

  Change logging, detection, and notification (replication G06F16/27) · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/60

  Protecting data · CPC title

• G06F16/24573

  using data annotations, e.g. user-defined metadata · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title