International Business Machines Corporation

Dogan Kesdogan

Jan Leonard Camenisch

Xuan Liu

Michael Waidner

Edith Gail Schonberg

Kathryn Ann Bohrer

Charles Campbell Palmer

Steven B Adler

Arthur Miles Gilbert

Nigel Howard Julian Brown

Adam Charles Nelson

Michael Schnyder

Endre Felix Bangerter

Michael Robert McCullough

Guenter Karjoth

Matthias Schunter

Moninder Singh

Calvin Stacy Powers

John Karat

Elsie A Van Herreweghen

Robert Hoch

Martin Joseph Clayton Presler-Marshall

Catherine Anne Chess

Elsie Van Herreweghen

Matthew P Leonard

In a computer, a first set of object classes are provided representing active entities in an information-handling process and a second set of object classes are provided representing data and rules in the information-handling process. At least one object class has rules associated with data. The above-mentioned objects are used in constructing a model of an information-handling process, and to provide an output that identifies at least one way in which the information-handling process could be improved. One aspect is a method for handling personally identifiable information. Another aspect is a system for executing the method of the present invention. A third aspect is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

Using an object model to improve handling of personally identifiable information

An exemplary embodiment of the present invention includes a method to enforce privacy preferences on exchanges of personal data of a data-subject. The method comprises the steps of: specifying data-subject authorization rule sets having subject constraints, receiving a request message from a requester and a requester privacy statement, comparing the requester privacy statement to the subject constraints, and releasing the data-subject data in a response message to the requester only if the subject constraints are satisfied. The requester privacy statement includes purpose, retention, recipient, and access information, wherein the purpose information specifies the purpose for which the requested data is acquired, the retention information specifies a retention policy for the requested data, the recipient information specifies the recipients of the requested data, and the access information specifies whether the requested data should be accessing to the data-subject after the data has been released.

System, method, and business methods for enforcing privacy preferences on personal-data exchanges across a network

The present invention is a system and method for handling personally identifiable information, using a rules model. The invention involves defining a limited number of privacy-related actions regarding personally identifiable information; constructing a rule for each circumstance in which one of said privacy-related actions may be taken or must be taken; allowing for the input of dynamic contextual information to precisely specify the condition for evaluation of a rule; creating a programming object containing at least one of said rules; associating the programming object with personally identifiable information; processing a request; and providing an output. The invention does not merely give a 'yes-or-no answer. The invention has the advantage of being able to specify additional actions that must be taken. The invention may use a computer system and network. One aspect of the present invention is a method for handling personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

Using a rules model to improve handling of personally identifiable information

Growing community of inventors

White Plains, NY, United States of America

Dogan Kesdogan