# Patent

## Title
System using access information set by a user to allow another user to access updated portion of contact and personal information of the user

## Abstract

A method for controlling access to information is provided. The method includes receiving a plurality of contact information, receiving access information, transmitting a portion of the contact information based at least in part on the access information, and withholding a portion of the contact information based at least in part on the access information. An apparatus for controlling access to information is also provided. The apparatus includes a first computing device configured to be coupled to a communications network. An article of manufacture for a system for controlling a second user's access to a first user's information over a communications network is also provided. A method for operating a system to control a second user's access to a first user's information is also provided. The method includes receiving a plurality of contact information and receiving access information from the first user via a first client computing device.

## Background
FIELD OF THE INVENTION
The present invention relates generally to the field of information technology, and, more particularly, to methods, systems, and articles of manufacture for controlling access to contact information over a communications network.
BACKGROUND
Many people and organizations desire to share different contact information with other people and organizations. For example, a person may desire for a creditor to know his social security number and his home address but not his home telephone number. To extend the example, the person may have multiple creditors and may desire for all of the creditors to know his social security number and home address (but not his home telephone number). On the other hand, the person may desire for his employer(s) to know his home telephone number as well as his home address.
As another example, a person may desire for an old high school boyfriend to know her business address and telephone number (but not her home information) so that he may keep her apprised of any plans for a class reunion (without dropping by her apartment uninvited). Conversely, she may desire for some of her family members to know her home information (but not her business information) so that they may keep her apprised of any plans for a family reunion (without bothering her at the office).
As yet another example, a company may desire for its attorneys to have a direct office telephone number, a home telephone number, and a cell phone number for its Chief Executive Officer (“CEO”), while desiring for its suppliers to have only its shipping and mailing addresses and a telephone number for its purchasing department (without the CEO's direct contact information).
Historically, changes in contact information about one party have required individual notifications of numerous other interested parties such as, for example, employers, customers, family, friends, etc. Individual notifications have been subject to errors and omissions; and failures to promptly and accurately communicate changes in contact information to interested parties typically result in returned correspondence, misdirected shipping, lost business prospects, and other undesirable losses of time and/or money.
Thus, there is a need for a system and method that facilitates communication of changes in contact information for one party to other interested parties. Further, there is a need for a system and method that provides control over what particular contact information for one party is accessible to which other particular interested parties.
SUMMARY OF THE INVENTION
The present invention provides a method for controlling a second user's access to a first user's information over a communications network. The method includes receiving a plurality of contact information and receiving access information from the first user over the communications network, transmitting a first portion of the plurality of contact information to the second user over the communications network based at least in part on the access information, and withholding a second portion of the plurality of contact information from transmission to the second user over the communications network based at least in part on the access information.
In an alternative embodiment, the present invention provides an apparatus for controlling access to information over a communications network. The apparatus includes a first computing device configured to be coupled to the communications network. The first computing device is further configured to receive a plurality of contact information over the communications network, receive access information over the communications network, transmit a first portion of the plurality of contact information over the communications network based at least in part on the access information, and withhold a second portion of the plurality of contact information from transmission over the communications network based at least in part on the access information.
In another alternative embodiment, the present invention provides an article of manufacture for a system for controlling a second user's access to a first user's information over a communications network. The article includes a computer-readable signal-bearing medium having information signals therein. The information signals correspond to a plurality of instructions which, when executed by the system, cause the system to receive a plurality of contact information from the first user over the communications network, receive access information from the first user over the communications network, transmit a first portion of the plurality of contact information to the second user over the communications network based at least in part on the access information, and withhold a second portion of the plurality of contact information from transmission to the second user over the communications network based at least in part on the access information.
In yet another alternative embodiment, the present invention provides a method for operating a system to control a second user's access to a first user's information. The method includes receiving a plurality of contact information and receiving access information from the first user via a first client computing device. The access information indicates a first portion of the contact information which the first user desires to make accessible to the second user and a second portion of the contact information which the first user desires to make inaccessible to the second user. The method further includes transmitting the plurality of contact information and the access information from the first client computing device to a server computing device over the communications network.
The features and advantages of the present invention described above, as well as additional features and advantages, will be readily apparent to those skilled in the art upon reference to the following detailed description and the accompanying drawings.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a block diagram of a system according to the present invention;
FIG. 2 is a flowchart of an exemplary method of operation according to the present invention;
FIG. 3 is a depiction of an exemplary “blank” profile definition page according to the present invention;
FIG. 4 is a depiction of an exemplary “completed” profile definition page according to the present invention; and



APPENDIX A is printout of software code for various exemplary features according to the present invention.
DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS
As used throughout this disclosure and the claims, “contact information” means an alphanumeric address such as those presently used to send mail via the United States Postal Service (“USPS”), a telephone (or facsimile, or beeper) number such as those presently used by Public Switched Telephone Networks (“PSTN”) and wireless telephone service providers, an e-mail address such as those presently used to send messages over the World Wide Web (“www”) and the Internet, and/or any other visual or auditory word, number, symbol, and/or visual or auditory collection of words and/or numbers and/or symbols that a first person or entity may input into a communications network or system to initiate a communication with a second person or entity over the communications network or system. To this end, it is noted that “contact information” as used throughout this disclosure and the claims includes any signal or collection of signals which transmits, carries, or otherwise represents or includes any of the aforementioned forms of contact information.
As used throughout this disclosure and the claims, “access information” means any visual or auditory word, number, symbol, and/or visual or auditory collection of words and/or numbers and/or symbols that indicates which of a first user's contact information the first user desires to be accessible by a second user. To this end, it is noted that “access information” as used throughout this disclosure and the claims includes any signal or collection of signals which transmits, carries, or otherwise represents or includes any of the aforementioned forms of access information.
FIG. 1 is a block diagram of a system 100 according to the present invention. The system 100 includes a communications network 120, a server computing device 140, and at least one of a plurality of client computing devices (client computing device 1601, client computing device 1602, client computing device 1603, . . . client computing device 160X).
The communications network 120 operably couples the server computing device 140 to the at least one of the plurality of client computing devices such that the server computing device 140 and the at least one of the plurality of client computing devices may share information according to the present invention. To this end, the communications network 120 is the Internet, the World Wide Web, and/or any other suitable collection of devices that is connected to share information. It should be readily appreciated that the communications network 120 may include multiple public and/or private Local Area Networks (“LANs”) and/or Wide Area Networks (“WANs”) (not shown) that are operably coupled to one another via routers, switches, hubs, gateways, proxies, and/or firewalls (not shown). Additionally, it is noted that the communications network 120 may include a hardwired telephone network, a wireless telephone network, and/or a satellite network.
In general, the server computing device 140 is implemented with a server computer system or web server manufactured by Dell Computer Corporation of Round Rock, Tex., Gateway, Inc. of San Diego, Calif., or Compaq Computer Corporation of Houston, Tex. Further, the server computing device 140 may alternatively, or in addition, include network server appliances, server farms, server clusters, network accessible storage devices, and/or any other device suitable for executing operations according to the present invention. In the exemplary embodiment of FIG. 1, the server computing device 140 includes a processor 142, a storage device 144, memory 146, a network interface 148, and a system bus 150.
The processor 142 is generally operable to obtain software and/or firmware instructions from the storage device 144, load them into memory 146, and execute the instructions from memory 146. To this end, the processor 142 includes a single x86 processor from Intel or AMD. Alternatively, the processor 142 may include one or more processors utilizing very long instruction words, (“VLIW”) code morphing, complex instruction set computer (“CISC”), reduced instruction set computer (“RISC”), single instruction/multiple data (“SIMD”), multiple instruction/multiple data (“MIMD”), or any other suitable architecture; and may be obtained from Compaq, National Semiconductor Corporation, Transmeta Corporation, or any other suitable vendor.
The storage device 144 is generally operable to store data and/or software instructions for the server computing device 140. To this end, the storage device 144 includes a hard disk drive, a floppy disk drive, a CD-ROM drive, a DVD-RAM drive, a RAID device, a Disk-On Chip device, and/or any other suitable computer readable and/or writeable media device. Additionally, the storage device 144 may include multiple media devices and may be distributed among several computing devices such as other servers of a server farm, other database servers, or other network accessible storage (“NAS”) devices. Furthermore, the storage device 144 may store data in a number of different manners such as raw data to the media of the storage device 144, files in a file system of the storage device 144, and/or data, records, or objects in a database of the storage device 144. In the exemplary embodiment, the server computing device 140 transmits and receives information over the Internet according to the HyperText Transfer Protocol (“HTTP”) and the Transmission Control Protocol/ Internet Protocol (“TCP/IP”) network protocol. To this end, the instructions in the storage device 144 include the Internet Information Server available from Microsoft Corporation, the Apache HTTP Server available from the Apache Group, the Zope web application server available from Digital Creations, Inc., or instructions for any other suitable HTTP server or web application server. It is noted, however, that the instructions in the storage device 144 may alternatively include instructions for FTP, TFTP, SMTP, or any other suitable transfer protocol and/or UDP, SMB, NetBUI, or any other suitable network protocol in addition to or instead of instructions for the HTTP protocol and the TCP/IP protocol.
Memory 146 stores data and instructions used by the processor 142. To this end, memory 146 includes standard random access memory for storing the data and software instructions needed by the processor 142. Alternatively, memory 146 may include other volatile memory types such as DRAM, SDRAM, and SRAM for storing data and software instructions and/or non-volatile memory such as ROMs, PROMs, EEPROMs, and flash memory for storing data and firmware instructions.
The network interface 148 operably couples the server computing device 140 to the communications network 120 such that the server computing device 140 may communicate with the at least one of the plurality of client computing devices that are also operably coupled to the communications network 120. To this end, the network interface 148 comprises a network interface controller such as an Ethernet controller or Token Ring controller that connects the server computing device 140 to the communications network 120 via a local area network, firewall, gateway, and/or router. Alternatively, or in addition, the network interface 148 may include an analog modem for use over Plain Old Telephone System (“POTS”) telephone lines such as a 28.8K or 56K modem, a digital modem such as a Cable modem for use over a cable distribution network, an Integrated Services Digital Network (“ISDN”) modem for use over an ISDN telephone line, or a Digital Subscriber Line (“DSL”) modem for use over a DSL telephone line.
The system bus 150 is generally operable to interconnect the processor 142, the storage device 144, memory 146, and the network interface 148, and to enable these components of the server computing device 140 to communicate with one another. To this end, the system bus 150 is implemented with one or more of the PCI, ISA, and VME bus architectures, or any other suitable bus architecture(s). In the exemplary embodiment, the system bus 150 includes a separate address bus and data bus; however, in alternative embodiments, the address bus and data bus need not be separated.
In any event, it is noted that the above described components of the server computing device 140 are merely exemplary, and in alternative embodiments those skilled in the art may elect to replace all or portions of these components with suitable discrete analog circuit components, discrete digital circuit components, integrated analog circuits, integrated digital circuits, and/or integrated analog/digital hybrid circuits without undue experimentation.
As a result of executing the instructions read from memory 146, the processor 142 controls the general operation of the server computing device 140. More specifically, pursuant to the instructions read from memory 146, the processor 142 causes the server computing device 140 to receive a plurality of contact information from the at least one of the plurality of client computing devices over the communications network 120, receive access information from the same or any different one of the plurality of client computing devices over the communications network 120, and selectively transmit at least some of the plurality of contact information to at least one of the plurality of client computing devices over the communications network 120 based at least in part on the access information. Further details regarding exemplary operations of the server computing device 140 are discussed below.
Next, those of the plurality of client computing devices included in the system 100 are configured and coupled to the communications network 120 in a like manner to the client computing device 1601. So, for clarity of exposition, the exemplary embodiment of FIG. 1 is further described below with particular reference to the client computing device 1601. In general, the client computing device 1601 is implemented with a personal computer system, a desktop computer system, and/or a workstation manufactured by Dell Computer Corporation of Round Rock, Tex., Gateway, Inc. of San Diego, Calif., and Compaq Computer Corporation of Houston, Tex. Further, the client computing device 1601 may alternatively, or in addition, include a handheld computer, a laptop computer, a set-top box, a network appliance, a gaming console and/or any other suitable network enabled (preferably Internet enabled) computing device. In the exemplary embodiment, the client computing device 1601 includes a processor 162, a storage device 164, memory 166, a network interface 168, one or more user I/O devices 170, and a system bus 172.
The processor 162 is generally operable to obtain software and/or firmware instructions from the storage device 164, load them into memory 166, and execute the instructions from memory 166. To this end, the processor 162 includes a single x86 processor from Intel or AMD. Alternatively, the processor 162 may include one or more processors utilizing VLIW, code morphing, CISC, RISC, SIMD, MIMD, or any other suitable architecture; and may be obtained from Compaq, National Semiconductor Corporation, Transmeta Corporation, or any other suitable vendor.
The storage device 164 is generally operable to store data and/or software instructions for the client computing device 1601. To this end, the storage device 164 may include a hard disk drive, a floppy disk drive, a CD-ROM drive, a DVD-RAM drive, a RAID device, a Disk-On Chip device and/or other suitable computer readable and/or writeable media device. Additionally, the storage device 164 may include multiple media devices and may be distributed among several computing devices or other network accessible storage NAS devices. Furthermore, the storage device 164 may store data in a number of different manners such as raw data to the media of the storage device 164, files in a filesystem of the storage device 164, and/or data, records, or objects in a database of the storage device 164. In the exemplary embodiment, the client computing device 1601 transmits and receives the information over the Internet according to the HTTP protocol and the TCP/IP network protocol. To this end, instructions in the storage device 164 include the Internet Explorer web browser, available from Microsoft Corporation of Redmond, Wash.; the Netscape Communicator web browser, available from Netscape Communications Corporation of Mountain View, Calif.; or instructions for any other suitable web browser. Standard web browsers are generally operable to send and receive packets of information that conform to the HTTP and the TCP/IP protocols, send requests for Hyper-Text Markup Language (“HTML”) documents, receive HTML documents, display HTML documents, and send data that a user has input into a HTML form.
Additionally, standard web browsers typically provide mechanisms which enable remote computer systems such as the server computing device 140 to cause the client computing device 1601 to execute software routines. For example, many web browsers support execution of Java Applets, JavaScript, ActiveX Controls, and other types of software technologies by which the server computing device 140 may cause the client computing device 1601 to execute software routines in response to information received from the server computing device 140. Also, standard web browsers typically include the ability to determine whether a particular software component such as an ActiveX Control, a plug-in application, or a Java Applet is already installed on the client computing device 1601 in response to information received from a server computing device 140. Further, standard web browsers typically include the ability to determine the version of such installed software components. Standard web browsers also typically include the ability to download and install a software component such as an ActiveX Control, a plug-in application, or a Java Applet from the server computing device 140 in response to information received from the server computing device 140. Standard web browsers also generally include the ability to cache information received from the server computing device 140 and determine whether the information in the cache is up-to-date with corresponding information of the server computing device 140. In this manner, the web browser of the client computing device 1601 can prevent the repetitive transfer of the same information from the server computing device 140 to the client computing device 1601. In other words, if the client computing device 1601 requests a particular resource from the server computing device 140 and the client computing device 1601 already has a copy of that resource in the cache, then the web browser can cause the client computing device 1601 to use the cached version of the resource, thus eliminating a transfer of the resource from the server computing device 140 to the client computing device 1601.
It is noted, however, that in alternative embodiments, the web browser may not include all of the aforementioned features. Moreover, in alternative embodiments the web browser functions may be implemented as a native custom application of the client computing device 1601 that is specifically designed for the system 100. The custom application may be implemented to display HTML and other markup language documents in a manner similar to a standard web browser, but need not include all of the features of a standard web browser. Further, in alternative embodiments the custom application may be implemented to receive information from the server computing device 140 in a non-markup language format, and to display the information via a customized graphical interface.
Memory 166 stores data and instructions used by the processor 162. To this end, memory 166 includes standard random access memory for storing the data and software instructions needed by the processor 162. Alternatively, memory 166 may include other volatile memory types such as DRAM, SDRAM, and SRAM for storing data and software instructions and/or non-volatile memory such as ROMs, PROMs, EEPROMs, and flash memory for storing data and firmware instructions.
Additionally, it is noted that the client computing device 1601 may alternatively be implemented with memory chips and/or other suitable hardware such that the same hardware implements both the storage device 164 and memory 166. Many handheld computing devices (e.g. Palm Pilots), Internet enabled cellular phones, and other special purpose computing devices are implemented in such a manner. It should be readily appreciated that any such device may be used to implement the client computing device 1601.
The network interface 168 operably couples the client computing device 1601 to the communications network 120 such that the client computing device 1601 may communicate with the server computing device 140 via the communications network 120. To this end, the network interface 168 comprises an analog modem for use over POTS telephone lines such as a 28.8K or 56K modem, a digital modem such as a cable modem for use over a cable distribution network, an ISDN modem for use over an ISDN telephone line, or a DSL modem for use over a DSL telephone line. Alternatively, or in addition, the network interface 168 may include a network interface controller such as an Ethernet controller or Token Ring controller that can be used to connect the client computing device 1601 to the communications network 120 via a local area network, firewall, gateway, and/or router.
The client computing device 1601 also includes one or more user I/O devices 170. In general, the user I/O devices 170 provide a user of the client computing device 1601 with mechanisms for entering information into the client computing device 1601, receiving information from the client computing device 1601, and/or controlling the operation of the client computing device 1601. To this end, the user I/O devices 170 may include cathode ray tubes (“CRT”), liquid crystal displays (“LCDs”), light emitting diodes (“LEDs”), printers, and/or other output devices that are operable to visually present information to a user of the exemplary client computing device 1601. The user I/O devices 170 may also include sound cards, wave generators, sequencers, mixers, speakers, and/or other audio devices that are used to audibly present information to a user of the exemplary client computing device 1601. Further, the user I/O devices 170 may include a mouse, a keyboard, a touch pad, a push button, a scanner, a stylus, a touch screen, a diskette drive, a compact disc read-only-memory (“CDROM”) drive, and/or other input devices that provide a user of the exemplary client computing device 1601 with an interface to directly control the operation of the client computing device 1601 and/or indirectly control the operation of the server computing device 140. In the exemplary embodiment, the user I/O devices 170 are operable to display HTML documents and HTML forms. However, in alternative embodiments the user I/O devices 170 may display documents in SGML, XML, Tex, LaTeX and/or other suitable markup language formats.
The system bus 172 is generally operable to enable the various components of the client computing device 1601 to communicate with one another. To this end, the system bus 172 may be implemented with one or more of the PCI, ISA, and VME architectures, or any other suitable bus architecture(s). In the exemplary embodiment, the system bus 172 includes bus lines and/or traces which interconnect the processor 162, the storage device 164, memory 166, the network interface 168, and the user I/O devices 170.
In any event, it is noted that the above described components of the client computing device 1601 are merely exemplary, and in alternative embodiments those skilled in the art may elect to replace all or portions of these components with suitable discrete analog circuit components, discrete digital circuit components, integrated analog circuits, integrated digital circuits, and/or integrated analog/digital hybrid circuits without undue experimentation.
As a result of executing the instructions read from memory 166, the processor 162 controls the general operation of the client computing device 1601. More specifically, pursuant to the instructions read from memory 166, the processor 162 causes the client computing device 1601 to transmit a plurality of contact information to the server computing device 140 over the communications network 120, transmit access information to the server computing device 140 over the communications network 120, and receive at least some of the plurality of contact information from the server computing device 140 over the communications network 120. Further details regarding exemplary operations of the client computing device 1601 are discussed below.
FIG. 2 is a flowchart of an exemplary method of operation 300 according to the present invention. As noted above, those of the plurality of client computing devices included in the system 100 are configured and coupled to the communications network 120 in a like manner to the client computing device 1601. So, for clarity of exposition, the exemplary method of operation 300 is described below with particular reference to the client computing device 1601. Further, for clarity of exposition, the exemplary method of operation 300 is described below with particular reference to an exemplary embodiment of the system 100 in which the communications network 120 is the Internet.
At step 320, the system 100 executes “Home Page” operations. Here, a first user accesses a home page display via the user I/O devices 170 of the client computing device 1601 (see FIG. 1, discussed above). The first user directs the client computing device 1601 to initiate communications with the server computing device 140 by inputting the Uniform Resource Locator (“URL”) for the server computing device 140 or by any other suitable manner. In any event, the client computing device 1601 obtains instructions from the server computing device 140 which cause the client computing device 1601 to execute the Home Page operations.
The home page display is similar in form and function to a typical Internet website home page. To this end, the client computing device 1601 displays welcoming messages to the user and displays a general description of the services provided by the present invention. In alternative embodiments, the Home Page operations may also suitably display commercial advertisements and/or otherwise provide advertising space that may be sold or leased to generate revenue for the owner of the present invention. After step 320 operations, the system 100 proceeds to step 340.
At step 340, the system 100 (through the user I/O devices 170 of the client computing device 1601) displays a query asking the first user whether the first user is a “registered user” of the present invention. A “registered user” is a user who has previously entered the requested “registration information” (discussed in more detail below). It should be readily appreciated that restricting access to the present invention to registered users may provide a source of revenue for the owner of the present invention in the form of one time registration fees and/or periodic subscription fees. In any event, if the first user indicates that the first user is a registered user, then the system 100 skips to step 400 (discussed further below); else, the system 100 proceeds to step 360.
At step 360, the system 100 executes “Registration” operations. Here, the system 100 (through the user I/O devices 170 of the client computing device 1601) prompts the first user to enter “registration information.” The registration information suitably comprises an alphanumeric user identification name (“User ID”) and security code (or “password”), both of the first user's arbitrary choosing. The client computing device 1601 transmits the User ID and password to the server computing device 140 via the communications network 120. In connection with the Registration operations, the server computing device 140 maintains a registration database (shown as step 380 operations). The server computing device 140 checks the contents of its registration database to ensure that the first user's registration information does not conflict with (i.e., is not the same as) any previously stored registration information. If the server computing device 140 detects a conflict, then the server computing device 140 notifies the client computing device 1601, which in turn notifies the first user and prompts the first user for non-conflicting registration information through the user I/O devices 170. The system 100 repeats the prompts for registration information, receipts of registration information, and conflicts checks until the first user enters non-conflicting registration information. When non-conflicting registration information is received, the server computing device 140 saves the User ID and password as associated data in the registration database (step 380 operations). After step 360 operations (and step 380 operations), the system 100 skips to step 420 (discussed further below).
At step 400, the system 100 executes “User Verification” operations. Here, the client computing device 1601 (through the user I/O devices 170) prompts the first user for the first user's User ID and password, which should have been received from the first user during a previous registration session (see step 360 operations, discussed above). The client computing device 1601 receives the User ID and password and transmits them to the server computing device 140 via the communications network 120. The server computing device 140 determines whether the User ID and password are valid (i.e., whether the User ID and password have been previously stored and associated with each other in the registration database). After the server computing device 140 determines that the User ID and password are valid (or “verified”), then the system 100 proceeds to step 420; else the system 100 loops back to Home Page operations (see step 320, discussed above).
At step 420, the system 100 executes “Main Menu” operations. Here, the server computing device 140 causes the client computing device 1601 to display a “main page” which presents links to “Personal Information” operations (see step 440, below), “Profile Definition” operations (see step 480, below), and “Profile Assign/Access” operations (see step 520, below). Via the user I/O devices 170, the first user selects which one of these sets of operations are to be executed by the system 100. The client computing device 1601 receives the first user's selection and transmits the selection to the server computing device 140. Upon receipt of the selection by the server computing device 140, the system 100 proceeds to the selected operations. In other words, the Main Menu operations provide a menu by which the first user can cause the system 100 to branch to the selected operations. In alternative embodiments, the Main Menu operations may also provide selections for e-mail services, Internet chat rooms, and/or other communications tools that may be desirable to the first user. Further, it should be readily appreciated that in alternative embodiments the Main Menu operations may also suitably provide advertising for others.
At step 440, the system 100 executes “Personal Information” operations. Here, the server computing device 140 causes the client computing device 1601 to prompt the first user for the first user's contact information, and other personal information that the first user may wish to make accessible to other registered users such as a list of special events (e.g., birthdays, wedding anniversary dates, employment service dates, etc.), miscellaneous demographic information (e.g., a social security number, a license plate number, a resume, a date of birth, a race, a sex, a family description, a home description, an income, etc.), and/or image data files from a diskette, CDROM, or other storage device. The image data files suitably comprise digitized photographs of the first user's family, for example. In any event, the client computing device 1601 receives the contact information and/or other personal information from the first user and transmits it to the server computing device 140 via the communication network 120. In connection with the Personal Information operations, the server computing device 140 maintains the contact information and/or other personal information in a personal details database (shown as step 460 operations). Further, during the Personal Information operations the system 100 also allows the first user to view, modify, and/or delete the first user's contact information and/or other personal information and to add new contact information and/or other personal information beyond that which may have already been stored in the personal information database during a prior use of the present invention. For instance, Personal Information operations allow a first user to input the first user's home address for the first time and then subsequently update/change the first user's home address after a move. After step 440 operations (and step 460 operations), the system 100 returns to the Main Menu operations (see step 420, discussed above).
At step 480, the system 100 executes “Profile Definition” operations. Here, the server computing device 140 causes the client computing device 1601 to display “profile definition” pages. Through the profile definition pages, the client computing device 1601 receives some access information from the first user as profile definition information and communicates the profile definition information to the server computing device 140 via the communications network 120. The profile definition information identifies a portion of the first user's contact information and/or other personal information, and identifies a relationship between the first user and a desired recipient or group of recipients of that portion of the information (see, for example, FIGS. 3 and 4, discussed below). In connection with the Profile Definition operations, the server computing device 140 maintains the profile definition information in a profile definition database (shown as step 500 operations). Further, the system 100 also allows the first user to view, modify, and/or delete the first user's profile definition information and to add new profile definition information beyond that which may have already been stored in the profile definition database during a prior use of the present invention. After step 480 operations (and step 500 operations), the system 100 returns to the Main Menu operations (see step 420, discussed above).
At step 520, the system 100 executes “Profile Assign/Access” operations. Here, the server computing device 140 causes the client computing device 1601 to display “profile assign/view” pages by which the client computing device 1601 receives profile assign/access information from the first user. The client computing device 1601 transmits the profile assign/access information to the server computing device 140 via the communications network 120. More particularly, via the Profile Assign/Access operations, the system 100 allows the first user to assign or link another registered user(s) to the first user's profile definition information. In other words, via the Profile Assign/Access operations, the system 100 receives further access information from the first user that specifies which other registered users are granted access to the particular portion(s) of the first user's contact information and/or other personal information that are identified by the first user's profile definition information. In connection with the Profile Assign/Access operations, the server computing device 140 maintains the profile assign/access information in a profile assign/access database (shown as step 540 operations). Further, the system 100 also allows the first user to view, modify, and/or delete the first user's profile assign/access information and to add new profile assign/access information beyond that which may have already been stored in the profile assign/access database during a prior use of the present invention.
Via the Profile Assign/Access operations, the system 100 also allows the first user to view and/or download the respective contact information and/or other personal information of other registered users who have assigned the first user to their respective profile definition information. After step 520 operations (and step 540 operations), the system 100 returns to the Main Menu operations (see step 420, discussed above).
FIG. 3 is a depiction of an exemplary “blank” profile definition page 504 (i.e., with no input yet from the first user) according to the present invention. In general, FIG. 3 depicts an exemplary page by which the system 100 allows the first user to select which of the first user's contact information and/or other personal information from the personal details database (see steps 440 and 460, discussed above) that the first user wishes to make accessible to other registered users whom the first user designates to be within the group or category of the named profile via the “Profile Assign/Access” operations (see step 520, discussed above).
According to the example depicted by FIG. 3, during Profile Definition operations (see step 480, discussed above) the system 100 allows the first user to assign an alphanumeric profile name of the first user's arbitrary choosing (such as, for example, “Friends”, “Family”, “Business Colleagues”, “Schoolmates”, etc.) to a profile by entering (via the user I/O devices 170 of the client computing device 1601) the desired name of the profile into a profile name field 508. Then, the first user inputs selections into the system 100 by entering an “X” into each of the respective selection boxes 510 of the profile definition page 504. To this end, it should be readily appreciated that FIG. 3 depicts boxes for indicating that particular residential (or present place of living) contact information such as address, phone number, pager number, fax number, and e-mail address are to be accessible by the other registered users within the named group (see the “Residential” column); further depicts boxes for indicating that particular permanent (or domicile) contact information such as address, phone number, pager number, fax number, and e-mail address are to be accessible by the other registered users within the named group (see the “Permanent” column); further depicts boxes for indicating that particular business contact information such as address, phone number, pager number, fax number, and e-mail address are to be accessible by the other registered users within the named group (see the “Business” column); further depicts boxes for indicating that particular temporary (e.g., vacation) contact information such as address, phone number, pager number, fax number, and e-mail address are to be accessible by the other registered users within the named group (see the “Temporary” column); further depicts boxes for indicating that personal and/or business images data (e.g., digitized pictures of that sky trip to Aspen) is to be accessible by the other registered users within the named group; further depicts boxes for indicating that personal and/or business special events information (e.g., high school graduation date, college graduation date, and/or other events) is to be accessible by the other registered users within the named group; and further depicts boxes for indicating that date of birth information, miscellaneous family details information, and/or wedding date information are to be accessible by the other registered users within the named group.
It should be readily appreciated that prior to the first user's selections, the system 100 has prompted the first user for and received the necessary contact information and/or other personal information from the first user via the “Personal Information” operations (see step 440, discussed above). These prompts suitably comprise, for example, a series of corresponding queries such as “What is your residential address?”, “What is your residential telephone number?”, etc.; or may suitably comprise a “personal information” page similar to the profile definition page 504 but with input fields for the necessary information in place of the selection boxes 510. In any event, it is noted that the profile definition page 504 and the prompts for the necessary information discussed herein are merely exemplary, and alternative embodiments of the present invention may include different page layouts, different queries, or any other suitable alternatives. Additionally, it is noted that the present invention is not limited to the specific contact information and/or other personal information depicted in FIG. 3 (or FIG. 4, discussed below).
FIG. 4 is a depiction of an exemplary “completed” profile definition page 514 (i.e., with a name entered in the profile name field 508 and selections indicated in the selection boxes 510) according to the present invention. The “completed” profile definition page 514 is displayed by the client computing device 1601. In the example depicted in FIG. 4, the first user has created a profile named “Friends.” Further, the first user has indicated that all other registered users whom the first user designates as the first user's “Friends” via the “Profile Assign/Access” operations (see step 520, discussed above) shall have access to certain of the first user's contact and/or personal information from the personal details database, namely: the first user's residential address, permanent address, and temporary address; the first user's residential telephone number, permanent telephone number, and temporary telephone number; the first user's residential pager number, permanent pager number, business pager number, and temporary pager number; the first user's residential fax number; the first user's residential e-mail address; the first user's personal image data; and the first user's personal special events information. On the other hand, it should be readily appreciated that the system 100 does not allow the other users to access the various other information which the first user has not selected. The client computing device 1601 transmits the profile definition information (i.e., the profile name and the selections) to the server computing device 140 via the communications network 120.
Continuing the example discussed above in connection with FIGS. 3 and 4, during the Profile Assign/Access operations (see step 520, discussed above) the client computing device 1601 receives the first user's indication that “John Doe” (a second registered user) is one of the first user's “Friends” through the user I/O devices 170 of the client computing device 1601 via a “profile assignment” prompt which suitably includes a first entry field for receiving the profile name and a second entry field for receiving John Doe's (the other registered user's) User ID. Accordingly, the server computing device 140 updates its profile assign/access database to clear John Doe for access to the first user's particular contact and/or personal information from the first user's Friends profile, namely: the first user's residential address, permanent address, and temporary address; the first user's residential telephone number, permanent telephone number, and temporary telephone number; the first user's residential pager number, permanent pager number, business pager number, and temporary pager number; the first user's residential fax number; the first user's residential e-mail address; the first user's personal image data; and the first user's personal special events data (as discussed above in connection with FIG. 4). On the other hand, it should be readily appreciated that in the event that the first user has also setup another profile, for example, a “Business Colleagues” profile, the first user's assignment of John Doe to the first user's Friends profile does not clear John Doe for access to the information in the first user's Business Colleagues profile. To clear John Doe for access to any of the first user's profiles, the first user must assign John Doe to that respective profile.
Additionally, for example, when John Doe has assigned the first user to John Doe's “Friends” profile during a prior use of the present invention (where John Doe operated the invention in the role of a “first user” (see steps 440 and 480, discussed above), the first user suitably enters a request for the contact information of “John Doe” into the client computing device 1601 (via the user I/O devices 170). The client computing device 1601 transmits this request to the server computing device 140. In response to the request, the server computing device 140 causes the client computing device 1601 to indicate to the first user John Doe's particular contact information and/or other personal information which John Doe has included in John Doe's Friends profile.
Accordingly, it should be readily appreciated that the first user causes the system 100 to clear a second registered user for access to a respective plurality of the first user's profiles by making a plurality of respective profile assignments for the second user, thereby granting the second user access to a respective plurality of the first user's contact information. For instance, the first user may assign John Doe to a “Family” profile and/or a “Schoolmates” profile as well as or alternatively to the first user's Friends profile. Further, it should be readily appreciated that the first user repeats operations of the present invention as desired to similarly effectuate various profile assignments for a plurality of other registered users, and any of those or other registered users grants the first user access to their contact information and/or other personal information by designating the first user in their own profile assignments.
Thus, when a registered user of the present invention updates his or her contact information and/or other personal information, the present invention makes the updated information available to the other registered users (or registered “contacts”) according to the registered user's profile definitions and assignments.
APPENDIX A is printout of software code for various exemplary features according to the present invention.
The foregoing description of the invention is illustrative only, and is not intended to limit the scope of the invention to the precise terms set forth. Although the invention has been described in detail with reference to certain illustrative embodiments, variations and modifications exist within the scope and spirit of the invention as described and defined in the following claims.

## Claims

1. A method for controlling a second user's access to a first user's information over a communications network, the method comprising the steps of:
receiving a plurality of contact and personal information from the first user over the communications network, the plurality of contact and personal information being information about the first user;
receiving registration information from the first user over the communications network;
allowing only the first user and persons knowing the registration information of the first user to update the plurality of contact and personal information about the first user;
receiving access information from the first user over the communications network, the access information defining the second user's access rights to the plurality of contact and personal information about the first user;
allowing only the first user and persons knowing the registration information of the first user to update the access information;
updating the plurality of contact and personal information and the access information by the first user and the persons;
receiving requests for the plurality of contact and personal information about the first user from the second user over the communications network;
if the second user has been granted access rights by the first user, transmitting a first portion of the plurality of contact and personal information about the first user to the second user over the communications network based at least in part on the access information; and
withholding a second portion of the plurality of contact and personal information about the first user from transmission to the second user over the communications network based at least in part on the access information.

2. The method of claim 1, wherein the step of receiving the plurality of contact and personal information includes receiving at least two of an e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user.

3. The method of claim 2, further comprising the step of storing the plurality of contact and personal information about the first user.

4. The method of claim 3, further comprising the step of storing the access information.

5. The method of claim 4, wherein:
the step of transmitting the first portion of the plurality of contact and personal information about the first user includes transmitting at least a first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on identity information; and
the step of withholding the second portion of the plurality of contact and personal information about the first user from transmission includes withholding at least a second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the identity information.

6. The method of claim 5, wherein:
the step of transmitting the first portion of the plurality of contact and personal information about the first user further includes transmitting at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on a security code; and
the step of withholding the second portion of the plurality of contact and personal information about the first user from transmission further includes withholding at least the second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the security code.

7. The method of claim 6, wherein the step of receiving the plurality of contact and personal information further includes receiving the at least two of an e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over at least one of the Internet and the World Wide Web.

8. The method of claim 7, wherein the step of receiving the plurality of contact and personal information further includes receiving at the least two of an e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number in accordance with HyperText Transfer Protocol.

9. The method of claim 4, wherein:
the step of transmitting the first portion of the plurality of contact and personal information about the first user includes transmitting at least a first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on information indicating a relationship between the first user and the second user, the relationship being common to a desired group of recipients of the portion of the plurality of contact and personal information about the first user; and
the step of withholding the second portion of the plurality of contact and personal information about the first user from transmission includes withholding at least a second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the information indicating the relationship between the first user and the second user.

10. The method of claim 9, wherein:
the step of transmitting the first portion of the plurality of contact and personal information about the first user further includes transmitting at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on a security code; and
the step of withholding the second portion of the plurality of contact and personal information about the first user from transmission further includes withholding at least the second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the security code.

11. The method of claim 1, wherein the step of receiving the plurality of contact and personal information about the first user includes receiving other personal information.

12. The method of claim 11, wherein receiving the other personal information includes receiving at least one of an image data file, a social security number, a license plate number, a resume, a date of birth, a race, a sex, a family description, a home description, and an income indication.

13. The method of claim 1, wherein the step of receiving access information further comprises the steps of:
receiving profile definition information from the first user over the communications network, the profile definition information defining an accessible subset of the plurality of contact and personal information about the first user to be made available to members of the profile; and
receiving assignment information from the first user over the communications network, the assignment information indicating the members of the profile, such that if the second user is one of the members of the profile, the first portion of the plurality of up-to-date personal information about the first user is defined by the accessible subset of the plurality of personal information defined for the profile.

14. The method of claim 13, further comprising the step of allowing only persons knowing the registration information of the first user to update the profile information and assignment information.

15. The method of claim 1, wherein the plurality of contact and personal information about the first user includes residential information of the first user and business information of the first user.

16. The method of claim 15, wherein the step of receiving access information further comprises the steps of:
receiving profile definition information from the first user, the profile definition information defining a residential subset of the plurality of contact and personal information about the first user including the residential information of the first user, and defining a business subset of the plurality of contact and personal information about the first user including the business information of the first user; and
receiving assignment information from the first user, the assignment information indicating members of the residential profile and members of the business profile, such that if the second user is one of the members of the residential profile, the first portion of the plurality of contact and personal information about the first user includes the residential information of the first user; and if the second user is one of the members of the business profile, the first portion of the plurality of contact and personal information about the first user includes the business information of the first user.

17. The method of claim 1, further comprising:
allowing only the first user to update the plurality of contact and personal information about the first user.

18. The method of claim 1, further comprising:
allowing only the first user to update the access information.

19. An apparatus for controlling a second user's access to a first user's information over a communications network, the apparatus comprising:
a first computing device configured to be coupled to the communications network, the first computing device being further configured to receive a plurality of contact and personal information and registration information from the first user over the communications network, the plurality of contact and personal information being information about the first user; allow only persons knowing the registration information of the first user to update the plurality of contact and personal information about the first user; receive access information from the first user over the communications network, allow only persons knowing the registration information of the first user to update the access information; update the plurality of contact and personal information and the access information by the first user and the persons; receive requests for the plurality of contact and personal information about the first user from the second user over the communications network; transmit a first portion of the plurality of contact and personal information about the first user to the second user over the communications network based at least in part on the access information, and withhold a second portion of the plurality of contact and personal information about the first user from transmission over the communications network based at least in part on the access information.

20. The apparatus of claim 19, wherein:
the first computing device is further configured to receive at least two of an e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user as parts of the plurality of contact and personal information;
the first computing device is further configured to transmit at least a first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user over the communications network based in part on identity information; and
the first computing device is further configured to withhold at least a second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user from transmission over the communications network based in part on the identity information.

21. The apparatus of claim 20, wherein:
the first computing device is further configured to transmit at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on a security code; and
the first computing device is further configured to withhold at least the second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the security code.

22. The apparatus of claim 21, wherein the first computing device is further configured to store the plurality of contact and personal information about the first user.

23. The apparatus of claim 22, wherein the first computing device is further configured to store the access information.

24. The apparatus of claim 23, further comprising a second computing device configured to receive the plurality of contact and personal information about the first user from the first user, receive the access information from the first user, and transmit the plurality of contact and personal information about the first user and the access information to the first computing device over the communications network.

25. The apparatus of claim 24, wherein:
the first computing device is further configured to transmit at least a first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on information indicating a relationship between the first user and the second user, the relationship being common to a desired group of recipients of the portion of the plurality of contact and personal information; and
the first computing device is further configured to withhold at least a second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the information indicating a relationship between the first user and the second user.

26. The apparatus of claim 25, where the communications network includes at least one of the Internet and the World Wide Web.

27. The apparatus of claim 26, wherein the first computing device is further configured to receive the plurality of contact and personal information in accordance with a HyperText Transfer Protocol.

28. An article of manufacture for a system for controlling a second user's access to a first user's information over a communications network, the article of manufacture comprising:
a computer-readable signal-bearing medium, the computer-readable signal-bearing medium having information signals therein, the information signals corresponding to a plurality of instructions which, when executed by the system, cause the system to
receive a plurality of contact and personal information from the first user over the communications network; the plurality of contact and personal information being information about the first user;
receive access information from the first user over the communications network;
receive registration information from the first user over the communications network;
allow only persons knowing the registration information of the first user to update the plurality of contact and personal information about the first user and the access information;
update the plurality of contact and personal information and the access information by the first user and the persons;
receiving requests for the plurality of contact and personal information about the first user from the second user over the communications network;
transmit a first portion of the plurality of contact and personal information about the first user to the second user over the communications network based at least in part on the access information; and
withhold a second portion of the plurality of contact and personal information about the first user from transmission to the second user over the communications network based at least in part on the access information.

29. The article of claim 28, wherein the information signals further correspond to a plurality of instructions which, when executed by the system, further cause the system to:
receive at least two of an e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user as parts of the plurality of contact and personal information;
transmit at least a first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number for the first user over the communications network based in part on identity information; and
withhold at least a second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the identity information.

30. The article of claim 29, wherein the information signals further correspond to a plurality of instructions which, when executed by the system, further cause the system to:
transmit at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on a security code; and
withhold at least the second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the security code.

31. The article of claim 30, wherein the information signals further correspond to a plurality of instructions which, when executed by the system, further cause the system to:
transmit at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network based in part on information indicating a relationship between the first user and the second user, the relationship being common to a desired group of recipients of the portion of the plurality of contact and personal information about the first user; and
withhold at least the second one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number from transmission over the communications network based in part on the information indicating the relationship between the first user and the second user.

32. The article of claim 31, wherein the information signals further correspond to a plurality of instructions which, when executed by the system, further cause the system to:
store the plurality of contact and personal information about the first user; and
store the access information.

33. The article of claim 32, wherein the information signals further correspond to a plurality of instructions which, when executed by the system, further cause the system to:
transmit at least the first one of the e-mail address, a home address, a business address, a post office box number, a home telephone number, a business telephone number, a home fax number, a business fax number, and a pager number over the communications network in accordance with HyperText Transfer Protocol.