Patent ID: 9565211
Date: 2017-02-07
CPC Classifications: H04L

Claim:
1. A method of managing exchanges of sensitive data comprising: establishing a secure connection between a first application and a second application across a network; the first application utilizing a processing device to request a service across the network from the second application utilizing a separate processing device, the service requiring a disclosure of a first set of sensitive data by the second application; responsive to the second application requesting a set of certified policy commitments of the first application in response to the service request, providing across the network the set of certified policy commitments of the first application regarding the first set of sensitive data to the second application for authentication of the set of certified policy commitments and for a determination of acceptability of data handling policies included in the set of certified policy commitments, wherein the set of certified policy commitments provided by the first application includes data handling policies that the first application commits to utilize in handling and protecting the set of sensitive data of the second application; and upon a positive authentication of the set of certified policy commitments and a positive determination of acceptability of the included data handling policies by the second application, receiving the service including the disclosure of the first set of sensitive data from the second application through the secure connection; wherein the first set of sensitive data can be provided by the second application to the first application pursuant to the set of certified policy commitments provided by the first application if the second application determines that the included data handling policies satisfy a set of predetermined policy requirements of the second application.