US 12,093,425 B2
Personal information platforms
John Tsai, San Francisco, CA (US); and Norihiro Edwin Aoki, Woodside, CA (US)
Assigned to PAYPAL, INC.
Filed by PAYPAL, INC., San Jose, CA (US)
Filed on May 10, 2023, as Appl. No. 18/315,126.
Application 18/315,126 is a continuation of application No. 17/678,216, filed on Feb. 23, 2022, granted, now 11,687,669.
Application 17/678,216 is a continuation of application No. 16/896,794, filed on Jun. 9, 2020, granted, now 11,321,485, issued on May 3, 2022.
Application 16/896,794 is a continuation of application No. 16/266,476, filed on Feb. 4, 2019, granted, now 10,678,943, issued on Jun. 9, 2020.
Application 16/266,476 is a continuation of application No. 14/980,414, filed on Dec. 28, 2015, granted, now 10,198,464, issued on Feb. 5, 2019.
Prior Publication US 2023/0325530 A1, Oct. 12, 2023
Int. Cl. G06F 21/62 (2013.01); H04L 9/40 (2022.01); G06F 16/00 (2019.01); G06F 16/23 (2019.01); G06F 16/2457 (2019.01); G06F 21/60 (2013.01)
CPC G06F 21/6245 (2013.01) [G06F 21/62 (2013.01); H04L 63/20 (2013.01); G06F 16/00 (2019.01); G06F 16/2358 (2019.01); G06F 16/24573 (2019.01); G06F 21/60 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
in response to receiving a data access request from a first entity server configured to provide a service to a first user, accessing a first set of data associated with the first user, wherein the first set of data corresponds to a set of personal user data types;
analyzing a utilization of a second set of data associated with a second user by the first entity server for providing the service to the second user;
determining, based on the analyzing the utilization of the second set of data by the first entity server, that a first subset of the set of personal user data types corresponding to the second set of data is required by the first entity server to provide the service to the second user;
in response to determining that the first subset of the set of personal user data types is required by the first entity server to provide the service, generating a data access policy for the first entity server, wherein the data access policy allows the first entity server to access a first subset of the first set of data corresponding to the first subset of the set of personal user data types; and
transmitting, to the first entity server, a response to the data access request based on the data access policy.