Trusted statement verification for data privacy
Embodiments of the present invention address deficiencies of the art in respect to privacy data management and provide a novel and non-obvious method, system and computer program product for trusted statement verification for data privacy. In one embodiment of the invention, a method for trusted statement verification for data privacy can be provided. The method can include deducing a claim from an attribute for personal data for an end user, receiving a request from a personal data consumer to vouch for an assertion based upon the attribute, comparing the assertion to the claim, and providing a voucher for the assertion to the personal data consumer on behalf of the end user if the claim supports the assertion without revealing the attribute to the personal data consumer.
1. A method for trusted statement verification for data privacy within a voucher service data processing system communicatively coupled to one or more end users computing devices and one or more voucher consumers computing devices, the method comprising:
deducing, by a processor of a computer in the voucher service data processing system, a claim from an attribute of personal data assigning a specific value to a variable and received from an end user from an end user computing device by locating the claim as having have been mapped to the attribute;
receiving, by the processor of the computer, a request from a voucher consumer computing device issued via an exposed application programming interface over a computer communications network to vouch for an assertion based upon the attribute of personal data, the assertion asserting the variable to have a value of a particular range;
comparing the assertion to the claim to determine whether the specific value is within the particular range; and,
providing a voucher in the form of a secure token over the computer communications network to the voucher consumer computing device for the assertion on behalf of the end user upon determining that the specific value is within the particular range without revealing the specific value to the voucher consumer computing device.
2. The method of claim 1 , further comprising:
retrieving a policy for the end user; and,
filtering the claim according to the policy,
wherein the policy limits what types of personal data are transformed into a claim or what types of voucher requests are honored.
3. The method of claim 1 , further comprising:
retrieving a policy for the end user; and,
augmenting the claim according to the policy,
wherein the policy augments what types of voucher requests are honored.
4. The method of claim 1 , further comprising:
retrieving a policy for the voucher consumer computing device; and,
filtering the claim according to the policy,
wherein the policy indicates what types of personal data are preferred.
5. The method of claim 1 , further comprising:
retrieving a policy for the voucher consumer computing device; and,
augmenting the claim according to the policy,
wherein the policy indicates what types of personal data are preferred.
6. A voucher service data processing system for trusted statement verification for data privacy, wherein the voucher service data processing system is communicatively coupled to one or more end users computing devices and one or more voucher consumers computing devices, the system comprising:
a hardware processor configured to perform
deducing a claim from an attribute of personal data assigning a specific value to a variable and received from an end user from an end user computing device by locating the claim as having have been mapped to the attribute;
receiving a request from a voucher consumer computing device issued via an exposed application programming interface over a computer communications network to vouch for an assertion based upon the attribute of personal data, the assertion asserting the variable to have a value of a particular range;
comparing the assertion to the claim to determine whether the specific value is within the particular range; and,
providing a voucher in the form of a secure token over the computer communications network to the voucher consumer computing device for the assertion on behalf of the end user upon determining that the specific value is within the particular range without revealing the specific value to the voucher consumer computing device.
7. The system of claim 6 , wherein the assertion is a required bank account balance and the claim is an available bank account balance in excess of a fixed amount.
8. The system of claim 6 , wherein the assertion is a required age and the claim is an age range exceeding a fixed amount.
9. A computer program product comprising a non-transitory computer usable storage medium having stored therein computer usable program code for trusted statement verification for data privacy, the computer usable program code, when executed by a computer hardware device, causes the computer hardware device to perform
deducing a claim from an attribute of personal data assigning a specific value to a variable and received from an end user from an end user computing device by locating the claim as having have been mapped to the attribute;
receiving a request from a voucher consumer computing device issued via an exposed application programming interface over a computer communications network to vouch for an assertion based upon the attribute of personal data, the assertion asserting the variable to have a value of a particular range;
comparing the assertion to the claim to determine whether the specific value is within the particular range; and,
providing a voucher in the form of a secure token over the computer communications network to the voucher consumer computing device for the assertion on behalf of the end user upon determining that the specific value is within the particular range without revealing the specific value to the voucher consumer computing device.
10. The computer program product of claim 9 , further comprising:
retrieving a policy for the end user; and,
filtering the claim according to the policy,
wherein the policy limits what types of personal data are transformed into a claim or what types of voucher requests are honored.
11. The computer program product of claim 9 , further comprising:
retrieving a policy for the end user; and,
augmenting the claim according to the policy,
wherein the policy augments what types of voucher requests are honored.
12. The computer program product of claim 9 , further comprising:
retrieving a policy for the voucher consumer computing device; and,
filtering the claim according to the policy,
wherein the policy indicates what types of personal data are preferred.
13. The computer program product of claim 9 , further comprising:
retrieving a policy for the voucher consumer computing device; and,
augmenting the claim according to the policy,
wherein the policy indicates what types of personal data are preferred.