IP Library Granted Patent US 12705123
Granted Patent B1
US 12705123 · App. 18/604,905 · Granted Aug 11, 2026

Database and file management for data validation and authentication

Inventors: David M. Wilson (Centreville, VA); Ann Epstein (Vienna, VA); Kathleen W. Scanlon (Potomac, MD); David F. Owens (Broadlands, VA); Rajasekhar Penugonda (Ashburn, VA); Raghu Kurlagunda (Vienna, VA)
Assignee: FEDERAL HOME LOAN MORTGAGE CORPORATION (FREDDIE MAC)
G06F11/0727G06F9/54G06F11/0751G06F11/0772G06F16/2379G06F16/986H04L63/08H04L63/123
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12705123
App. No.
18/604,905
Granted
Aug 11, 2026
Kind
B1
Abstract

A request including unauthenticated data is created and securely transmitted to a remote device that indicates a successful validation. A response file associated with the remote device is validated. A discrepancy between the unauthenticated data from the request and authenticated data accessible by the remote device is detected from the response file. Obtained correction data resolves the discrepancy. A transaction is executed based on the request and the correction data. The remote device includes a second processor that generates a database table based on at least one field of the authenticated data. At least one respective predetermined value is extracted from the authenticated data and from the database table. The authenticated data in the request are validated based on a comparison of the at least one extracted respective predetermined data value from the authenticated data and from the database table to the unauthenticated data in the request.

Claims (91)

1 . A system for database and file management comprising:

a data management device comprising:

one or more processors; and

a memory device storing instructions that, in response to execution by the one or more processors, causes the one or more processors to perform operations comprising:

creating a first request comprising unauthenticated data for validation;

securely transmitting the first request to a remote device;

receiving a first response file from the remote device responsive to the secure transmitting of the first request;

validating the first response file associated with the remote device;

detecting, from the first response file, a discrepancy between the unauthenticated data from the first request and authenticated data accessible by the remote device;

obtaining correction data from the first response file to resolve the discrepancy, the correction data including a suggested modification to the unauthenticated data from the remote device;

correcting the discrepancy between the unauthenticated data and the authenticated data based on the suggested modification to produce new unauthenticated data;

creating a second request including the new unauthenticated data for validation;

securely transmitting the second request to the remote device;

receiving an indication of a successful validation of the new unauthenticated data from the remote device;

updating metadata corresponding to the second request responsive to receiving the indication of the successful validation; and

executing a transaction based on the second request, the transaction is a computer instruction that transmits the validated data of the second request to a requesting device or service;

wherein the remote device comprises a second processor to perform operations comprising:

generating a database table based on one or more fields of the authenticated data;

extracting one or more predetermined data values from the authenticated data;

extracting one or more predetermined data values from the database table; and

validating the new unauthenticated data in the second request based on a comparison of the extracted one or more predetermined data values from the authenticated data and the extracted one or more predetermined data values from the database table to the new unauthenticated data in the second request.

2 . The system of claim 1 , wherein the operation of securely transmitting the first request to the remote device and the operation of securely transmitting the second request to the remote device are performed using at least one of a representational state transfer (REST) application programming interface (API) or a simple object access protocol (SOAP).

3 . The system of claim 1 , wherein the second processor further performs operations comprising:

applying a data security technique to verify that the authenticated data has not been modified by an unauthorized user;

generating a second response file based on the second request and on one or more fields of the validated new unauthenticated data; and

transmitting the second response file via a representational state transfer (REST) application programming interface (API) to the data management device.

4 . The system of claim 1 , wherein the second processor further performs operations comprising generating the first response file comprising the discrepancy based on a difference between the unauthenticated data from the first request and the extracted one or more predetermined data values.

5 . The system of claim 1 , wherein the one or more processors perform operations further comprising:

verifying the correction data based on the first request;

generating a set of error code values corresponding to the validation of the unauthenticated data from the first request;

detecting an error from the validation of the first response file; and

selecting an error code from the set of error codes associated with the error.

6 . The system of claim 1 , wherein the first request comprises data for multiple transactions.

7 . The system of claim 1 , wherein an interpreted scripting language object on which the first request is based comprises data stored in a JavaScript® object notation.

8 . The system of claim 1 , wherein the first response file includes a system identifier that authenticates the remote device associated with the first response file, the system identifier including any suitable string of alphanumeric characters that is unique to the remote device.

9 . A method, implemented using a computing system, for database and file management, the method comprising:

creating a first request comprising unauthenticated data for validation;

securely transmitting the first request to a remote device;

receiving a first response file from the remote device responsive to the secure transmitting of the first request;

validating the first response file associated with the remote device;

detecting, from the first response file, a discrepancy between the unauthenticated data from the first request and authenticated data accessible by the remote device;

obtaining correction data from the first response file to resolve the discrepancy, the correction data including a suggested modification to the unauthenticated data from the remote device;

correcting the discrepancy between the unauthenticated data and the authenticated data based on the suggested modification to produce new unauthenticated data;

creating a second request including the new unauthenticated data for validation;

securely transmitting the second request to the remote device;

receiving an indication of a successful validation of the new unauthenticated data from the remote device;

updating metadata corresponding to the second request responsive to receiving the indication of the successful validation; and

executing a transaction based on the second request, the transaction is a computer instruction that transmits the validated data of the second request to a requesting device or service;

wherein the remote device comprises a second processor to perform operations comprising:

generating a database table based on one or more fields of the authenticated data;

extracting one or more predetermined data values from the authenticated data;

extracting one or more predetermined data values from the database table; and

validating the new unauthenticated data in the second request based on a comparison of the extracted one or more predetermined data values from the authenticated data and the extracted one or more predetermined data values from the database table to the new unauthenticated data in the second request.

10 . The method of claim 9 , wherein the securely transmitting the first request to the remote device and the securely transmitting the second request to the remote device are performed using at least one of a representational state transfer (REST) application programming interface (API) or a simple object access protocol (SOAP).

11 . The method of claim 9 , further comprising:

applying a data security technique to verify that the authenticated data has not been modified by an unauthorized user;

generating a second response file based on the second request and on one or more fields of the validated new unauthenticated data; and

transmitting the second response file via a representational state transfer (REST) application programming interface (API).

12 . The method of claim 9 , further comprising generating the first response file comprising the discrepancy based on a difference between the unauthenticated data from the first request and the extracted one or more predetermined data values.

13 . The method of claim 9 , further comprising:

verifying the correction data based on the first request;

generating a set of error code values corresponding to the validation of the unauthenticated data from the first request;

detecting an error from the validation of the first response file; and

selecting an error code from the set of error codes associated with the error.

14 . The method of claim 9 , wherein the first request comprises data for multiple transactions.

15 . The method of claim 9 , wherein an interpreted scripting language object on which the first request is based comprises data stored in a JavaScript® object notation.

16 . The method of claim 9 , wherein the first response file includes a system identifier that authenticates the remote device associated with the first response file, the system identifier including any suitable string of alphanumeric characters that is unique to the remote device.

17 . A non-transitory computer-readable medium for database and file management comprising a plurality of instructions that, when executed by a processor, cause the processor to perform operations comprising:

creating a first request comprising unauthenticated data for validation;

securely transmitting the first request to a remote device;

receiving a first response file from the remote device responsive to the secure transmitting of the first request;

validating the first response file associated with the remote device;

detecting, from the first response file, a discrepancy between the unauthenticated data from the request and authenticated data accessible by the remote device;

obtaining correction data from the first response file to resolve the discrepancy, the correction data including a suggested modification to the unauthenticated data from the remote device;

correcting the discrepancy between the unauthenticated data and the authenticated data based on the suggested modification to produce new unauthenticated data;

creating a second request including the new unauthenticated data for validation;

securely transmitting the second request to the remote device;

receiving an indication of a successful validation of the new unauthenticated data from the remote device;

updating metadata corresponding to the second request responsive to receiving the indication of the successful validation; and

executing a transaction based on the second request, the transaction is a computer instruction that transmits the validated data of the second request to a requesting device or service;

wherein the remote device comprises a second processor to perform operations comprising:

generating a database table based on one or more fields of the authenticated data;

extracting one or more predetermined data values from the authenticated data;

extracting one or more predetermined data values from the database table; and

validating the new unauthenticated data in the second request based on a comparison of the extracted one or more predetermined data values from the authenticated data and the extracted one or more predetermined data values from the database table to the new unauthenticated data in the second request.

18 . The non-transitory computer-readable medium of claim 17 , wherein the securely transmitting the first request to the remote device and the securely transmitting the second request to the remote device are performed using at least one of a representational state transfer (REST) application programming interface (API) or a simple object access protocol (SOAP).

19 . The non-transitory computer-readable medium of claim 17 , wherein the second processor is to further perform operations comprising:

applying a data security technique to verify that the authenticated data has not been modified by an unauthorized user;

generating a second response file based on the second request and on one or more fields of the validated new unauthenticated data; and

transmitting the second response file via a representational state transfer (REST) application programming interface (API).

20 . The non-transitory computer-readable medium of claim 17 , wherein the first response file includes a system identifier that authenticates the remote device associated with the first response file, the system identifier including any suitable string of alphanumeric characters that is unique to the remote device.