Secure personal information profile

摘要

A method, programmed medium and system are provided for implementing a prebuilt and encrypted personal identification information (PII) profile which resides only on a user's computer and is prevented from being permanently stored in a server's database. When a user visits a web site and creates a new account, the site submits a request to query the user's profile using an extension to the HTTP protocol. The user is prompted by the user's browser to grant the site permission to do so and the site automatically uploads a non-personal identifying number (ID) to the user's system to create an account. User-selected fields of the PII are transmitted to the server for processing a user-requested transaction. All personal information remains on the user's computer within the user's encrypted PII profile and is deleted at the server after the completion of the requested transaction.

主权项

1. A method for a processing server to process personal information received from a user of a user device, said method comprising:
receiving said personal information at said processing server from said user device, said personal information being used by said processing server to process a requested transaction, said requested transaction being one of a plurality of transaction types available at said processing server, said personal information including a plurality of user-selectable fields wherein different transaction types require information from different ones of said plurality of said user-selectable fields; initiating a processing of said requested transaction by said processing server; and erasing said personal information from said processing server while maintaining said personal information on a non-volatile storage unit within said user device when said requested transaction has been completed.