Abstract:
Storing, building, managing, and controlling consumer personal information, including: building at least one level of personal information according to a standard; storing the personal information on a consumer rights locker; defining a scope of access under terms of a consumer to control access to the consumer rights locker; transmitting a plurality of parameters needed to access the consumer rights locker; receiving a request to access the consumer rights locker and the plurality of parameters; comparing the plurality of parameters to the scope of access; and granting access to the consumer rights locker when it is determined that the request is valid, wherein the request is valid when the plurality of parameters includes an access right that is consistent with information in the scope of access. Keywords include consumer rights locker and personal information.

Description:
BACKGROUND 
       [0001]    1. Field of the Invention 
         [0002]    The present invention relates to personal information, and more specifically, to storing, building, managing, and controlling personal information of a consumer. 
         [0003]    2. Background 
         [0004]    Today, consumers may spend a lot of time entering personal information to access an online service without much control over the process. It is frequently all or nothing in that the consumer must provide the requested information or no access to the online service will be granted. Further, if another online service is visited, the consumer needs to re-enter all of the personal information again, even though there is so much overlap in the information that is to be entered. 
       SUMMARY 
       [0005]    The present invention provides for storing, building, managing, and controlling consumer personal information. 
         [0006]    In one implementation, a method of storing, building, managing, and controlling consumer personal information is disclosed. The method includes: building at least one level of personal information according to a standard; storing the personal information on a consumer rights locker; defining a scope of access under terms of a consumer to control access to the consumer rights locker; transmitting a plurality of parameters needed to access the consumer rights locker; receiving a request to access the consumer rights locker and the plurality of parameters; comparing the plurality of parameters to the scope of access; and granting access to the consumer rights locker when it is determined that the request is valid, wherein the request is valid when the plurality of parameters includes an access right that is consistent with information in the scope of access. 
         [0007]    In another implementation, a consumer rights locker system for storing, building, managing, and controlling personal information of a consumer stored on a consumer rights locker is disclosed. The system includes: a data manager configured to enable the consumer to build and manage at least one level of personal information and to store on the consumer rights locker according to a standard; an access manager configured to manage access to the personal information built, stored, and managed by the data manager, wherein the access manager defines a scope of access to the personal information under terms of the consumer, and transmits a plurality of parameters needed to access the consumer rights locker; and an access controller configured to receive the plurality of parameters and grant access to the consumer rights locker when information in the plurality of parameters matches information in the scope of access. 
         [0008]    In yet another implementation, a non-transitory storage medium storing a computer program to store, build, manage, and control personal information of a consumer is disclosed. The computer program includes executable instructions that cause a computer to: build at least one level of personal information according to a standard; store the personal information on a consumer rights locker; define a scope of access under terms of a consumer to control access to the consumer rights locker; transmit a plurality of parameters needed to access the consumer rights locker; receive a request to access the consumer rights locker and the plurality of parameters; compare the plurality of parameters to the scope of access; and grant access to the consumer rights locker when it is determined that the request is valid, wherein the request is valid when the plurality of parameters includes an access right that is consistent with information in the scope of access. 
         [0009]    Other features and advantages of the present invention will become more readily apparent to those of ordinary skill in the art after reviewing the following detailed description and accompanying drawings. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0010]      FIG. 1  is a functional block diagram of a consumer rights locker system which provides for storing, building, managing, and controlling consumer personal information in accordance with one implementation of the present invention. 
           [0011]      FIG. 2  is a flowchart illustrating a method of storing, building, managing, and controlling consumer personal information in accordance with one implementation of the present invention. 
           [0012]      FIG. 3A  illustrates a representation of a computer system and a user. 
           [0013]      FIG. 3B  is a functional block diagram illustrating the computer system hosting a consumer rights locker system. 
       
    
    
     DETAILED DESCRIPTION 
       [0014]    Certain implementations as disclosed herein describe a consumer rights locker system which provides for storing and controlling consumer personal information. After reading this description it will become apparent how to implement the invention in various implementations and applications. Although various implementations of the present invention will be described herein, it is understood that these implementations are presented by way of example only, and not limitation. As such, this detailed description of various implementations should not be construed to limit the scope or breadth of the present invention. 
         [0015]    As described above, a consumer may spend a lot of time entering personal information to access an online service without much control over the process. Currently, the online marketplace is one sided in that the consumer must provide the requested information (e.g., signing the terms of use and entering the requested personal information) or no access to the online service will be granted. Further, since the entered personal information is not transferable, the consumer needs to re-enter all of the personal information when the consumer visits a new online service. This will often be the case even when there is substantial overlap in the information that is to be entered. 
         [0016]    In one implementation, the consumer rights locker system provides for storing and controlling consumer personal information on the “cloud”. In one aspect, the consumer rights locker system allows the consumer to build, edit, and/or manage a profile of the consumer&#39;s personal information. In one example, the consumer builds at least one level of personal information including name, address, and phone number in one level, income and credit card number in another level, and preferences for cars, computers, travel, hotel, etc., in yet another level. 
         [0017]    In another aspect, the consumer rights locker system enables the personal information stored on the cloud to be transferable and controllable. That is, the storage of the personal information on the cloud allows the consumer to control access to the personal information. In this scenario, the consumer grants access to the personal information stored on the cloud by defining the scope of access to the information under the terms of the consumer rather than the business. For example, the consumer defines the scope of access by deciding a particular level of the personal information that would be made available under certain conditions for a particular length of time or reusability. The consumer can also withdraw the information (or at least withdraw the consent for access to the information). Thus, the consumer has the ability to manage and view personal information stored on the cloud. 
         [0018]    In a further aspect, although the consumer controls access to the personal information, the service provider can make various offers to entice the consumer. For example, if the consumer discloses more information, then the service provider provides better offer. In this aspect, the service provider adopts a standard for exchange in which the consumer has the control over the shared personal information, but the level of sharing by the consumer can be varied in accordance with varying levels of benefits provided by the service provider. That is, the standard includes features that vary based on the level of personal information shared by the consumer. For example, in accordance with the standard, the service provider may provide some basic features/functions for minimum information shared by the consumer. The service provider may provide some additional value-added features/functions to the consumer when the service provider is allowed access to further personal information by the consumer. 
         [0019]    In another implementation, a standard for the personal information stored on a consumer rights locker is established to allow the services, businesses, and/or other interested entities to gain access and obtain the authorized level of personal information automatically. In one example, the standard includes a number of acceptable formats for the personal information so that the services, businesses, and/or other interested entities can gain access to the personal information electronically. In another example, the standard includes a template which would lay out various parameters needed to access the personal information from the consumer rights locker. For example, the parameters may include an online address (e.g., a uniform resource identifier (URI) or uniform resource locator (URL)) of the consumer rights locker and a key that would unlock the authorized level of the personal information. 
         [0020]    In another implementation, various parameters needed to access the personal information from the consumer rights locker can be transmitted electronically to the services, businesses, and/or other interested entities by the consumer to enable prompt and automatic access by the services, businesses, and/or other interested entities. In one implementation, the parameters are transmitted online or by e-mail. In another implementation, the parameters are stored in carrying cards (e.g., credit cards), mobile phones, laptop computers, flash memories, and other devices (both portable and non-portable) suitable for storage of electronic data. Once these parameters in the form of an electronic data are stored on the carrying cards, mobile phones, laptop computers, flash memories, or other devices, the electronic data can be transmitted to the services, businesses, and/or other interested entities at the point of sale of the personal information. 
         [0021]    In another implementation, the consumer rights locker system includes an overview (e.g., a′dashboard view) of the scope of access for a consumer. The overview allows the consumer to view and determine what personal information was shared and with whom all in one place. The overview also enables the consumer to adjust data sharing policies/standards in one place so that when the consumer makes changes, the notice immediately goes out to all participating service providers. For example, the overview may show all services, businesses, and/or other interested entities that the consumer allowed access to the personal information stored on the consumer rights locker. The overview may also show which level of the personal information was shared with which online services. Further, the consumer rights locker system enables the consumer to manage the personal information as a content owner. In this scenario, the consumer controls the levels of personal information as a content owner and can sell these different levels of personal information to services, businesses, and/or other interested entities, for a value. 
         [0022]    Allowing the consumer to control his or her own personal information also has advantages for services, businesses, and/or other interested entities that rely on the personal information to tailor and target advertisements and other notices because the information will be more accurate and relevant. The consumer control of the personal information will also improve data consistency and keep data current because the consumer can update at a single location and the changes will propagate to all authorized services, businesses, and/or other interested entities. The services, businesses, and/or other interested entities can reward the consumer for sharing accurate and relevant personal information by providing discounts, previews, samples, services, etc. The services, businesses, and/or other interested entities can also penalize the consumer for sharing inaccurate and/or irrelevant personal information by canceling discounts, previews, samples, services, etc., or not providing these benefits in the future. 
         [0023]      FIG. 1  is a functional block diagram of a consumer rights locker system  100  which provides for storing, building, managing, and controlling consumer personal information in accordance with one implementation of the present invention. In the illustrated implementation of  FIG. 1 , the consumer rights locker system  100  includes a consumer rights locker  110 , a data manager  120 , an access manager  130 , and an access controller  140 . 
         [0024]    The data manager  120  enables the consumer to build at least one level of personal information on the consumer rights locker  110 . For example, the personal information can include name, address, and phone number in one level, income and credit card number in another level, and preferences for cars, computers, travel, hotel, etc., in yet another level. In building the levels of personal information, the data manager  120  builds according to a standard. Thus, the data built in accordance with the standard allows the services, businesses, and/or other interested entities to gain access and obtain the authorized level of personal information automatically. In one example, the standard includes a number of acceptable formats for building the personal information so that the services, businesses, and/or entities can gain access to the personal information electronically. In another example, the standard includes a template which would lay out various parameters needed to access the personal information from the consumer rights locker  110 . For example, the parameters may include an online address (e.g., a uniform resource identifier (URI) or uniform resource locator (URL)) of the consumer rights locker  110  and a key that would unlock the authorized level of the personal information. In one implementation, the consumer rights locker  110  is located on the cloud. 
         [0025]    The access manager  130  enables the consumer to control access to the personal information built and managed by the data manager  120 . The access manager  130  allows the consumer to grant access to the personal information stored on the consumer rights locker  110  by defining the scope of access to the information under the terms of the consumer rather than the business. For example, the consumer defines the scope of access by deciding a particular level of the personal information that would be made available under certain conditions for a particular length of time or reusability. The consumer can also withdraw the information (or at least withdraw the consent for access to the information). Thus, the access manager  130  allows the consumer to manage and view access to personal information stored on the consumer rights locker  110 . 
         [0026]    In one implementation, various parameters needed to access the personal information from the consumer rights locker  110  can be transmitted electronically by an interface unit  132  to the services, businesses, and/or other interested entities by the access manager  130  to enable prompt and automatic access by the services, businesses, and/or other interested entities. In one implementation, the parameters are transmitted online or by e-mail. In another implementation, the interface unit  132  removably couples to carrying cards (e.g., credit cards), mobile phones, laptop computers, flash memories, and other devices (both portable and non-portable) suitable for storage of electronic data to transmit and store the parameters. Once these parameters in the form of an electronic data are stored on the carrying cards, mobile phones, laptop computers, flash memories, or other devices, the electronic data can be transmitted to the services, businesses, and/or other interested entities at the point of sale of the personal information. 
         [0027]    In another implementation, the access manager  130  provides an overview of the scope of access for the consumer. For example, the overview may show all online services that the consumer has allowed access to the personal information stored on the cloud. The overview may also show which level of the personal information was shared with which online services. Further, the access manager  130  enables the consumer to manage access to the personal information as a content owner. In this scenario, the access manager  130  controls access to the levels of personal information as a content owner and can sell these different levels of personal information to services, businesses, and/or other interested entities, for a value. The access controller  140  controls access to the consumer rights locker  110  by the services, businesses, and/or other interested entities based on the scope of access defined by the access manager  130 . 
         [0028]    In one implementation, the access is controlled by the access controller  140  using a template which would lay out various parameters needed to access the personal information from the consumer rights locker  110 . For example, the parameters may include an online address (e.g., a uniform resource identifier (URI) or uniform resource locator (URL)) of the consumer rights locker  110  and a key that would unlock the authorized level of the personal information. As described above, in one example, the parameters needed to access the personal information from the consumer rights locker  110  can be transmitted electronically to the services, businesses, and/or other interested entities by the access manager  130 . These parameters may be stored in the form of an electronic data on carrying cards, mobile phones, laptop computers, flash memories, or other devices, and can be transmitted to the services, businesses, and/or other interested entities at the point of sale of the personal information. 
         [0029]    Once the services, businesses, and/or other interested entities obtain the parameters such as online address and a key, the parameters are presented to the access controller  140  to obtain access to the consumer rights locker  110 . The access controller  140  then compares the parameters presented by the services, businesses, and/or other interested entities to the scope of access maintained by the access manager  130  to verify the authorization of the services, businesses, and/or other interested entities to the consumer rights locker  110 . Once the access controller  140  verifies the parameters, access to the consumer rights locker  110  is granted to the services, businesses, and/or other interested entities. 
         [0030]      FIG. 2  is a flowchart  200  illustrating a method of storing, building, managing, and controlling consumer personal information in accordance with one implementation of the present invention. In the illustrated implementation of  FIG. 2 , at least one level of personal information is built according to a standard and stored on the consumer rights locker, at box  210 . For example, the personal information can include name, address, and phone number in one level, income and credit card number in another level, and preferences for cars, computers, travel, hotel, etc., in yet another level. The levels of personal information are built according to a standard which allows the services, businesses, and/or other interested entities to gain access and obtain the authorized level of personal information automatically. In one example, the standard includes a number of acceptable formats for building the personal information so that the services, businesses, and/or entities can gain access to the personal information electronically. In another example, the standard includes a template which would lay out various parameters needed to access the personal information from the consumer rights locker. For example, the parameters may include an online address (e.g., a uniform resource identifier (URI) or uniform resource locator (URL)) of the consumer rights locker and a key that would unlock the authorized level of the personal information. 
         [0031]    A scope of access is defined under the terms of the consumer, at box  220 , to control access to the personal information. For example, the consumer defines the scope of access by deciding a particular level of the personal information that would be made available under certain conditions for a particular length of time or reusability. The consumer can also withdraw the information (or at least withdraw the consent for access to the information). An overview of the scope of access may show all online services that the consumer has allowed access to the personal information stored on the cloud. The overview may also show which level of the personal information was shared with which online services. Further, the scope of access may define the cost or value of these different levels of personal information for different services, businesses, and/or other interested entities. That is, different charges may apply to different entities. 
         [0032]    Various parameters needed to access the personal information from the consumer rights locker is then transmitted, at box  230 , to the services, businesses, and/or other interested entities. In one implementation, the parameters are transmitted electronically to enable prompt and automatic access by the services, businesses, and/or other interested entities. The parameters may include an online address (e.g., a uniform resource identifier (URI) or uniform resource locator (URL)) of the consumer rights locker  110  and a key that would unlock the authorized level of the personal information. As described above, in one example, the parameters needed to access the personal information from the consumer rights locker  110  can be transmitted electronically to the services, businesses, and/or other interested entities by the access manager  130 . These parameters may be stored in the form of an electronic data on carrying cards, mobile phones, laptop computers, flash memories, or other devices, and can be transmitted to the services, businesses, and/or other interested entities at the point of sale of the personal information. 
         [0033]    In one implementation, the parameters are transmitted online or by e-mail. In another implementation, the parameters are stored in carrying cards (e.g., credit cards), mobile phones, laptop computers, flash memories, and other devices (both portable and non-portable) suitable for storage of electronic data. Once these parameters in the form of an electronic data are stored on the carrying cards, mobile phones, laptop computers, flash memories, or other devices, the electronic data can be transmitted to the services, businesses, and/or other interested entities at the point of sale of the personal information. 
         [0034]    Once the scope of access is defined and the parameters have been transmitted, requests to access the consumer rights locker are received, at box  240 , from the services, businesses, and/or other interested entities by presenting the parameters. The parameters presented by the services, businesses, and/or other interested entities are then compared to the scope of access, at box  250 , to verify the authorization of the services, businesses, and/or other interested entities to the consumer rights locker. Once the authorization is verified, at box  250 , access to the consumer rights locker is granted, at box  260 , to the services, businesses, and/or other interested entities. 
         [0035]      FIG. 3A  illustrates a representation of a computer system  300  and a user  302 . In one implementation, the computer system can be configured as a consumer rights locker system (e.g., reference  100  in  FIG. 1 ). 
         [0036]      FIG. 3B  is a functional block diagram illustrating the computer system  300  hosting a consumer rights locker system  390  (similar to reference  100  in  FIG. 1 ). The controller  310  is a programmable processor and controls the operation of the computer system  300  and its components. The controller  310  loads instructions (e.g., in the form of a computer program) from the memory  320  or an embedded controller memory (not shown) and executes these instructions to control the system. In its execution, the controller  310  provides the consumer rights locker system  390  as a software system. Alternatively, this service can be implemented as separate hardware components in the controller  310  or the computer system  300 . 
         [0037]    Memory  320  stores data temporarily for use by the other components of the computer system  300 . In one implementation, memory  320  is implemented as RAM. In one implementation, memory  320  also includes long-term or permanent memory, such as flash memory and/or ROM. 
         [0038]    Non-transitory storage  330  stores data for use by other components of the computer system  300 , such as for storing data used by the consumer rights locker system  390 . In one implementation, storage  330  is a hard disk drive. 
         [0039]    The media device  340  receives removable media and reads and/or writes data to the inserted media. In one implementation, for example, the media device  340  is an optical disc drive. 
         [0040]    The user interface  350  includes components for accepting user input from the agent  302  and presenting information to the agent  302 . In one implementation, the user interface  350  includes a keyboard, a mouse, audio speakers, and a display. The controller  310  uses input from the agent  302  to adjust the operation of the computer system  300 . 
         [0041]    The I/O interface  360  includes one or more I/O ports to connect to corresponding I/O devices, such as external storage or supplemental devices (e.g., a printer or a PDA). In one implementation, the ports of the I/O interface  360  include ports such as: USB ports, PCMCIA ports, serial ports, and/or parallel ports. In another implementation, the I/O interface  360  includes a wireless interface for communication with external devices wirelessly. 
         [0042]    The network interface  370  includes a wired and/or wireless network connection, such as an RJ-45 or “Wi-Fi” interface (including, but not limited to 302.11) supporting an Ethernet connection. 
         [0043]    The computer system  300  includes additional hardware and software typical of computer systems (e.g., power, cooling, operating system), though these components are not specifically shown in  FIG. 3B  for simplicity. In other implementations, different configurations of the computer system can be used (e.g., different bus or storage configurations or a multi-processor configuration). 
         [0044]    The above description of the disclosed implementations is provided to enable any person skilled in the art to make or use the invention. Various modifications to these implementations will be readily apparent to those skilled in the art, and the generic principles described herein can be applied to other implementations without departing from the spirit or scope of the invention. Accordingly, additional implementations and variations are also within the scope of the invention. For example, although the specification describes a consumer rights locker storing personal information located on the cloud, the consumer rights locker can be stored anywhere that provides easy access such as on storage of a desktop computer. Further, it is to be understood that the description and drawings presented herein are representative of the subject matter which is broadly contemplated by the present invention. It is further understood that the scope of the present invention fully encompasses other implementations that may become obvious to those skilled in the art and that the scope of the present invention is accordingly limited by nothing other than the appended claims.