AU777344B2 - System and method for evoking policy based E-commerce - Google Patents

Description

AUSTRALIA

PATENTS ACT 1990 COMPLETE SPECIFICATION NAME OF APPLICANT(S): International Business Machines Corporation ADDRESS FOR SERVICE: DAVIES COLLISON CAVE Patent Attorneys 1 Little Collins Street, Melbourne, 3000.

INVENTION TITLE: System and method for evoking policy based E-commerce The following statement is a full description of this invention, including the best method of performing it known to me/us:lA BACKGROUND OF THE INVENTION i. Technical Field The present invention relates generally to the development of electronic commerce. Still more particularly, the present invention provides a system and method that allows an e-commerce customer to establish personalized and individualized shopping policies under the direct control of the customer.

2. Description of the Related Art Electronic commerce (e-commerce) is expanding rapidly as customers overcome initial doubts or fears about ordering on-line. The advantages of e-commerce are many. Often customers can avoid paying state sales tax which, for many items, may exceed any shipping 20 charges encountered. Also the customer can shop a wide variety of vendors nationwide and find prices substantially lower than prices for the same item available off-line.

Customization of the on-line interaction with a o 25 customer by an e-commerce vendor is often limited or nonexistent. For example, a book vendor may use a S"current purchase to direct a customer's attention to Ssimilar books. However, every customer purchasing the same book would receive the same referral information, ~30 so this is hardly personalized.

Therefore, it would be advantageous to have a system and method that allows the customer to establish personalized, individualized shopping policies that can be applied automatically for the customer and those associated with the customer, such as members of a family or coworkers in a business.

.:oo.i ooo .:oo.o *oo o• *oo 11 Q 'oprtcp\719 73c doc- I 08D4 3 SUMMARY OF THE INVENTION According to the present invention there is provided a method in a distributed data processing system for managing electronic commerce, the method comprising the computerimplemented steps of: establishing a personal commerce manager client-side agent at a customer site, wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies 15 for the customer site.

The invention also provides a method in a distributed data processing system for managing electronic commerce, the S"method comprising the computer-implemented steps of: establishing a personal commerce manager server-side agent at a vendor site; and managing a data exchange between the vendor site and a .customer site, wherein the personal commerce manager server-side agent recognizes personal commerce manager information transmitted 25 to the server from a client-side personal commerce manager agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

Q Nopr\cp\71973¢ do- I8Od4 3A The invention also provides a client-based commerce management system, the system comprising: an initializing means for establishing a personal commerce manager client-side agent at a customer site, wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and a managing means for managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies for the customer site.

The invention also provides a server-based commerce management system, the system comprising: 15 an initializing means for establishing a personal commerce manager server-side agent at a vendor site; and a managing means for managing a data exchange between ,ooee S"the vendor site and a customer site, wherein the personal commerce manager server-side agent 20 recognizes personal commerce manager information transmitted e ee to the server from a client-side personal commerce manager agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, 25 and carries out a customer policy.

The invention also provides a computer program product on a computer-readable medium for managing e-commerce, the computer program product comprising: first instructions for establishing a personal commerce Q: pc\gp? 1973c doc-1 MI O4 3B manager client-side agent at a customer site, wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and second instructions for managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies for the customer site.

The invention also provides a computer program product on a computer-readable medium for managing e-commerce, the computer program product comprising: first instructions for establishing a personal commerce manager server-side agent at a vendor site; and second instructions for managing a data exchange 15 between the vendor site and a customer site, too" wherein the personal commerce manager server-side agent recognizes personal commerce manager information transmitted to the server from a client-side personal commerce manager '60 agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

0 Embodiments of the invention function such that the client-side agent establishes a set of customer information, 00o 0 25 a set of customer rules, and a set of customer policies. A 0 0 PCM at a customer site can manage multiple participants, such as members of a family, coworkers in a business, or colleagues at a university. A primary account holder sets rules and policy for other participants. Customer Q 'opcacpl7 1973c doc- &1W84 3C information typically includes a customer name, a list of participant names, a billing address, a shipping address, and account information. Customer rules are based on yes-no decisions about conduct of e-commerce, such as whether customer information can be sent to a trusted third party site. A customer policy may determine a list of approved vendor sites for each authorized participant, an association of an account with a particular vendor site, a spending limit associated with each participant, and a filter for incoming information from a vendor that determines which information is to be displayed. These are only sample policies; a wide variety of other policies are possible.

There is also a personal commerce manager server-side agent at each vendor site. These client-side and server-side S. 15 agents exchange information and manage the e-commerce activities in accordance with the rules and policies established at each customer site.

5*

S*

BRIEF DESCRIPTION OF THE DRAWINGS The novel features believed characteristic of the invention are set forth in the appended claims. The invention itself, however, as well as a preferred mode of use, further objectives and advantages thereof, will best be understood by reference to the following detailed description of an illustrative embodiment when read in conjunction with the accompanying drawings, wherein: Figure 1 is a pictorial representation of a distributed data processing system in which the present invention may be implemented; Figure 2 is a block diagram of a data processing system that may be implemented as a server in which the present invention may be implemented; :....Figure 3 is a block diagram of a data processing system that may be implemented as a client in which the 20 present invention may be implemented; Figure 4 shows sample content for a Personal Commerce Manager (PCM) in accordance with a preferred embodiment of the invention; Figure 5 shows various ways to integrate the Personal Commerce Manager (PCM) into a client-side computer system in accordance with a preferred embodiment of the invention; Figure 6 illustrates two purchase transactions without using the PCM system; 30 Figure 7 illustrates the same two purchases as Figure 6 using PCM agents at both the server-side and the client-side in accordance with a preferred embodiment of the invention; Figure 8 is a block diagram of the client-side software to support the PCM system in accordance with a preferred embodiment of the invention; Figure 9 shows the flow of events in processing responses from a server in accordance with a preferred embodiment of the invention; Figure 10 shows a block diagram of the server-side software to support the PCM system in accordance with a preferred embodiment of the invention; and Figure 11 shows the flow of events in processing requests from the client in accordance with a preferred embodiment of the invention.

ooo .°oo.i oO• °o ••ooo DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT With reference now to the figures, and in particular with reference to Figure 1, a pictorial representation of a distributed data processing system is depicted in which the present invention may be implemented.

Distributed data processing system 100 is a network of computers in which the present invention may be implemented. Distributed data processing system 100 contains network 102, which is the medium used to provide communications links between various devices Sand computers connected within distributed data processing system 100. Network 102 may include permanent connections, such as wire or fiber optic cables, or temporary connections made through telephone connections.

In the depicted example, servers 104, 114, 116 and 118 are connected to network 102. Storage units 106 S"and 122 are also connected to network 102, providing backup support for any or all of servers 104, 114, 116 and 118. Storage unit 122 provides dedicated backup support for server 104. In addition, clients 108, 110 and 112 are also connected to network 102. These three clients may be, for example, personal computers or network computers. For purposes of this application, a network computer is any computer coupled to a network, S"which receives a program or other application from another computer coupled to the network. Distributed data processing system 100 may include additional servers, clients, and other devices not shown.

In the depicted example, servers 104, 114, 116 and 118 provide storage for data from clients 108, 110 and 112. These four servers also provide data, such as boot files, operating system images, and applications to clients 108, 110 and 112. Clients 108, 110 and 112 are clients to one or all of servers 104, 114, 116 and 118. Support for a particular application being performed on one of clients 108, 110 and 112 may be by one of servers 104, 114, 116 and 118. Additionally servers 104, 114, 116 and 118 may provide backup support for each other. In the event of a server failure, a redundant backup server may be allocated by the network administrator, in which case requests directed to the failed server are routed to the redundant backup server.

In a similar manner, data backup support is provided by storage units 106 and 122 for servers 104, 114, 116 and 118. However, rather than the network administrator allocating a data backup storage unit at e each use, data backup allocation is set, and data backup transfer occurs at low usage times, typically S 20 after midnight, between any of servers 104, 114, 116 .eoeei and 118 and storage units 106 and 122.

In the depicted example, distributed data processing system 100 may be the Internet, with network S102 representing a worldwide collection of networks and gateways that use the TCP/IP suite of protocols to communicate with one another. At the heart of the Internet is a backbone of high-speed data communication lines between major nodes or host computers consisting of thousands of commercial, government, education, and other computer systems that route data and messages.

Of particular interest for the present invention is the use of distributed data processing system 100 for e-commerce (electronic commerce). This invention allows clients 108, 110, and 112 to set up rules and policy when interacting with e-commerce servers, such as servers 104, 114-118.

Of course, distributed data processing system 100 also may be implemented as a number of different types of networks, such as, for example, an intranet or a local area network. Figure 1 is intended as an example and not as an architectural limitation for the processes of the present invention.

Referring to Figure 2, a block diagram of a data processing system which may be implemented as a server, such as server 104 in Figure 1, is depicted in accordance with the present invention. Data processing system 200 may be a symmetric multiprocessor (SMP) Ssystem including a plurality of processors 202 and 204 connected to system bus 206. Alternatively, a single processor system may be employed. Also connected to system bus 206 is memory controller/cache 208, which provides an interface to local memory 209. I/O bus bridge 210 is connected to system bus 206 and provides S 20 an interface to I/O bus 212. Memory controller/cache 208 and I/O bus bridge 210 may be integrated as depicted.

Peripheral component interconnect (PCI) bus bridge 214 connected to I/O bus 212 provides an interface to PCI local bus 216. A number of modems 218-220 may be connected to PCI bus 216. Typical PCI bus ooooo implementations will support four PCI expansion slots or add-in connectors. Communications links to network computers 108-112 in Figure 1 may be provided through modem 218 and network adapter 220 connected to PCI local bus 216 through add-in boards. With respect to the present invention, server 200 is engaged in promoting e-commerce transactions with clients, such as clients 108, 110, and 112 in Figure 1. Connection of clients to the Internet may be low speed through dial-up modems or through faster technologies such as cable modems or DSL (digital subscriber line).

Additional PCI bus bridges 222 and 224 provide interfaces for additional PCI buses 226 and 228, from which additional modems or network adapters may be supported. In this manner, server 200 allows connections to multiple network computers. A memory mapped graphics adapter 230 and hard disk 232 may also be connected to I/O bus 212 as depicted, either directly or indirectly.

Those of ordinary skill in the art will appreciate that the hardware depicted in Figure 2 may vary. For Sexample, other peripheral devices, such as optical disk drives and the like, also may be used in addition to or in place of the hardware depicted. The depicted example is not meant to imply architectural limitations with respect to the present invention.

The data processing system depicted in Figure 2 S: 20 may be, for example, an IBM AS/400, a product of International Business Machines Corporation in Armonk, New York, running the Advanced Interactive Executive (AIX) operating system.

With reference now to Figure 3, a block diagram of a data processing system in which the present invention may be implemented is illustrated. Data processing system 300 is an example of a client computer. Data processing system 300 employs a peripheral component interconnect (PCI) local bus architecture. Although S 30 the depicted example employs a PCI bus, other bus architectures, such as Micro Channel and ISA, may be used. Processor 302 and main memory 304 are connected to PCI local bus 306 through PCI bridge 308. PCI bridge 308 may also include an integrated memory controller and cache memory for processor 302.

Additional connections to PCI local bus 306 may be made through direct component interconnection or through add-in boards. In the depicted example, local area network (LAN) adapter 310, SCSI host bus adapter 312, and expansion bus interface 314 are connected to PCI local bus 306 by direct component connection. In contrast, audio adapter 316, graphics adapter 318, and audio/video adapter 319 are connected to PCI local bus 306 by add-in boards inserted into expansion slots. Expansion bus interface 314 provides a connection for a keyboard and mouse adapter 320, modem 322, and additional memory 324. In the depicted example, SCSI host bus adapter 312 provides a connection for hard disk drive 326, tape drive 328, CD-ROM drive 330, and digital video disc read only memory drive (DVD-ROM) 332. Typical PCI local bus implementations will support three or four PCI expansion slots or add-in connectors.

S 20 Those of ordinary skill in the art will appreciate that the hardware in Figure 3 may vary depending on the implementation. Client 300 is depicted using modem 322 to connect to the Internet, but higher speed technologies such as DSL or cable modems are possible to connect a client to an e-commerce server on the Internet. Regardless of the connection technology, the system and method of the present invention is designed to provide a robust environment to promote and stimulate the use of e-commerce by the user at the client machine shown in Figure 3. The depicted example is not meant to imply architectural limitations with respect to the present invention. For example, the processes of the present invention may be applied to multiprocessor data processing systems in the event the 11 user is conducting e-commerce from a work site that contains more powerful client machines. The processes of the present invention may also be applied to hand held wireless devices that provide access to the Internet.

A major goal of e-commerce is to make the on-line shopping experience convenient and flexible. This invention introduces a Personal Commerce Manager (PCM) that is designed to allow the customer to implement rules and policies for commerce applicable to the customer and those associated with the customer, such as family members, that share the same PCM. It is critically important that these rules and policies be under the direct control of the customer.

With reference now to Figure 4, sample content for Personal Commerce Manager (PCM) 402 is shown. Stored data 404 contains familiar items, such as name, date of birth, billing address, shipping address, and so forth.

It should be noted that there can be multiple user accounts for each PCM, such as an account for each family member. PCM 402 can also contain a plurality of rules 406. Only one rule is shown: automatically transfer registered user information to trusted third party sites. One common transfer of information would be to a credit card clearing site to approve a charge before a transaction is approved.

S"PCM 402 can also contain a plurality of policies 408. The major distinction between a rule and a policy is that rules involve yes-no decisions that might be specified using a checkbox, whereas policies involve more detailed information, as illustrated by the two examples provided. The first policy, shown informally in policy 408, allows a family member, a son, to spend his allowance of $50.00 per month at one or more web sites contained in a list of sites approved by the primary account holder. The credit card of the primary account holder will be billed. Assuming the primary account holder has several credit cards on file, the second policy insures a particular card, a platinum visa card, is used for all shopping with a particular vendor, Bloomingdale's, in this case. It is easy to imagine a wide variety of policies implemented by the customer to facilitate the shopping experience by the customer and others named on the customer's PCM. A PCM is not limited to use by family members; the same approach could be used by coworkers in a business, employees of a government agency, or colleagues at a university, just to name a few potential applications.

Users of the Internet have all experienced long download times of webpages due to bandwidth problems, particular when using modems. The e-commerce provider wants to make the site as attractive and flexible as possible, but this often results in larger web pages and greater download time. The PCM system involves both server-side agents and client-side agents. By placing some of the components at the client-side, the bandwidth problems can be reduced and the policies can be applied to all e-commerce vendors.

With reference now to Figure 5, various ways to integrate the Personal Commerce Manager (PCM) into a client-side computer system are shown diagrammatically.

Commonly, Personal Commerce Manager 504 is installed as plug-in 502 for an Internet browser. A browser plug-in is a third-party software product that extends a Web o browser's capabilities. Other alternatives are to store the PCM on hard drive 506, store it on removable media 508, build it into system software 510, integrate it into IT software 512, or code it directly into browser 514.

The server-side component can update the client-side agent and can deploy new applications to the agent, as appropriate. Since the rules and policies established by the PCM system allow information that is transmitted to the customer to be targeted to the customer's particular needs, information that is not needed or wanted by the customer can be eliminated. This helps reduce the bandwidth of traffic between the server and the client.

The server-side agent can notify the client-side agent about special purchases or other e-commerce of particular interest to the customer. When the customer starts a browser, the client-side agent would display all such communications received. If the customer decides to order a product that is listed, this can be done by a link to a direct buying system and bypassing the e-commerce vendor's web site altogether.

With reference now to Figure 6, a diagram 20 illustrates two purchase transactions without using the O°o. PCM system. Suppose that customer 602 reads all John Grisham's novels and wants to buy the next book written by Grisham. Customer 602 continually monitors the web site of book vendor 606 via link 604. Eventually, after .se 25 many weeks or months of monitoring this site, customer 602 finds a new Grisham book at book vendor web site s.

s 606 and orders the book. Book vendor 606 forwards the order onto direct buying system 608 used by this sees*: vendor.

96 30 Customer 602 also owns a DVD player and wants to keep track of DVD releases for new movies by browsing DVD vendor web site 612. When customer 602 finds a new DVD to order, the order is sent via link 610 to DVD vendor 612, who, in turn, forwards the order on to direct buying system 614.

14 With reference now to Figure 7, a diagram illustrates the same two purchases as Figure 6 but using PCM agents at both the server-side and the client-side. The customer has established two policies: she wants to be notified immediately about any new book published by John Grisham and she wants to be notified about the release of any new DVD for a movie that has appeared in the theater in the last twelve months. Book vendor 702 uses Direct Buying System 704. When Direct Buying System 704 stocks the latest Grisham book, Book Vendor 702 notifies the PCM server-side agent that a new Grisham book has been published. Server-side agent 706 notifies all client-side agents about new book releases, but the policies implemented by Client-side Agent 710 for this customer have specified that only books by John Grisham are to be displayed. Server-side agent 706 sends notification of the new Grisham book over link 708 to client-side agent 710. As shown in Figure Client-side Agent 710 can reside in a variety of locations in the computer environment. Since the notification of the Grisham book matches the policy in place, this information will be displayed to customer 712 the next time the customer activates her browser.

If customer 712 elects to purchase the book, the order is sent directly via link 714 to Direct Buying System oooo*704 bypassing book vendor web site 702 altogether.

In a similar manner, DVD vendor web site 716 orders all of its DVDs from Direct Buying System 718.

Whenever any new DVDs of movies are released,

PCM

Server-side agent 720 notifies all client-side agents.

In the case of Client-side Agent 710, notification is via link 722. The policy at the client-side agent only displays DVD releases for movies produced in the last twelve months. Customer 712 is presented a list of recent movies released on DVD and can plirchase those she wants. When a DVD is purchased, the order is sent from client-side agent 710 via link 724 to Direct Buying System 718. By using the PCM system, customers can be notified immediately of products she is particularly interested in. This approach uses the available bandwidth more efficiently compared with a customer continually "surfing the web" to find desired products.

With reference now to Figure 8, a block diagram of the client-side software to support the PCM system.

Client endpoint 802 comprises several components, as shown to the right. PCM can be running as part of browser 804, either as a plug-in or directly coded in the browser. Alternatively, PCM can be part of application 806. The customer can access the PCM system through PCM Control Panel 808. This allows the user to enter or modify stored data, 404 in Figure 4, S 20 set rules, 406 in Figure 4, and establish policies, 408 in Figure 4. Entering data is through a type-in form that is completed by the customer. Setting rules is accomplished by toggling between two alternatives, such as allowing automatic transfer of registered 25 information or not. Setting policy is more complex, but wizards can guide the customer through the various options available when setting policy.

The PCM system rides on top of Application Layer 810. Since all input/output activities in a computer system are handled by the operating system, these software components rely on Operating System Layer 812 to accomplish input and output.

The block diagram in Figure 8 is best understood by examining the flow of events in processing responses from the server, as shown in Figure 9. A client will make a request of a server and receive a response (step 902). This response is typically in a markup language, such as XML, and the response is parsed (step 904) Each of the XML tags is examined to determine if it is associated with PCM. If it is not a PCM XML tag (step 906: No), then the response is processed without using PCM (step 908) and a reply is sent to the server (step 910) If an XML tag is a PCM tag (step 906: Yes), then the response is processed as a PCM request (step 912) Typically this processing will involve checking PCM client-side policy (step 914). If the PCM client-side policy does not allow the operation (step 916: No), then an appropriate reply is sent to the server (step i 910). If the PCM client-side policy does allow the operation (step 916: Yes), then the customer will make a decision (step 918), such as to order an item or not to order an item, and an appropriate response is sent to the server (step 910).

With reference now to Figure 10, a block diagram of the server-side software to support the PCM system.

Web Server 1002 comprises several components, as shown to the right. The PCM Server 1004 is the at the top level. Application Server 1006 invokes the methods of i PCM Server 1004. This is accomplished using Java Servlets 1008. Although the preferred embodiment of the invention is illustrated using the programming language Java, as those skilled in the art will appreciate, the invention could be implemented in other programming languages, such as Application Server 1006 rides on top of HTTP (HyperText Transfer Protocol) Server 1010. Since all input/output activities in a computer system are handled by the operating system, these software components rely on Operating System Layer 1012 to accomplish input and output.

The block diagram in Figure 10 is best understood by examining the flow of events, as shown in Figure 11, in processing requests from a client (step 1102) After receiving a request from the client, it is parsed (step 1104). The request is examined to see if any PCM data is present. If there is no PCM data (step 1106: No), then the request is processed without using

PCM

(step 1108) and a reply is sent to the client (step 1110) If there is PCM data (step 1106: Yes), then the request is processed as a PCM request (step 1112).

Typically this processing will involve checking

PCM

server-side policy (step 1114). For example, a request from the customer might indicate whether the server s ite is allowed to transfer registered data to trusted third party site, such as rule 406 shown in Figure 4.

If the customer has indicated she does not want the particular policy action to be in effect (step 1116: No), then the PCM action is not carried out (step 1118). If the customer indicates the policy should be Sinvoked (step 1116: Yes), then the appropriate

PCM

inv ke (step 1116: Yes) action is carried out (step 1120) An appropriate reply, depending on whether the policy was invoked or S•not, is sent to the client (step 1110) It is important to note that, while the present invention has been described in the context of a fully functioning data processing system, those of ordinary skill in the art will appreciate that the processes of the present invention are capable of being distributed in the form of a computer readable medium of instructions and a variety of forms, as illustrated in 18 Figure 5, and that the present invention applies equally regardless of the particular type of signal bearing media actually used to carry out the distribution. Examples of computer readable media include recordable-type media such a floppy disc, a hard disk drive, a RAM, and CD-ROMs and transmission-type media such as digital and analog communications links.

The description of the present invention has been presented for purposes of illustration and description but is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art. The embodiment was chosen and described in order to best explain the principles of the invention and the practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular 20 use contemplated.

Throughout this specification and the claims which follow, unless the context requires otherwise, the word "comprise", and variations such as "comprises" and "comprising", will be understood to imply the inclusion of a stated integer or step or group of integers or steps but not the exclusion of any other integer or step or group of integers or steps.

S" The reference to any prior art in this specification is not, and should not be taken as, an acknowledgment or any form of suggestion that that prior art forms part of the common general knowledge in Australia.

Claims (37)

1. A method in a distributed data processing system for managing electronic commerce, the method comprising the computer-implemented steps of: establishing a personal commerce manager client-side agent at a customer site, wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies for the customer site.

2. The method of claim 1, wherein the personal 20 commerce manager is located in at least one of a plug-in for a browser an implementation for a browser, a file on a system disk, a system software program, and a file on a removable media.

3. The method of claim 1, wherein the personal S"customer manager client-side agent includes information for each of a multiplicity of participants.

4. The method of claim 3, wherein at least one participant from the multiplicity of participants is designated as a primary participant.

The method of claim 4, wherein only the primary participant can enter and modify the customer information, the one or more customer rules, and the Q.0pc \ck 97k3 do- I one or more customer policies associated with the personal customer manager client-side agent.

6. The method of claim 1, wherein the customer information includes at least one of a customer name, a participant name, a billing address, a shipping address, and account information.

7. The method of claim 1, wherein the customer rules are based on a yes-no decision with regard to e-commerce functions.

8. The method of claim 7, wherein the one or more customer rules includes authorizing a transfer of customer information to a trusted third party site.

9. The method of claim 1, wherein the one or more customer policies determine at least one of authorized participants to conduct e-commerce, approved vendor sites for each 20 authorized participant, an association of an account with a particular vendor site, spending limits for the authorized participants, and a filter for incoming information from a vendor that determines which information is displayed. 25

10. A method in a distributed data processing system for managing electronic commerce, the method comprising the S•computer-implemented steps of: establishing a personal commerce manager server-side agent at a vendor site; and managing a data exchange between the vendor site and a customer site, wherein the personal commerce manager server-side agent Q %opelcp\71973 do-IO&'04 21 recognizes personal commerce manager information transmitted to the server from a client-side personal commerce manager agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

11. The method of claim 10, wherein the personal commerce manager server-side agent recognizes personal commerce manager information transmitted to the server from a client- side personal commerce manager agent.

12. The method of claim 10, wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

13. A client-based commerce management system, the system compr.ising: an initializing means for establishing a personal commerce manager client-side agent at a customer site, i wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and a managing means for managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies for the customer site.

14. The system of claim 13, wherein the personal commerce manager is located in at least one of a plug-in for a Q opcrp\7 1973cdocd1OS04 22 browser, an implementation for a browser, a file on a system disk, a system software program, and a file on a removable media.

15. The system of claim 13, wherein the personal customer manager client-side agent includes information for each of a multiplicity of participants.

16. The system of claim 15, wherein at least one participant from the multiplicity of participants is designated as a primary participant.

17. The system of claim 16, wherein only the primary participant can enter and modify the customer information, the one or more customer rules, and the one or more customer policies associated with the personal customer manager client-side agent.

18. The system of claim 13, wherein the customer 20 information includes at least one of a customer name, a participant name, a billing address, a shipping address, and account information. S:e

19. The system of claim 13, wherein the customer rules are 25 based on a yes-no decision with regard to e-commerce eeoc S: o functions.

The system of claim 19, wherein the one or more customer rules includes authorizing a transfer of customer information to a trusted third party site.

21. The system of claim 13, wherein the one or more Q Ncr4p71973c dc- I L 04 23 customer policies determine at least one of authorized participants to conduct e-commerce, approved vendor sites for each authorized participant, an association of an account with a particular vendor site, spending limits for the authorized participants, and a filter for incoming information from a vendor that determines which information is displayed.

22. A server-based commerce management system, the system comprising: an initializing means for establishing a personal commerce manager server-side agent at a vendor site; and a managing means for managing a data exchange between the vendor site and a customer site, wherein the personal commerce manager server-side agent recognizes personal commerce manager information transmitted to the server from a client-side personal commerce manager agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

23. The system of claim 22, wherein the personal commerce manager server-side agent recognizes personal commerce manager information transmitted to the server from a client- o side personal commerce manager agent.

24. The system of claim 22, wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

Q op: ocp7\ 1973c dc- 18 WO4 24 A computer program product on a computer-readable medium for managing e-commerce, the computer program product comprising: first instructions for establishing a personal commerce manager client-side agent at a customer site, wherein the personal commerce manager client-side agent establishes customer information, one or more customer rules, and one or more customer policies for the customer site; and second instructions for managing a data exchange between the customer site and a vendor site based on the customer information, the one or more customer rules, and the one or more customer policies for the customer site.

26. The computer program product of claim 25, wherein instructions for personal commerce manager are located in at least one of a plug-in for a browser, an implementation for a browser, a file on a system disk, a system software program, and a file on a removable media.

27. The computer program product of claim 25, wherein instructions for the personal customer manager client-side Sagent includes information for each of a multiplicity of participants.

28. The computer program product of claim 27, wherein at Soleast one participant from the multiplicity of participants is designated as a primary participant.

29. The computer program product of claim 28, wherein only the primary participant can enter and modify the customer information, the one or more customer rules, and the one or more customer policies associated with the personal customer Q \rgcp\l 197k doc.1 M81M4 manager client-side agent.

The computer program product of claim 25, wherein the customer information includes at least one of a customer name, a participant name, a billing address, a shipping address, and account information.

31. The computer program product of claim 25, wherein the customer rules are based on a yes-no decision with regard to e-commerce functions.

32. The computer program product of claim 31, wherein the one or more customer rules includes authorizing a transfer of customer information to a trusted third party site.

33. The computer program product of claim 25, wherein the V. one or more customer policies determine at least one of authorized participants to conduct e-commerce, approved vendor sites for each authorized participant, an association of an account with a particular vendor site, spending limits for the authorized participants, and a filter for incoming information from a vendor that determines which information is displayed.

34. A computer program product on a computer-readable medium for managing e-commerce, the computer program product 00 comprising: first instructions for establishing a personal commerce manager server-side agent at a vendor site; and second instructions for managing a data exchange between the vendor site and a customer site, wherein the personal commerce manager server-side agent Q \opr%\cp\71973c doc-]810 04 26 recognizes personal commerce manager information transmitted to the server from a client-side personal commerce manager agent; and wherein the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

The computer program product of claim 34, wherein instructions for the personal commerce manager server-side agent recognizes personal commerce manager information transmitted to the server from a client-side personal commerce manager agent.

36. The computer program product of claim 34, wherein instructions for the personal commerce manager server-side agent stores customer information, carries out a customer rule, and carries out a customer policy.

37. A distributed data processing system for managing electronic commerce substantially as hereinbefore described with reference to the drawings and/or Examples. DATED this 18th day of August 2004 INTERNATIONAL BUSINESS MACHINES CORPORATION By its Patent Attorneys DAVIES COLLISON CAVE