System and method for secure information validation and exchange
Systems including purpose-configured controllers that securely separate—functionally, structurally, or physically—data acquisition, validation, and aggregation operations from data distribution operations associated with completing and distributing an insurance application to insurance carriers.
1. A system for preventing over-disclosure of private information by a user by validating, and displaying at an end-user device, only that data which is required from the user and associated with a transaction, the transaction having a transaction type selected from a set of transaction types, the system comprising:
a first server comprising a first processor and a first memory storing executable instructions that, when accessed by the first processor, instantiate a data distribution controller configured to:
store and retrieve a plurality of data display schemas, the plurality of data display schemas comprising at least one data display schema associated with the selected transaction type, the at least one data display schema comprising a first set of rules, each rule comprising instructions for displaying or suppressing display of, at the end-user device, a respective one user input data type of a set of user input data types; and
store and retrieve a plurality of data validation schemas, the plurality of data validation schemas comprising at least one data validation schema associated with the selected transaction type and comprising a second set of rules for automatically validating at least a subset of the set of user input data types, the subset associated with the selected transaction type and comprising the displayed user input data types as defined by the first set of rules;
transmit normalized data to one or more third party systems; and
a second server in communication with the first server, the second server comprising a second processor and a second memory storing executable instructions that, when accessed by the second processor, instantiate a data aggregation controller configured to:
instruct the end-user device to render a graphical user interface to receive user input from a user of the end-user device;
receive a signal comprising the selected transaction type from the end-user device;
in response to receiving the signal from the end-user device, submit a query to the data distribution controller, the query comprising the selected transaction type;
receive in response to the query, the at least one data validation schema from the data distribution controller;
receive in response to the query the at least one data display schema from the data distribution controller;
send the received at least one data validation schema and the received at least one data display schema to the end-user device, the at least one data display schema configured to cause the end-user device to:
suppress display of at least one graphical user interface element associated with at least one user input data type of the set of user input data types; and
display at least one graphical user interface element associated with the subset of the set of user input data types, input to each of the displayed graphical user interface elements configured to be validated by the end-user device according to the at least one data validation schema; and
send, from the end-user device, the data validated by the end-user device according to the at least one validation schema to the data aggregation controller;
receive a document as input to a displayed graphical user interface element;
rasterize, by the data aggregation controller, the document;
validate, by the data aggregation controller, data contained in the document based on the second set of rules; and
transmit data validated by the second set of rules and data validated by the end-user device according to the at least one data validation schema to the data distribution controller as the normalized data to be transmitted to the one or more third party systems.
2. The system of claim 1 , further comprising the end-user device; wherein:
in response the receiving the at least one data validation schema from the second server, the end-user device is configured to adjust a display of the end-user device based on each received data validation schema.
3. The system of claim 1 , wherein at least one data validation schema of the plurality of data validation schemas comprises a third set of rules for formatting, prior to validation, at least one user input data type of the set of user input data types.
4. The system of claim 1 , further comprising the end-user device; wherein
in response the receiving the at least one data display schema from the second server, the end-user device is configured to adjust a display of the end-user device based on each received data display schema.