System and method for storage and retrieval of information subject to authorization by a data controller

Abstract

A system and method for storage and retrieval of information subject to authorization by a data controller that allows information for purchasing and other information exchange to occur only for authorized parties. A data subject place information about the data subject into a data repository controlled by a data controller. The data controller authorizes a data recipient to obtain that data subject data when authorized by a data subject. Such transactions as purchases of goods and services and applying for college admission are the types of transactions contemplated. The data repository places client software on the computer of the data recipient thereby signifying that the data recipient is authorized. Thereafter, the data recipient can receive information about the data subject when the data subject accepts and offer from the data recipient.

1 . In a system for exchanging information, a data repository server configured to:
 receive an offer associated with a data recipient, the offer including a data recipient identifier identifying the data recipient in a database, and a data subject identifier that uniquely identifies a data subject, the offer originating from a data subject computer accessing software associated with the data recipient, and   if the data subject is registered with the database and the database includes an authorization for the data recipient to receive information associated with the data subject:
 retrieve the information associated with the data subject from the database, said information having been stored in the database during a previous transaction, 
 send a confirmation request to the data subject computer, the confirmation request presenting a choice between transmitting the information, changing the information, or declining to complete transmission of the information, and 
 in response to the confirmation request received from the data subject comprising an election to transmit the information, send the information to the data recipient. 
   
     
     
         2 . The system of  claim 1 , wherein the data subject computer is connected to the data repository server via a network. 
     
     
         3 . The system of  claim 2 , wherein the network is a wireless network. 
     
     
         4 . The system of  claim 2 , wherein the network is the Internet. 
     
     
         5 . The system of  claim 1 , wherein the data subject computer is a wireless device. 
     
     
         6 . The system of  claim 1 , wherein the data subject computer displays data received from the software. 
     
     
         7 . The system of  claim 1 , wherein the software is accessed via a web browser on the data subject computer. 
     
     
         8 . The system of  claim 1 , wherein the offer is an offer to purchase an item. 
     
     
         9 . The system of  claim 8 , wherein the information is purchasing information. 
     
     
         10 . The system of  claim 9 , wherein the purchasing information includes credit card and shipping information associated with the data subject. 
     
     
         11 . The system of  claim 8 , wherein the confirmation request is a buy decision. 
     
     
         12 . The system of  claim 1 , wherein the offer is an application. 
     
     
         13 . The system of  claim 1 , wherein the authorization is set by a data repository controller. 
     
     
         14 . The system of  claim 1 , wherein the data repository server is further configured to:
 prompt the data subject for a passphrase; and   authenticate the data subject based on a passphrase stored within the database.   
     
     
         15 . The system of  claim 1 , wherein the data repository server is further configured to:
 store the transaction information in an authorized data recipient transaction log.   
     
     
         16 . The system of  claim 1 , wherein the data repository server is further configured to:
 store the transaction information in a data subject transaction log.   
     
     
         17 . The system of  claim 1 , wherein the data repository server is further configured to:
 send a transaction confirmation message to the data subject.