System and method for automatically determining privacy settings for sharing data
Systems and methods are provided for managing and rewarding sharing of user data via a computing device with a requesting device. A privacy risk score is received for the requesting device characterizing a degree of cyber risk for sharing data. Initial privacy settings are received for the user via a GUI in response to the privacy risk score characterizing the user data allowable for sharing. A reward incentive is then automatically determined based on the privacy risk and the initial privacy settings for sharing additional user data with the requesting device beyond that identified by the initial privacy settings. Then, in response to an override from the GUI overriding the initial privacy settings to accept the reward incentive and thereby allow sharing of the additional user data beyond the initial range: updated privacy settings are determined and the sharing of the user data is limited to the updated privacy settings.
1 . A computing device having a processor coupled to a storage device and coupled to an I/O device for managing sharing of user data associated with a user via the computing device with a requesting device, the storage device stores instructions, which when executed by the processor configure the computing device to:
receive a privacy risk indicator associated with the requesting device, the privacy risk indicator characterizing a degree of cyber risk for sharing data with the requesting device at a current time, the privacy risk indicator automatically determined for the requesting device;
generate a graphical user interface (GUI) for the I/O device, the GUI comprising a display having an interactive set of GUI elements presenting: the privacy risk indicator providing a current cyber security risk in sharing user data with the requesting device, interactive privacy settings being selectable using at least one slider to define values within a privacy parameter range of the user data, wherein the interactive privacy settings define a current privacy level for the user and the privacy parameter range defines one or more types of user data allowable for sharing with the requesting device and an override indication for receiving an override input;
present the GUI with the interactive set of GUI elements on the I/O device;
subsequent to presenting the GUI comprising the privacy risk indicator on the display, detect user input through the GUI elements for the interactive privacy settings to select initial privacy settings for the user, the initial privacy settings selected via the GUI elements identifying an initial range of desired privacy characterizing the user data allowable for sharing with the requesting device;
automatically determine and present concurrently on the display along with the interactive privacy settings and the privacy risk indicator, a reward incentive based on the privacy risk indicator and the initial privacy settings associated with sharing additional user data with the requesting device beyond that identified by the initial privacy settings, the reward incentive being correlated to a degree of the additional user data shared;
upon receiving the override indication from the override input interacting with the GUI elements presented on the GUI overriding the initial privacy settings to accept the reward incentive and thereby allow sharing of the additional user data beyond the initial range, then:
determine updated privacy settings based on the override indication; and
dynamically manage sharing of the user data with the requesting device to limit to that allowed based on the updated privacy settings reflecting updated cyber security risks based on receiving the override indication.
2 . The device of claim 1 wherein managing the sharing of the user data to limit to that allowed comprises the processor being further configured to: limit to only selected one or more data types defined by the updated privacy settings.
3 . The device of claim 1 further comprising the reward incentive determined further based on a value associated with each type of the user data shared online.
4 . The device of claim 1 , comprising identifying similar users to the user having similar attributes, retrieving secondary privacy settings for the similar users and further updating the initial privacy settings based on the secondary privacy settings.
5 . The device of claim 1 , wherein the reward incentive is a digital asset selected from a group comprising: loyalty credits, rewards credits, cryptocurrency, and cash.
6 . The device of claim 2 wherein the one or more data types of the user data are selected from a possible set of types comprising: online presence information, user name, social insurance number, date of birth, and identification information from the user data that is allowable for sharing online.
7 . The device of claim 2 , wherein in response to interacting online with the requesting device, the processor is further configured to:
obtain the privacy risk indicator for the requesting device from an intermediary device in communication with the computing device and the requesting device, the privacy risk indicator dependent upon at least one of: a device type for the requesting device, a location of the requesting device relative to the computing device, and prior history of access of user data by the requesting device; and
wherein dynamically managing sharing of the user data to limit to only the selected one or more data types based on the updated privacy settings is further permitted based on the privacy risk indicator being below a defined threshold to permit said sharing.
8 . The device of claim 7 , wherein the intermediary device is configured to share additional information to facilitate managing of sharing of data by the computing device, comprising at least one of: providing metadata regarding cyber privacy risks for the requesting devices, a resource associated with the requesting devices, and reward incentive for sharing data with the requesting devices.
9 . The device of claim 7 wherein if the privacy risk indicator is below the defined threshold but above a second defined threshold, the processor is further configured to:
adjust the sharing of the user data defined by the updated privacy settings to further limit to only a subset of the selected one or more data types.
10 . The device of claim 7 , wherein the requesting device is a device connected online to the computing device and configured to request the user data while interacting online, the requesting device selected from a group comprising:
a mobile device; an augmented reality device;
a virtual reality device; a personal computer;
a server hosting one or more websites; an internet of things (IoT) device; and
a personal digital assistant.
11 . The device of claim 1 , wherein the processor is further configured for updating the initial privacy settings subsequent to the current time based on:
obtaining a behaviour map for the user associated with the user data over a past time period from the current time, the behaviour map characterizing online sharing activity of prior user data and comprising a set of past data types shared and indicating a number of times the set of past data types have been shared online in the past time period; and
updating the initial privacy settings in real-time based on the behaviour map and thereby the reward incentive.
12 . The device of claim 11 wherein the processor is further configured to automatically update the initial privacy settings further based on:
retrieving a set of attributes characterizing the user;
identifying at least one other user of another computing device having a profile with attributes similar to the user;
obtaining a second behaviour map for the at least one other user over a second past time period, the second behaviour map comprising a second set of past data types shared online by the at least one other user during the second past time period; and
further updating the initial privacy settings based on the second behaviour map.
13 . A computer-implemented method for managing sharing of user data associated with a user via a computing device with a requesting device, the method comprising:
receiving a privacy risk indicator associated with the requesting device, the privacy risk indicator characterizing a degree of cyber risk for sharing data with the requesting device at a current time, the privacy risk indicator automatically determined for the requesting device;
generate a graphical user interface (GUI) for an I/O device, the GUI comprising a display having an interactive set of GUI elements presenting: the privacy risk indicator providing a current cyber security risk in sharing user data with the requesting device, interactive privacy settings being selectable using at least one slider to define values within a privacy parameter range of the user data, wherein the interactive privacy settings define a current privacy level for the user and the privacy parameter range defines one or more types of user data allowable for sharing with the requesting device and an override indication for receiving an override input;
presenting the GUI with the interactive set of GUI elements on the I/O device;
subsequent to presenting the GUI comprising the privacy risk indicator on the display, detecting user input through the GUI elements for the interactive privacy settings to select initial privacy settings for the user, the initial privacy settings selected via the GUI elements identifying an initial range of desired privacy characterizing the user data allowable for sharing with the requesting device;
automatically determining and presenting concurrently on the display along with the interactive privacy settings and the privacy risk indicator, a reward incentive based on the privacy risk indicator and the initial privacy settings associated with sharing additional user data with the requesting device beyond that identified by the initial privacy settings, the reward incentive being correlated to a degree of the additional user data shared;
upon receiving the override indication from the override input interacting with the GUI elements presented on the GUI overriding the initial privacy settings to accept the reward incentive and thereby allow sharing of the additional user data beyond the initial range, then:
determining updated privacy settings based on the override indication; and
dynamically managing sharing of the user data with the requesting device to limit to that allowed based on the updated privacy settings reflecting updated cyber security risks based on receiving the override indication.
14 . The method of claim 13 wherein managing the sharing of the user data to limit to that allowed comprises limiting to only selected one or more data types defined by the updated privacy settings.
15 . The method of claim 13 further comprising the reward incentive determined further based on a value associated with each type of the user data shared online.
16 . The method of claim 13 , further comprising identifying similar users to the user having similar attributes, retrieving secondary privacy settings for the similar users and further updating the initial privacy settings based on the secondary privacy settings.
17 . The method of claim 13 , wherein the reward incentive is a digital asset selected from a group comprising: loyalty credits, rewards credits, cryptocurrency, and cash.
18 . The method of claim 14 wherein the one or more data types of the user data are selected from a possible set of types comprising: online presence information, user name, social insurance number, date of birth, and identification information from the user data that is allowable for sharing online.
19 . The method of claim 14 , wherein in response to interacting online with the requesting device, the method further comprises:
obtaining the privacy risk indicator for the requesting device from an intermediary device in communication with the computing device and the requesting device, the privacy risk indicator dependent upon at least one of: a device type for the requesting device, a location of the requesting device relative to the computing device, and prior history of access of user data by the requesting device; and
wherein dynamically managing sharing of the user data to limit to only the selected one or more data types based on the updated privacy settings is further permitted based on the privacy risk indicator being below a defined threshold to permit said sharing.
20 . The method of claim 19 , wherein the intermediary device is configured to share additional information to facilitate managing of sharing of data by the computing device, comprising at least one of: providing metadata regarding cyber privacy risks for the requesting device, a resource associated with the requesting device, and reward incentive for sharing data with the requesting device.
21 . The method of claim 19 wherein if the privacy risk indicator is below the defined threshold but above a second defined threshold, the method further comprises:
adjusting the sharing of the user data defined by the updated privacy settings to further limit to only a subset of the selected one or more data types.
22 . The method of claim 17 , wherein the requesting device is a device connected online to the computing device and configured to request the user data while interacting online, the requesting device selected from a group comprising: a mobile device; an augmented reality device; a virtual reality device; a personal computer; a server hosting websites; an internet of things (IoT) device; and a personal digital assistant.
23 . The method of claim 13 , wherein the initial privacy settings are automatically updated subsequent to the current time based on:
obtaining a behaviour map for the user associated with the user data over a past time period from the current time, the behaviour map characterizing online sharing activity of prior user data and comprising a set of past data types shared and indicating a number of times the set of past data types have been shared online in the past time period; and;
updating the initial privacy settings in real-time based on the behaviour map and thereby the reward incentive.
24 . The method of claim 23 further comprising automatically updating the initial privacy settings further based on:
retrieving a set of attributes characterizing the user;
identifying at least one other user of another computing device having a profile with attributes similar to the user;
obtaining a second behaviour map for the at least one other user over a second past time period, the second behaviour map comprising a second set of past data types shared online by the at least one other user during the second past time period; and
further updating the initial privacy settings based on the second behaviour map.
25 . A computer readable medium comprising a non-transitory device storing instructions and/or data, which when executed by a processor of a computing device, the processor coupled to a storage device, configure the computing device to:
receive a privacy risk indicator associated with a requesting device, the privacy risk indicator characterizing a degree of cyber risk for sharing data with the requesting device at a current time, the privacy risk indicator automatically determined for the requesting device;
generate a graphical user interface (GUI) for an I/O device, the GUI comprising a display having an interactive set of GUI elements presenting: the privacy risk indicator providing a current cyber security risk in sharing user data with the requesting device, interactive privacy settings being selectable using at least one slider to define values within a privacy parameter range of the user data, wherein the interactive privacy settings define a current privacy level for a user profile associated with a computing device and the privacy parameter range defines one or more types of user data allowable for sharing with the requesting device and an override indication for receiving an override input;
present the GUI with the interactive set of GUI elements on the I/O device;
present the GUI displaying the privacy risk indicator associated with the requesting device, received from an intermediary device in communication with the computing device and the requesting device, the privacy risk indicator characterizing a degree of cyber risk for sharing data associated with the user of the computing device with the requesting device at a current time, the privacy risk indicator automatically determined for the requesting device and dependent upon at least one of: a device type for the requesting device, a location of the requesting device relative to the computing device, and prior history of access of user data by the requesting device;
prompt for user input on the display of the GUI to receive initial privacy settings for the user via the GUI in response to presenting the privacy risk indicator on the GUI, the initial privacy settings identifying an initial range of desired privacy characterizing the user data allowable for sharing with the requesting device;
automatically determine and present concurrently on the display of the GUI along with the interactive privacy settings and the privacy risk indicator, a reward incentive based on the privacy risk indicator and the initial privacy settings associated with sharing additional user data with the requesting device beyond that identified by the initial privacy settings, the reward incentive being correlated to a degree of the additional user data shared;
upon receiving the override indication from the override input interacting with the GUI elements presented on the GUI overriding the initial privacy settings to accept the reward incentive and thereby allow sharing of the additional user data beyond the initial range, then:
determine updated privacy settings based on the override indication; and
dynamically manage sharing of the user data with the requesting device to limit to that allowed based on the updated privacy settings reflecting updated cyber security risks based on receiving the override indication.