Protecting privacy of shared personal information
Methods and apparatus are described to protect personal information by decoupling it from user identity. According to specific embodiments, this is accomplished by associating each user with an anonymous token that is decoupled from the user's identity. Personal information (e.g., a user's physical or geographic location) is stored in association with this anonymous token, with no apparent connection to the user. Those allowed to access the personal information—including the owner himself—are granted the ability through a variety of mechanisms to connect the anonymous token back to the owner. The personal information can then be retrieved by locating the data stored in association with the anonymous token in the data store.
1. A system, comprising:
one or more data stores configured to store first personal information about a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user in the system;
one or more computing devices configured to implement:
a data sharing component configured to determine whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first anonymous token and the first user ID such that the second user is allowed to access personal information about the first user, and send the first personal information associated with the first anonymous token to a second user device associated with the second user for display if the key associated with the second user ID corresponding to the second user unlocks the connection between the first anonymous token and the first user ID.
2. The system of claim 1 , the first user being associated with a first user device.
3. The system of claim 2 , wherein the one or more computing devices are further configured to implement a login component, the login component configured to receive a first user ID and credentials from the first user device, and return the first anonymous token to the first user device if the credentials authorize the first user device corresponding to the first user ID to access the system.
4. The system of claim 3 , wherein the credentials comprise a password, and wherein the first anonymous token is derived from the password.
5. The system of claim 3 , wherein the first user device communicates with the login component, and the login component is configured to communicate with one or more of the data sharing component or the one or more data stores on behalf of the first user device.
6. The system of claim 1 , wherein the one or more computing devices are further configured to implement a permissions component, the permissions component being configured to encrypt a connection between the first user ID and the first anonymous token such that the key associated with the second user decrypts the connection between the first anonymous token and the first user ID.
7. The system of claim 6 , wherein the one or more computing devices are further configured to implement a privacy enhancing component, the privacy enhancing component being configured to connect a second anonymous token with the second user ID corresponding to the second user, the connection between the second anonymous token and the second user ID being unlocked by the key associated with the second user ID, wherein the permissions component is further configured to associate the second anonymous token with the connection between the first anonymous token and the first user ID.
8. The system of claim 2 , wherein the one or more computing devices include the first user device and the data sharing component resides on the first user device.
9. The system of claim 1 , wherein the first personal information is stored unencrypted in the data store.
10. An apparatus, comprising:
a memory; and
one or more processors, at least one of the memory or the processors being adapted for:
storing first personal information related to a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user;
determining whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first user ID and the first anonymous token such that the second user is allowed to access personal information about the first user; and
sending the personal information associated with the first anonymous token to the second user device associated with the second user for display if the key connects the first user ID to the first anonymous token.
11. The apparatus of claim 10 , at least one of the memory or the processors being further adapted for:
receiving the first user ID and credentials from a first user device corresponding to the first user; and
returning the first anonymous token to the first user device if the credentials authorize access by the first user device corresponding to the first user ID.
12. The apparatus of claim 10 , wherein the first personal information comprises a geographic or physical location of the first user.
13. The apparatus of claim 10 , wherein the second user is a contact or friend of the first user.
14. The apparatus of claim 10 , wherein the first personal information is stored unencrypted.
15. A method, comprising:
storing first personal information about a first user in association with a first anonymous token decoupled from a first user identifier (ID) corresponding to the first user;
determining whether a key associated with a second user ID corresponding to a second user unlocks a connection between the first anonymous token and the first user ID such that the second user is allowed to access personal information about the first user; and
sending the first personal information associated with the first anonymous token to a second user device associated with the second user for display if the key associated with the second user ID corresponding to the second user unlocks the connection between the first anonymous token and the first user ID.
16. The method of claim 15 , wherein the first personal information comprises a geographic or physical location of the first user.
17. The method of claim 15 , wherein the second user is a contact or friend of the first user.
18. The method of claim 15 , wherein the first personal information is stored unencrypted.
19. The method of claim 15 , further comprising:
receiving the first user ID and credentials from a first user device corresponding to the first user; and
returning the first anonymous token to the first user device if the credentials authorize access by the first user device corresponding to the first user ID.
20. The method of claim 19 , wherein the credentials comprise a password, and wherein the first anonymous token is derived from the password.