[CPWG] Fwd: [New post] Verisign gets patent for GDPR-compliant Whois privacy

Wed Apr 14 10:22:44 UTC 2021

Agreed. Preferably interoperable and open source. WIPO has an observer GAC seat.

CW 

> El 13 de abril de 2021 a las 22:30 Bill Jouris <b_jouris at yahoo.com> escribió:
> 
>      
>     I', thinking we definitely need to read (better yet, get a patent lawyer to read) the actual patent.  To see just how broadly it is written, what alternative options might still achieve similar ends, etc. 
> 
>     Bill Jouris
> 
>     On Tuesday, April 13, 2021, 01:14:51 PM PDT, mail at christopherwilkinson.eu CW via CPWG <cpwg at icann.org> wrote:
> 
> 
> 
>     Ah! So we didn't need EPDP after all. VRSN has already done it for all for us, and will presumably license their patent to willing thick Registries who comply. Any comment from the EPDP Chair?
> 
>     Have I missed something here?
> 
>     CW
> 
>     PS: Verisign is not currently a thick Registry. Correct?
> 
>         > > WordPress.com ---------- Mensaje original ----------
> >         De: Domain Name Wire | Domain Name News <donotreply at wordpress.com>
> >         Para: mail at christopherwilkinson.eu
> >         Fecha: 13 de abril de 2021 a las 17:37
> >         Asunto: [New post] Verisign gets patent for GDPR-compliant Whois privacy
> > 
> >         Andrew Allemann posted: "Patented methods help Thick Whois registries handle privacy law compliance. The U.S. Patent and Trademark Office has granted patent number 10,979,384 (pdf) to Verisign (NASDAQ: VRSN) for Systems and methods for preserving privacy of a registrant in"
> >          
> > 
> >          New post on Domain Name Wire | Domain Name News https://domainnamewire.com/?author=706
> > 
> >         Verisign gets patent for GDPR-compliant Whois privacy https://domainnamewire.com/2021/04/13/verisign-gets-patent-for-gdpr-compliant-whois-privacy/
> >         by Andrew Allemann https://domainnamewire.com/?author=706
> > 
> >         Patented methods help Thick Whois registries handle privacy law compliance.
> > 
> >          A figure from Verisign's patent that describes a way to offer GDPR-complaint Whois privacy in Thick Whois systems.
> > 
> >         The U.S. Patent and Trademark Office has granted patent number 10,979,384 https://domainnamewire.com/wp-content/verisign-privacy-granted.pdf (pdf) to Verisign (NASDAQ: VRSN) for Systems and methods for preserving privacy of a registrant in a Domain Name System.
> > 
> >         I wrote https://domainnamewire.com/2017/09/28/verisign-thick-whois-privacy/ about the patent application in 2017 after it was published.
> > 
> >         The patent describes methods for domain registries with Thick Whois models (in which the registry is required to store personal data) to comply with data laws. It's Whois privacy with some twists, including using privacy providers in jurisdictions that are allowed to handle the data:
> > 
> >             > > >             Provided herein is a solution to addresses the problem described above by defining a method by which personal information collection is delegated to privacy providers residing in a locality where it is legal to store the personal information. This addresses the problem of adhering to privacy laws by automating the production of a ‘cloaked identity’ that only the privacy provider knows is associated with the person. This cloaked identity can then be given to the person who's identity is being cloaked and to various entities that need to associate some form of identity with data or a service the cloaked person is registering. The cloaked identity is not associated with the personal information of the person except within the data storage of the privacy provider, and the privacy provider will not disclose that information unless a legal mechanism applicable to the locality of the privacy provider is used. The person's private or personal information is therefore shielded except in cases where it is legally retrieved from the privacy provider.
> > > 
> > >         > >         The system could also create DNS records, such as for emailing the domain owner:
> > 
> >             > > >             In some examples, the cloaked identity can include a cloaked email address. If the cloaked identity is a unique cloaked email address, several other benefits are possible. The cloaked email address can be used to communicate with the person without having personal information being accessible by a party that knows the cloaked email address unless they go through a legally accepted process to get it from the privacy provider. If the cloaked email address and the public key for a person is recorded in an secure/multipurpose internet mail extensions (“S/MIME”) A-type record (also called a S/MIMEA) in a DNS server under a domain owned by the person, then proof of origin of data and email from the person can be enabled using digital signature. Proof of origin for an email is achieved if the person has used their private key to sign an email sent using the cloaked email account and a recipient uses the person's public key received from the S/MIMEA record for the cloaked email account to verify the person's digital signature.
> > > 
> > >         > >         Verisign's .com namespace was scheduled to switch from a Thin Whois system to a Thick Whois System in 2018, but that has been delayed as ICANN wrestles with GDPR.
> > 
> >         Andrew Fregly https://www.linkedin.com/in/amfregly/ , Principal Engineer at Verisign, is listed as the inventor. Verisign applied for the patent in March 2016 and it was granted today.
> > 
> >          
> > 
> >          
> > 
> > 
> > 
> >         Andrew Allemann https://domainnamewire.com/?author=706 | April 13, 2021 at 10:36 am | Tags: .music https://domainnamewire.com/?taxonomy=post_tag&term=music , thick whois https://domainnamewire.com/?taxonomy=post_tag&term=thick-whois | URL: https://domainnamewire.com/?p=69784
> > 
> > 
> >          
> >         Comment https://domainnamewire.com/2021/04/13/verisign-gets-patent-for-gdpr-compliant-whois-privacy/#respond 	   See all comments https://domainnamewire.com/2021/04/13/verisign-gets-patent-for-gdpr-compliant-whois-privacy/#comments
> >         Unsubscribe https://public-api.wordpress.com/bar/?stat=groovemails-events&bin=wpcom_email_click&redirect_to=https%3A%2F%2Fsubscribe.wordpress.com%2F%3Fkey%3D17301911932d541211a1d17490fd65f8%26email%3Dmail%2540christopherwilkinson.eu%26b%3DKLJoqqwVP3N-IS9nIjbgSk84V6hTxqYTzcqw8IEgXM3C8c_LNpy4gkR4Cttb6C1UENUezgt3GYIegAvK9jxmP2n9AIbulEls-YXyKFz0-87Eyw%253D%253D&sr=1&signature=5123fd6932f4ba58c9cf0a6f2b362a84&user=109390644&_e=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&_z=z to no longer receive posts from Domain Name Wire | Domain Name News.
> >         Change your email settings at Manage Subscriptions https://public-api.wordpress.com/bar/?stat=groovemails-events&bin=wpcom_email_click&redirect_to=https%3A%2F%2Fsubscribe.wordpress.com%2F%3Fkey%3D17301911932d541211a1d17490fd65f8%26email%3Dmail%2540christopherwilkinson.eu&sr=1&signature=b3dbae6d032ff1a9fa7170463b2461c5&user=109390644&_e=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&_z=z .
> > 
> >         Trouble clicking? Copy and paste this URL into your browser:
> >         https://domainnamewire.com/2021/04/13/verisign-gets-patent-for-gdpr-compliant-whois-privacy/
> >          
> > 
> > 
> >     > 
> 
>      
> 
>     _______________________________________________
>     CPWG mailing list
>     CPWG at icann.org mailto:CPWG at icann.org
>     https://mm.icann.org/mailman/listinfo/cpwg
> 
>     _______________________________________________
>     By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy ( https://www.icann.org/privacy/policy) and the website Terms of Service ( https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/cpwg/attachments/20210414/71a9be00/attachment-0001.html>