IP Library › Granted Patent US 11,960,625
Granted Patent B2
US 11,960,625 · App. 17/313,678 · Granted Apr 16, 2024

Systems and methods for protecting sensitive data in user online activities

Inventors: Pavan Mummareddi (Newark, DE); Ishank Paharia (Newark, DE); Howard Spector (Woolwich, NJ)
Assignee: JPMORGAN CHASE BANK, N.A.
G06F21/6254G06F9/541G06F16/953H04L63/0281H04L63/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,960,625
App. No.
17/313,678
Granted
Apr 16, 2024
Kind
B2
Abstract

A method for local data storage governance may include: authenticating, by a privacy service computer program, a user accessing the privacy service using a privacy application; receiving, by the privacy service computer program and from a proxy service, user activity data; saving, by the privacy service computer program, the user activity data to a privacy database; receiving, by the privacy service computer program and from the privacy application, a request for the user activity data; retrieving, by the privacy service computer program and from the privacy database, the user activity data; communicating, by the privacy service computer program, the user activity data to the privacy application, wherein the privacy application stores the user activity data in local storage; receiving, by the privacy service computer program, an acknowledgement of the user activity data; and purging, by the privacy service computer program, the user activity data from the privacy database.

Claims (57)

1. A method, comprising:

authenticating, by a privacy service computer program, a user accessing a privacy service using a privacy application on an electronic device;

receiving, by the privacy service computer program and from a proxy service, user activity data generated during an online activity, wherein the user activity data comprises personally identifiable information;

saving, by the privacy service computer program, the user activity data, including the personally identifiable information, to a privacy database, wherein the privacy database temporarily stores the user activity data during the online activity;

cleaning, by the privacy service computer program, the user activity data in the privacy database of the personally identifiable information;

receiving, by the privacy service computer program and from the privacy application, a request for the cleaned user activity data;

retrieving, by the privacy service computer program and from the privacy database, the cleaned user activity data;

communicating, by the privacy service computer program, the cleaned user activity data to the privacy application, wherein the privacy application stores the cleaned user activity data in local storage on the electronic device;

receiving, by the privacy service computer program, an acknowledgement of receipt of the cleaned user activity data; and

purging, by the privacy service computer program, the cleaned user activity data from the privacy database.

2. The method of claim 1 , wherein the user activity data is collected in an interaction with a website or domain.

3. The method of claim 1 , wherein the user activity data further comprises electronic device identifying information, browsing behavior, domains accessed, and/or advertisements, and the privacy service computer program also cleans the user activity data of the electronic device identifying information, browsing behavior, domains accessed, and/or advertisements.

4. The method of claim 1 , further comprising:

making available, by the privacy service computer program, the cleaned user activity data to a consuming entity.

5. The method of claim 1 , further comprising:

purging, by the privacy service computer program, the user activity data following expiration of a “time to live” period.

6. The method of claim 1 , wherein an amount and/or a type of cleaned user activity data communicated to the privacy application is based on a parameter.

7. The method of claim 1 , wherein the request for the cleaned user activity data or the acknowledgement of receipt of the user activity data are communicated as an Application Programmable Interface (API).

8. An electronic device, comprising:

a memory storing a privacy service computer program for a privacy service; and

a computer processor;

wherein the privacy service computer program is configured to:

authenticate a user accessing the privacy service using a privacy application on an electronic device;

receive, from a proxy service, user activity data generated during an online activity, wherein the user activity data comprises personally identifiable information;

save the user activity data, including the personally identifiable information, to a privacy database, wherein the privacy database temporarily stores the user activity data during the online activity;

clean, by the privacy service computer program, the user activity data in the privacy database of the personally identifiable information;

receive, from the privacy application, a request for the cleaned user activity data;

retrieve, from the privacy database, the cleaned user activity data;

communicate the cleaned user activity data to the privacy application, wherein the privacy application stores the cleaned user activity data in local storage on the electronic device;

receive an acknowledgement of receipt of the cleaned user activity data; and

purge the cleaned user activity data from the privacy database.

9. The electronic device of claim 8 , wherein the user activity data is collected in an interaction with a website or domain.

10. The electronic device of claim 8 , wherein the user activity data further comprises electronic device identifying information, browsing behavior, domains accessed, and/or advertisements, and the privacy service computer program is configured to clean the user activity data of the electronic device identifying information, browsing behavior, domains accessed, and/or advertisements.

11. The electronic device of claim 8 , wherein the privacy service computer program is further configured to make the cleaned user activity data available to a consuming entity.

12. The electronic device of claim 8 , wherein the privacy service computer program is further configured to purge the privacy service computer program of the cleaned user activity data following expiration of a “time to live” period.

13. The electronic device of claim 8 , wherein an amount and/or a type of cleaned user activity data communicated to the privacy application is based on a parameter.

14. The electronic device of claim 8 , wherein the request for the user activity data or the acknowledgement of receipt of the user activity data are communicated as an Application Programmable Interface (API).

15. A system, comprising:

an electronic device comprising:

a memory storing a privacy application; and

a local data store;

a privacy server executing a privacy service computer program; and

a privacy database;

wherein:

the privacy application is configured to receive, from a user, authenticating information and communicate the authenticating information to the privacy service computer program;

the privacy service computer program is configured to authenticate the user;

the privacy service computer program is configured to receive, from a proxy service, user activity data collected in an interaction with a website or domain generated during an online activity, wherein the user activity data comprises personally identifiable information;

the privacy service computer program is configured to save the user activity data, including the personally identifiable information, to a privacy database, wherein the privacy database temporarily stores the user activity data during the online activity;

the privacy service computer program is configured to clean the user activity data in the privacy database of the personally identifiable information;

the privacy service computer program is configured to receive, from the privacy application, a request for the cleaned user activity data;

the privacy service computer program is configured to retrieve, from the privacy database, the cleaned user activity data;

the privacy service computer program is configured to communicate the cleaned user activity data to the privacy application, wherein:

the privacy application stores the cleaned user activity data in local storage on the electronic device;

the privacy application is configured to communicate an acknowledgement of receipt of the cleaned user activity data to the privacy service computer program; and

the privacy service computer program is configured to purge the cleaned user activity data from the privacy database.

16. The system of claim 15 , wherein the user activity data further comprises electronic device identifying information, browsing behavior, domains accessed, and/or advertisements, and the privacy service computer program is configured to clean the user activity data of the electronic device identifying information, browsing behavior, domains accessed, and/or advertisements.

17. The system of claim 15 , wherein the request for the cleaned user activity data or the acknowledgement of receipt of the user activity data are communicated as an Application Programmable Interface (API).

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 3, 2025
From: MUMMAREDDI, PAVAN; PAHARIA, ISHANK; SPECTOR, HOWARD
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 071299/0521 →
Continuity (1)
Related Publication 20220358246A1 · Nov 10, 2022
Cited By (1)
US 12,353,600