Secure personal information exchange by an information handling system
Computer-based information security techniques are provided that enable a user to reduce and control the amount of personal information digitally supplied to any given service provider when transacting or otherwise interacting with these service providers. Using these techniques, the user can release the minimally required personal information needed for a particular service provider to perform a particular service, without a link to a public identity of the user. Stated differently, only the information that a particular service provider needs in order to complete a service provided by the service provider is conveyed to the service provider based on the user's policy settings. An encryption scheme is used to securely transfer the various portions of personal information to the various service providers.
1. An information handling system, comprising:
a memory storing a private key and personally identifying information associated with a user; and
a processor coupled to the memory, wherein the processor is configured to perform operations comprising:
receiving a first encrypted request for a first portion of the personally identifying information associated with the user, wherein:
the encrypted request is encrypted using a first public key of a first key pair including the private key and the first public key,
a completion of a first service by a first service provider is based on the first portion,
the first service is part of a process that includes the first service performed by the first service provider and a second service performed by a second service provider different than the first service provider,
the second service is different than the first service, and
the second service is performed by the second service provider based on a completion of the first service by the first service provider;
decrypting the first encrypted request using the private key;
encrypting the first portion of the personally identifying information using a second public key associated with the first service provider;
transmitting the first portion that is encrypted to a first computing device associated with the first service provider;
receiving, subsequent to a completion of the first service by the first service provider, a second encrypted request for a second portion of the personally identifying information associated with the user, wherein:
the second encrypted request is encrypted using the first public key,
the second portion is different than the first portion, and
a completion of the second service by the second service provider is based on the second portion;
decrypting the second encrypted request using the private key;
encrypting the second portion of the personally identifying information using a third public key associated with the second service provider; and
transmitting the second portion that is encrypted to a second computing device associated with the second service provider.
2. The information handling system of claim 1 , wherein the personally identifying information associated with the user consists of the first portion, the second portion, and a remaining portion, and wherein the second portion and the remaining portion are not transmitted to the first computing device.
3. The information handling system of claim 2 , wherein, of the personally identifying information associated with the user, the completion of the first service requires only the first portion.
4. The information handling system of claim 3 , wherein the first portion and the remaining portion are not transmitted to the second computing device.
5. The information handling system of claim 4 , wherein, of the personally identifying information associated with the user, the completion of the second service requires only the second portion.
6. The information handling system of claim 1 , wherein the operations further include discarding the private key and the first public key subsequent to a completion of the process.
7. The information handling system of claim 1 , wherein the personally identifying information associated with the user includes biometric information, demographic information, contact information, user preferences, payment information, an invoice for goods or services, or address information, or a combination thereof.
8. A method, comprising:
receiving a first encrypted request for a first portion of personally identifying information associated with a user, wherein:
the encrypted request is encrypted using a first public key of a first key pair including a private key and the first public key,
a completion of a first service by a first service provider is based on the first portion,
the first service is part of a process that includes the first service performed by the first service provider and a second service performed by a second service provider different than the first service provider,
the second service is different than the first service, and
the second service is performed by the second service provider based on a completion of the first service by the first service provider;
decrypting the first encrypted request using the private key;
encrypting the first portion of the personally identifying information using a second public key associated with the first service provider;
transmitting the first portion that is encrypted to a first computing device associated with the first service provider;
receiving, subsequent to a completion of the first service by the first service provider, a second encrypted request for a second portion of the personally identifying information associated with the user, wherein:
the second encrypted request is encrypted using the first public key,
the second portion is different than the first portion, and
a completion of the second service by the second service provider is based on the second portion;
decrypting the second encrypted request using the private key;
encrypting the second portion of the personally identifying information using a third public key associated with the second service provider; and
transmitting the second portion that is encrypted to a second computing device associated with the second service provider.
9. The method of claim 8 , wherein the personally identifying information associated with the user consists of the first portion, the second portion, and a remaining portion, and wherein the second portion and the remaining portion are not transmitted to the first computing device.
10. The method of claim 9 , wherein, of the personally identifying information associated with the user, the completion of the first service requires only the first portion.
11. The method of claim 10 , wherein the first portion and the remaining portion are not transmitted to the second computing device.
12. The method of claim 11 , wherein, of the personally identifying information associated with the user, the completion of the second service requires only the second portion.
13. The method of claim 8 , further comprising discarding the private key and the first public key subsequent to a completion of the process.
14. The method of claim 8 , wherein the personally identifying information associated with the user includes biometric information, demographic information, contact information, user preferences, payment information, an invoice for goods or services, or address information, or a combination thereof.
15. A computer program product, comprising:
a non-transitory computer readable medium comprising code for performing operations comprising:
receiving a first encrypted request for a first portion of personally identifying information associated with a user, wherein:
the encrypted request is encrypted using a first public key of a first key pair including a private key and the first public key,
a completion of a first service by a first service provider is based on the first portion,
the first service is part of a process that includes the first service performed by the first service provider and a second service performed by a second service provider different than the first service provider,
the second service is different than the first service, and
the second service is performed by the second service provider based on a completion of the first service by the first service provider;
decrypting the first encrypted request using the private key;
encrypting the first portion of the personally identifying information using a second public key associated with the first service provider;
transmitting the first portion that is encrypted to a first computing device associated with the first service provider;
receiving, subsequent to a completion of the first service by the first service provider, a second encrypted request for a second portion of the personally identifying information associated with the user, wherein:
the second encrypted request is encrypted using the first public key,
the second portion is different than the first portion, and
a completion of the second service by the second service provider is based on the second portion;
decrypting the second encrypted request using the private key;
encrypting the second portion of the personally identifying information using a third public key associated with the second service provider; and
transmitting the second portion that is encrypted to a second computing device associated with the second service provider.
16. The computer program product of claim 15 ,
wherein the personally identifying information associated with the user consists of the first portion, the second portion, and a remaining portion,
wherein the second portion and the remaining portion are not transmitted to the first computing device, and
wherein the first portion and the remaining portion are not transmitted to the second computing device.
17. The computer program product of claim 15 , wherein, of the personally identifying information associated with the user, the completion of the first service requires only the first portion.
18. The computer program product of claim 17 , wherein, of the personally identifying information associated with the user, the completion of the second service requires only the second portion.
19. The computer program product of claim 15 , wherein the operations further include discarding the private key and the first public key subsequent to a completion of the process.
20. The computer program product of claim 15 , wherein the personally identifying information associated with the user includes biometric information, demographic information, contact information, user preferences, payment information, an invoice for goods or services, or address information, or a combination thereof.