IP Library Granted Patent US 10,498,769
Granted Patent B2
US 10,498,769 · App. 15/948,693 · Granted Dec 3, 2019

Monitoring a privacy rating for an application or website

Inventor: Mark A. Sartor (Princeton Junction, NJ)
Assignee: The Privacy Factor, LLC
H04L63/20G06F21/53G06F21/604G06F21/6245H04L63/00H04L63/1416H04L63/1483G06F16/951
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,498,769
App. No.
15/948,693
Granted
Dec 3, 2019
Kind
B2
Abstract

A method, comprising: obtaining a current version of a policy associated with an application or website; comparing the current version against a previous version to identify differences in key words or phrases, each difference corresponding to interactions of the application or website, the interactions comprising use of computing device functionality or personal information; for each difference previously associated with a particular level of privacy risk, retrieving the particular level from a database; for each difference not previously associated with the particular level: generating a respective level of privacy risk associated with particular interactions of the application or website corresponding to the difference; associating the respective level to the difference; and storing in the database the difference and the respective level associated with the difference; generating a current privacy risk score based on each of the particular levels and on each of the respective levels associated with the one or more differences; determining if there was a privacy risk change; and if so, notifying the user.

Claims (49)

1. A method of monitoring privacy risk, the method comprising:

awaiting satisfaction of a trigger condition;

upon detecting the satisfaction of the trigger condition, obtaining a current version of a policy associated with an application or website, the current version of the policy being in a machine-readable format;

comparing the current version of the policy against a previous version of the policy associated with the application or website to identify one or more differences in key words or phrases, the one or more differences in key words or phrases including one or more added key words, added phrases, removed key words, or removed phrases, each of the one or more differences in key words or phrases corresponding to one or more interactions of the application or website, the one or more interactions comprising use of functionality of a computing device or use of personal information of a user;

for each difference in key word or phrase previously associated with a particular level of privacy risk, retrieving the particular level of privacy risk for the difference in keyword or phrase from a database;

for each difference in keyword or phrase not previously associated with the particular level of privacy risk:

generating a respective level of privacy risk associated with one or more particular interactions of the application or website corresponding to the difference in key word or phrase;

associating the respective level of privacy risk to the difference in key word or phrase; and

storing in the database the difference in key word or phrase and the respective level of privacy risk associated with the difference in key word or phrase;

generating a current privacy risk score based at least on each of the particular levels of privacy risk and on each of the respective levels of privacy risk associated with the one or more differences in key words or phrases for the current version of the policy associated with the application or website;

determining if there was a privacy risk change based on the current version of the policy in view of the previous version of the policy; and

if there was a privacy risk change, then notifying the user of the privacy risk change.

2. The method of claim 1 , wherein the trigger condition includes a determination whether a predetermined amount of time has elapsed.

3. The method of claim 1 , wherein the trigger condition is based on a notification preference set by the user.

4. The method of claim 1 , wherein the previous version of the policy includes a stored version of the policy that was used to generate a previous privacy risk score.

5. The method of claim 1 , wherein the current privacy risk score indicates a level of privacy risk associated with the application or website.

6. The method of claim 1 , wherein the current privacy risk score indicates a level of privacy risk associated with a category associated with the application or website.

7. The method of claim 1 , wherein the privacy risk change includes a change between the current privacy risk score and a previous privacy risk score.

8. The method of claim 1 , wherein the privacy risk change includes a change in the one or more interactions of the application or website.

9. The method of claim 1 , wherein the step of generating the current privacy risk score for the application or website comprises:

generating a current privacy risk score for the current version of the policy based at least on each of the particular levels of privacy risk and on each of the respective levels of privacy risk associated with the one or more differences in key words or phrases; and

generating the current privacy risk score for the application or website based on the current privacy risk score for the current version of the policy.

10. The method of claim 1 , wherein the policy includes at least one of a privacy policy, a terms and conditions agreement, a data usage policy, a terms of use policy, a terms of service agreement, permissions, an agreement requiring acceptance prior to execution of the application or website, a social media policy, a website user policy, a customer loyalty program agreement, or a financial services agreement.

11. A system comprising:

at least one processor;

memory coupled to the at least one processor; and

program instructions stored in the memory and executable by the at least one processor, the program instructions when executed by the at least one processor causing the at least one processor to perform the steps of:

awaiting satisfaction of a trigger condition;

upon detecting the satisfaction of the trigger condition, obtaining a current version of a policy associated with an application or website, the current version of the policy being in a machine-readable format;

comparing the current version of the policy against a previous version of the policy associated with the application or website to identify one or more differences in key words or phrases, the one or more differences in key words or phrases including one or more added key words, added phrases, removed key words, or removed phrases, each of the one or more differences in key words or phrases corresponding to one or more interactions of the application or website, the one or more interactions comprising use of functionality of a computing device or use of personal information of a user;

for each difference in key word or phrase previously associated with a particular level of privacy risk, retrieving the particular level of privacy risk for the difference in keyword or phrase from a database;

for each difference in keyword or phrase not previously associated with the particular level of privacy risk:

generating a respective level of privacy risk associated with one or more particular interactions of the application or website corresponding to the difference in key word or phrase;

associating the respective level of privacy risk to the difference in key word or phrase; and

storing in the database the difference in key word or phrase and the respective level of privacy risk associated with the difference in key word or phrase;

generating a current privacy risk score based at least on each of the particular levels of privacy risk and on each of the respective levels of privacy risk associated with the one or more differences in key words or phrases for the current version of the policy associated with the application or website;

determining if there was a privacy risk change based on the current version of the policy in view of the previous version of the policy; and

if there was a privacy risk change, then notifying the user of the privacy risk change.

12. The system of claim 11 , wherein the trigger condition includes a determination whether a predetermined amount of time has elapsed.

13. The system of claim 11 , wherein the trigger condition is based on a notification preference set by the user.

14. The system of claim 11 , wherein the previous version of the policy includes a stored version of the policy that was used to generate a previous privacy risk score.

15. The system of claim 11 , wherein the current privacy risk score indicates a level of privacy risk associated with the application or website.

16. The system of claim 11 , wherein the current privacy risk score indicates a level of privacy risk associated with a category associated with the application or website.

17. The system of claim 11 , wherein the privacy risk change includes a change between the current privacy risk score and a previous privacy risk score.

18. The system of claim 11 , wherein the privacy risk change includes a change in the one or more interactions of the application or website.

19. The system of claim 11 , wherein the step of generating the current privacy risk score for the application or website comprises:

generating a current privacy risk score for the current version of the policy based at least on each of the particular levels of privacy risk and on each of the respective levels of privacy risk associated with the one or more differences in key words or phrases; and

generating the current privacy risk score for the application or website based on the current privacy risk score for the current version of the policy.

20. The system of claim 11 , wherein the policy includes at least one of a privacy policy, a terms and conditions agreement, a data usage policy, a terms of use policy, a terms of service agreement, permissions, an agreement requiring acceptance prior to execution of the application or website, a social media policy, a website user policy, a customer loyalty program agreement, or a financial services agreement.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 9, 2018
From: SARTOR, MARK A.
To: THE PRIVACY FACTOR, LLC
Reel/Frame 045484/0653 →
Continuity (6)
Continuation 15393138 · Dec 28, 2016
Continuation 15003626 · Jan 21, 2016
Continuation 14529558 · Oct 31, 2014
Continuation 14161462 · Jan 22, 2014
Provisional Application 61755566 · Jan 23, 2013
Related Publication 20180248914A1 · Aug 30, 2018
Cited By (1)
US 12,737,428