IP Library › Granted Patent US 12,314,353
Granted Patent B2
US 12,314,353 · App. 17/128,066 · Granted May 27, 2025

System and method for implementing a privacy policy

Inventors: Olaf Jonny Groth (Berkeley, CA); Mark Jay Nitzberg (Berkeley, CA); Manu Kalia (San Francisco, CA); Tobias Christopher Straube (Frankfurt, DE); Daniel A Zehr (Austin, TX)
Assignee: Cambrian Labs LLC
G06F21/31G06F21/16G06F21/577G06F21/604G06F21/6209G06F21/6245G06F21/6254G06F21/6263G06N20/00G06Q30/0206G06Q50/18H04L63/20G06F2221/034G06F2221/2123G06F2221/2141
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,314,353
App. No.
17/128,066
Granted
May 27, 2025
Kind
B2
Abstract

A configurable, customizable privacy-protecting tool permits users to specify a personal/corporate privacy charter which is used to engage with digital service providers (DSPs) and similar entities. The privacy charter can be adapted to reflect individual and corporate goals and requirements for data treatment across a number of domains and in accordance with different standards/thresholds.

Claims (39)

1. A method of creating a customized user privacy protection charter (PPC) for controlling online interactions between the user and a digital services provider (DSP) comprising:

a. defining a set of user data categories associated with data exchanged by the user with a first set of DSPs;

b. defining a set of user data sensitivity ratings available for each of said user data categories;

c. automatically mapping a set of user data sensitivity ratings adopted by the user to said set of user data categories to specify privacy ratings as a category-sensitivity rating pair within a privacy rating protection field for the user;

d. creating the user PPC based on said privacy ratings;

e. enabling the PPC with a software agent configured for privacy management within a web browser executing on a first computing device and/or an application interface executing on a second phone based computing device for engagements with DSPs;

f. managing an exchange of data for the user with a DSP during an online interaction to conform to said PPC.

2. The method of claim 1 , wherein the user PPC is compared to privacy related settings in a digital provider agreement (DPA) for the DSP before selected privacy data is exchanged with such DSP.

3. The method of claim 1 wherein said graphical interface includes an option for providing descriptive text explanations for each of said data categories and data sensitivity ratings.

4. The method of claim 1 wherein the PPC is computed automatically for the user based on identifying user behavior, and is offered to the user to accept, reject, or modify.

5. The method of claim 1 wherein the first set of DSPs are selected from sites that the user engages with actively.

6. The method of claim 1 wherein the user selected PPC is compared to user behavior to identify discrepancies in category-sensitivity ratings.

7. The method of claim 6 wherein the user selected PPC is automatically modified to accommodate said discrepancies.

8. The method of claim 6 wherein said discrepancies are identified and calculated based on comparing said privacy ratings against DSP ratings determined by a natural language system rating based on analyzing a digital provider agreement (DPA).

9. The method of claim 1 wherein an inventory and assessment is automatically performed to identify user devices and activities before presenting the user PPC.

10. The method of claim 1 including a step: providing the user with one or more predefined persona types for populating the PPC, which persona type(s) is/are associated with specific preferences and behaviors for one or more representative users.

11. The method of claim 3 wherein the predefined persona type(s) is/are selected based on calculating privacy ratings for DSPs with which the user interacts.

12. The method of claim 1 wherein the PPC is initially configured based on correlating a profile of the user to profiles of other users with PPCs.

13. A method of creating a customized privacy protection charter (PPC) for a user for controlling online interactions with a digital services provider (DSP) comprising:

a. defining a set of user data categories;

b. defining a set of user data sensitivity ratings;

c. providing a graphical interface adapted to permit a user to specify privacy ratings for a category-sensitivity rating pair within a privacy rating protection field;

d. creating the PPC based on said privacy ratings;

e. enabling the PPC with a software agent configured for privacy management within a web browser executing on a first computing device and/or an application interface executing on a second phone based computing device;

f. managing an exchange of data for the user with a DSP during an online interaction to conform to said PPC.

14. The method of claim 13 wherein said graphical interface includes an option for providing descriptive text explanations for each of said data categories and data sensitivity ratings.

15. The method of claim 13 including a step: uniformly implementing the PPC for the user across both web-based and application based interactions with digital service providers.

16. The method of claim 13 wherein the PPC is initially configured based on correlating a profile of the user to profiles of other users with PPCs.

17. A system for creating a customized user privacy protection charter (PPC) for controlling online interactions between the user and a digital services provider (DSP) comprising:

a computing system including one or more executable software modules adapted to:

a. define a set of user data categories associated with data exchanged by the user with a first set of DSPs;

b. define a set of user data sensitivity ratings available for each of said user data categories;

C. automatically map a set of user data sensitivity ratings adopted by the user to said set of user data categories to specify privacy ratings as a category-sensitivity rating pair within a privacy rating protection field for the user;

d. create the user PPC based on said privacy ratings;

e. enable the PPC with a software agent configured for privacy management within a web browser executing on a first computing device and/or an application interface executing on a second phone based computing device for engagements with DSPs;

f. manage an exchange of data for the user with a DSP during an online interaction to conform to said PPC.

18. The system of claim 17 wherein the user selected PPC is compared to user behavior to identify discrepancies in category-sensitivity ratings.

19. The system of claim 17 wherein the user selected PPC is automatically modified to accommodate said discrepancies.

20. The system of claim 19 wherein said discrepancies are identified and calculated based on comparing said privacy ratings against DSP ratings determined by a natural language system rating based on analyzing a digital provider agreement (DPA).

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 2, 2025
From: GROTH, OLAF J, PHD; NITZBERG, MARK J, PHD; KALIA, MANU; STRAUBE, TOBIAS C; ZEHR, DANIEL
To: CAMBRIAN LABS LLC
Reel/Frame 071284/0405 →
Continuity (4)
Provisional Application 62964428 · Jan 22, 2020
Provisional Application 62957885 · Jan 7, 2020
Provisional Application 62951271 · Dec 20, 2019
Related Publication 20240080341A1 · Mar 7, 2024
References Cited (111)
US 5987440A · O'Neil et al. · 1999 [cited by applicant]
US 6092197A · Coueignoux · 2000 [cited by applicant]
US 6904417B2 · Clayton et al. · 2005 [cited by applicant]
US 6959320B2 · Mitchell et al. · 2005 [cited by applicant]
US 8073461B2 · Altman et al. · 2011 [cited by applicant]
US 8316451B2 · Torres et al. · 2012 [cited by applicant]
US 8839454B2 · Krishnamurthy · 2014 [cited by applicant]
US 8966575B2 · McQuay et al. · 2015 [cited by applicant]
US 9191352B2 · Parmar et al. · 2015 [cited by applicant]
US 9356961B1 · Todd · 2016 [cited by examiner]
US 9411967B2 · Parecki et al. · 2016 [cited by applicant]
US 9426776B2 · Bellamkonda et al. · 2016 [cited by applicant]
US 9542564B2 · Mattox et al. · 2017 [cited by applicant]
US 9691090B1 · Barday · 2017 [cited by applicant]
US 9704203B2 · Grandison et al. · 2017 [cited by applicant]
US 9881407B1 · Varley · 2018 [cited by applicant]
US 9961090B2 · D'Aveta et al. · 2018 [cited by applicant]
US 9977911B2 · Mallozi · 2018 [cited by applicant]
US 10069703B2 · Jung et al. · 2018 [cited by applicant]
US 10102533B2 · Barday · 2018 [cited by applicant]
US 10169790B2 · Barday · 2019 [cited by applicant]
US 10176878B2 · Barday et al. · 2019 [cited by applicant]
US 10231084B2 · Bachi et al. · 2019 [cited by applicant]
US 10218761B2 · Barday et al. · 2019 [cited by applicant]
US 10349207B2 · Baca et al. · 2019 [cited by applicant]
US 10467551B2 · Gayton et al. · 2019 [cited by applicant]
US 10659841B2 · Besehanic · 2020 [cited by applicant]
US 11017688B1 · Arazi · 2021 [cited by applicant]
US 11122424B1 · Branscomb · 2021 [cited by examiner]
US 20020152134A1 · McGlinn · 2002 [cited by applicant]
US 20020188627A1 · Bleizeffer et al. · 2002 [cited by applicant]
US 20030028427A1 · Dutta et al. · 2003 [cited by applicant]
US 20040054919A1 · Duri et al. · 2004 [cited by applicant]
US 20040083243A1 · Feng et al. · 2004 [cited by applicant]
US 20050091101A1 · Epling et al. · 2005 [cited by applicant]
US 20050193093A1 · Mathew et al. · 2005 [cited by applicant]
US 20060095956A1 · Ashley et al. · 2006 [cited by applicant]
US 20090044016A1 · Vauclair · 2009 [cited by applicant]
US 20090300714A1 · Ahn · 2009 [cited by applicant]
US 20090320091A1 · Torres et al. · 2009 [cited by applicant]
US 20100279713A1 · Dicke · 2010 [cited by applicant]
US 20110061106A1 · Kovacs et al. · 2011 [cited by applicant]
US 20110213688A1 · Santos et al. · 2011 [cited by applicant]
US 20120042390A1 · Iwuchukwu · 2012 [cited by applicant]
US 20130291123A1 · Rajkumar et al. · 2013 [cited by applicant]
US 20140162684A1 · Shaw · 2014 [cited by applicant]
US 20150143529A1 · Gkoukalas-Divanis et al. · 2015 [cited by applicant]
US 20150181016A1 · Jain et al. · 2015 [cited by applicant]
US 20160057572A1 · Bojorquez Alfaro et al. · 2016 [cited by applicant]
US 20170083931A1 · Allinson et al. · 2017 [cited by applicant]
US 20170337397A1 · Tang · 2017 [cited by applicant]
US 20180121944A1 · Schwartz · 2018 [cited by applicant]
US 20190108353A1 · Sadeh et al. · 2019 [cited by applicant]
US 20190354709A1 · Brinskelle · 2019 [cited by applicant]
US 20200202037A1 · Parkinson et al. · 2020 [cited by applicant]
US 20200389495A1 · Crabtree et al. · 2020 [cited by applicant]
US 20210279363A1 · Jones et al. · 2021 [cited by applicant]
Bhatia, Jaspreet, and Travis D. Breaux (2017):. “Towards an information type lexicon for privacy policies.” 2015 IEEE eighth international workshop on requirements engineering and law (RELAW). IEEE, 2015. Hagan, M. (201… [cited by applicant]
Bommarito, I. I., et al. (2018): “LexNLP: Natural language processing and information extraction for legal and regulatory texts.” arXiv preprint arXiv:1806.03688 (2018). https://arxiv.org/pdf/1806.03688.pdf. [cited by applicant]
Brodie, Carolyn A., Clare-Marie Karat, John Karat (2006):. “An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench.” Proceedings of the second symposium on Usable priva… [cited by applicant]
Burkhard (2018): The privacy paradox is a privacy dilemma. Mozilla Blog. Available: https://blog.mozilla.org/internetcitizen/2018/08/24/the-privacy-paradox-is-a-privacy-dilemma/. [cited by applicant]
Carrascal, Riederer, Erramilli, Cherubini, Oliveira (2018): Your Browsing Behavior for a Big Mac: Economics of Personal Information Online. Available: http://jpcarrascal.com/docs/publications/WWW2013-Browsing_behavior_b… [cited by applicant]
Cer, Daniel, et al. “Semeval-2017 task 1: Semantic textual similarity-multilingual and cross-lingual focused evaluation.” arXiv preprint arXiv:1708.00055 (2017). [cited by applicant]
CIGI; Ipsos (2019): Share of internet users who are increasingly concerned about their online privacy to due internet companies as of Feb. 2019, by region. Statista. Available: https://www.statista.com/statistics/373460… [cited by applicant]
Deloitte (2017): 2017 Global Mobile Consumer Survey: US edition. The dawn of the next era in mobile. Available: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/technology-media-telecommunications/us-tmt-2017… [cited by applicant]
Devlin, Jacob, et al. “BERT: Pre-training of deep bidirectional transformers for language understanding.” arXiv preprint arXiv:1810.04805 (2018). https://arxiv.org/pdf/1810.04805.pdf. [cited by applicant]
Dolan, William B., and Chris Brockett. “Automatically constructing a corpus of sentential paraphrases.” Proceedings of the Third International Workshop on Paraphrasing (IWP2005). 2005. [cited by applicant]
Ember (2016): See That Billboard? It May See You, Too. The New York Times. Available: https://www.nytimes.com/2016/02/29/business/media/see-that-billboard-it-may-see-you-too.html. [cited by applicant]
European Commission (2019: Special Eurobarometer 487a. Available: https://privacyblogfullservice.huntonwilliamsblogs.com/wp-content/uploads/sites/28/2019/06/ebs487a_en.pdf. [cited by applicant]
Fjeld, Hilligoss, Achten, Daniel, Feldman, Kagay (2019): Principled Artificial Intelligence. A Map of Ethical and Rights-based approaches. Harvard University. Available: https://ai-hr.cyber.harvard.edu/primp-viz.html. [cited by applicant]
Greenberg (N.D.): VPN Use and Data Privacy Stats for 2019. VPN Mentor. Available: https://www.vpnmentor.com/blog/vpn-use-data-privacy-stats. [cited by applicant]
Yang, Dai, Yang, Carbonell, Salakhutdino and Le: XLNet: Generalized Autoregressive Pretraining for Language Understanding 33rd Conference on Neural Information Processing Systems (NEURIPS 2019), Vancouver, Canada. [cited by applicant]
Hoofnagle, Urban (2014): Alan Westin's Privacy Homo Economicus. Berkeley Law. Berkeley Law Repository. Available: https://scholarship.law.berkeley.edu/cgi/viewcontent.cgi?referer=https://www.google.com/&httpsredir=1&art… [cited by applicant]
IEEE (2017): P7006—Standard for Personal Data Artificial Intelligence (AI) Agent. Available: https://standards.ieee.org/project/7006.html. [cited by applicant]
Jones, Tonetti (2018), Nonrivalry and the Economics of Data. Stanford Business. Available: https://www.gsb.stanford.edu/faculty-research/working-papers/nonrivalry-economics-data. [cited by applicant]
Kurth (2017): Massachusetts AG Settles Geofencing Case. Hunton Privacy Blog. Available: https://www.huntonprivacyblog.com/2017/04/13/massachusetts-ag-settles-geofencing-case/. [cited by applicant]
Lanier, J. (2019): Jaron Lanier fixes the internet. Opinion. New York Times. Produced by Adam Westbrook. Series of Videos Available: https://www.nytimes.com/interactive/2019/09/23/opinion/data-privacy-jaron-lanier.html. [cited by applicant]
Levesque, Hector, Ernest Davis, and Leora Morgenstern. “The Winograd schema challenge.” Thirteenth International Conference on the Principles of Knowledge Representation and Reasoning. 2012. [cited by applicant]
McNamara, Smith, Murphy-Hill (2018): Does ACM's Code of Ethics Change Ethical Decision Making in Software Development? North Carolina State University. Available: https://people.engr.ncsu.edu/ermurph3/papers/fse18nier.p… [cited by applicant]
Motiwalla, LI (2016): Unveiling consumer's privacy paradox behaviour in an economic exchange. Available: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5046831/#R50. [cited by applicant]
Norberg, Horne (2007): The Privacy Paradox: Personal Information Disclosure Intentions versus Behaviors. Journal on Consumer Affairs. Available: https://onlinelibrary.wiley.com/doi/abs/10.1111/j.1745-6606.2006.00070.x. [cited by applicant]
Oppenheim (2014): Update: Our app still banned from Play and Google won't talk about it. Disconnect. Available: https://disconnect.me/blog/update-android-app-is-still-banned-from-play-and-google-wont-talk-about-it. [cited by applicant]
Oltramari, Alessandro, et al. (2018): “PrivOnto: A semantic framework for the analysis of privacy policies.” Semantic Web 9.2. p. 185-203. [cited by applicant]
Panchendrarajan, Rrubaa, and Aravindh Amaresan. “Bidirectional LSTM-CRF for Named Entity Recognition.” Proceedings of the 32nd Pacific Asia Conference on Language, Information and Computation. 2018. https://www.aclweb.o… [cited by applicant]
Peters, Matthew E., et al. “Deep contextualized word representations.” arXiv preprint arXiv:1802.05365 (2018). https://arxiv.org/pdf/1802.05365.pdf. [cited by applicant]
Pew (2016): The state of privacy in post-Snowden America. Available: https://www.pewresearch.org/fact-tank/2016/09/21/the-state-of-privacy-in-america/. [cited by applicant]
Pingitore, Rao, Cavallaro, Dwivedi (2017): To share or not to share. What consumers really think about sharing their personal information. DEloitte. Available: https://www2.deloitte.com/content/dam/insights/us/articles/… [cited by applicant]
Radford, Alec, et al. “Improving language understanding by generative pre-training.” URL https://s3-us-west-2. amazonaws.com/openai-assets/researchcovers/languageunsupervised/language understanding paper. pdf (2018). ht… [cited by applicant]
Rajpurkar, Pranav, et al. “Squad: 100,000+ questions for machine comprehension of text.” arXiv preprint arXiv:1606.05250 (2016). [cited by applicant]
Ramanath, Rohan, et al (2014): “Unsupervised alignment of privacy policies using hidden markov models.” Proceedings of the 52nd Annual Meeting of the Association for Computational Linguistics (vol. 2: Short Papers). [cited by applicant]
Reinzel, Gantz, Rydning (2018): The Digitization of the World From Edge to Core. IDC. Available: https://www.seagate.com/files/www-content/our-story/trends/files/idc-seagate-dataage-whitepaper.pdf. [cited by applicant]
Shepard (2019): Weather Apps Under Fire for Collecting, Selling User Data. Security Today. Available: https://securitytoday.com/articles/2019/01/08/weather-apps-under-fire-for-collecting-selling-user-data.aspx. [cited by applicant]
Smith (2018): Public Attitudes Toward Technology Companies. Pew. Available: https://www.pewinternet.org/2018/06/28/public-attitudes-toward-technology-companies/. [cited by applicant]
Socher, Richard, et al. “Recursive deep models for semantic compositionality over a sentiment treebank.” Proceedings of the 2013 conference on empirical methods in natural language processing. 2013. [cited by applicant]
Wycislik-Wilson, Fadilpašić, Turner (2019): Best free privacy software of 2019. Techradar. Available: https://www.techradar.com/best/best-free-privacy-software. [cited by applicant]
Steel, Locke, Cadman, Freese (2018): How much is your personal data worth? Financial Times. Available: https://ig.ft.com/how-much-is-your-personal-data-worth/#axzz2z2agBB6R. [cited by applicant]
Stevens (2019): Top 4 Privacy Trends to Watch in 2019. MacMurray & Shuster. Available: https://mslawgroup.com/top-4-privacy-trends-to-watch-in-2019/. [cited by applicant]
Şulea, Octavia-Maria, et al. (2017): “Exploring the Use of Text Classification in the Legal Domain.” [cited by applicant]
Thomas, Li, Zand, Barrett, Ranieri, Invernizzi, Markov, Comanescu, Eranti, Moscicki, Margolis, Paxson, Bursztein (2017): Data breaches, phishing, or malware? Understanding the risks of stolen credentials. Google Publica… [cited by applicant]
Thompson (2019): Will Artificial Intelligence enhance humanity? Wired. Available: https://www.wired.com/story/will-artificial-intelligence-enhance-hack-humanity/. [cited by applicant]
Trustarc (2016): 2016 TRUSTe/NCSA Consumer Privacy Infographic—US Edition. Available: https://www.trustarc.com/resources/privacy-research/ncsa-consumer-privacy-index-us/. [cited by applicant]
Wang, Alex, et al. “Glue: A multi-task benchmark and analysis platform for natural language understanding.” arXiv preprint arXiv:1804.07461 (2018). https://openreview.net/pdf?id=rJ4km2R5t7. [cited by applicant]
Warstadt, Alex, Amanpreet Singh, and Samuel R. Bowman. “Neural network acceptability judgments.” arXiv preprint arXiv:1805.12471 (2018). [cited by applicant]
Williams, Adina, Nikita Nangia, and Samuel R. Bowman. “A broad-coverage challenge corpus for sentence understanding through inference.” arXiv preprint arXiv:1704.05426 (2017). [cited by applicant]
U.S. Appl. No. 17/128,062 (no Office Action yet on merits). [cited by applicant]
U.S. Appl. No. 17/128,068 (see Non-Final Office Action mailed Aug. 15, 2022). [cited by applicant]
U.S. Appl. No. 17/128,069 (see Non-Final Office Action dated Mar. 16, 2023). [cited by applicant]
U.S. Appl. No. 17/128,078 (see Non-Final Office Action dated Jun. 7, 2022 and Final Office Action dated Nov. 22, 2022). [cited by applicant]
U.S. Appl. No. 17/128,081 (see Non-Final Office Action mailed Jul. 12, 2022). [cited by applicant]
U.S. Appl. No. 17/128,082 (see Non-Final Office Action mailed Jan. 23, 2023). [cited by applicant]
U.S. Appl. No. 17/128,085 (see Non Final Office Action mailed Jun. 22, 2022 and Final Office Action mailed Jan. 5, 2023). [cited by applicant]