Abstract:
The present invention relates to the secure identification, authentication, protection and transfer of personal and computing device identifying information between computing devices. Specifically the present invention is a method that removes the need to expose personal or computing device identifying information, while such information is in transit between computing devices.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application claims the benefit of U.S. Provisional Application No. 62/116,838 filed Feb. 16, 2015. 
     
    
       [0002]    STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT 
         [0003]    The present invention is not related to any federally sponsored research or development. 
       BACKGROUND OF THE INVENTION 
       [0004]    Cybersecurity and more specifically the protection of personal and computing device identifying information has become an individual and nation concern. Data and hardware breaches continue to rise. Identity theft, ransomware, medical device intrusion, cyber-carjacking, energy grid cyberattacks, financial services and banking hacks and theft of medical and health information raise significant concern among individuals, private sector enterprises and government. 
         [0005]    Accenture projects cyberattacks will cost the U.S. health system $305 billion over five years. The nascent Internet of Things (IoT), with tremendous potential to benefit society with the collection and analysis of big data, raises significant privacy concerns due to a lack security relative to personal and computing device identifying information contained in, received and transferred by, including but not limited to, wearables, medical devices, connected vehicles and smart home technology. 
         [0006]    U.S. trading partners such as the European Union (EU) have expressed deep concern about the lack of robust of U.S. privacy protections related to EU citizens&#39; private identifying data residing on servers and data warehouses in the U.S. The European Court of Justice recently invalidated the Safe Harbor provisions by which U.S. companies are able to move EU citizens&#39; private and identifying information to the U.S. While a new data protection scheme between the U.S. and the EU is being worked out, U.S. companies face uncertain legal risk by continuing to process and move EU citizens&#39; private identifying data to the U.S.. 
         [0007]    Current approaches to protecting identifying information include software and hardware encryption, including the use of public and private keys; trusted certificate technology; and tokenization. Use of these technologies, when used to harden data security, are effective but the tradeoff is the sub-optimal use and flexibility of the underlying data. Solutions to this problem of balance are often tipped in favor of greater flexibility in data use resulting in less protection for personal or computing device identifying information. 
         [0008]    The present invention improves prior art by never exposing personal or computing device identifying information, while such information is in transit from one computing device to another. The present invention de-identifies information prior to transmission and re-identifies information at the destination, safely behind a computing device system of firewalls. The present invention provides a level of protection against dictionary attacks as the unique privacy identifiers are never stored in any database, file or lookup table. The present invention enhances the connective promise of the IoT. Finally, the present invention provides an additional layer of security by complementing prior art such as encryption and tokenization. 
       BRIEF SUMMARY OF THE INVENTION 
       [0009]    The present invention relates to the secure identification, authentication, protection and transfer of personal and computing device identifying information between computing devices. Specifically the present invention is a method that removes the need to expose personal or computing device identifying information, while such information is in transit between computing devices. 
         [0010]    In the preferred embodiment of the present invention, a consistent identifier unique to the individual person or computing device is generated for every instance where information or data related to personally identifiable information (PII) or computing device identifying information (CDII) is requested, acquired, stored, analyzed, manipulated, processed, transmitted, data warehoused or shared within and across computer devices. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0011]    These as well as other features of the present invention will become more apparent upon reference to the drawings wherein: 
           [0012]      FIG. 1  is a representation of a process of generating a unique hardware identifier; 
           [0013]      FIG. 2  Is a representation of a process of generating a unique privacy identifier; 
           [0014]      FIG. 3  is a representation of a process of validating and matching a unique hardware identifier; and 
           [0015]      FIG. 4  is a representation of a process of validating and matching a unique privacy identifiers. 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0016]    The drawings referred to herein are for the purposes of illustrating the various aspects and uses of the present invention and are not meant to the scope of the present invention. 
         [0017]    Referring now to  FIG. 1 : unique hardware identifier generating software is installed on computing devices, [ 100 ]; a computing device selects immutable source identifying hardware values used to a generate unique hardware identifier, [ 110 ]; computing device generates a unique hardware identifier, [ 120 ]; computing device hashes the unique hardware identifier, [ 130 ]; a salt is applied to the hashed unique hardware identifier, [ 140 ]; and a computing device encrypts and stores the hashed and salted unique hardware identifier on a cloud or non-cloud server, [ 150 ]. 
         [0018]    Referring now to  FIG. 2 : install unique privacy identifier generating software on computing devices that will request or receive personal or computing device identifying information, [ 200 ]; a requesting computing device requests information from another computing device, [ 210 ]; a requesting computing device selects immutable source identifying values from a specific data record or device containing such values, [ 220 ]; a requesting computing device generates a unique privacy identifier using the selected immutable source values, [ 230 ]; a requesting computing device hashes a unique privacy identifier, [ 240 ]; a requesting computing device retrieves salt from a cloud or non-cloud server, [ 250 ]; a requesting computing device applies a salt to the unique privacy identifier, [ 260 ]; and the hashed and salted unique privacy identifier is prepared for transmission to a requested computing device, [ 270 ]. 
         [0019]    Referring now to  FIG. 3 : a requesting computing device selects its immutable source identifying hardware values used to a generate unique hardware identifier, [ 300 ]; a requesting computing device generates a unique hardware identifier using the selected source values, [ 310 ]; a requesting computing device hashes the unique hardware identifier, [ 320 ]; a requesting computing device retrieves a salt from the cloud or non-cloud server, [ 330 ]; a requesting computing device applies a salt to its hashed unique hardware identifier, [ 340 ]; a requesting computer device validates its generated unique hardware identifier against a unique hardware identifier stored on a cloud or non-cloud server, [ 350 ]; a computing device compares the requesting computing device unique hardware identifier with a stored unique hardware identifier, [ 360 ]; if the unique hardware identifiers do not match a no connection or possible security violation is logged, [ 370 ]; and if the unique hardware identifiers match, the requesting computing device passes its generated unique privacy identifier to a requested computing device containing the requested information, [ 380 ]. 
         [0020]    Referring now to  FIG. 4 : a requested computing device receives a unique privacy identifier form a cloud or non-cloud server, [ 400 ]; a requested computing device selects immutable identifying values from its information repositories behind the requested computing device&#39;s firewall in order to generate a unique privacy number, [ 410 ]; a requested computing device generates a unique privacy identifier using the selected immutable source values, [ 420 ]; a requested computing device retrieves a requesting computing device&#39;s unique privacy identifier from a cloud or non-cloud server, [ 430 ]; a requested computing device hashes its generated unique privacy identifier, [ 440 ]; a requested computing device retrieves a salt from a cloud or non-cloud server, [ 450 ]; a requested computing device removes the salt from the requesting computing device&#39;s unique privacy identifier, [ 460 ]; a requested computing device compares a requesting computing device&#39;s unique privacy identifier with a requested computing device&#39;s unique privacy identifier, [ 470 ]; if the unique privacy identifiers do not match a no connection or possible security violation is logged, [ 480 ]; and if the unique privacy identifiers match, the information is re-identified and connected to the specific identified and matched record, [ 490 ]. 
         [0021]    Additional modifications and improvements of the present invention may be apparent to those of ordinary skill in the art. Thus, the particular combination of steps and processes described and illustrated herein are intended to represent only certain embodiments of the present invention, and are not intended to serve as limitations of alternative methods within the spirit and scope of the invention.