Patent ID: 8719366

Claim:
A method of managing consent between a client and a network server, said client and said network server being coupled to a data communication network, said network server providing a service to a user via the client, said client operating a browser configured to permit the user to communicate on the data communication network, said method comprising: maintaining a user profile associated with the user; receiving a request from the service provided by the network server for user information associated with the user and for consent to use the requested user information; determining, in response to the request for consent, when the requested user information is not included in the user profile; in response to the determining that the requested user information is not included in the user profile, providing to the user via the browser a consent user interface to collect the requested user information from the user that is not included in the user profile from the user, wherein the consent user interface displays a user-selectable option for viewing intention information associated with the requested user information, said intention information describing how the requested user information will be used by the service provided by the network server; providing an intention user interface via the browser for displaying the intention information, said intention user interface being provided in response to the user-selectable option being selected by the user; receiving via the consent user interface the consent user information that is not included in the user profile, said user information provided by the user in response to the providing of the consent user interface to the user; updating the user profile with the received user information; allowing access by the service to the received user information in the updated user profile by granting consent for the service to use said user information, whereby the user profile is updated with user information which is not included in the user profile when the request is received from the service so that the requested user information is accessible to the service; and providing a revocation user interface via the browser for allowing the user to revoke consent for the service provided by the network server to use the user information included in the user profile.