Customer Centric Grid for Personal Information Control
Solution Overview
Problem
Customers lack control over their personal information shared with financial institutions and third parties, as they are often unaware of what information is being made available and for how long it is accessed.
Innovation Solution
A customer-centric grid system that allows users to manage and control their personal information by specifying which entities can access it, for how long, and under what conditions, using secure storage areas and one-time passwords for access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If financial institutions and organizations make customer personal information available to third parties for business operations, then service efficiency and business capability are improved, but customer control over their personal information is lost and privacy security deteriorates
Solution Approach 1:
The patent introduces a customer information grid as an intermediary system between customers, financial institutions, and third parties. This grid acts as a mediator that manages information access rights, allowing third parties to access customer information only when authorized by the customer through the grid interface. The grid implements security protocols including encryption, digital signatures, and access logs to protect customer privacy while enabling legitimate business operations.
Solution Approach 2:
The patent extracts control over personal information from traditional centralized models and places it directly in customer hands through the information grid. Customers can selectively grant or revoke access permissions to specific third parties for specific information elements. This extraction of control enables customers to maintain privacy security while still allowing necessary information sharing for service delivery.
2Adaptability or versatility
If customers share personal information with multiple third parties, then access to services and products is improved, but information security and customer awareness of data usage deteriorate
Solution Approach 1:
The customer information grid implements comprehensive feedback mechanisms that notify customers of all information access requests, granted permissions, and usage activities. The system provides real-time or near-real-time notifications to customers about which third parties access their information and for what purposes. This feedback loop maintains customer awareness while enabling versatile access to services through controlled information sharing.
Solution Approach 2:
The patent implements preliminary customer authorization actions before any third party can access personal information. Customers must explicitly grant permissions through the grid interface before information is shared. This preliminary action ensures customers are aware of and consent to information usage before it occurs, preventing unauthorized or unexpected data access while maintaining service accessibility.
3Speed
If personal information is stored in centralized databases for easy access, then data retrieval efficiency is improved, but system vulnerability and risk of unauthorized access increase
Solution Approach 1:
The patent segments customer personal information into discrete elements or fields within the information grid structure. Each information element can be independently controlled, encrypted, and accessed based on specific permissions. This segmentation reduces the risk associated with centralized storage by limiting the impact of potential breaches to specific data elements rather than entire databases, while maintaining efficient retrieval through structured organization.
Solution Approach 2:
The information grid implements local quality control by applying different security measures, encryption levels, and access protocols to different information elements based on their sensitivity and usage requirements. Critical information receives enhanced protection while less sensitive data allows faster access. This differentiated approach maintains overall system reliability while preserving data retrieval efficiency for appropriate use cases.
Data Source
AI summary
A method implemented on an electronic computing device for facilitating access to user information includes receiving from a user data to be made available for access on the electronic computing device. A time duration for which the data is permitted to be accessed is received from the user. Conditions to be met in order for one of a plurality of entities to access the data are received from the user. A request from an entity is received to access the data. A determination is made as to whether the entity satisfies the conditions. A determination is made as to whether a time at which the request is made is within the time duration. When the entity satisfies the conditions and when the request is made within the time duration, the entity is permitted to access the data.