Personalized data management systems and methods
View Patent ↗This disclosure relates to systems and methods for managing data associated with a user using a personalized cloud storage platform operating as a centralized repository for user data generated from a variety of sources and/or user devices. By centralizing the storage and/or management of personal data that would conventionally be confined between multiple information silos, embodiments of the systems and methods disclosed herein may improve the ability of a user to control their personal data, facilitate utilization of their personal data in a variety of ways not offered by services associated with the silos, and/or allow a user to centrally manage their personal data. Further embodiments disclosed herein allow a user to define one or more policies or other rules associated with personal data stored in their personal cloud.
1. A method of managing personal data associated with a user, the method performed by a cloud storage system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the system to perform the method, the method comprising:
receiving, at an interface of the cloud storage system from a plurality of remote systems associated with the user, personal data related to the user;
receiving, at the interface of the cloud storage system from a system associated with an application service provider, an application for execution by the cloud storage system;
receiving, at the interface of the cloud storage system from at least one remote system of the plurality of remote systems, policy data generated by the user associated with the received personal data, the policy data identifying the application as being permitted to use the received personal data;
receiving, at the interface, an application request from the user, the application request comprising a request for a response to be generated by the application executing on the cloud storage system based on the received personal data;
determining that the request is permitted based on a determination that the policy data associated with the received personal data identifies the application as being permitted to use the received personal data;
generating a response to the application request using the application based on the received personal data; and
transmitting, from the interface, the response to the user.
2. The method of claim 1 , wherein the plurality of remote systems comprise at least one mobile device associated with the user.
3. The method of claim 1 , wherein the plurality of remote systems comprise at least one remote cloud storage system associated with the user.
4. The method of claim 2 , wherein the personal data comprises data obtained by one or more sensors of the mobile device.
5. The method of claim 4 , wherein the personal data comprises location data obtained by one or more location sensors of the mobile devices.
6. The method of claim 1 , wherein the personal data comprises activity data relating to activities performed by the user with one or more of the plurality of remote systems.
7. The method of claim 1 , wherein the personal data comprises data collected by a plurality of trusted software components executing on one or more of the plurality of remote systems.
8. The method of claim 1 , wherein the request further comprises a request for the response to be generated based further on information provided by a third party service.
9. The method of claim 8 , wherein the method further comprises:
accessing, by the interface, the information provided by the third party service, and wherein generating the response is further based on the information provided by the third party service.
10. The method of claim 1 , wherein the policy data further identifies at least one permitted operation by the application using the received personal data and wherein determining that the request is permitted is further based on a determination that an operation used to generate the response by the application is a permitted operation identified by the policy data.