Implementing a privacy infrastructure for the internet of things

Inventors

Sadeh, Norman

Interested in licensing this patent?

MTEC can help explore whether this patent might be available for licensing for your application.

Assignees

Member
Carnegie Mellon University
Carnegie Mellon University

Carnegie Mellon University is a global research institution based in Pittsburgh, Pennsylvania, recognized for interdisciplinary education, research, and innovation in science, engineering, arts, technology, and social sciences. The university leads advancements in artificial intelligence, robotics, digital health, and performing arts. Located in a technology-driven and culturally rich city, CMU powers real-world impact through research centers, industry engagement, workforce training, and initiatives that shape regional and global communities.

Publication Number

US-12511409-B2

Patent

Publication Date

2025-12-30

Expiration Date


Abstract

An Internet of Things (IoT) resource remotely senses data about a user. A computing device of the user comprises a personal privacy app (“PPA”) that: receives data about the IoT resource, wherein the data about the IoT resource comprises available user-specific privacy requests related to data practices of the IoT resource; communicates a privacy request for the user with respect to the IoT resource, wherein the privacy request is one of the available user-specific privacy requests and wherein the privacy request communicated by the PPA is based on the data received about the IoT resource; and in response to a query related to the privacy request, causes electronic documentation to be transmitted that demonstrates that the user qualifies to submit the privacy request, such that the privacy request is applied to data collected about the user by the IoT resource.

Core Innovation

A system includes an Internet of Things (IoT) resource that senses data about a user from a sensor, and a computing device of the user that executes a personal privacy assistant (PPA) app. The PPA app receives data about the IoT resource, where the data about the IoT resource comprises available user-specific privacy requests related to data practices of the IoT resource, and communicates a privacy request for the user with respect to the IoT resource based on the data received.

In response to a query related to the privacy request, the PPA app causes electronic documentation to be transmitted that demonstrates that the user qualifies to submit the privacy request based on information received by the PPA app about the IoT resource, such that the privacy request is applied to at least one data practice of the IoT resource.

In the authorized-agent mediation model, an authorized agent is authorized to submit privacy requests on behalf of the user and is a trusted source of privacy requests for the IoT resource. The PPA app communicates the privacy request to the authorized agent based on the data received about the IoT resource, and the authorized agent communicates the privacy request for implementation of the privacy request by the IoT resource.

Claims Coverage

The independent claims identified are clm-00001, clm-00016, clm-00026, and clm-00027. Across these independent claims, the main inventive features cover three inventive features: an IoT sensing resource plus a PPA app that uses IoT resource description data to communicate a user-specific privacy request; transmission of electronic documentation demonstrating user qualification so the privacy request can be applied to at least one data practice; and an authorized-agent trusted source model for submitting privacy requests on the user’s behalf for implementation by the IoT resource.

IoT sensing resource with PPA-driven privacy request selection

An Internet of Things (IoT) resource for sensing data about a user from a sensor, and a computing device executing a personal privacy assistant (PPA) app that receives data about the IoT resource including available user-specific privacy requests related to data practices and communicates a privacy request for the user with respect to the IoT resource based on the data received.

Electronic documentation demonstrating user qualification for applying privacy requests

In response to a query related to the privacy request, the PPA app causes electronic documentation to be transmitted demonstrating that the user qualifies to submit the privacy request based on information received by the PPA app about the IoT resource, such that the privacy request is applied to at least one data practice of the IoT resource.

Authorized agent trusted source for privacy requests submission and implementation

An authorized agent that is authorized to submit privacy requests on behalf of the user and is a trusted source of privacy requests for the IoT resource, wherein the PPA app receives data about the IoT resource including available user-specific privacy requests and communicates, to the authorized agent, a privacy request based on the data received, and wherein the authorized agent communicates the privacy request for implementation by the IoT resource.

Method configuring a privacy request with qualification documentation

A method comprising receiving, by a personal privacy assistant app (PPA) app running on a computer device of the user, data about the IoT resource including available user-specific privacy requests related to data practices; communicating a privacy request based on the received data; and in response to a query related to the privacy request, causing electronic documentation to be transmitted demonstrating that the user qualifies to submit the privacy request, such that the privacy request is applied to at least one data practice of the IoT resource.

Method configuring a privacy request via trusted authorized agent

A method comprising receiving, by a personal privacy assistant app (PPA) app running on a computer device of the user, data about the IoT resource including available user-specific privacy requests; communicating, by the PPA to an authorized agent, a privacy request based on the received data where the authorized agent is a trusted source of privacy requests for the IoT resource; and communicating, by the authorized agent, the privacy request for implementation of the privacy request by the IoT resource.

Across the independent claims, the coverage centers on a PPA that receives IoT resource data listing available user-specific privacy requests and communicates a privacy request based on that received data, including causing electronic documentation to be transmitted demonstrating user qualification so the privacy request is applied to data practices, and routing privacy requests through an authorized agent that is a trusted source and that communicates the privacy request for implementation by the IoT resource.

Stated Advantages

Not explicitly described in patent.

Documented Applications

Not explicitly described in patent.

JOIN OUR MAILING LIST

Stay Connected with MTEC

Keep up with active and upcoming solicitations, MTEC news and other valuable information.