Systems and Methods for Context-Based Permissioning of Personally Identifiable Information

Abstract

A method is provided, including establishing a plurality of context profiles for a user; detecting an event associated with a request for personal information of the user; generating a request for consent to share the personal information of the user with a third party; sending, to the user, the request for consent to share the personal information of the user with the third party; receiving, from the user, consent to share at least a subset of the requested personal information with the third party when at least a first context profile, of the plurality of context profiles, is active; determining an active context profile for the user based on one or more signals indicative of the user's context; determining whether the active context profile matches the first context profile; in accordance with a determination that the active context profile matches the first context profile, sharing the personal information of the user with the third party.

1 . (canceled) 
     
     
         2 . A method for providing access to personal information of a user, comprising:
 at a server system including one or more electronic devices with one or more processors and memory storing one or more programs for execution by the one or more processors:
 establishing a plurality of context profiles for a user, wherein:
 at least a first context profile of the plurality of context profiles, when active, is configured to operate in one of two or more modes that includes a normal mode and at least one expanded permission mode, 
 an active context profile of the plurality of context profiles corresponds to a current context of a user device, 
 an active mode of the active context profile is the normal mode or a respective expanded permission mode of the at least one expanded permission mode, and 
 the first context profile of the plurality of context profiles includes a first set of one or more permissions identifying a first set of third parties with which the personal information of the user can be shared when the first context profile is active; 
 
 in accordance with a determination that the active context profile for the user device is the first context profile and the active mode of the user device is the normal mode of the first context profile, sharing personal information of the user with the first set of third parties; 
 detecting a mode-switching event that changes the active mode of the user device from the normal mode of the first context profile to the expanded permission mode of the first context profile, wherein the mode-switching event is detected automatically without user input; and 
 in response to detecting the mode-switching event, performing a permission expansion for the first context profile that includes sharing the personal information of the user with a first expanded set of third parties that includes the first set of third parties and at least one additional third party. 
   
     
     
         3 . The method of  claim 2 , wherein detecting the mode-switching event includes detecting one or more signals that indicate the current context of the user device. 
     
     
         4 . The method of  claim 3 , wherein the one or more signals that indicate the current context of the user device are generated by a peripheral device of the user device. 
     
     
         5 . The method of  claim 2 , wherein the personal information of the user is a limited set of information that is identified in the first context profile of the plurality of context profiles. 
     
     
         6 . The method of  claim 5 , wherein the permission expansion for the first context profile includes sharing additional personal information of the user with the first set of third parties in accordance with an expanded version of the limited set of information that is identified in the first context profile of the plurality of content profiles. 
     
     
         7 . The method of  claim 2 , wherein:
 the first context profile of the plurality of context profiles includes a set of one or more subject areas pertinent to the first context profile; and   the at least one additional third party is associated with at least one subject area of the set of one or more subject areas pertinent to the first content profile.   
     
     
         8 . The method of  claim 7 , wherein the set of one or more subject areas pertinent to the first context profile include at least one of a category of goods that are relevant to the first context profile or a category of services that are relevant to the first context profile. 
     
     
         9 . The method of  claim 7 , wherein:
 the first context profile of the plurality of context profiles includes a second set of one or more permissions identifying a second set of third parties that are permitted to contact the user when the first context profile is active;   in response to detecting the mode-switching event, performing the permission expansion for the first context profile includes receiving, in accordance with an expanded version of the second set of one or more permissions, information from a second expanded set of third parties that includes the second set of third parties and at least one additional third party, wherein the at least one additional third party is associated with at least one subject area of the set of one or more subject areas pertinent to the first content profile.   
     
     
         10 . The method of  claim 2 , wherein:
 the first context profile of the plurality of context profiles includes a third set of one or more permissions identifying how the second set of third parties may contact the user when the first context profile is active.   
     
     
         11 . The method of  claim 10 , wherein the third set of one or more permissions identifying how the first set of third parties may contact the user includes:
 a first subset of permissions identifying times when the first set of third parties are permitted to contact the user; and   a second subset of permissions identifying communication types that the first subset of third parties are permitted to use to contact the user.   
     
     
         12 . The method of  claim 10 , wherein the third set of one or more permissions identifying how the first set of third parties may contact the user includes:
 a third subset of permissions identifying times when the first set of third parties are not permitted to contact the user; and   a fourth subset of permissions identifying communication types that the first set of third parties are not permitted to use to contact the user.   
     
     
         13 . The method of  claim 10 , wherein the permission expansion for the first context profile includes receiving information from the second set of third parties in accordance with an expanded version of the third set of one or more permissions. 
     
     
         14 . The method of  claim 2 , wherein:
 the plurality of context profiles is stored on a first electronic device of the one or more electronic devices,   the personal information of the user is stored on a second electronic device of the one or more electronic devices, and   the second electronic device is distinct from the first electronic device.   
     
     
         15 . The method of  claim 2 , including, in accordance with a determination that the active context profile for the user device is a second context profile, forgoing sharing the personal information of the user with the first set of third parties. 
     
     
         16 . A non-transitory computer readable storage medium storing one or more programs comprising instructions, which when executed by one or more electronic devices, cause the one or more devices to:
 establish a plurality of context profiles for a user, wherein:
 at least a first context profile of the plurality of context profiles, when active, is configured to operate in one of two or more modes that includes a normal mode and at least one expanded permission mode, 
 an active context profile of the plurality of context profiles corresponds to a current context of a user device, 
 an active mode of the active context profile is the normal mode or a respective expanded permission mode of the at least one expanded permission mode, and 
 the first context profile of the plurality of context profiles includes a first set of one or more permissions identifying a first set of third parties with which the personal information of the user can be shared when the first context profile is active; 
 in accordance with a determination that the active context profile for the user device is the first context profile and the active mode of the user device is the normal mode of the first context profile, sharing personal information of the user with the first set of third parties; 
 detecting a mode-switching event that changes the active mode of the user device from the normal mode of the first context profile to the expanded permission mode of the first context profile, wherein the mode-switching event is detected automatically without user input; and 
   in response to detecting the mode-switching event, performing a permission expansion for the first context profile that includes sharing the personal information of the user with a first expanded set of third parties that includes the first set of third parties and at least one additional third party.   
     
     
         17 . A server system including one or more electronic devices with one or more processors and memory storing one or more programs for execution by the one or more processors, the one or more programs including instructions for:
 establishing a plurality of context profiles for a user, wherein:
 at least a first context profile of the plurality of context profiles, when active, is configured to operate in one of two or more modes that includes a normal mode and at least one expanded permission mode, 
 an active context profile of the plurality of context profiles corresponds to a current context of a user device, 
 an active mode of the active context profile is the normal mode or a respective expanded permission mode of the at least one expanded permission mode, and 
 the first context profile of the plurality of context profiles includes a first set of one or more permissions identifying a first set of third parties with which the personal information of the user can be shared when the first context profile is active; 
 in accordance with a determination that the active context profile for the user device is the first context profile and the active mode of the user device is the normal mode of the first context profile, sharing personal information of the user with the first set of third parties; 
 detecting a mode-switching event that changes the active mode of the user device from the normal mode of the first context profile to the expanded permission mode of the first context profile, wherein the mode-switching event is detected automatically without user input; and 
   in response to detecting the mode-switching event, performing a permission expansion for the first context profile that includes sharing the personal information of the user with a first expanded set of third parties that includes the first set of third parties and at least one additional third party.