Method for handling privacy data

1. A method of controlling access to user private data via an open communication network, said method comprising:

dividing, by a database controller, data sets of the user private data provided by a digital data source device into first and second data sets having first and second classifications, respectively, the first classification defining a first privacy level of the first data set of the user private data and being associated with a first encryption key, the second classification defining a second privacy level of the second data set of the user private data and being associated with a second encryption key independent of the first encryption key;

storing the first data set of the user private data encrypted with the first encryption key, such that all data sets of the user private data having the first classification defining the first privacy level are encrypted with the first encryption key;

storing the second data set of the user private data encrypted with the second encryption key, such that all data sets of the user private data having the second classification defining the second privacy level are encrypted with the second encryption key;

receiving, from a device associated with a stakeholder, a request to access the first data set of the user private data of the first classification at the first privacy level; and

authorizing, by the database controller, access to the first data set of the user private data by the device by providing, via the open communication network, the device with the first data set of the user private data.

2. The method of claim 1 , wherein the providing step comprise transmitting, to the device, the first data set of the user private data encrypted with the first encryption key.

3. The method of claim 1 , wherein the authorizing step further comprises:

receiving, from the device by the database controller, the first encryption key;

decrypting, using the received first encryption key, the stored first data set of the user private data having been encrypted with the first encryption key; and

transmitting, to the device, the decrypted first data set of the user private data.

4. The method of claim 1 , wherein the authorizing step further comprises:

receiving, from the device by the database controller, the first encryption key and a service key;

decrypting, using the received first encryption key, the stored first data set of the user private data having been encrypted with the first encryption key to generate a decrypted version of the first data set of the user private data;

encrypting, using the received service key, the decrypted version of the first data set of the user private data; and

transmitting, to the device, the first data set of the user private data encrypted with the service key.

5. The method of claim 1 , wherein each of the first and second encryption keys is one of a symmetrical type or an asymmetrical type.

6. The method of claim 1 , wherein the database controller includes a managing center configured to manage a plurality of digital data source devices, and

the method further comprises receiving, at the managing center, user private data from the digital data source device of the plurality of digital data source devices.

7. The method of claim 6 , wherein the plurality of digital data source devices include one or more of smart meters, electrical vehicles, or radio-frequency identification (RFID) devices.

8. The method of claim 1 , wherein the user private data comprises data from a smart appliance.

9. The method of claim 1 , wherein the first classification is at least one of user preferences, usage statistics, location, and presence information.

10. A system configured to control access, via an open communication network, to user private data, the system comprising:

a data source device configured to provide user private data comprising first and second data sets having respective first and second classifications, the first classification defining a first privacy level of the first data sets of the user private data and being associated with a first encryption key, the second classification defining a second privacy level of the second data sets of the user private data and being associated with a second encryption key, the first encryption key associated with the first classification being independent of the second encryption key of the second classification, and the data source device being configured to

store the first data sets of the user private data encrypted with the first encryption key, such that all data sets of the user private data having the first classification defining the first privacy level are encrypted with the first encryption key, and

store the second data sets of the user private data encrypted with the second encryption key, such that all data sets of the user private data having the second classification defining the second privacy level are encrypted with the second encryption key;

a client data processing device associated with a stakeholder;

a database configured to store the encrypted first data sets and the encrypted second data sets; and

a database controller configured to control the database;

wherein the client data processing device is configured to request access to user private data having the first classification, and

the database controller is configured to authorize access to the user private data having the first classification by providing, via the open communication network, the client data processing device with the user private data.

11. The system of claim 10 , wherein the database controller is further configured to transmit, to the client data processing device, the first data set of the user private data encrypted with the first encryption key.

12. The system of claim 10 , wherein the database controller is further configured to:

receive, from the client data processing device, the first encryption key;

decrypt, using the received first encryption key, the stored first data set of the user private data having been encrypted with the first encryption key; and

transmit, to the client data processing device, the decrypted first data set of the user private data.

13. The system of claim 10 , wherein the database controller is further configured to:

receive, from the client data processing device, the first encryption key and a service key;

decrypt, using the received first encryption key, the stored first data set of the user private data having been encrypted with the first encryption key to generate a decrypted version of the first data set of the user private data;

encrypt, using the received service key, the decrypted version of the first data set of the user private data; and

transmit, to the client data processing device, the first data set of the user private data encrypted with the service key.

14. The system of claim 10 , wherein the database is distributed at a plurality of storage locations in the open communication network.

15. The system of claim 10 , wherein a portion of the database is stored in a remote storage device at a predetermined location in the open communication network.

16. The system of claim 10 , wherein the database controller includes a managing center configured to manage a plurality of data source devices, and

the data source device of the plurality of data source devices is configured to send data to the database controller.

17. The system of claim 16 , wherein the plurality of digital data source devices comprise one or more of smart meters, electrical vehicles, or radio-frequency identification (RFID) devices.

18. The system of claim 10 , wherein the open communication network is entirely or partly a smart grid network or entirely or partly a home area network.

19. The system of claim 10 , wherein each of the first and second encryption keys is one of a symmetrical type or an asymmetrical type.

20. The system of claim 10 , wherein the user private data comprises data from a smart appliance and the first and second classifications are at least one of user preferences, usage statistics, location, and presence information.