Personal information platforms

Patent metadata

Field	Value
Publication number	US-12093425-B2
Application number	US-202318315126-A
Country	US
Kind code	B2
Filing date	May 10, 2023
Priority date	Dec 28, 2015
Publication date	Sep 17, 2024
Grant date	Sep 17, 2024

Abstract

Various systems, mediums, and methods herein describe aspects of personal information platforms accessible with client devices over communication networks in data infrastructures. A system may determine data associated with a user. The system may determine a personal information platform (PIP) based on the data associated with the user, where the PIP is configured to identify a number of data types from the data associated with the user. The system may determine accesses for one or more entities to the number of data types based on one or more services provided by the one or more entities to the user. The system may cause a client device to display an indication of the PIP, where the indication provides the one or more accesses of the one or more entities.

First claim

The invention claimed is:

1. A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
in response to receiving a data access request from a first entity server configured to provide a service to a first user, accessing a first set of data associated with the first user, wherein the first set of data corresponds to a set of personal user data types;
analyzing a utilization of a second set of data associated with a second user by the first entity server for providing the service to the second user;
determining, based on the analyzing the utilization of the second set of data by the first entity server, that a first subset of the set of personal user data types corresponding to the second set of data is required by the first entity server to provide the service to the second user;
in response to determining that the first subset of the set of personal user data types is required by the first entity server to provide the service, generating a data access policy for the first entity server, wherein the data access policy allows the first entity server to access a first subset of the first set of data corresponding to the first subset of the set of personal user data types; and
transmitting, to the first entity server, a response to the data access request based on the data access policy.

2. The system of claim 1 , wherein the data access policy prohibits the first entity server from accessing a second subset of the first set of data corresponding to a second subset of the set of personal data types.

3. The system of claim 1 , wherein the response comprises at least a portion of the first subset of the first set of data.

4. The system of claim 1 , wherein the operations further comprise:
analyzing data utilization metrics associated with the first entity server for providing the service to a plurality of users, wherein the data access policy is generated further based on the analyzing the data utilization metrics.

5. The system of claim 1 , wherein the data access policy is a first data access policy, and wherein the operations further comprise:
generating a second data access policy for a second entity server based on analyzing second data utilization metrics associated with the second entity server, wherein the second data access policy is different from the first data access policy.

6. The system of claim 1 , wherein the operations further comprise:
determining that the data access request includes a particular personal user data type that is excluded from the data access policy;
calculating a fee for the first entity server for accessing particular data of the first user that corresponds to the particular personal user data type; and
providing the first entity server access to the particular data in exchange for the fee.

7. The system of claim 6 , wherein the fee is calculated based at least in part on a number of requests for the particular personal user data type from a plurality of entity servers.

8. A method, comprising:
receiving, via a device associated with a first user, a data access request from a first entity server configured to provide a service to the first user of the device, wherein the first user is associated with a first set of data corresponding to a set of personal user data types;
processing the data access request according to a data access policy generated for the first entity server, the data access policy generated based on (i) analyzing a utilization of a second set of data associated with a second user by the first entity server for providing the service to the second user and (ii) determining, based on the analyzing the utilization of the second set of data by the first entity server, that a first subset of the set of personal user data types corresponding to the second set of data is required by the first entity server to provide the service to the second user, wherein the processing the data access request comprises enabling the first entity server to access a first subset of the first set of data corresponding to the first subset of the personal user data types according to the data access policy; and
providing, to the device, a notification indicating a fulfillment of the data access request.

9. The method of claim 8 , further comprising:
determining that the data access request specifies a particular personal user data type excluded from the first subset of the personal user data types;
calculating a fee for the first entity server for accessing particular data associated with the user and corresponding to the particular personal user data type; and
providing the first entity server access to the particular data in exchange for the fee.

10. The method of claim 9 , wherein the fee is calculated based on a number of requests for the particular personal user data type from a plurality of entity servers.

11. The method of claim 9 , further comprising:
causing the device to display a notification indicating the particular data being requested by the first entity server and the fee, wherein the providing the first entity server access to the particular data is in response to receiving a confirmation from the user via the device.

12. The method of claim 8 , further comprising:
denying the first entity server from accessing a second subset of the first set of data corresponding to a second subset of the personal user data types based on the data access policy.

13. The method of claim 8 , further comprising analyzing data utilization metrics associated with the first entity server for providing services to a plurality of users, and wherein the data access policy is generated further based on the analyzing the data utilization metrics.

14. The method of claim 8 , further comprising modifying the data access policy for the first entity server based on a detected change of services provided by the first entity server.

15. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
analyzing data utilization metrics associated with a first entity server that provides a service to a plurality of users, wherein the data utilization metrics represent utilization of a first set of data associated with the plurality of users by the first entity server for providing the service to the plurality of users;
determining, based on the analyzing the data utilization metrics, that a first subset of a set of personal user data types is required by the first entity server to provide the service to the plurality of users;
generating, for a user and based at least in part on the analyzing the data utilization metrics, a data access policy in association with the first entity server, wherein the data access policy specifies, from a second set of data associated with the user, a first subset of the second set of data corresponding to the first subset of the set of personal user data types that is accessible by the first entity server; and
in response to receiving a data access request from the first entity server for accessing data of the user, processing the data access request according to the data access policy, wherein the processing comprises transmitting the first subset of the second set of data to the first entity server based on the data access policy.

16. The non-transitory machine-readable medium of claim 15 , wherein the processing the data access request further comprises denying the

Assignees

• Paypal Inc

Inventors

• Tsai John
• Aoki Norihiro Edwin

Classifications

• G06F21/60

  Protecting data · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F16/00

  Information retrieval; Database structures therefor; File system structures therefor · CPC title

• G06F16/24573

  using data annotations, e.g. user-defined metadata · CPC title