Patent ID: 7353532

Claim:
A data repository system that can securely guarantee a privacy policy of a user, comprising: an initialization system, wherein the initialization system includes: a system for providing the user with a privacy policy of the data repository and a mechanism for validating the privacy policy of the data repository, wherein the mechanism for validating the privacy policy includes providing to the user a public signature key and means to access at least one validator, wherein the validator is a guarantor of hardware for the data repository system, the public signature key is a key generated by the hardware, and the validator can validate the key, and a system for collecting user data from the user, wherein the user data comprises a description of expirable validity tokens authorizing a third party access to a subset of the user data from the data repository, wherein the expirable validity tokens are expirable after one of a limited time or a limited number of requests from the third party; and a referral system for providing the third party access to the subset of the user data upon the third party providing a valid expirable validity token, wherein the referral system digitally signs and digitally encrypts the subset of data, including: a system for checking that a privacy policy of the third party is compatible with the privacy policy of the user; a system for digitally encoding the subset of data; a system for requesting an expirable validity token from the third party; and a system for verifying the validity of the expirable validity token from the third party.