Data consent storage and management system and method
Inventors
Johnston, Benjamin Peter • Wehbeh, Jamie Graeme • Green, Paul Anthony
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12386995-B2
Publication Date
2025-08-12
Expiration Date
Abstract
Disclosed are systems and methods for managing consent to share data from a user device. In some examples, the system stores user identifiers referenced to the user's individual consent preferences. The consent preferences may include data types, data generating devices to which the user consents, types of third parties the user consents to share the data with and other consent preferences. Third parties may communicate with the system, and determine whether a user has consented to share their data.
Core Innovation
The invention relates to managing consent for sharing medical or respiratory therapy data and data generated by user devices using a consent broker system. A consent database stores a user ID that uniquely identifies a user account, with consent preferences including types of data, devices from which the user has consented to share the data, and consumers the user has consented to share the data with. The consent preferences further include a price for the data and a market rate referenced to each type of data stored.
A control system receives a request from a consumer to access data from the user that includes a time stamp, user ID, and a first type of data. The system queries the consent database to determine whether the user associated with the user ID has consented to share the first type of data with the requesting consumer, and sends a response indicating a price for the first type of data from the account referenced to the user ID.
Responsive to a request to purchase, the system processes payment and transmits the first type of data to the consumer. To control data access and facilitate consumer retrieval, an application executing on a user device associated with the data-generating devices sends to the consumer an address where the consumer may access the first type of data, receives a request to access the data at that address, establishes a link between the consumer and a user database comprising the first type of data stored in reference to the user ID, and sends the set of the first type of data to the consumer.
The system includes consent lifecycle handling, including revocation and consent time-window behavior, including notifications and renewal handling for consumer awareness.
Claims Coverage
The document includes two independent claims, a system claim and a method claim. Across the independent claims, the coverage centers on a consent database keyed by a user ID, consent-gated access requests with pricing responses, user identity removal, and transmission of requested data to a consumer via an address or link mechanism.
Consent database storing user ID with consent types, devices, consumers, and pricing
A consent database with a user ID comprising a unique identifier for a user account referenced to a set of types of data the user has consented to share, a set of devices from which the user has consented to share the data generated by those devices, a set of consumers the user has consented to share data with, and a price for the data and a market rate referenced to each type of data stored.
Identify removal and consumer-feature-based data cataloguing
Remove information identifying the user and catalogue the set of types of data based on features relevant to at least one of the set of consumers.
Consent-checked access request including timestamp, user ID, and first data type with pricing response
Receive a request from a consumer to access data from the user comprising a time stamp, user ID associated with an account, and a first type of data; query the consent database to determine whether the user associated with the user ID has consented to share the first type of data; send, to the consumer, a response indicating a price for the first type of data from the account referenced to the user ID.
Purchase-responsive payment processing and transmission of first type of data
Responsive to receiving, from the consumer, a request to purchase the first type of data, process a payment from the consumer and transmit the first type of data to the consumer.
User-device application provides access address, establishes consumer link to user database, and transmits via purchase request
An application executing on a user device of the set of devices storing the first type of data, configured to send, to the consumer, an address where the consumer may access the first type of data; receive a request from the consumer to access the first type of data at the address; establish a link between the consumer and a user database comprising the first type of data stored in reference to the user ID and send a set of the first type of data to the consumer; and responsive to the request to purchase the first type of data, cause transmission of the first type of data to the consumer.
Across both independent claims, the core inventive structure is a consent database keyed by a user ID that records which types of data may be shared with which consumers and from which devices, together with per-type pricing and market rate, coupled to consent-gated consumer access requests that return a price and then enable purchase-responsive transmission of the requested data via an address or link mechanism from a user-device application.
Stated Advantages
The system provides a consent-gated mechanism that determines whether a user has consented to share a requested first type of data before responding with a price.
The system returns a price for a first type of data prior to purchase and then processes payment responsive to a purchase request.
The system removes information identifying the user while managing consent-based access.
The system provides a consumer access address and establishes a link between the consumer and a user database for transmitting the requested first type of data.
Documented Applications
Managing consent and sharing of data in connection with medical and respiratory therapy and other devices, including respiratory therapy devices such as CPAP and ventilators and other user devices such as wearables.
Managing authorization and data access for third-party consumers querying the consent system for specific data types and receiving consent and price responses.
Interested in licensing this patent?