Abstract

Found on a Map, Reachable Forever? Privacy-by-Design Map and Marketplace Discovery Using Query-Scoped, Non-Bearer Communication Authority — Separating First Contact from Future Reachability

Map and marketplace discovery — searching for a house to rent, a clinic, a plumber or a hotel — usually turns into contact through a phone number, reusable masked number, open message thread or callback route. A user who wanted one short conversation with a few candidates ends up permanently reachable: the number lands in a CRM, moves to a call centre or affiliate, is copied by staff or leaks in a breach. Masked numbers hide the real number but remain bearer identifiers while active; STIR/SHAKEN and SIP identity prove who is calling, not whether they may still reach this person; OAuth tokens authorise classes of API calls rather than one communication effect; spam filtering and lead databases act on reputation or ownership rather than current authority. Businesses, meanwhile, pay for clicks and leads that are often stale or low-intent. This paper describes a privacy-by-design communication-finality architecture in which first contact and future reachability are separate authorisation events. After a search or enquiry, a Communication Authority Service issues query-scoped, non-bearer preview authority bound to user, query, property or business, channel, effect, duration, quota, nonce, revocation epoch and enforcement point; the visible handle is only a context reference. An enforcement point at the CPaaS, SIP, WebRTC or messaging relay holds each attempt non-effective, reconstructs the actual attempt, checks current state, consumes authority atomically and only then releases a bounded call or message. Continued contact needs new, separately issued authority, so property, purpose or business pivots and breached handles produce no contact. The paper covers a full house-rental walkthrough, pay-per-verified-contact marketplace economics, latency design, Google Maps-type and Apple Maps-type integration (illustrative only), relationships to SIP, STIR, OAuth, DPoP, WebRTC, WIMSE and RATS, GDPR-aligned data minimisation and a runnable reference implementation. This disclosure is based on the author's international patent applications PCT/IB2026/055615 (the "Mothership" application), filed on 4 June 2026 and publicly disclosed on 16 July 2026; PCT/IB2026/053385 (the ALF application), filed on 7 April 2026 and publicly disclosed on 4 June 2026; and PCT/IB2026/054453, filed on 5 May 2026 and publicly disclosed on 16 July 2026. The author is open to acquihire or strategic collaboration. IETF draft: https://datatracker.ietf.org/doc/draft-das-map-discovery-communication-finality/

KEYWORDS privacy by design, map-based discovery, local search, property marketplace, lead generation, number masking, virtual numbers, spam calls, robocall prevention, CPaaS, SIP, STIR/SHAKEN, WebRTC, OAuth, DPoP, non-bearer authorization, single-use authorization, consent, GDPR data minimisation, purpose limitation, AI agents, marketplace monetisation, communication finality

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution-Noncommercial 4.0 License

Download

Share

COinS