WO2003067479A1

WO2003067479A1 - Data handling system

Info

Publication number: WO2003067479A1
Application number: PCT/AU2003/000108
Authority: WO
Inventors: Steven De Vroom
Original assignee: Steven De Vroom
Priority date: 2002-02-06
Filing date: 2003-02-04
Publication date: 2003-08-14
Also published as: AUPS032902A0

Abstract

The present invention relates to a method for transferring information to individuals. This is achieved using a database which stores identifier data including a unique identifier and one or more criteria for the individuals. A processing system coupled to the database select one or more of the individuals in accordance with the criteria, and then transfers the information to one or more end stations together with the identifier. This allows the end stations to determine the identity of the individuals from the identifier and supply the information to the individual accordingly.

Description

DATA HANDLING SYSTEM

Background of the Invention

The present invention relates to a method and apparatus for transferring information to individuals, using a base station, and in particular, to transferring the information to specific individuals without knowledge of their identity.

Description of the Prior Art

The reference to any prior art in this specification is not, and should not be taken as an acknowledgment or any form of suggestion that the prior art forms part of the common general knowledge.

In a first example of the prior art, privacy is a key issue in relation to the storage of confidential data about individuals and organisations. There are a number of uses for data that require knowledge of confidential information in order to carry out certain functions. As a result, large volumes of data are stored in databases and there is the potential for misuse of that data by disclosure to unauthorised persons, resulting in a breach of privacy and confidentiality.

An example of a database that stores confidential information is a direct marketing database, which may hold an individual's name and address along with their purchasing habits and personal preferences on a number of matters. This data may have been collected from various sources such as credit card companies and supermarkets. It is useful data for direct marketing or advertising companies, as it enables them to select targets for the receipt of advertising material, based on relevant selection criteria such as age, gender, purchasing habits etc., thus enabling the direct marketing or advertising companies to avoid sending material to persons for which it was irrelevant or inappropriate.

The problem for the individual persons, whose data are stored in this manner, is that they may not know who is storing confidential information about them and they may not have any way of controlling errors in the data or preventing unauthorised use of that data.

The problem for direct marketing and advertising companies is that the data quickly becomes outdated and incorrect and it is difficult and expensive to collect very specific data on a large number of people. When directing advertising material to individuals, it is highly desirable to have as much data about the recipients of the material as possible, so that the data can be used as selection criteria. For instance, if you are advertising a product that is only of interest to young women, it is not desirable to send advertising material about that product to men or to older women.

In a second example of the prior art, the gathering of data for purposes such as the compilation of statistical data, is a costly and time-consuming operation. It involves sending forms to individuals or organisations that are filled in and returned for processing. The contributors of the data resent this process, as it requires many hours of work. It is also of unknown accuracy, as anecdotal evidence suggests that many of those contributors who are responsible for filling in the forms use a degree of guesswork and estimating to provide the data, in order to save time and work.

Once the data are collected, which may take many months, they have to be captured, collated and processed before useful statistical data can be compiled. As a consequence of the above processes, the data are often more than a year old before they become available for publication and use in decision making. The data are of unknown accuracy and are out of date. The decisions made based on this data may not be the best decisions that could have been made, had the data been accurate and recent.

A system for protecting a database against deduction of confidential attribute values therein is described in US-5614927. In this example, a database is electronically partitioning into public attributes, containing non-confidential attribute values, and private attributes, containing private attribute values. A processor is then used to electronically process the private attribute values to reduce any correlation between public attribute values and private attribute values. This helps to keep the private attributes private. However, this again does not allow information to be provided to users on the basis of the private information.

Summary of the Present Invention

In a first broad form the present invention provides a method for transferring information to individuals, using a base station, the base station including: a) A database for storing member data for a number of individuals, the member data including for each individual: i) A unique identifier; and, ii) One or more criteria; and, b) A processing system, the method including causing the processing system to: i) Select one or more of the individuals in accordance with the criteria; ii) Transfer the information to one or more end stations together with the identifier, the end station being adapted to supply the information to the individual in accordance with the identifier.

The end station typically includes: a) A store for storing identity data, the identity data including for each individual: i) The identifier; and, ii) An indication of the identity of the respective individual, b) A processor, the method including causing the processor to: i) Receive the information and one or more identifiers from the base station; ii) Determine the identity of one or more individuals from the one or more identifiers; and, iii) Transfer the information to the respective individuals in accordance with the determined identity.

The method typically includes causing the processor to: a) Modify the information in accordance with the determined identity to thereby personalise the information; and, b) Supply the modified information to the individual.

In a second broad form the present invention provides a method for transferring information to individuals, using a base station, the base station including: a) A database for storing member data including at least an identifier for a number of individuals; and, b) A processing system, the method including causing the processing system to: i) Select one or more of the individuals; ii) Transfer the information to one or more end stations together with the identifier, each end station including:

(1) A store for storing identity data, the identity data including for each individual: (a) The identifier; and, (b) An indication of an identity for the respective individual,

(2) A processor, the method including causing the processor to:

(a) Receive the information and one or more identifiers from the base station;

(b) Determine the identity of one or more individuals from the one or more identifiers; and, (c) Modify the information in accordance with the determined identity to thereby personalise the information; and, (d) Supply the modified information to the individual.

The member data typically further includes one or more criteria, the method including causing the base station to select the one or more individuals in accordance with the one or more criteria.

The method generally includes causing the processor to: a) Obtain for each individual: i) The individual's identity; and, ii) The one or more criteria; b) Generate an identifier associated with the individual; c) Store at least the identity and the identifier in the store as identity data; and, d) Transfer at least the identifier and the one or more criteria to the base station as member data, the base station being adapted to store the identifier and the criteria in the database.

The store is generally further adapted to store the member data.

The method further may include causing the end station to: a) Obtain any changes in the criteria from each individual; and, b) Transfer at least the identifier and the criteria changes to the base station, the base station being adapted to update the criteria in the member data for the respective individual in accordance with the identifier.

Alternatively, or additionally, the base station can be coupled to one or more member end stations, in which case the method mcludes: a) Causing the base station to receive criteria changes from a respective individual via one of the member end stations; and, b) Update the criteria stored in the member data for the respective mdividual in accordance with the received criteria changes.

The method can further include: a) Causing the end station to transfer the identifier together with an end station identifier representative of the respective end station to the base station; and, b) Causing the base station to: i) Store the end station identifier in the database; and, ii) Transfer information to the end station in accordance with the end station identifier.

The criteria typically include one or more of: a) The individual's residential locality; b) The individual's age/gender; c) The individual's interests; d) The individual's income; e) The individual's employment; and, f) One or more criteria specified by the member.

The information may be provided together with pay slips, or the like.

The method can include causing the processor to: a) Determine salary information and the information from the store for an individual in accordance with the received identity; b) Generate a pay slip including the information; and, c) Supply the pay slip to the respective individual.

The information can include at least one of: a) Coupons; b) Vouchers; c) Advertising; and, d) Any other information. The base station may be coupled to a supplier end station, the method including causing the base station to: a) Provide the supplier end station with a list of available selection criteria from which the supplier can choose which criteria to use; b) Receive the information and one or more predetermined criteria from the supplier end station; c) Compare the predetermined criteria and the one or more criteria for each individual; and d) Select the one or more individuals in accordance with the results of the comparison.

The method can include causing the base station to: a) Determine the number of selected individuals; b) Transfer an indication of the number to the supplier end station; and, c) Cooperate with the supplier end station to allow a member of the supplier end station to refine the predetermined criteria until a desired number of individuals are selected.

The method may include causing the base station to: a) Determine statistics relating to the information provided to the individuals; and, b) Provide the statistics to the supplier end station.

The method can include causing the base station to a) Determine feedback, the feedback relating to information provided to individuals; and, b) Determine statistics in accordance with the feedback.

The feedback can include an indication of interest in the received information supplied by the respective individual, or an indication of the use of the information.

The method may include: a) Adding a unique code to the information supplied to each mdividual; and, b) Using the unique code for collecting statistics.

The information can be a voucher, in which case the method may include: a) Using the unique code to determine when the voucher has been used in a transaction; and, b) Transferring an indication of the unique code used to the base station.

The unique code can be a bar code, or any other suitable code or security marking.

In a third broad form the present invention provides a system for transferring information to individuals, the system including a base station coupled to one or more end stations via a communications network, the base station including: a) A database for storing member data for a number of individuals, the member data including for each individual: i) A unique identifier; and, ii) One or more criteria; and, b) A processing system adapted to: i) Select one or more of the individuals in accordance with the criteria; ii) Transfer the information to one or more end stations together with the identifier, the end station being adapted to supply the information to the individual in accordance with the identifier.

The end station can include: a) A store for storing identity data, the identity data including for each individual: i) The identifier; and, ii) An indication of an identity of the respective mdividual, b) A processor adapted to: i) Receive the information and one or more identifiers from the base station; ii) Determine the identity of one or more individuals from the one or more identifiers; and, iii) Transfer the information to the individual in accordance with the determined identity.

The processor can be adapted to: a) Modify the information in accordance with the determined identity to thereby personalise the information; and, b) Supply the modified information to the individual.

In a fourth broad form the present invention provides a system for transferring information to individuals, the system including: a) A base station including: i) A database for storing member data including at least an identifier for a number of individuals; and, ii) A processing system, the method including causing the processing system to:

(1) Select one or more of the individuals;

(2) Transfer the information to one or more end stations together with the identifier and, b) One or more end stations coupled to the base station via a communications network, each end station including: i) A store for storing identity data, the identity data including for each individual:

(1) The identifier; and,

(2) An indication of an identity for the respective individual, ii) A processor adapted to:

(1) Receive the information and one or more identifiers from the base station;

(2) Determine the identity of one or more individuals from the one or more identifiers; and,

(3) Modify the information in accordance with the determined identity to thereby personalise the information; and,

(4) Supply the modified information to the individual. The member data can further include one or more criteria, the base station being adapted to select the one or more individuals in accordance with the one or more criteria.

The system is preferably adapted to perform the methods of the first or second broad forms of the invention.

In a fifth broad form the present invention provides a distributed database system for storing member data relating to respective individuals, the system including: a) A base station including: i) A first database for storing at least:

(1) An identifier relating to each individual;

(2) The member data relating to each individual; and, ii) A processing system; and, b) At least one end station coupled to the base station via a communications network, the end station including: i) A second database for storing identity data including at least:

(1) The identifier relating to each individual; and,

(2) An indication of an identity relating to each individual; and, ii) A processor, the processor being adapted to cooperate with the processing system.

The second database can be further adapted to store the member data.

The individuals can be respective entities, in which case the member data may represent at least one of: a) Accounts data; b) Sales data; c) Production data; and, d) Other financial data;

The end station can be adapted to: a) Receive changes in member data from a member; and, b) Transfer an indication of the changes to the base station, the base station being responsive to the changes to update the member data stored in the first database.

The base station can be responsive to a request to provide at least one of: a) Member data; and, b) Statistics relating to member data.

The request can be received from at least one of: a) A member; and, b) Other individuals.

The member data can include criteria, the base station being adapted to: a) Receive a request including predetermined criteria; b) Compare the predetermined criteria to the criteria stored in the member data; c) Generate statistics in accordance with the results of the comparison.

The system can be adapted to allow information to be transferred to selected individuals, the processing system being adapted to: a) Select one or more of the individuals in accordance with the member data; b) Determine the identifiers of the respective individuals; and, c) Transfer the information and the identifiers to the end station, the end station being adapted to: i) Receive the identifiers and the information; ii) Determine the identities from the second database in accordance with the identifiers; iii) Supply the information to the individuals in accordance with the identities.

The end station can be further adapted to modify the information in accordance with the identity and supply the modified information to the individuals.

The base station can be coupled to a number of end station, each end station having a unique end station identifier, the first database being adapted to store the end station identifier, the base station being adapted to transfer the information to the end station in accordance with the end station identifier.

The system being adapted to perform the method of the first or second broad forms of the mvention.

The system can be adapted to allow the member data to be transferred to a respective individual, the end station being adapted to: a) Determine a identity relating to a selected individual; - b) Determine the identifier relating to the selected individual from the second database in accordance with the identity; c) Transfer the identifier to the base station, the base station being adapted to: i) Receive the identifier; ii) Obtain the member data from the first database in accordance with the identifier; and, iii) Transfer the member data to the end station.

The end station may be further adapted to modify the member data in accordance with the identity and supply the modified member data to the individuals.

The base station can be coupled to a number of end stations, each end station having a unique end station identifier, the first database being adapted to store the end station identifier, the base station being adapted to transfer the member data to the end station in accordance with the end station identifier.

In a sixth, broad form the present invention provides a system that obtains data relating to a respective individual or member, the data being stored in the central database, independent of the individual member's identity.

The system can also be adapted to allow the data to be used for subsequent processing independent of the mdividual member's identity. In this context, members may be individuals, companies or any other legal entity. The system can therefore be adapted to obtain member data about persons or organisations, keeping confidential the identity of the person or organisation that the member data relates to. The member data can then be sent quickly, securely and accurately to a central base station database for storage, processing and retrieval.

In a seventh broad form the present invention provides a method of collecting statistics relating to individuals, using a base station, the base station including: a) A data store for storing for each of a number of individuals: i) A unique identifier associated with the individual, correspondence between the identity of the individual and the identifier being retained confidentially remote to the base station; and, ii) Member data relating to the individual; and, b) A processing system, the method including causing the processing system to: i) Determine statistics from the member data; and, ii) Provide the statistics.

The base station can be coupled to one or more end stations, in which case the method can include causing each end station to: a) Collect member data relating to one or more individuals associated therewith; b) Determine an identifier representative of the respective individual; c) Filter the member data to remove any identity; and, d) Transfer the identifier and the filtered member data to the base station, the base station being adapted to store the filtered member data in the store.

The method can include having the base station provide the statistics to an operator of the base station. The member data can include criteria, the method including: a) Receiving a request including one or more predetermined criteria; b) Causing the processing system to: i) Compare the predetermined criteria to the one or more criteria stored in the member data; ii) Select one or more individuals in accordance with the results of the comparison; and, iii) Determine the statistics for the selected individuals.

The method may be performed using the system of the sixth broad form of the mvention.

In an eighth broad form the present invention provides a system adapted to compare member data relating to a respective individual or member to selection criteria, the selection criteria defining a number of individual characteristics, and transfer information to the individual member in accordance with the comparison, thereby allowing information to be transferred to individual members having selected characteristics.

The system can therefore enable member data that have been collected to be used as selection criteria to enable entities such as advertisers and direct marketeers to select recipients of information or advertising material and carries out the transmission and publication or delivery of that information or advertising material to the recipients.

The system can allow each individual of whom member data are stored, to communicate with the central database and, using provisions for limiting access to only their member data and without revealing his or her personal identity, allows the individual person to monitor, edit and supplement the member data, or to prohibit the member data from being used for any specific purpose. As a result of the provisions of this system, individual persons or members can have control of their member data that are stored and can be confident that no unauthorised entity can gain confidential member data that can be linked to them as an individual.

It will be appreciated from the above that the term individual can cover entities, companies, individual people, organisations, or the like, and is not intended to be restrictive. Furthermore, the term identity, is intended to cover any information that may be used to identify the respective individual. This can include, for example, an individual's name and or address, phone number, or other identifying information, such as credit card or bank account details.

Brief Description of the Drawings

An example of the present mvention will now be described with reference to the accompanying drawings, in which: -

Figure 1 is a schematic diagram of an example of a system for implementing the present invention; Figure 2 is a schematic diagram of an example of the base station processing system of Figure 1; Figure 3 is a schematic diagram of an example of the processing system of any one of the end stations of Figure 1;

Figures 4A and 4B are a flow chart of the process implemented by the system of Figure 1;

Figure 5 is a conceptual diagram of the Anonymous Fragmented Database system;

Figure 6 is a diagram of an example of a pay slip generated by the system of Figure 1.

Detailed Description of the Preferred Embodiments

An example of the present invention will now be described with reference to Figure 1, which shows a system suitable for implementing the present invention.

As shown, the system mcludes a base station server database 1 coupled to a number of end station databases 3 and end station Internet browsers 4, via a communications network such as the Internet 2. It also shows a number of optional satellite end stations 5 coupled to an end station database 3 via the Internet 2, a LAN 6, or a telephone line and modems 7.

The base station server database 1 is generally formed from one or more processing systems 10 coupled to a data store 11, the data store 11 usually including a database 12, as shown. The processing systems 10 may be any form of processing system but typically includes a processor 20, a memory 21, an input/output (I/O) device 22 and an interface 23 coupled together via a bus 24, as shown in Figure 2. The interface 23, which may be a network interface card or the like, is used to couple the processing system to the Internet 2.

It will therefore be appreciated that the processing system 10 may be formed from any suitable processing system, which is capable of operating applications software to enable the provision of services as will be outlined in more detail below. However, in general the processing system 10 will be formed from a server, such as a network server, web-server, or the like.

The end station databases 3 must be capable of cooperating with the base station server database 1. This requires automatic background communication with the base station server database 1. It includes the management, collection and transmission of member data to be supplied to the base station server database 1 as well as reception, management and publication of data, information and material to be received from the base station server database 1.

An example of a suitable processing system is shown in Figure 3. As shown, each end station database 3 is formed from a processing system including a processor 30, a memory 31, an input/output (I/O) device 32 and an interface 33 coupled together via a bus 34. The interface 33, which may be a network interface card, or the like, is used to couple the end station database 3 to the Internet 2. Alternatively, in place of the network interface card, a modem may be substituted where connection to the base station database 1 is via telephone line and modem 7.

Accordingly, it will be appreciated that the end station database 3 may be formed from any suitable processing system, such as a suitably programmed PC or the like, which is coupled to a store capable of acting as a database. The end station 3 typically operates applications software such as is used for payroll or accounting. This software will however be adapted to provide additional functionality as will be described in more detail below.

However in general, the end station database 3 will be formed from a desktop PC and the database component 3A would normally be incorporated into software applications. Additionally, the end station database 3 may include specialised hardware, such as an electronic touch sensitive screen, bar code readers, or any other specialised peripheral devices, coupled to the processor and memory.

Then end station Internet browsers 4 must be capable of accessing services provided by the base station server database 1. This includes browsing of web pages published by the base station server database 1 but could also be achieved using especially designed communications software that uses the Internet 2 as a communications network, or by connecting to the base station server database 1 via a telephone line and modems 7.

Typically each end station 4 will be similar to the end station 3 shown in Figure 3. Accordingly, each end station Internet browser 4 is typically formed from a processing system including a processor 30, a memory 31, an input/output (I/O) device 32 and an interface 33 coupled together via a bus 34 as shown in Figure 3. The interface 33, which may be a network interface card, or the like, is used to couple the end station Internet browser 4 to the Internet 2. Alternatively, in place of the network interface card, a modem may be substituted where connection of the end station Internet browser 4 is to the Internet 2, or directly to the base station server database 1, via a telephone line and modems 7.

Accordingly, it will be appreciated that the end station Internet browser 4 may be formed from any suitable processing system, such as a suitably programmed PC, lap top computer, hand held computer, Internet terminal or the like, which is typically operating applications software used for web browsing, such as Internet Explorer or Netscape Navigator.

The optional satellite end stations 5, when implemented must be capable of cooperating with the end station database 3 with which it is associated. This includes automatic background communication with the end station server database 3, the management and collection of member data to be supplied to the base station server database 1 via the end station database 3, the reception of information and advertising material from the base station server database 1 via the end station database 3 and the delivery or publishing of that information and advertising material to members. This includes automatic background communication with the end station database 3 and the management and collection of member data and statistical data to be supplied to the end station database 3.

Typically each end station 5 will be similar to the end station 3 shown in Figure 3. Accordingly, each satellite end station 5 is typically formed, from a processing system including a processor 30, a memory 31, an input/output (I/O) device 32 and an interface 33 coupled together via a bus 34 as shown in Figure 3. The interface 33, which may be a network interface card, or the like, is used to couple the satellite end station 5 to an end station database 3 via the Internet 2. Alternatively, in place of the network interface card, a modem may be substituted where connection of the satellite end station 5 to an end station database 3 is via a telephone line and modems 7.

Accordingly, it will be appreciated that the satellite end stations 5 may be formed from any suitable processing system, such as a suitably programmed PC, lap top computer, hand held computer or the like, which is typically operating applications software such as is used for payroll or accounting. This software will however be adapted to provide additional functionality as will be described in more detail below.

However in general, the satellite end station 5 will be formed from a desktop PC. Additionally, the satellite end station 5 may include specialised hardware, such as an electronic touch sensitive screen, bar code readers, or any other specialised peripheral devices, coupled to the processor and memory.

The communication between the end station database 3 and the base station server database 1 is normally initiated automatically by the end station database 3. The connection, using the Internet 2 or a telephone line and modems 7, between the end station database 3 and the base station server database 1 is used to provide a communications function operating in the background, generally without user intervention.

The system is used to implement a distributed database system referred to as an Anonymous Fragmented Database. In operation the base station 1 stores information relating to individuals without storing each individual's actual identity. Identities of the individuals are then stored on the end station database 3. This allows users of the base station server database 1 to obtain information regarding users without being able to access the user identity.

By having an appropriate identifier associated with records on the base station server database 1, and the end station database 3, this also allows other information, such as advertising, or the like to be transferred to the individuals based on their respective information, via the end station database 3. The end station database is also capable of personalising the information transferred to each individual, in accordance with the individual's identity, or any other data stored in the end station database 3.

The end station database 3 also manages the communication and data collection from the optional satellite end stations 5 when these are implemented. In order to achieve this, optional satellite end stations 5 may be adapted to connect to the end station database 3 via the Internet 2, the LAN 6, a telephone line and modems 7 or via wired or wireless connections. It is also feasible to provide a direct connection between the satellite end station 5 and the end station database 3, for example as a peer-to-peer network.

In use, end station databases 3 can automatically connect to the base station server database 1 and send member data that have been collected from members. This member data are typically encrypted for security, before sending to the base station database 1. The end station database 3 can also receive from the base station server database 1, information or advertising material and a list of members to whom that information or advertising material is to be published. It also carries out the delivery or publishing of that information and advertising material to members.

This communication is normally initiated automatically by the end station database 3. The end station database 3 is responsible for the generation and allocation of a unique identity number for each new member when their member data are first added to the end station database 3.

Users of the end station Internet browsers 4 can access services provided by the base station server database 1, allowing the users to request an order of members, to whom information or advertising material is to be published. End station Internet browsers 4 can also be used by individual members to monitor, edit and control their member data by logging into an especially designed Internet web page.

In this case, some of the services provided by the base station server database 1 are made accessible via the Internet 2, and accordingly, the processing systems 10 may be capable of generating web-pages or the like that can be viewed by the users of the end station Internet browsers 4.

The optional satellite end stations 5 are implemented when a multi user system is required, either within a single location or across separate locations. Under these circumstances, the end station database 3 acts as a central server database to the satellite end stations 5, while at the same time acting as and end station to the base station server database 1.

Overview of Data Organisation

An overview of the way in which data may be organised within the system will now be described.

In particular, as described above, the system described in Figure 1 provides a database consisting of a number of separate parts that will collectively hereinafter be referred to as an Anonymous Fragmented Database. An example of the data structure will now be described with reference to diagram 5, in which there is one base station server database 51 and a number of end station databases 53, coupled thereto to an appropriate link, such as a network.

In this case, therefore the base station server database 51 corresponds to the base station server database 1 of Figure 1, with the end station database corresponding to the end station databases 3. The number of end stations databases 53 could be anywhere from a few up to millions. The end station databases 53 are typically connected to the base station server database 51 via the Internet 52 or any other suitable communications system. Thus, this provides a database system that is fragmented or distributed across many separate computer database systems. The base station server database 51 holds a complete set of all the data records of all members, which typically mcludes persons or other individuals associated with the system. Each record however excludes the name and address, or any other non-disclosable data, of the member or person to whom it relates. Thus, the information stored on the base station server database 51 will not allow anyone to identify the members or persons solely from the information stored on the base station server database. Each end station database 53 holds a fragment or subset of the data, for a group of members or persons and includes all non-disclosable member data including names and addresses. This information is held in confidence and with the authority of the members. It would typically be a payroll system, an accounting system or a membership system, but could be any one of a number of systems used to store data of individual persons or organisations. Accordingly, members can only be identified using the information stored on the end station database.

Each end station database 53 supplies an up-to-date set of its member data at regular intervals as required, to the base station server database 51. When sending member data to the base station server database 51 , in place of the name and address of each member, it substitutes a unique identity number, which it generated at the time that the member data was first entered into its database. This unique identity number is stored on the end station database 3 as part of the member data record.

A data record in the base station server database 51, as shown in Figure 5 A, would have fields that include; End station Unique ID 54, Member Unique ID 55, Member disclosable data 56.

A data record in each end station database 53, as shown in Figure 5B, would have fields that include; Member Unique ID 55, Member Disclosable data 56, Member Non-disclosable data 57,.

Thus, the base station server database 51 holds a complete set of records of all members, but each record is incomplete in that the members' names and addresses and all other non-disclosable data are not included, while each end station database 53 holds a fragment, or subset of the total member data, but its records are complete with names and addresses and all other non-disclosable data. The number of records held on the base station server database 51 is equal to the sum of all the records held on all the end station databases 53.

An example of the kind of member data that may be collected from organisations could be financial data about companies, which is stored in accounting systems. This could be used for the purpose of gathering accurate statistical data without disclosing the identities the contributors of that data.

An example of member data that could be collected from individual persons could be age, gender, salary, postcode, etc which could be collected automatically from the payroll system of the employer of the person. Another example of member data that could be collected could be interests, hobbies, brand preferences or other personal data that would be supplied by the individual person without disclosing his or her identity, using facilities such as an especially designed Internet web page which is hosted on the base station server database. An example of the use of the member data collected, could be to enable organisations such as direct marketing companies and advertisers, to send information, advertising material, coupons or offers, using the member data that had been previously collected as selection criteria to specify the kind of person to transmit and publish the information or advertising material to. The information or advertising material could display the name of the individual or other confidential data, without having the name or address or other identifying data of the person stored on the base station server database.

Overview of Operation An overview of operation of the system will now be described.

As outlined above, the system enables the base station server database 1 to be operated to collect and store member data about persons or organisations without having knowledge of the identity of those persons or organisations.

The system also allows direct information or advertising material to be sent and published to those persons or organisations, using selection criteria from within the member data. In this case, the selection criteria are used to determine which persons or organisations to send and publish the information to.

This is achieved, using an end station Internet browser 4, to provide selection criteria to the base station server database 1. This is then compared to the member data by the base station server database 1, allowing identity numbers of members fulfilling the selection criteria to be determined and collected in a list.

The list of identity numbers is then sent to the end station database 3 with the information that is to be published to the members. Placeholders in the electronic file containing the information to be published, enable the end station database 3 to insert variable data from its local database, such as the member's name if required, before the information is published to the member.

Thus, personalised information and advertising material may be directed to each member, including the member's name, without the member's name being identified to the entity who is carrying out the selection of members, using the end station Internet browser 4.

In this context, members may be individuals, companies or any other legal entity.

A more detailed explanation of the operation will now be described with reference to Figures 4A and 4B.

As shown at step 100, the first stage is for a new member to be added to a respective one of the end station databases 3. This may be achieved in a number of manners depending on the respective implementation, and may include for example, the provision of information via one of the satellite end stations 5, the completion of a questionnaire, or the like. Once entered onto the end station database 3 in the form of member data, the end station database 3 allocates to the member data a unique member ID, which is stored in the end station database with the member data at step 110.

The member data is fitered to remove any information that can identify the member, and to include the unique member ID (which is typically in the form of an identity number), and an end station ID at step 120. The filtered member data is sent to the base station server database 1 and stored. This allows the base station server database 1 to transfer information to the members, as well as perform other functionality, which will be described in more detail below.

Operation of the base station server database 1 to transfer advertising to a desired number of members will now be described.

At step 140, the base station server database 1 receives a request from an Internet browser 4. This generally includes a specification that can be used to select a number of members based on the filtered member data. This may therefore define a number of criteria, such as various interests, geographic location of members, gender and age, or the like.

The base station server database 1 searches the filtered member data to determine the number of members that satisfy the criteria, and an indication of this is transferred to the Internet browser 4 at step 150. This allows the operator of the Internet browser to refine the criteria, until a desired number of members fit the criteria.

At step 160, the operator of end station Internet browser 4 places order for selected group of members and supplies electronic file containing advertising material image to the base station server database 1.

The base station server database 1 breaks the order down into groups for distribution to end station databases 3. This is achieved in accordance with the end station ID, which the base station server database 1 uses to determine with which end station database 3 the member is associated.

At step 180, the end station databases 3 contact the base station server database 1 and collect lists of members who are to receive the advertisement (typically by receiving the member IDs), along with the electronic files containing the advertisement images. This will typically occur when the end station database is to transfer information, such as pay slips to the members. Alternatively, the base station server database 1 can transfer the advertisement to the end station database 3 automatically.

At step 190 each end station database 3 identifies who the members are in the list by matching the member ID in the list to the unique member ID stored in the member data. At this stage, the end station database 3 optionally personalises the advertisement, for example by including the member name and/or other appropriate information, and optionally a bar code or other unique identifier. The end station generates the advertisement at step 200, for example by processing the information for members and the information or advertisement that is destined for that member is printed onto paper or produced as an electronic file such as an Acrobat PDF, so that it can be delivered by email

At step 210 the printed information or advertising material is handed to the member, or the electronic version is emailed to the member. Simultaneously, the end station database 3 sends confirmation of the delivery to the base station server database 1.

At step 220, the base station server database 1 operates to charge the advertiser, typically by generating an invoice and transferring this to the operator of the end station Internet browser 4.

Optionally, as shown by the dotted lines, the base station server database 1 can also operate to provide the advertiser with statistical data relating to the individuals. The range of statistical information provided can vary greatly and will therefore be discussed in more detail below.

A number of detailed examples of implementation of the system of Figure 1 will now be described.

Payroll Direct Marketing. (Example 1) hi this example, the end station database 3 runs payroll software that has been especially designed or modified to include the functionality of the Anonymous Fragmented Database system. It is installed at the premises of many employers, who have consented to participate in the operation of the Anonymous Fragmented Database for the purpose of providing direct marketing coupons and advertisements to their employees by printing the advertising material on or with the members' pay slips.

When the payroll software incorporating Anonymous Fragmented Database, is first installed in the end station database 3, a unique identity number is allocated to that end station database 3 and this number, along with the details of the operator of the end station database 3, is forwarded to the base station server database 1 via the Internet 2 and stored in the base station server database 1.

Each time the details of a new employee are entered into the database of the payroll system running on the end station database 3, the system assigns a unique identity number to the new member, or employee. This number, and the unique identity number assigned to the end station database 3 at the time of installation, are forwarded to the base station server database 1 with all required disclosable member data of the new employee or member, excluding their name and address or any other information that could identify who they are. This member data are encrypted for security, before sending to the base station database 1.

The base station server database 1 processes and accumulates all the member data from all the employees or members, whose member data have been forwarded by the end station databases 3. When an advertiser or direct marketeer wishes to deliver or publish information or advertising material to a selection of employees or members, they connect to the base station database 1 using an end station Intemet browser 4 and log on to the web page provided for this purpose. The web page allows them to specify a variety of selection criteria and to nominate the number of employees or members to whom they wish to send the information or advertising material.

Examples of the selection criteria derived from payroll database include:

• Age;

• Gender; • Geographical location;

• Salary range

• Industry or Profession

• Employment basis, ie Full Time, Part Time, Permanent, Casual.

Examples of optional selection criteria supplied by a member using the end station Internet browser 4 can include:

• Hobbies

• Motor vehicle brand owned

• Purchasing habits • Sporting activities

• Travel preferences

The base station server database 1 takes the selection criteria provided by the advertiser or direct marketeer operating an end station Intemet browser 4 and searches the database to determine the number of employees or members who fit the selection criteria. It then notifies the advertiser or direct marketeer of this number, by publishing or displaying it to the web page that the advertiser or marketeer is using.

The advertiser or marketeer then has the opportunity to alter the selection criteria to narrow or widen the choice of employees or members, until the number available is approximately equal to the required number. The members selected are then reserved as described below. Alternatively, the advertiser or direct marketeer may instruct the base station server database 1 to select a portion of the available selection, equal to the number of required recipients, where the available number in the selection is greater than that required.

The optional selection criteria provided by the members can be used by advertisers to improve the selection of members, for example by ensuring that advertising is transferred to appropriate members. In this case, the advertiser may be charged more for the use of the optional selection criteria, rather than the basic selection criteria outlined above, thereby reflecting the improved flexibility and service this will provide. The members can provide details of their optional selection criteria either via the end station database 3, or via one of the end station Intemet Browsers 4. As the optional selection criteria are not compulsory, the members may be provided with incentives to encourage their participation in this part of the scheme. Thus for example, the members may be guaranteed certain benefits, such as coupons or discounts, or eligibility to be in the draw to receive additional prizes or other privileges, if they participate in the scheme.

Once the required selection has been achieved, the advertiser or direct marketeer may place an order and reserve the selection of members to the exclusion or any other party for the pay period selected. The base station server database 1 then processes the order and notifies the advertiser or direct marketeer via the web page of the charges for the service of sending the information or advertising material to the selection of employees or members. The advertiser or direct marketeer pays for the service by electronic funds transfer, credit card or other suitable means, or requests the charge is invoiced to their account.

The advertiser or direct marketeer also supplies the base station server database 1 with an electronic file which contains the information or advertising material which is to be delivered or published to the employees or members.

Each piece of information or advertising material is given a unique identity number to allow it to be tracked and managed within the system. It also has an expiry date embedded in the electronic file so that each end station database can automatically delete old material that has exceeded its useful life.

The electronic file, which contains the information or advertising material, can contain a placeholder to enable variable information to be inserted by the end station database 3 before the material is printed. An example would be the insertion of the name of the employee or member who was to receive the advertising material. This enables personalised advertising material to be delivered without divulging the name of the recipient to the base station server database 1.

The electronic file, which contains the information or advertising material, can also contain a bar code, either embedded in the file as a predetermined value, or generated dynamically by the end station database 3, from variable information within the end station database 3 member data and/or variable data supplied from any other source. This is inserted by the end station database 3 before the material is printed. This enables bar codes to be utilised for various purposes such as verification of a coupon's authenticity, or the generation of prize-winning numbers for prizes or promotional gifts.

When the above mentioned order selection is complete, the base station server database 1 breaks down the order of employees or members into groups according to the employer to whom they belong and keeps a list of the employees or members, along with the electronic file containing the information or advertising material, ready for collection by each end station database 3 for whom employees or members have been selected. Before processing the pays for the current pay period, each end station database 3 connects to the base station server database 1 and collects the list/s of employees or members for whom there is information or advertising material, along with the electronic files containing the information or advertising material. It is possible and quite likely, that any given end station database 3 will collect a number of different lists and sets of information or advertising material for its employees or members on any one pay period, each list and advertisement originating from a different advertiser.

When the pays are processed on the end station database 3 and the pay slips, a sample of which is shown in Figure 6, are printed, the information or advertising material designated for each employee or member will be printed on the portion or the pay slip allocated for this purpose. The nature of the advertising material would typically, but not necessarily, be a discount coupon or special offer. It could also be a notification of a random prize, or be used as a game of chance or lottery.

Once the pay slips that include the advertising material are printed, the end station database 3 notifies the base station server database 1 of this fact for the purpose of verification. In the event that any advertising material was not delivered to the intended recipient, an adjustment can be made to the charges levied to the advertiser.

Each employee or member has the opportunity to connect to the base station server database 1, using an end station Internet browser 4, or one of the satellite end stations 5, for the purpose of monitoring, adding to or excluding from use, their member data. This updating can also be achieved by having the member update the member data on the respective end station database 3, with these changes being propagated to the base station server database 1 as required.

In the situation in which the member connects directly to the base station server database 1 using an end station Internet browser 4 the base station server database 1 will be unable to identify the member from the member name (as this is not stored in the database). Accordingly, the base station server database 1 can be adapted to either obtain the unique member ID from the member, or from the end station database 3. The unique member ID is then used to allow the respective member's member data to be identified, as will be appreciated by a person skilled in the art.

Some of the advantages of this example, for the delivery or publishing of direct marketing material, are as follows; 1. The selection of recipients or members, for receipt of the material is highly targeted.

2. The material is handed directly to the employees or members at a time when they are highly receptive to suggestions for purchasing; ie on payday.

3. The material can be printed on a colour ink jet or colour laser printer at the place of delivery, making it attractive, efficient and timely. 4. It is possible to select any number of targets from just one to the maximum number available on the base station server database 1. This makes the system accessible to even the smallest of advertisers, such as comer stores, florists and other small enterprises. Generally speaking, targeted direct marketing is beyond the reach of such enterprises due to cost and minimum volume requirements.

5. The timeframe from design of the advertising material to delivery can be very short. Typically, a direct marketing campaign requires weeks of planning, design, printing and mailing. The

Anonymous Fragmented Database method allows this timeframe to be reduced to a few days.

6. Employees or members have full control of their member data. They can log into the base station server database 1, using their unique identity number and password and monitor, add to their member data, or exclude their member data from being available for use in the above purpose. 7. Member data are always current. With traditional direct marketing databases, unless constant work is performed keeping them up-do-date, they soon become obsolete. With the Anonymous Fragmented Database, no additional work is required as the end station databases 3 constantly and automatically keep the base station server database 1 updated with any changes to member data.

Accounting System Statistical Data Collection. (Example 2)

In this example, the end station databases 3 run accounting software that has been especially designed or modified to include functionality of the Anonymous Fragmented Database system. It is installed at the premises of many chartered accountants, or in companies who have their own accounting departments, who have consented to participate in the operation of the Anonymous Fragmented Database for the purpose of providing statistical data to the organisation who operates the base station server database 1, or to its clients.

When the accounting software, incorporating Anonymous Fragmented Database, is installed in the end station database 3, a unique identity number is allocated to that end station database 3 and this number along with the details of the operator of the end station database 3, is forwarded to the base station server database 1 via the Internet 2 and stored in the end station server database 1.

Each time the details of a new accounting client are entered into the database of the accounting system running on the end station database 3, the system assigns a unique identity number to the new member, or client. This number, and the unique identity number assigned to the end station database 3 at the time of installation, is forwarded to the base station server database 1 with all required disclosable member data of the new accounting client or member, excluding their name and address or, any other information that could, identify who they are. This member data are encrypted for security, before sending to the base station database 1.

The base station server database 1 processes and accumulates all the member data from all the members, whose member data have been forwarded by the end station databases 3.

Specific accounting data fields are selected as required for statistical purposes, from within the accounting system running on each end station database 3. Further fields of data may be added which do not appear in the accounting data, but which are required for the collection of statistical data. At the end of each period, which can be typically monthly, quarterly, half-yearly or annually, when the data for that period have been finalised and locked, the required data are collected, encrypted and sent with the identity number of the member to the base station server database 1.

Here it is collected, processed and collated for analysis and publishing. At no time can any member data on the base station server database 1 be identified or connected to the enterprise from which it was collected, ie the member. This is achieved because the only link to the member is via the unique identity number.

Some of the advantages of this example, for the collection of material for statistical data, are as follows;

1. There are no forms to be filled in by the contributor of the data, saving time and cost.

2. The data are accurate and consistent, as opposed to the rough estimates that are provided when forms have to be filled in manually. 3. The time between collection of data and making it available can be very short, typically a few weeks, as opposed to about a year when collected by the presently used methods. The advantage of current, accurate statistical data cannot be underestimated when it is used for economic planning by governments, public utilities and private corporations.

4. This system can also be used for the delivery of information and advertising material to the members in the same way that was described in Example 1, above.

Maternity Hospital Direct Marketing System. (Example 3)

With reference to Example 1, in this example, the end station database 3 is a maternity hospital patient database where the members are patients, or expectant mothers. Companies that sell baby products may wish to send sample packs of their products, along with a personalised greeting to each new mother.

The sample packs are kept in stock at the hospital and the personalised greetings are printed at the hospital from the patient database, after receiving an order from the base station server database 1. The base station server database 1, having previously been notified by the hospital end station database 3 of the time and date of birth and the gender of the baby.

This example demonstrates that the advertising material does not have to be limited to electronically transmittable data, but can, with a little ingenuity, include goods such as product samples, promotional gifts, etc.

Games of chance and lottery systems. (Example 4)

In this example, the end station database 3 could be a licensed club membership database or similar, hosting a group of members who like to play games of chance. The system could be used to run lotteries and competitions either for profit or as a means of advertising a product where the prizes were provided by an advertiser. It could also be used as an attendance incentive, where the end station database 3 notified the base station server database 1 of each attendance and the base station server database 1 randomly chose a member who was to receive a prize, donated by a sponsor.

Where the system is used to run a lottery or game of chance, each member would have the opportunity to connect to the base station server database 1 via an Intemet browser 4 and place a bet or purchase a lottery ticket using a credit card for payment and using his or her unique identity number with password, for security.

The base station server database 1 would determine the winner of the lottery or game of chance, by random selection or any other appropriate means and then send notification of the win to the appropriate end station database 3, where the winning member would be notified and presented with the prize. This method would enable the linking of a large number of clubs or other organisations so that all the members of all the organisations could participate in the same lottery.

Newsletter Publishing. (Example 5)

In this example, the end station database 3 could be a sporting club or other organisation whose members had a common interest and was one of many such organisations of that common interest. A publishing organisation may wish to publish a magazine or newsletter electronically to members with specific interests. By selecting members, using member data on the base station server database 1 which originated from members who belong to a club or organisation that caters for a specific interest, the publisher is able to send their publication electronically to those specific members without having knowledge of their individual identity.

Statistical Information The database structure and system described above can also be used for gathering statistics. Instead of payroll software, the end station database is built around an accounting system, a point of sale (POS) system or any process control system that holds information that is required in the collation of statistical information.

In the instance that it is an accounting system in a chartered accounting firm, the clients of the chartered accountant would be the equivalent of the employees (or members) in the payroll system in that their private data would be kept in the end station database and never transmitted to the base station database. Non private information such as industry, number of employees of the client and other statistically relevant information would be sent to the base station database 1 along with the encrypted ID number.

The accounting system would be designed so that at the end of each period specified by the base station database for the particular industry, statistical data relating to the clients, such as sales, production figures etc would be sent to the base station server database 1. This would then automatically be compiled, analysed and collated. It would then be available to sell as statistical information to Government and industry. ϊn particular, in order to achieve this, the data fields that are to be used to collect the statistics are predefined. Accordingly, as the end station database 3, or the end station 5 via end station database 3, receive the data, these are used to update the data stored in the base station server database 1. Thus, in this instance, the statistical data is equivalent to the member data in the example described above with respect to Figures 4A and 4B.

Accordingly, the system operates to update the statistical data, allowing the base station server database 1 to perform statistical analysis, or provide details of the raw statistical data to third parties, as required.

It will be appreciated that in this instance, the identity of the clients will remain concealed from the base station server database 1, with the identity only ever being stored at the end station database 3. This allows statistics relating to the client companies to be collected, with the client being secure in the knowledge that their identity will remain secret, independent of the statistics.

In any event, the statistics data can be sent to the base station 1 at the close of each accounting period, ie. monthly, quartley, half-yearly or annually. The statistics are then automatically compiled and prepared for publication at the base station 1. This is not an on demand system like the selection process used by advertisers in the payslip coupon system.

This information could be distributed a number of ways, including for example by electronic transfer to the end station Intemet browsers 4 upon request, or in the form of printed reports, publication on the Intemet, by subscription or any other appropriate method.

The accounting software would probably be provided free of charge as an incentive for the accounting firm or the corporation to use the system.

Additional statistical functionality can also be provided by having the system collect data indicative of the success of providing information to the members. This can be achieved in a number of ways.

Thus, for example, members could be requested to provide feedback regarding adverts or the like supplied to them. This could include an indication of the level of interest in the adverts, whether more similar adverts are to be provided or the like. This feedback can be provided to the end station database 3, either via the optional satellite end station 5, or via manual input at the end station 3.

In any event, the feedback can be used to update the member data stored in the end station database 3, and the base station server database 1, or to provide statistics to the advertiser regarding the levels of interest in respective adverts. Again, it will be appreciated that any information provided to the base station server database 1 will not include any indication of the member identity. It is also possible to obtain feedback from other sources, such as merchants or the like. This can be achieved for example, by having merchants supply information regarding use of coupons, or the like. In this instance, merchants will indicate how many coupons have been redeemed to the base station server database 1, or directly to the advertiser, via the Intemet browser 4, or other means.

This allows the advertiser to determine how successful marketing campaigns are. Thus, the advertiser can compare the number of coupons supplied against the number redeemed, to determine the campaign's success.

This can be further improved by including an identifying code on the coupon, such as a barcode, or the like. Thus, for example, a barcode may be applied to each coupon by the end station database 3, such that each issued coupon has a unique barcode thereon. The barcode can be associated with the unique member ID, so that when a voucher is redeemed the barcode can be used to access the filtered member data associated with the respective member.

Thus, the merchant can transfer an indication of barcodes of redeemed vouchers to the base station server database 1. The base station server database 1 then access the filtered member data of the respective member to which the coupon was issued, and transfers some or all of this information to the advertiser.

This allows the advertiser to determine the criteria of those users that redeemed the coupons, and thereby determine the success of the advertising, as well as to improve further campaigns. Thus, the advertiser may be able to determine that certain ones of the criteria that were used to select members for inclusion in the campaign were unsuccessful, thereby allowing the advertiser to modify the campaign.

Publishing

As briefly outlined above, the system can also be used as a publishing system.

In this case it would be more or less identical to the payroll system, excepting that instead of a payroll system, it could be a club membership system. Instead of coupons on pay slips, the members may receive personalised newsletters incorporating specific information to the individual. Again, this can be achieved by having the users indicate in the member data the newsletters or other publications to which they want to subscribe. Newsletters, or other published material would then be sent to each subscribing member as required.

If the member was on a committee, then committee news and meeting dates may be included on the newsletter, specifically for that member. The newsletter may also carry advertisements that have been tailored for that member.

Personalised invitations to events and prizes similar to the pay slip coupons may also be utilised. Games of chance and gambling are extension of this facility that could be implemented.

Persons skilled in the art will appreciate that numerous variations and modifications will become apparent. All such variations and modifications which become apparent to persons skilled in the art, should be considered to fall within the spirit and scope that the invention broadly appearing before described.

Thus, for example, it will be appreciated that the member data stored by the anonymous fragmented database may be any information that is desired to be stored centrally, for which the identity of associated individuals is to be retained secret. In this sense, individuals are not restricted to individual people, but will also include companies, organisations, entities, groups of people, or the like.

The member data than can be used to allow information to be transferred to respective individuals, for example by using the member data as selection criteria for the selection of individuals. Alternatively, the member data can be used as source data to allow statistical information regarding the individuals, or in the case of companies, regarding each company's operation.

Claims

THE CLAIMS DEFINING THE INVENTION ARE AS FOLLOWS: 1) A method for transferring information to individuals, using a base station, the base station including: a) A database for storing member data for a number of individuals, the member data including for each individual: i) A unique identifier; and, ii) One or more criteria; and, b) A processing system, the method including causing the processing system to: i) Select one or more of the individuals in accordance with the criteria; ii) Transfer the information to one or more end stations together with the identifier, the end station being adapted to supply the information to the individual in accordance with the identifier. 2) A method according to claim 1, the end station including: a) A store for storing identity data, the identity data including for each individual: i) The identifier; and, ii) An indication of an identity for the respective individual, b) A processor, the method including causing the processor to: i) Receive the information and one or more identifiers from the base station; ii) Determine the identity of one or more individuals from the one or more identifiers; and, iii) Transfer the information to the respective individuals in accordance with the determined identity. 3) A method according to claim 2, the method including causing the processor to: a) Modify the information in accordance with the determined identity to thereby personalise the information; and, b) Supply the modified information to the individual. 4) A method for transferring information to individuals, using a base station, the base station including: a) A database for storing member data including at least an identifier for a number of individuals; and, b) A processing system, the method including causing the processing system to: i) Select one or more of the individuals; ii) Transfer the information to one or more end stations together with the identifier, each end station including: (1) A store for storing identity data, the identity data including for each individual: (a) The identifier; and, (b) An indication of an identity for the respective individual, (2) A processor, the method including causing the processor to: (a) Receive the information and one or more identifiers from the base station; (b) Determine the identity of one or more individuals from the one or more identifiers; and, (c) Modify the information in accordance with the determined identity to thereby personalise the information; and, (d) Supply the modified information to the individual. 5) A method according to claim 4, the member data further including one or more criteria, the method including causing the base station to select the one or more individuals in accordance with the one or more criteria. 6) A method according to any one of the claims 2, 3, or 5, the store being further adapted to store the one or more criteria. 7) A method according to any one of the claims 2, 3, 5, or 6, the method including causing the processor to: a) Obtain for each individual: i) The individual's identity; and, ii) The one or more criteria; b) Generate an identifier associated with the individual; c) Store at least the identity and the identifier in the store as identity data; and, d) Transfer at least the identifier and the one or more criteria to the base station as member data, the base station being adapted to store the identifier and the criteria in the database. 8) A method according to claim 7, the method further including causing the end station to: a) Obtain any changes in the criteria from each individual; and, b) Transfer at least the identifier and the criteria changes to the base station, the base station being adapted to update the criteria in the member data for the respective individual in accordance with the identifier. 9) A method according to any one of the claims 6 to 8, the base station being coupled to one or more member end stations, the method including: a) Causing the base station to receive criteria changes from a respective individual via one of the member end stations; and, b) Update the criteria stored in the member data for the respective individual in accordance with the received criteria changes. 10) A method according to any one of the claims 6 to 9, the method further including: a) Causing the end station to transfer the identifier together with an end station identifier representative of the respective end station to the base station; and, b) Causing the base station to: i) Store the end station identifier in the database; and, ii) Transfer information to the end station in accordance with the end station identifier. 11) A method according to any one of the claims 6 to 12, the criteria including one or more of: a) The individual ' s residential locality; b) The individual's age/gender; c) The individual's interests; d) The individual's income; e) The individual's employment; and, f) One or more criteria specified by the member. 12) A method according to any one of the claims 2, 3 or 5 to 11, the information being provided together with pay slips, or the like. 13) A method according to claim 12, the store being adapted to store salary information, the method including causing the processor to: a) Determine the salary information and the information from the store for an individual in accordance with the received identity; b) Generate a pay slip including the information; and, c) Supply the pay slip to the respective individual. 14) A method according to any one of the claims 1 to 13, the information including at least one of: a) Coupons; b) Vouchers; c) Advertising; and, d) Any other information. 15) A method according to any one of the claims 1 to 14, the base station being coupled to a supplier end station, the method including causing the base station to: a) Provide the supplier end station with a list of available selection criteria from which the supplier can choose which criteria to use; b) Receive the information and one or more predetermined criteria from the supplier end station; c) Compare the predetermined criteria and the one or more criteria for each individual; and d) Select the one or more individuals in accordance with the results of the comparison. 16) A method according to claim 15, the method including causing the base station to: a) Determine the number of selected individuals; b) Transfer an indication of the number to the supplier end station; and, c) Cooperate with the supplier end station to allow a member of the supplier end station to refine the predetermined criteria until a desired number of individuals are selected. 17) A method according to claim 15 or claim 16, the method including causing the base station to: a) Determine statistics relating to the information provided to the individuals; and, b) Provide the statistics to the supplier end station. 18) A method according to claim 17, the method including causing the base station to a) Determine feedback, the feedback relating to information provided to individuals; and, b) Determine statistics in accordance with the feedback. 19) A method according to claim 18, the feedback including an indication of interest in the received information supplied by the respective mdividual. 20) A method according to claim 18, the feedback including an indication of the use of the information. 21) A method according to any one of the clams 1 to 20, the method including: a) Adding a unique code to the information supplied to each individual; and, b) Using the unique code for collecting statistics. 22) A method according to claim 21, the information being a voucher, the method including: a) Using the unique code to determine when the voucher has been used in a transaction; and, b) Transferring an indication of the unique code used to the base station. 23) A method according to claim 21, the unique code being a bar code. 24) A system for transferring information to individuals, the system including a base station coupled to one or more end stations via a communications network, the base station including: a) A database for storing member data for a number of individuals, the member data including for each individual: i) A unique identifier; and, ii) One or more criteria; and, b) A processing system adapted to: i) Select one or more of the individuals in accordance with the criteria; ii) Transfer the information to one or more end stations together with the identifier, the end station being adapted to supply the information to the individual in accordance with the identifier. 25) A system according to claim 24, the end station including: a) A store for storing identity data, the identity data including for each individual: i) The identifier; and, ii) An indication of an identity for the respective individual, b) A processor adapted to: i) Receive the information and one or more identifiers from the base station; ii) Determine the identity of one or more individuals from the one or more identifiers; and, iii) Transfer the information to the individual in accordance with the determined identity. 26) A system method according to claim 25, the processor being adapted to: a) Modify the information in accordance with the determined identity to thereby personalise the information; and, b) Supply the modified information to the individual. 27) A system for transferring information to individuals, the system including: a) A base station including: i) A database for storing member data including at least an identifier for a number of individuals; and, ii) A processing system, the method including causing the processing system to: (1) Select one or more of the individuals; (2) Transfer the information to one or more end stations together with the identifier, each end station including; and, b) One or more end stations coupled to the base station via a communications network, each end station including: i) A store for storing identity data, the identity data including for each individual:

(1) The identifier; and,

(1) Receive the information and one or more identifiers from the base station; (2) Determine the identity of one or more individuals from the one or more identifiers; and,

(4) Supply the modified information to the individual.

28) A system according to claim 26, the member data further including one or more criteria, the base station being adapted to select the one or more individuals in ^"accordance with the one or more criteria.

29) A system according to any one of the claims 24, 25 or 27, the system being adapted to perform the methods of any one of the claims 6 to 22.

30) A distributed database system for storing member data relating to respective individuals, the system including: a) A base station including: i) A first database for storing at least:

(1) An identifier relating to each individual;

(2) The member data relating to each mdividual; and, ii) A processing system; and, b) At least one end station coupled to the base station via a communications network, the end station including: i) A second database for identity data storing at least: (1) The identifier relating to each individual; and, (2) An indication of an identity of each individual; and, ii) A processor, the processor being adapted to cooperate with the processing system.

31) A system according to claim 30, the second database being further adapted to store the member data.

32) A method according to claim 30 or claim 31, the individuals being respective entities, and the member data representing at least one of: a) Accounts data; b) Sales data; c) Production data; and, d) Other financial data; 33) A system according to any one of the claims 30 to 32, the end station being adapted to: a) Receive changes in member data from a member; and, b) Transfer an indication of the changes to the base station, the base station being responsive to the changes to update the member data stored in the first database.

34) A system according to any one of the claims 30 to 33, the base station being responsive to a request to provide at least one of: a) Member data; and, b) Statistics relating to member data.

35) A system according to claim 34, the request being received from at least one of: a) A member; and, b) Other individuals. 36) A system according to any one of the claims 30 to 35, the member data including criteria, the base station being adapted to: a) Receive a request including predetermined criteria; b) Compare the predetermined criteria to the criteria stored in the member data; c) Generate statistics in accordance with the results of the comparison.

37) A system according to claim 30, the system being adapted to allow information to be transferred to selected individuals, the processing system being adapted to: a) Select one or more of the individuals in accordance with the member data; b) Determine the identifiers of the respective individuals; and, c) Transfer the information and the identifiers to the end station, the end station being adapted to: i) Receive the identifiers and the information; ii) Determine the identitys from the second database in accordance with the identifiers; iii) Supply the information to the individuals in accordance with the identitys.

38) A system according to claim 37, the end station being further adapted to modify the information in accordance with the identity and supply the modified information to the individuals.

39) A system according to claim 37 or claim 38, the base station being coupled to a number of end stations, each end station having a unique end station identifier, the first database being adapted to store the end station identifier, the base station being adapted to transfer the information to the end station in accordance with the end station identifier. 40) A system according to any one of the claims 37 to 39, the system being adapted to perform the method of any of claims 6 to 22.

41) A system according to claim 30, the system being adapted to allow the member data to be transferred to a respective individual, the end station being adapted to: a) Determine a identity relating to a selected individual; b) Determine the identifier relating to the selected individual from the second database in accordance with the identity; c) Transfer the identifier to the base station, the base station being adapted to: i) Receive the identifier; ii) Obtain the member data from the first database in accordance with the identifier; and, iii) Transfer the member data to the end station.

42) A system according to claim 41, the end station being further adapted to modify the member data in accordance with the identity and supply the modified member data to the individuals.

43) A system according to claim 41 or claim 42, the base station being coupled to a number of end station, each end station having a unique end station identifier, the first database being adapted to store the end station identifier, the base station being adapted to transfer the member data to the end station in accordance with the end station identifier.

44) A method of collecting statistics relating to individuals, using a base station, the base station including: a) A data store for storing for each of a number of individuals: i) A unique identifier associated with the individual, correspondence between the identity of the individual and the identifier being retained confidentially remote to the base station; and, ii) Member data relating to the individual; and, b) A processing system, the method including causing the processing system to: i) Determine statistics from the member data; and, ii) Provide the statistics.

45) A method according to claim 44, the individuals being respective entities, and the member data representing at least one of: a) Accounts data; b) Sales data; c) Production data; and, d) Other financial data;

46) A method according to claim 44 or claim 45, the base station being coupled to one or more end stations, the method including causing each end station to: a) Collect member data relating to one or more individuals associated therewith; b) Determine an identifier representative of the respective mdividual; c) Filter the member data to remove any identity; and, d) Transfer the identifier and the filtered member data to the base station, the base station being adapted to store the filtered member data in the store.

47) A method according to any one of the claims 44 to 46, the method including having the base station provide the statistics to an operator of the base station.

48) A method according to any one of the claims 44 to 47, the member data including criteria, the method including: a) Receiving a request including one or more predetermined criteria; b) Causing the processing system to: i) Compare the predetermined criteria to the one or more criteria stored in the member data; ii) Select one or more individuals in accordance with the results of the comparison; and, iii) Determine the statistics for the selected individuals. 49) A method according to any one of the claims 44 to 48, the method being performed using the system of any one of the claims 30 to 43.