Abstract:
A vetting service protects personal information while nonetheless allowing its authorized use to perform background investigations of consenting participants. Raw background search results are filtered, redacted, and otherwise sanitized in compliance with an agreement by the participants, to produce background reports.

Description:
RELATED APPLICATION 
       [0001]    The present application claims priority to, and incorporates by reference, U.S. provisional patent application No. 61/089,978 filed Aug. 19, 2008. 
     
    
     BACKGROUND 
       [0002]    People may encounter one another online at dating sites, other social networking sites, business networking sites, and other websites designed to help people meet and interact through network communications. One result is that many people have not only an offline “real world” identity but also have one or more online identities. Communicating with other people through an online identity can provide a degree of anonymity. Anonymity can be abused, but it can also encourage candor. Anonymity can also help facilitate the exploration of personal and business relationships that may ultimately benefit everyone involved if initial contacts are not stifled by fear of personal vulnerability. 
         [0003]    Anonymity also helps protect personally identifying information (“PII”) such as names, home addresses, and other aspects of offline identity. PII should be gathered and used only with the informed consent of the person to whom it pertains. Risks of improperly handled PII range from the inconvenient (e.g., an unwanted sales solicitation) to financial harms (e.g., credit problems after identity theft) to threats or actual physical danger (e.g., from stalking, or threats to loved ones). A variety of laws help protect PII. But perhaps the best measure to prevent harm is to give any person whose PII is sought adequate notice of how the PII will be used, how it will be protected, and why it is being sought, as an integral part of seeking their permission to use their PII. 
         [0004]    This background was drafted with the present invention in mind. One of skill would not necessarily have combined any or all of the concepts that are presented together here. 
       SUMMARY 
       [0005]    Consider two people who have been communicating electronically with one another through their online identities, each not knowing the other&#39;s offline identity. These two people are developing a relationship, based on their shared romantic, other personal, political, religious, or business interests, for example. Their developing relationship reaches a point where each is considering making some type of commitment, but is held back by a lack of independent knowledge of the other person&#39;s background. A background check could reduce uncertainty, by either allaying or confirming fears about the other person. But background checks require offline identity information of the person being checked, and neither person wishes to be the first to reveal such sensitive information to the other. Thus, an impasse is reached, hindering further development of their relationship. 
         [0006]    In some embodiments, these two people may agree with one another to use an anonymity-preserving reciprocal vetting service. The service is “anonymity-preserving in that it does not require either person to reveal their offline identity to the other, yet allows each person to obtain mutually-agreed-upon background information about the other. Each person retains privacy and exercises informed consent about use of their own offline identity and their own background information. The service is “reciprocal” in that each person receives the same treatment, unless they agree otherwise in response, e.g., to different legal requirements in their respective states. The service is “fully reciprocal” if each person receives the same treatment (each submits the same type of personal information to the service and each receives the same type of background information from the service). The service is a vetting service in that it provides each person with background 
         [0007]    In some embodiments, each person electronically submits their own personally identifying information to a vetting service. The two people may agree in advance what personally identifying information they will each supply to the vetting service. The vetting service uses the personally identifying information to obtain background search results that contain background information for each person. The vetting service sanitizes the background search results, e.g., by removing personally identifying information and location names, and generates a background report on each person. The two people may agree in advance what types of background information will be included in the background reports, and what types of information will be excluded. For instance, they may agree to include marital status and criminal history, if any, and agree to exclude employer names and medical information (STD test results, fertility test results, genetic screening, . . . ). Other parties may agree differently, e.g., by including specified types of medical information. In some embodiments, when the vetting service notifies the two people that the background reports are ready, each person has a chance to review the report on their own background and decide whether to allow the service to provide the report to the other person. Opportunities are also provided to notify providers of background information of errors, either directly or via the vetting service. In some embodiments, if either person opts out, then neither person will receive a report discussing the other person&#39;s background. In some embodiments, a background report can be annotated but not otherwise edited by the person whose background is described in the report. 
         [0008]    In addition to people who meet through a dating site online, other people who may benefit from a vetting service include a prospective landlord and prospective tenant who can check each other&#39;s background; a doctor and prospective patient; and a lawyer or other professional and a prospective client, for example. It is not unusual for a landlord or a medical service provider to run a credit 
         [0009]    Note that reciprocity hereunder requires only that each participant in the vetting give PII and receive background information; reciprocity has degrees. Some situations, such as potential romantic partners, call for full or nearly full reciprocity in use of the vetting service; each party will want to know the same type of information, e.g., marital status, criminal history, financial status. Other situations call for less reciprocity, e.g., a landlord and tenant may agree to each submit PII for a criminal history check, while also agreeing that only the tenant will provide PII to confirm citizenship or legal residency in the background report. Similarly, a doctor and patient may agree that only the doctor&#39;s medical license status/board certification status will be checked by the vetting service, but both the patient and the doctor will have their background checked for bankruptcies and pending lawsuits. 
         [0010]    The examples given are merely illustrative. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter. Rather, this Summary is provided to introduce—in a simplified form—some concepts that are further described below in the Detailed Description. The innovation is defined with claims, and to the extent this Summary conflicts with the claims, the claims should prevail. 
     
    
     
       DESCRIPTION OF THE DRAWINGS 
         [0011]    A more particular description will be given with reference to the attached drawings. These drawings only illustrate selected aspects and thus do not fully determine coverage or scope. 
           [0012]      FIG. 1  is a block diagram illustrating systems, people, websites, services, and other items in an operating environment, and also illustrating system and configured storage medium embodiments; 
           [0013]      FIG. 2  is a block diagram illustrating a configuration in which two people provide their respective personally identifying information to a vetting service and receive background reports on each other while maintaining their anonymity with respect to each other; 
           [0014]      FIG. 3  is a data flow diagram further illustrating the flow of personally identifying information, background information, and other items among people, services, and websites in some embodiments; 
           [0015]      FIG. 4  is a flow chart illustrating steps of some method and configured storage medium embodiments, from a vetting service provider perspective; and 
           [0016]      FIG. 5  is a flow chart illustrating steps of some method and configured storage medium embodiments, from a vetting service user perspective. 
       
    
    
     DETAILED DESCRIPTION 
       [0017]    Overview 
         [0018]    Embodiments provided herein allow people to give and receive background check results with other people encountered online, while respecting privacy and encouraging reciprocity. Each person maintains control over the extent to which their own background information is shared with someone else, and the information is shared in a way that overcomes the traditional obstacle of requiring one person to become more vulnerable by being the first to disclose their personal information to the other person. 
         [0019]    Embodiments may be helpful, for example, to two people A and B who encounter one another online and begin communicating. For instance, one person may view another person&#39;s profile on a dating site and send an introductory message, such as a wink, an instant message, a digital flower or card or other gift, an email, or a voice message facilitated through a website. 
         [0020]    Assume also for this example that A and B are anonymous relative to one another. The website in which A and B encounter each other may preserve or facilitate anonymity through measures such as email filters that strip out or replace personal email address and website addresses, use of usernames instead of offline names, and warnings to users that personally identifying information should not be casually disclosed. In other cases, A and B may have met offline and/or may have some personal information about one another but not to the level of a background check. 
         [0021]    A and B may reach a point in their email and other exchanges where they are each seriously considering meeting the other in person. At this stage, or at another stage in their developing relationship (personal, business, etc.) it would be helpful for A and B to each know some background information about the other, e.g., marital status and history, basic financial status, and criminal history if any. Such background information is most readily obtained through (and in some cases is not available without) personally identifying information of A and B, such as their offline names, social security number, drivers license data, residential address, and the like. 
         [0022]    Revealing such personally identifying information, particularly if it is not one&#39;s own personal information is not something to be done casually. Steps should be taken to let each person control the information that is disclosed about them, and to inform each person about the disclosure, e.g., what information will be disclosed, who will receive it, when will it be disclosed, in what format and medium will the disclosure occur, and what opportunities for control (especially for opting out) will be provided along the way. 
         [0023]    Some dating websites offer to obtain personally identifying information and check the backgrounds of current or potential subscribers to the website. However, it may occur that managers of these websites will balance the risks of letting someone with an unattractive or dangerous background onto the site against the website owner&#39;s commercial interest in having additional subscribers. This balancing and other aspects of the background checks and consequent decision-making may not be transparent (may not even be mentioned) to website subscribers, even though the subscribers are relying on the dating website to shut out people those subscribers deem unsuitable. 
         [0024]    An online dating site is used as an example. However, embodiments may be used when people encounter one another online in other contexts, e.g., in a forum or blog regarding any topic(s), through a website advertising goods or services of any kind, or through a site organized to help interested people pursue some charitable, political, religious, or other non-commercial effort. 
         [0025]    Some embodiments include or operate with an independent website, that is, a site other than the dating site or other site where A and B encounter one another. Such an independent site is denoted here the “vetting” site. 
         [0026]    Reference will now be made to exemplary embodiments such as those illustrated in the drawings, and specific language will be used herein to describe the same. But alterations and further modifications of the features illustrated herein, and additional applications of the principles illustrated herein, which would occur to one skilled in the relevant art(s) and having possession of this disclosure, should be considered within the scope of the claims. 
         [0027]    The meaning of terms is clarified in this disclosure, so the claims should be read with careful attention to these clarifications. Specific examples are given, but those of skill in the relevant art(s) will understand that other examples may also fall within the meaning of the terms used, and within the scope of one or more claims. Terms do not necessarily have the same meaning here that they have in general usage, in the usage of a particular industry, or in a particular dictionary or 
         [0028]    Some claims herein are directed to a system having a processor and a memory configured by instructions (residing in the memory) for causing the processor to perform a specified method. Such a claimed system exists when the memory has been configured as stated. In particular, infringement occurs as soon as the memory is configured, as opposed to occurring only after the method is performed by executing the instructions. Whether a memory is configured as claimed may indeed be confirmed in some instances by executing the instructions. But the memory configuration may also be confirmed in other instances by other approaches, e.g., by knowledgeable review of the source code from which the instructions were generated, by testimony from the author of the instructions, or by the provenance of the instructions, for example. As to provenance, instructions executed on another compatible system which performed the method would be expected to likewise perform the method if executed on the present system. 
         [0029]    As used herein, a “computer system” may include, for example, one or more servers, motherboards, processing nodes, personal computers (portable or not), personal digital assistants, cell or mobile phones, and/or machine(s) providing one or more processors controlled at least in part by instructions which may reside in and configure a memory of the computer system. The instructions may be in the form of software in memory and/or specialized circuitry. In particular, although it may occur that many embodiments run at least partially on workstation or laptop computers, other embodiments may run on other computing machines, and any one or more such machines may be part of a given embodiment. A computer system is sometimes simply referred to as a “system”. 
         [0030]    A “multithreaded” computer system is a computer system which supports multiple execution threads. The term “thread” should be understood to include any code capable of or subject to synchronization, and may also be known by another name, such as “task,” “process,” or “coroutine,” for example. The threads may run in parallel, in sequence, or in a combination of parallel execution (e.g., multiprocessing) and sequential execution (e.g., time-sliced). Multithreading may be implemented, for example, by running different threads on different cores in a multiprocessing environment, by time-slicing different threads on a single processor core, by running on more than one machine, and/or by some combination of time-sliced and multi-processor threading. 
         [0031]    A “logical processor” or “processor” is a single independent hardware thread. For example a hyperthreaded quad core chip running two threads per core has eight logical processors. Processors may be general purpose, or they may be tailored for specific uses such as graphics processing, signal processing, floating-point arithmetic processing, encryption, I/O processing, and so on. 
         [0032]    A “multiprocessor” computer system is a computer system which has multiple logical processors. 
         [0033]    “Kernels” include operating systems, hypervisors, virtual machines, and similar hardware interface software. 
         [0034]    “Code” means processor instructions, data (which includes data structures), or both instructions and data. 
         [0035]    Whenever reference is made to data or instructions, it is understood that these items configure a computer-readable memory, as opposed to simply existing on paper, in a person&#39;s mind, or as a transitory signal on a wire, for example. 
         [0036]    A list may be “displayed” by a system visually, audibly, and/or tactilely. 
         [0037]    A message “discloses” certain information if it makes that information clear to the message recipient, regardless of whether the recipient already knew some or all of the information being disclosed. The use of particular phrasing is not required 
         [0038]    A message may be “electronically transmitted” via email, fax, blog posting, text message, synthesized voice communication, voicemail, or the like. 
         [0039]    “Personal Identifying Information” (PII) means information which identifies, or in context helps substantially to identify, a particular person. Items generally considered PII include, but are not limited to, a person&#39;s Full name (if not common), National identification number (e.g., Social Security Number, Military ID number), Telephone number, Street address, E-mail address, online IP address (in some cases; in other cases many people share an IP address and/or a given IP address is assigned to different people at different times), Vehicle registration plate number, Driver&#39;s license number, Professional License registration number, Face, fingerprints, handwriting, other biometric info, Credit card and other account numbers, Digital identity certificate and other files. Information that is not generally considered personally identifiable because many people share the same trait, include: First or last name, if common, Country, state, or city of residence, Age, especially if non-specific (e.g., “about 40”), Gender or race, Name of the school they attend or workplace if not small business, Grades, salary, or job position, Criminal record status, Marital status, Bankruptcy status. 
         [0040]    Throughout this document, use of the optional plural “(s)” means that one or more of the indicated feature is present. For example, “report(s)” means “one or more reports” or equivalently “at least one report”. 
         [0041]    Operating Environments 
         [0042]    With reference to  FIG. 1 , an operating environment  100  for an embodiment may include local computer system(s)  102 , such as cell phones, workstations, and/or other systems. A computer system  102  may be a multiprocessor computer system, or not. An operating environment may include one 
         [0043]    Human users such as individual persons  104  may interact with the computer system(s)  102  by using displays, keyboards, microphones, speakers, and other peripherals  106 . Automated agents, and persons acting on behalf of a business, agency, or other entity, may also be users that interact with the computer system(s)  102 . Storage devices and/or networking devices may be considered peripheral equipment in some embodiments. Other computer systems (not shown) may interact with the computer system  102  or with another system embodiment using one or more connections to network(s)  108  via network interface equipment, for example. The network(s) may be packet-switched network(s), telecommunications network(s), and/or other data transmission network(s). 
         [0044]    Each computer system  102  includes at least one logical processor  110 . The computer system  102 , like other suitable systems, also includes one or more memories  112 . The memories  112  may be volatile, non-volatile, fixed in place, removable, magnetic, optical, and/or of other types. In particular, a memory in the form of a configured medium  114  such as a CD, DVD, memory stick, or other removable non-volatile memory medium may become functionally part of the computer system when inserted or otherwise installed, making its content accessible for use by processor  110 . The removable configured medium  114  is thus an example of a memory  112 . Other examples of memory  112  include built-in RAM, ROM, hard disks, and other storage devices which are not readily removable by users  104 . 
         [0045]    The medium  114  is configured with instructions  116  that are executable by a processor  110 ; “executable” is used in a broad sense herein to include machine code, interpretable code, and code that runs on a virtual machine, for example. The medium  114  is also configured with data  118  which is created, modified, referenced, and/or otherwise used by execution of the instructions  116 . The instructions  116  and the data  118  configure the memory  112 /medium  114  in which they reside; 
         [0046]    Users access online services  120  through the systems. Online services include access to meeting sites  122 , e.g., dating sites, other personal networking sites, professional networking sites, gaming sites, and other social networking sites (e.g., sites devoted to political, religious, and other topics). 
         [0047]    Online services may be access through web browsers, for example. Other application programs and other software  124  (word processors, contact managers, email managers, etc.) and other hardware  126  (buses, power supplies, network interface cards, etc.) than that already enumerated may also be present. 
         [0048]    In some embodiments, peripherals  106  such as human user I/O devices (screen, keyboard, mouse, microphone, speaker, motion sensor, etc.) will be present in operable communication with one or more processors  110  and memory  112 . In some embodiments, networking interface equipment provides access to networks  108 , using components such as a packet-switched network interface card, a wireless transceiver, or a telephone network interface, for example, will be present in the computer system. However, an embodiment may also communicate through direct memory access, removable nonvolatile media, or other information storage-retrieval and/or transmission approaches. 
         [0049]    Systems 
         [0050]    Examples given within this document do not describe all possible embodiments. Embodiments are not limited to the specific implementations, arrangements, displays, features, approaches, or scenarios provided herein. A given embodiment may include additional or different features, mechanisms, and/or 
         [0051]    Referring now to  FIGS. 1 through 3 , some embodiments provide a system  102  having a processor  110  in operable communication with a memory  112  that contains instructions for performing various steps discussed herein. A system  102  at a vetting site  128  may run on a server computer, for instance, and communicate with local systems  102  such as workstations or mobile devices used by individual persons  104 . The vetting site  128  communicates as well with research sites  130  which provide background information based on personal identifying information provided by the individuals to the vetting site, so the vetting site can in turn provide sanitized/access-controlled/staged reports to those individuals, as discussed herein. 
         [0052]    Each person  104  has an online identity, such as a username. Each person  104  also has an offline identity  202  with associated identifying info  204  which includes personal identifying information (PII). Vetting service(s)  206  accessed through the vetting site(s)  128  obtain agreements, preferences, PII, and perhaps other information (payments, customer satisfaction survey data, etc.) from the users, e.g., the individual persons  104 . The vetting service(s) then provide ID-sanitized background reports  232 , as discussed herein. 
         [0053]    For example, some embodiments include a server  210  configured by software modules  302 - 306  for performing a method that includes obtaining  308  personally identifying information  312  from a first person  104 ; obtaining  308  personally identifying information  312  from a second person  104 ; performing a background check of the first person based on personally identifying information; performing a background check of the second person based on personally identifying information; and informing  310  the first person and the second person that sanitized results of the background checks are available. 
         [0054]    One approach to vetting proceeds as follows. Persons A and B agree to mutual vetting through the vetting site&#39;s vetting service  206  (the vetting site and the 
         [0055]    In one variation, A and B agree not only to mutual vetting, but also agree on what PII each will provide to the vetting site; this agreement  318  is transmitted electronically to the vetting service  206 . 
         [0056]    In another variation, A and B agree to each provide whatever PII is requested of them by the vetting site. A and B may each provide different PII depending on the circumstances, e.g., when the vetting site background search module  302  needs different PII to access the criminal/civil court records on a research site  130  in A&#39;s state than the PII needed to access such records in B&#39;s state. 
         [0057]    The PII can be provided to a user interaction module  304  of the vetting service through a suitably secured channel, using encryption, passwords and other authentication, digital signatures to detect tampering, and the like. Communication from the vetting suit to A or to B can also be suitably secured. 
         [0058]    In one variation, an authentication module  306  on the vetting site authenticates the offline identity of each person. That is, the vetting site takes steps 
         [0059]    In some embodiments, the vetting site uses the PII to perform background checks on A and B, by at least accessing databases and in some cases by employing human investigators, to obtain raw background search results  324 . Databases on research sites  130  may contain helpful information about a person&#39;s criminal history, marital history and status, and financial history, including bankruptcy filings and damages judgments, for example. 
         [0060]    In some embodiments, the vetting service  206  compares the results  324  of the background search against a checklist  326  of vetting criteria. The checklist may be a default used only internally by the vetting site, it may be specified in request(s)  328  by A or B from a menu of options  330 , and/or it may be based on a level of service request  328  by A or B. A and B may have expressly made an agreement  318  with each other on the level of service to be used, and hence on the depth and/or breadth of the background checks, before authorizing the vetting site and giving the vetting site their respective PII. The vetting checklist  326  may contain criteria such as those commonly found in dating site profiles  314 , e.g., age and 
         [0061]    The vetting service  206  transforms the raw results to produce sanitized background report(s)  208 . The service  206  sanitizes the background search results  324  to remove PII and any information such as locations and proper names that might be used to identify the person checked. In a variation, the vetting site is given or otherwise obtains  334  a copy of the person&#39;s online meeting site profile  314 , and comparison is made between the published profile and the draft sanitized report/request, and the service  206  allows information such as locations and proper names found in the profile to remain in the sanitized background search report  208 . Sanitization may be done automatically, manually, or by a combination of the two. Sanitization, checklist, and profile comparison may be done with either before the other, or in an overlapping manner. 
         [0062]    When the sanitized background search results of both A and B are ready, the vetting site sends notices  340  to inform A and B it is ready to report those results. Although PII is removed from the results by sanitization, results corresponding to checklist criteria are not removed. Thus, A may learn that B has been divorced three times and faces a court action for collection of past due child support, without learning the names of B, B&#39;s, spouses or B&#39;s children. B may learn that A was convicted of driving while intoxicated, without learning where the offense and the conviction occurred. A and B may enter an agreement  318  with each other before the vetting to specify what information will be allowed in a report  208  from the vetting site, and what information (names, dates, locations, dollar amounts, etc.) the vetting site will keep out of the report  208 . 
         [0063]    In one variation, each person&#39;s sanitized background search results are initially provided only in a report  208  to that person, and A and B each have the option  330  of opting out at that point, thereby preventing the other from receiving their sanitized background search results. If either person opts out, then neither person receives the other&#39;s sanitized background search results report  208 . A and B also each have the option  330  of allowing their sanitized background search results to be provided to the other person, in which case A&#39;s sanitized background search results are sent  342  securely from the vetting site directly to B, and B&#39;s sanitized background search results are sent  342  securely and contemporaneously from the vetting site directly to A. 
         [0064]    In one variation, A and B are not given the option  330  of preventing the other from receiving their sanitized background search result report  208 . Once the vetting site has been given the PII, authorized with permission  344  to do the investigations, and prepared both sets of sanitized background search result reports  208 , each person&#39;s results will be reported to the other person. 
         [0065]    In some cases, neither person receives a copy of the report  208  on their own background. However, this option  330  is best combined with notice  340  to them and informed consent permission  344  from them, because it deprives a person of the ability to detect (and seek correction of) errors in the background search results  324 . 
         [0066]    In some cases, A and B are each given  346  a unique link (and possibly also a password) allowing them to view the other&#39;s sanitized background search results report  208  online but not to print or otherwise copy those sanitized background search results. The reports  208  may be made available for viewing for only a limited period of time, e.g., one hour, one day, two days, or for only a limited number of viewing instances, e.g., three times, or for a combination, e.g., up to five times for up to 30 minutes each time. 
         [0067]    The vetting service  206  may be advertised  348  on the meeting site  122 , but the vetting site in at least some embodiments is distinct from the meeting site in 
         [0068]    The vetting site may charge a service fee, may receive advertising revenues, and/or may be funded by other mechanisms. 
         [0069]    Although two-person (A and B) reciprocal examples are discussed above, vetting may proceed similarly with a group of more than two people, in which case for example either everyone or else no one in the group receives the sanitized background search reports  208  of the other people in the group. In some cases, a person can exercise an option  330  to opt out of the group. In such an event, the person who opted out will not receive any vetting reports  208  about the people who remain in the group, and the results  324  of the background search of the person who opted out will not be included in the reports  208  provided to the people who remain in the group. 
         [0070]    Embodiments may be configured in various ways, e.g., as processes and/or hardware on a server computer  210 , on a client or peer computer  102 , or on a standalone computer  102 . Embodiments may be configured to include software (data instructions) in RAM or permanent storage (memory  112 ) for performing a process, with general purpose computer hardware configured by software, special-purpose computer hardware, data produced by a process, and so on. Computers, PDAs, cell phones, and any other device  102  having user interface and some network transmission capabilities may be part of a given embodiment. Touch screens, keyboards, other buttons, levers, microphones, speakers, light pens, sensors, scanners, and other I/O peripheral devices  106  may be configured to facilitate or perform operations to achieve the methods and systems, and method results, which are described here. Combinations of these may also form a given embodiment. Terms such as “computerized” refer to devices having a microprocessor and memory, not merely to personal computers or servers. “Electronic” refers to digital and/or analog electronic circuitry. “Automatic” means 
         [0071]    Methods 
         [0072]      FIGS. 4 and 5  illustrate some method embodiments, in flowcharts  400  and  500 , respectively. Methods shown in the Figures may be performed in some embodiments automatically, e.g., by a server  210  configured with a vetting service  206  provided with data PII  312  and agreement(s)  318  which is designed to transform such data and raw results  324  into reports  208 . Methods may also be performed in part automatically and in part manually unless otherwise indicated. 
         [0073]    In a given embodiment zero or more illustrated steps of a method may be repeated, perhaps with different parameters or data to operate on. Steps in an embodiment may also be done in a different order than the top-to-bottom order that is laid out in  FIG. 4  and in  FIG. 5 . Steps may be performed serially, in a partially overlapping manner, or fully in parallel. The order in which a flowchart is traversed to indicate the steps performed during a method may vary from one performance of the method to another performance of the method. The flowchart traversal order may also vary from one method embodiment to another method embodiment. Steps may also be omitted, combined, renamed, regrouped, or otherwise depart from the illustrated flows, provided that the method performed is operable and conforms to at least one claim. A given method may include steps from either or both of these Figures. 
         [0074]      FIG. 4  illustrates steps from the perspective of a configured computer system, device, or other embodiment designed to provide vetting service(s)  206 . 
         [0075]    During a PII receiving step  402 , an embodiment receives PII  312 . For example, an embodiment may obtain  308  PII from a person  104  and/or from a secure vetting database for returning customers, over a network or other communication mechanism. Some embodiments attempt to minimize the amount of PII and/or the types of PII collected, such as by charging higher fees for more PII, by 
         [0076]    During an agreement noting step  404 , an embodiment notes the presence/absence of one or more agreements  318  between persons  104  regarding vetting checklist  326  content, what PII the service will receive from each person  104 , what information will be allowed in (and/or kept out of) a report  208 , what action to take/refuse if a person opts out after providing PII, and so on, as discussed herein. 
         [0077]    During an agreement using step  406 , an embodiment takes action(s) and/or refrains from action(s) in response to a noted agreement  318 . Such actions may include actions discussed herein, such as seeking/receiving particular types of PII from particular person(s), excluding/including particular types of PII in sanitized background reports, and sharing/denying access to such reports in response to requests from particular person(s). 
         [0078]    During a using step  408  and an obtaining step  410 , an embodiment uses PII, password(s), certificate(s), and secure transmission(s) (for instance) to obtain raw background search results  324 , e.g., by querying credit agencies, state and federal databases, and/or other research sites  130 , based on the PII background info received  402 . Appropriate measures based on applicable law, permissions  344 , options  330 , notices  340  given to persons  104 , and similar factors can be taken to ensure data security and integrity, as well as access control, so the various stakeholders are able to maintain control over the data being collected, how it is distributed, and for what period of time. 
         [0079]    During a sanitizing step  412 , an embodiment sanitizes raw background search results  324  based on the instructions provided by person(s), and in some embodiments based on a default requirement of reciprocity so each person will receive the same type of information in their report as the other person(s)  104 . PII obtained from person(s)  104  and/or from research site(s)  130  may be sanitized by entirely omitting mention of it from the report  208 , by redaction which makes clear in 
         [0080]    During removing steps  414  and  416 , PII generally and location information PII in particular are removed by an embodiment from availability for inclusion in a report  208 . Steps  414  and  416  are examples of sanitizing step  412 . 
         [0081]    During an obtaining step  418  and a using step  420 , an embodiment obtains and uses PII from user profile(s)  314 . Such PII may be obtained by using a search engine to locate a profile and then parsing it based on keywords commonly used in profiles  314 , for example, or by accessing a meeting site database under and arrangement with the meeting site; such arrangements may be the subject of notices  340  and/or permissions  344 . Use of a search engine to obtain  418  PII from user profile(s)  314  may also be subject to notice and/or permission in a given embodiment. Profile PII using step  420  is an example of using step  408 . 
         [0082]    During a retaining step  422  within a particular sanitizing step, an embodiment retains in the sanitized background search result reports  208  personally identifying information and location names that appear in an online profile  314  of the person  104 . For example, PII specified in a vetting checklist  326  may be retained  422 . 
         [0083]    During a report generating step  424 , an embodiment generates a report  208  from sanitized background results and/or while sanitizing raw background results. An approach taken in some embodiments is to obtain raw results from research sites, copy selected portions into a report  208 , and securely delete the unused raw results. Another approach is to obtain raw results and sanitize those raw results in place. A combination of these approaches may also be used to generate a report. Some embodiments distinguish between sanitized results and a report containing sanitized results; a report may contain additional content, such as a list of research sites  130  contacted, a recital of the notices  340  and permissions 
         [0084]    During a report availability notifying step  310 , an embodiment informs person(s)  104  that report(s)  208  are available to them. In a variation, an embodiment may notify  310  a person A that the report  208  regarding A is now available to person B. 
         [0085]    During a report providing step  426 , an embodiment provides a report  208  to a person  104 , e.g., by allowing display of the report on a local system  102 , by transmitting the report to a file and/or over a network, by printing the report, and/or by sending the person  104  a link to the report. 
         [0086]    During a permission getting step  428 , an embodiment gets one or more permissions  344  from one or more persons  104  given, e.g., by clicking on a displayed agreement or option to signify consent. Permissions  344  may be requested for use of the PII to access research site databases, for providing limited PII to other person(s) in reports  208 , and for other purposes discussed herein. 
         [0087]    During an opt-out opportunity giving step  430 , an embodiment gives person(s)  104  an option  330  to opt-out of further participation in a given reciprocal vetting. As discussed herein, some embodiments treat an opted-out person as if they had never opted in, e.g., they do not receive report(s)  208  on the other person(s)  104  and their PII does not appear in or get used in (e.g., for statistical purposes) report(s)  208  provided to other person(s)  104 . 
         [0088]    During a limited access giving step  432 , an embodiment gives person(s)  104  limited access to report(s)  208 . Access may be limited by the time period in which access is granted, the number of accesses permitted, and/or the actions not available (e.g., cut-and-paste, print) as part of an access, for example. 
         [0089]    During a PII requesting step  434 , an embodiment requests PII  312  from person(s)  104  for use in vetting as described herein. Such requests  328  may be 
         [0090]    During an authenticating step  436 , an embodiment authenticates a person&#39;s offline identity  438 . Step  436  may be performed by an authentication module  306  as discussed above. 
         [0091]    During an excluding step  440 , an embodiment excludes specific information from a background report  208 . Information to exclude may be specified by keyword (e.g., “Nexistepasville”, “Olfactory Sprockets, LLC”), by type (e.g., “city names”, “company names”), and/or otherwise. Information may be specified by participant(s)  104  and/or by vetting service default values. 
         [0092]      FIG. 5  illustrates steps from the perspective of a person  104  who is using a configured computer system, device, or other embodiment designed to provide vetting service(s)  206 . 
         [0093]    During a communicating step  502 , a first person  104  communicates electronically and anonymously with a second person  104  whose offline identity  438  information is unknown to the first person. For example, such anonymous communication may include email sent through a meeting site  122  with usernames and email addresses that do not disclose offline identity, email sent through other service providers not necessarily controlled by a meeting site owner, text messages, postings on message boards or so-called “walls” in social networking sites, and even phone calls in which telephone numbers, names, and other offline PII are not disclosed. 
         [0094]    During an agreeing step  504 , a first person  104  enters an agreement  318  with at least one other person  104  to facilitate and/or otherwise manage vetting as 
         [0095]    In particular, during an agreeing step  506  which is an example of step  504 , a person enters an agreement  318  to participate in a vetting service  206  with one or more other people. The other people participating will have been identified to the person making the agreement, by usernames and/or by identifying specific anonymous communications per step  502 , for example, so that the person entering the agreement has the ability to limit disclosure of their PII as desired. 
         [0096]    During a PII submitting step  508 , a person submits their PII to a vetting service to allow use of the PII to obtain background information which can be sanitized and presented to the other people participating in the vetting. Submission may be done by filling an HTML form, submitting a text file, speaking into a voice command system, and/or other electronic mechanisms. Step  508  corresponds generally to PII obtaining step  308 , with step  508  having a user perspective whereas step  308  has a system/vetting service perspective. 
         [0097]    During a PII use permitting step  510 , a person permits a vetting service to use their submitted PII to obtain background information which can be sanitized and presented to the other people participating in the vetting. Step  510  may be implicit in step  508 . Step  510  may also be viewed as a separate step from step  508 , e.g., when a vetting service scans and analyzes submitted  508  PII for completeness, consistency, authenticity, and/or other qualities before using the PII to access research site(s)  130 , and may request additional PII/corrected PII before so using the PII. 
         [0098]    During a PII specifying step  512 , a person specifies which types of personally identifying information will be submitted to the vetting service by each participating person for use in obtaining respective background information. Step  512  may include in some cases mechanisms such as entering an agreement  318  with other participants, receiving a notice  340  from the vetting service of what 
         [0099]    During a PII include specifying step  514  and PII exclude specifying step  516 , a person specifies which types of background information will be included in a background report  208  from the vetting service  206 , and which types of background information will be excluded from a background report from the vetting service, respectively. Steps  514  and  516  may include mechanisms noted above for step  512 . 
         [0100]    During a report ready notice receiving step  518 , a person receives a notice  340  that a background report  208  is ready. The report in question may be a draft of the report on the person for review prior to the report&#39;s release to other participants in the vetting, or the report in question may be a report  208  on other participant(s), depending on the vetting service and circumstances. The notice may be email, text, voicemail, and/or another communication. Steps  310  and  346  are each an example of step  518 . Notice may also be implicitly received, as when the report  208  is sent  342  when it is ready. 
         [0101]    During an opting out step  520 , a person opts out of (further) participation in a vetting service. Step  520  may be performed by expressly indicating the person&#39;s desire to neither allow use for research/distribution of their PII through a check box, a menu selection, etc. In some embodiments, step  520  may be performed implicitly when a person fails to respond within a specified time period, or before a specified event, to a vetting service request  328  for their PII or permission to use their PII. 
         [0102]    During a preview report receiving step  522 , a person receives a report  208  on their own background, as a preview (and also a notice  340 ) of what other participating people will receive. During step  522 , which corresponds generally to step  342 , the report  208  may be provided in email (message body, attached file, or both), on a web page displayed directly, and/or via a hyperlink to a web page per step  346 . 
         [0103]    During a prospect report receiving step  524 , a person receives a report  208  on a prospect (e.g., potential social and/or business prospect) who is participating with the recipient in a vetting service. Step  524  also corresponds generally to step  342 , so the report  208  may be provided in email (message body, attached file, or both), on a web page displayed directly, and/or via a hyperlink to a web page per step  346 , for example. 
         [0104]    During a request receiving step  526 , a person receives from a vetting service a request  328  for permission(s)  344 , such as permission to use the person&#39;s PII by submitting some or all of the PII to a research site  130 , or permission to use the person&#39;s PII by including it in a report  208 . The request may be specific to particular PII and/or specific to a particular instance of use of the PII, in some embodiments. 
         [0105]    During a permission giving step  528 , a person gives a vetting service permission(s)  344 , such as permission to use the person&#39;s PII by submitting some or all of the PII to a research site  130 , or permission to use the person&#39;s PII by including it in a report  208  to be released to other participant(s). The permission may be specific to particular PII and/or specific to a particular instance of use of the PII, in some embodiments. Permission may be given  528 , e.g., by agreeing to terms and conditions of use of a vetting website, by clicking on an “I agree” button associated with text describing the permission requested, by spoken communications with a vetting service mechanism or vetting service personnel, or by any other legally cognizable mechanism or action. 
         [0106]    During an offline ID providing step  530 , a person gives a vetting service offline ID authentication info  322 , e.g., by entering PII text in a form, or by submitting a photo, fingerprint or other biometric info. 
         [0107]    During a report responding step  532 , a person responds to a report  208  received from a vetting service. For instance, during step  532  a person may submit proposed corrections to a report on their own background, may give  528  permission for release of their preview report (or excerpts thereof) to other vetting service 
         [0108]    Some embodiments provide a method of providing anonymity-preserving reciprocal vetting services to persons who do not know each other&#39;s offline identities. The method includes receiving  402  electronically, from a first person  104 , first personally identifying information  312  which identifies the first person via offline identity information and which is unknown to a second person  104 ; receiving  402  electronically, from the second person, second personally identifying information which identifies the second person via offline identity information and which is unknown to the first person; using  408  the first personally identifying information to obtain a first background search result  324  containing background information of the first person; and using  408  the second personally identifying information to obtain a second background search result containing background information of the second person. 
         [0109]    Some embodiments include noting  404  an agreement  318  between the first person and the second person as to what personally identifying information they will each supply during the receiving steps  402 . Some include noting  404  an agreement between the first person and the second person as to what types of personally identifying information will be excluded from the respective reports  208 , and/or whether location names will be excluded from the respective reports. Some embodiments exclude  440  information from a report  208  in response to the agreement. 
         [0110]    Some embodiments include sanitizing  412  the first background search result by removing personally identifying information and location names; and sanitizing  412  the second background search result by removing personally identifying information and location names. Sanitizing  412  operates on a copy of the results  324  in a RAM or other computer-readable memory device. In some embodiments, each sanitizing step retains in the respective sanitized background search result background information of a type specified (by participants  104  and/or 
         [0111]    Some embodiments include obtaining  418  a copy of respective online profiles  314  of the persons, and each sanitizing step retains in the respective sanitized background search result personally identifying information and location names that appear in the respective online profile. 
         [0112]    Some embodiments include generating  424  a first report  208  based on the sanitized first background search result; and generating  424  a second report  208  based on the sanitized second background search result. 
         [0113]    Some embodiments include notifying  310  the first person that a report on the second person is available, and notifying  310  the second person that a report on the first person is available. 
         [0114]    Some embodiments include providing  426  the second report (the report about the second person) to the first person, and providing  426  the first report (the report about the first person) to the second person. Some include providing  426  the first report to the first person, and then providing  426  the first report to the second person only after getting  428  permission from the first person to do so, and likewise providing  426  the second report to the second person, and then providing  426  the second report to the first person only after getting  428  permission from the second person to do so. Some embodiments include providing  426  each report to the person whose background information is contained in the report, giving  430  each person an opportunity to opt out  520 , and then providing  426  a report on one person to the other person only if neither person opts out. Some embodiments give each person an opportunity to opt out without having seen the report containing their own background information, and then provide a report on one person to the other person only if neither person opts out. 
         [0115]    Some embodiments include giving  432  a person  104  access to a generated report  208  through an online link and/or a telephone speaker. Some give  432  a person access to a generated report through an online page which has printing and/or cut-and-paste copying disabled. 
         [0116]    Some embodiments note  404  an agreement between the first person and the second person that they will supply during the receiving steps any personally identifying information requested by the vetting service, instead of limiting up front by agreement what info they will submit  508  to the service. Then the embodiment requests  434  electronically, from the first person, first personally identifying information  312  which identifies the first person, and requests  434  electronically, from the second person, second personally identifying information  312  which identifies the second person. 
         [0117]    Some embodiments use  408  the respective personally identifying information to obtain a respective background search result  324  containing background information of the respective person which includes at least one of the following: criminal history information, marital status information. 
         [0118]    Some embodiments authenticate  436  the offline identity of at least one of the persons  104  who participate in the vetting service. 
         [0119]    Some embodiments provide a method for people  104  to participate in an anonymity-preserving reciprocal vetting service  206 . The method includes a first person communicating  502  electronically and anonymously with a second person (whose offline identity information is unknown to the first person); the first person agreeing  506  to participate with the second person in the vetting service, and in particular agreeing that the first person and the second person will each submit respective personally identifying information to the vetting service for use in obtaining respective background information; the first person submitting  508  to the vetting service personally identifying information which identifies the first person via offline identity information and which is unknown to the second person; and the first person permitting  510  the vetting service to use the first personally identifying 
         [0120]    In some embodiments, the participants  104  enter  504  an agreement as to what personally identifying information  312  they will each supply to the vetting service. In some, the participants enter  504  an agreement that they will each supply to the vetting service any personally identifying information requested  434  by the vetting service. These and other agreements may have participants and/or the vetting service and/or research sites as parties. 
         [0121]    In some embodiments, the participants enter  504  an agreement with that the vetting service will prepare a background report containing background search result information of a type specified in a vetting checklist  326 . For example, the vetting checklist may specify background information such as marital status, criminal history, civil proceedings, bankruptcy history, other legal proceedings, and/or immigration-citizenship status. 
         [0122]    In some embodiments, the participants enter  504  an agreement that the vetting service will prepare a background report from which specified types of information will be excluded. For instance, the parties may agree that the vetting service will prepare a background report from which at least one of the following will be excluded: specified types of personally identifying information, specified types of location names, specified types of background information. 
         [0123]    Some embodiments include a person receiving  518  a notification that a background report on another participant is available from the vetting service. 
         [0124]    Some embodiments include a person receiving  526  a request that the vetting service be permitted to release to other participant(s) a background report  208  on the first person. 
         [0125]    Some embodiments include a person receiving  534  an opportunity to opt out of further participation in a particular vetting, e.g., with a particular other 
         [0126]    Some embodiments include a person receiving  522  a background report on themselves from the vetting service. Some include a person receiving  522  a background report on other vetting participant(s) from the vetting service. 
         [0127]    In some embodiments, a person  104  receives a background report  208  containing background information of another person which includes criminal history search results and marital history search results. More generally, a person  104  receives a background report  208  containing background information of another person which includes marital status, criminal history, civil proceedings, bankruptcy history, immigration-citizenship status, academic history, employment history, credit history, and/or home ownership status, for example. 
         [0128]    In some embodiments, a person  104  provides  530  to the vetting service an offline identity authentication of themselves. 
         [0129]    In some embodiments, participants  104  communicate electronically with using respective online dating site identities. In some, they communicate electronically with one another using an online commerce site identity. In particular, and without excluding other possibilities, participants may be (a) prospective lessor and prospective lessee, (b) prospective medical professional and prospective patient, (c) prospective attorney or other legal representative and prospective client or other represented person, or (d) prospective CPA, broker, real estate agent or other finance/property professional and prospective client. The participants may thus have communicated electronically with one another through a commerce site such as a professional organization site, a referral service site, and/or a site advertising goods and/or professional services for sale. 
         [0130]    In some embodiments, participants self-identify by stating  536  their role  538  in an agreement  318 , in a profile  314 , and/or in another manner. Thus, prospective tenants may choose to contact people who have stated that they are 
         [0131]    Some embodiments provide a method for people  104  to participate in a reciprocal vetting service. The method includes a first person  104  agreeing  506  to participate with a second person in a vetting service, and in particular agreeing that the first person and the second person will each submit  508  respective personally identifying information to the vetting service for use in obtaining respective background information. The method also includes submitting  508  to the vetting service personally identifying information which identifies the first person via offline identity information, and permitting  510  the vetting service to use the first personally identifying information to obtain a first background search result containing background information of the first person which includes at least one of the following: marital status, criminal history, civil proceedings, bankruptcy history, credit history, employment history, property ownership, immigration-citizenship status. In some embodiments, the method includes the first person receiving  526  a request that the vetting service be permitted to release to the second person a background report on the first person. 
         [0132]    In some embodiments, the participants agree  504  on at least one of the following: which types of personally identifying information will be submitted by each person to the vetting service for use in obtaining respective background information, which types of background information will be included in a background report from 
         [0133]    An offline identity or other information is considered “unknown” to a particular person when reliable indicia so indicate. For example, parties to a vetting service agreement may expressly represent that certain information is unknown. Participants in a vetting service may also presume that their offline identity is unknown to other participants because they have not communicated that identity to the other participants, choosing instead to identify themselves only by a username or other online identity. Participants may rely on a reputable vetting service to not disclose offline identity information. Of course, one may also ascertain through discovery, source code scrutiny, operational review, and/or other investigation(s) whether particular information is unknown by a particular party. 
         [0134]    Configured Media 
         [0135]    Some embodiments include a configured computer-readable storage medium  114 , which is an example of a memory  112 . Memory  112  may include disks (magnetic, optical, or otherwise), RAM, EEPROMS or other ROMs, and/or other configurable memory. The storage medium which is configured may be in particular a removable storage medium  114  such as a CD, DVD, or flash memory. A general-purpose memory  112 , which may be removable or not, and may be volatile or not, can be configured into an embodiment using items such as a background search module  302 , sanitized background reports  208 , vetting checklist  326 , vetting service  206 , agreements  318 , notices  340 , options  330 , or other illustrated items, in the form of data  118  and instructions  116 , read from a removable medium  114  and/or another source such as a network connection, to form a configured medium. The configured memory  112  is capable of causing a computer system to perform method steps for vetting services as disclosed herein.  FIGS. 1 through 5  thus help illustrate configured storage media embodiments and method embodiments, as well as system and method embodiments. In particular, any of the method steps illustrated 
         [0136]    Conclusion 
         [0137]    Although particular embodiments are expressly illustrated and described herein as methods, as configured media, or as systems, it will be appreciated that discussion of one type of embodiment also generally extends to other embodiment types. For instance, the descriptions of methods in connection with  FIGS. 4 and 5  also help describe configured media, and help describe the operation of systems and devices like those discussed in connection with  FIGS. 1 through 3 . It does not follow that limitations from one embodiment are necessarily read into another. In particular, methods are not necessarily limited to the data structures and arrangements presented while discussing systems or manufactures such as configured memories. 
         [0138]    Not every item shown in the Figures need be present in every embodiment. Although some possibilities are illustrated here in text and drawings by specific examples, embodiments may depart from these examples. For instance, specific features of an example may be omitted, renamed, grouped differently, repeated, instantiated in hardware and/or software differently, or be a mix of features appearing in two or more of the examples. Functionality shown at one location may also be provided at a different location in some embodiments. 
         [0139]    Reference has been made to the figures throughout by reference numerals. Any apparent inconsistencies in the phrasing associated with a given reference numeral, in the figures or in the text, should be understood as simply broadening the scope of what is referenced by that numeral. 
         [0140]    As used herein, terms such as “a” and “the” are inclusive of one or more of the indicated item or step. In particular, in the claims a reference to an item generally means at least one such item is present and a reference to a step means at least one instance of the step is performed. 
         [0141]    Headings are for convenience only; information on a given topic may be found outside the section whose heading indicates that topic. 
         [0142]    All claims as filed are part of the specification. 
         [0143]    While exemplary embodiments have been shown in the drawings and described above, it will be apparent to those of ordinary skill in the art that numerous modifications can be made without departing from the principles and concepts set forth in the claims. Although the subject matter is described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above the claims. It is not necessary for every means or aspect identified in a given definition or example to be present or to be utilized in every embodiment. Rather, the specific features and acts described are disclosed as examples for consideration when implementing the claims. 
         [0144]    All changes which come within the meaning and range of equivalency of the claims are to be embraced within their scope to the full extent permitted by law.