Selective regulation of information transmission from mobile applications to third-party privacy compliant target systems

Patent metadata

Field	Value
Publication number	US-9603011-B1
Application number	US-201615269291-A
Country	US
Kind code	B1
Filing date	Sep 19, 2016
Priority date	May 22, 2013
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

Selective regulation of information transmission from mobile applications to a third-party privacy compliant target system. A privacy policy is configured for and mapped to each of a multiplicity of mobile application concerns, with each privacy policy comprising rules regulating the transmission of information to a third-party privacy compliant target system. Instrumentation instructions can be integrated with a mobile application and provided to a mobile device. The instrumentation instructions direct the mobile application to submit a privacy policy request comprising a mobile application identifier from the mobile device to a third-party privacy compliance system and enable sending information from the mobile device to the third-party privacy compliant target system, subject to the privacy policy. The privacy policy request is received at the third-party privacy compliance system which selects the privacy policy based on an application identifier and sends the privacy policy to the mobile device for implementation.

First claim

What is claimed is:

1. A computer-implemented method for selectively regulating transmission of information from a mobile device to a partner system by a third-party privacy compliance system, the method comprising:
associating a respective privacy policy and a respective identifier with each of a plurality of operating system installation cohorts, each operating system installation cohort representing a plurality of mobile devices, each privacy policy comprising a rule for regulating transmission of information from the mobile device to the partner system;
providing instrumentation instructions for integration with an operating system and operation by the mobile device, wherein the instrumentation instructions comprise instructions for:
requesting a privacy policy from the third-party privacy compliance system, the privacy policy request comprising the respective identifier of the mobile device's operating system installation cohort;
receiving the privacy policy from the third-party privacy compliance system;
identifying information in compliance with the received privacy policy; and
sending the identified information to the partner system;

receiving the privacy policy request at the third-party privacy compliance system from the mobile device;
selecting, at the third-party privacy compliance system, the privacy policy associated with the mobile device's operating system installation cohort; and
sending the selected privacy policy to the mobile device.

2. The method of claim 1 wherein the third-party privacy compliance system and the partner system are the same system.

3. The method of claim 1 wherein the instrumentation instructions further comprise instructions for:
implementing a default privacy policy for regulating transmission of information to the partner system, at the mobile device, for use in the absence of a valid privacy policy at the mobile device.

4. The method of claim 1 wherein the instrumentation instructions further comprise instructions for:
invalidating the privacy policy, after an end of a use session.

5. The method of claim 1 wherein the instrumentation instructions further comprise instructions for:
detecting an absence of a valid privacy policy; and
submitting a new privacy policy request responsive to detecting the absence.

6. The method of claim 1 wherein the instrumentation instructions further comprise instructions for:
detecting that advertising tracking for the mobile device has been disabled; and
prohibiting transmission of information to the partner system and the third-party privacy compliance system.

7. The method of claim 1 wherein the instrumentation instructions further comprise instructions for:
detecting that advertising tracking for the mobile device has been disabled; and
initiating generation of a new operating system installation cohort identifier for the mobile device.

8. The method of claim 1 wherein:
at least one rule is configured by a third-party privacy compliance system operator.

9. The method of claim 1 wherein:
at least one rule is configured by an operating systems vendor.

10. The method of claim 1 wherein:
at least one rule is configured by a mobile device operator.

11. The method of claim 10 wherein:
the at least one rule configured by a mobile device operator is not transmitted to the third-party privacy compliance system operator.

12. The method of claim 1 wherein the instrumentation instructions comprise:
instructions for receiving a mobile device operator configured rule; and
enabling application of the mobile device operator configured rule to a second mobile application integrated with instrumentation instructions from the third-party privacy compliance system on the mobile device.

13. A non-transitory computer readable storage medium executing computer program instructions for selectively regulating transmission of information from a mobile device to a partner system by a third-party privacy compliance system, the computer program instructions comprising instructions for:
associating a respective privacy policy and a respective identifier with each of a plurality of operating system installation cohorts, each operating system installation cohort representing a plurality of mobile devices, each privacy policy comprising a rule for regulating transmission of information from the mobile device to the partner system;
providing instrumentation instructions for integration with an operating system and operation by the mobile device, wherein the instrumentation instructions comprise instructions for:
requesting a privacy policy from the third-party privacy compliance system, the privacy policy request comprising the respective identifier of the mobile device's operating system installation cohort;
receiving the privacy policy from the third-party privacy compliance system;
identifying information in compliance with the received privacy policy; and
sending the identified information to the partner system;

receiving the privacy policy request at the third-party privacy compliance system;
selecting, at the third-party privacy compliance system, the privacy policy associated with the mobile device's operating system installation cohort; and
sending the selected privacy policy to the mobile device.

14. The medium of claim 13 wherein:
the third-party privacy compliance system and the partner system are the same system.

15. The medium of claim 13 wherein the instrumentation instructions further comprise instructions for:
implementing a default privacy policy for regulating transmission of information to the partner system, at the mobile device, for use in the absence of a valid privacy policy at the mobile device.

16. The medium of claim 13 wherein the instrumentation instructions further comprise instructions for:
invalidating the privacy policy, after an end of a mobile application use session.

17. The medium of claim 13 wherein:
at least one rule is configured by a mobile device operator.

18. A system comprising:
a processor;
a non-transitory computer readable storage medium storing processor-executable computer program instructions for selectively regulating transmission of information from a mobile device to a partner system by a third-party privacy compliance system, the instructions comprising instructions for:
associating a respective privacy policy and a respective identifier with each of a plurality of operating system installation cohorts, each operating system installation cohort representing a plurality of mobile devices, each privacy policy comprising a rule for regulating transmission of information from the mobile device to the partner system;
providing instrumentation instructions for integration with an operating system and operation by the mobile device, wherein the instrumentation instructions comprise instructions for:
requesting a privacy policy from the third-party privacy compliance system, the privacy policy request comprising the respective identifier of the mobile device's operating system installation cohort;
receiving the privacy policy from the third-party privacy compliance system;
identifying information in compliance with the received privacy policy; and
sending the identified information to the partner system;

receiving the privacy policy request at the third-party privacy compliance system from the mobile device;
selecting, at the third-party privacy compliance system, the privacy policy associated with the mobile device's operating system installation cohort; and
sending the sel

Assignees

• Quantcast Corp

Inventors

• Flowerday Crispin Edward Harold
• Kamprath Michael F
• Sareshwala Faraaz Aejaz
• Vogel Fernandez De Castro Daniel

Classifications

• G06F21/6272

  by registering files or documents with a third party · CPC title

• H04L63/0407

  wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00) · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04W4/60

  Subscription-based services using application servers or record carriers, e.g. SIM application toolkits · CPC title

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title