Data Privacy Service Provider for Distributed User Data Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Online users lack control over and management of their personal information distributed across various service providers, leading to misuse and the need for repetitive and error-prone data entry, which exposes sensitive information to abuse.

Innovation Solution

A data privacy service provider (DPSP) acts as a bridge among different data keepers, tracking user data through a data distribution map, allowing users to control and manage their personal information by directing service providers to share data only with explicit consent, and enabling users to purge data from service providers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If users provide personal information to multiple service providers, then users can access various online services, but users lose control and tracking ability over their distributed personal information

Engineering Contradiction:
Improveaccess to online servicesVSAvoidcontrol and tracking of personal information
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent introduces a data privacy service provider as an intermediary system that mediates between users and multiple service providers. This intermediary maintains a centralized data distribution map that tracks where user personal information is stored across different service providers, enabling users to control and manage their distributed data without directly interacting with each service provider individually.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Quantity of substance

If users manually input personal information for each service provider, then service providers obtain necessary user data, but users experience repetitive data entry and increased error risk

Engineering Contradiction:
Improveavailability of user data to service providersVSAvoidrepetitive data entry time
Core Design Contradiction:
Quantity of substanceVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having users provide their personal information once to a trusted data privacy service provider, who then stores and manages this information in advance. When users need to access services from multiple providers, the data privacy service provider automatically shares the pre-collected information with relevant service providers through user consent, eliminating the need for repetitive manual data entry.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If service providers collect and store user personal information, then they can provide personalized services and targeted marketing, but user data privacy is compromised and data may be misused

Engineering Contradiction:
Improvepersonalized service capabilityVSAvoiddata privacy risk and misuse
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent positions a data privacy service provider as a trusted intermediary that controls and regulates the flow of personal information between users and service providers. This intermediary maintains a centralized data distribution map that tracks where user data is stored, enabling users to monitor and control data access while still allowing service providers to obtain necessary information for personalized services through explicit user consent.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements feedback mechanisms where the data privacy service provider continuously monitors and updates the data distribution map to reflect current locations of user personal information. This feedback system enables users to receive real-time information about where their data is stored and to revoke consent at any time, providing ongoing control over data privacy while maintaining service provider access rights.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10445525B2Data privacy management system and method
Publication Date: 2019.10.15 MICROSOFT TECHNOLOGY LICENSING LLC
  • US10445525B2 patent drawing
  • US10445525B2 patent drawing
  • US10445525B2 patent drawing

AI summary

Aspects of the technology described herein can provide data privacy management. An exemplary computing device may have a tracker to track various user data of a user distributed among different service providers based on metadata associated with the user data. When a transaction manager of the exemplary computing device receives a request for a first service provider to access the user data of the user, the transaction manager may request a second service provider having the user data to provide the user data to the first service provider if the user approves the first service provider to access the user data.