IP Library Granted Patent US 11,429,951
Granted Patent B1
US 11,429,951 · App. 16/824,454 · Granted Aug 30, 2022

Secure data management for sensitive information

Inventor: Yue Bu (Oakland, CA)
Assignee: Stripe, Inc.
G06Q20/325G06Q20/385
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,429,951
App. No.
16/824,454
Granted
Aug 30, 2022
Kind
B1
Abstract

Methods, systems, and computer readable medium are provided for generating, by a secure processor, a plurality of configurable data entry elements configured into a webpage, receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session, generating a hidden controller iframe in the webpage, aggregating, by the hidden controller iframe, the sensitive data across the plurality of configurable data entry elements, and directing aggregated sensitive data to the secure processor hosted by a first server separate from a second server hosting the webpage.

Claims (69)

1. A method, comprising:

generating, by a first secure processor, a plurality of configurable data entry elements configured into a webpage;

receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session;

generating a plurality of hidden controller iframes in the webpage;

aggregating, by one of the plurality of hidden controller iframes, the sensitive data across the plurality of configurable data entry elements based on a user selection of a secure processor from a plurality of secure processors the secure processors including the first secure processor; and

directing the aggregated sensitive data to the selected secure processor hosted by a first server separate from a second server hosting the webpage.

2. The method of claim 1 , further comprising:

creating, by a client-side application, a token based at least on the sensitive data; and

sending the token to a server-side application to conduct a transaction, wherein the client-side application does not send the sensitive data to the server-side application.

3. The method of claim 1 , further comprising:

dynamically adjusting a width of a first data entry element in the plurality of configurable data entry elements visible on the webpage during the user data entry session, wherein the first data entry element corresponds to a card number data entry field.

4. The method of claim 1 , further comprising:

detecting, by the secure processor, an issuing country of a financial instrument associated with the sensitive information;

determining a visibility of a second data entry element in the plurality of configurable data entry elements on the webpage during the user data entry session, wherein the second data entry element corresponds to a postal code data entry field; and

dynamically adjusting a width of a first data entry element to accommodate a width of the postal code data entry field.

5. The method of claim 4 , wherein the financial instrument is a credit card.

6. The method of claim 1 , further comprising:

generating a third data entry element in the plurality of configurable data entry elements in a first iframe hosted by the first server, wherein the first iframe includes a hidden controller, and the third data entry element includes a hidden autofill input field;

generating a hidden input field associated with the hidden autofill input field outside of the first iframe;

receiving a portion of the sensitive data at the third data entry element; and

displaying, via a browser autofill tool, autofill data simultaneously across the plurality of configurable data entry element.

7. The method of claim 2 , wherein the server-side application executes on the second server.

8. A system, comprising:

at least one processor including a secure processor; and

a memory storing instructions that, when executed by the secs re processor, cause the secure processor to perform operations comprising:

generating, by the secure processor, a plurality of configurable data entry elements configured into a webpage;

receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session;

generating a hidden controller iframe in the webpage;

synchronizing, by the hidden controller iframe, content across all fields in the webpage;

aggregating, by the hidden controller iframe, the sensitive data across the plurality of configurable data entry elements; and

directing aggregated sensitive data to the secure processor hosted by a first server separate from a second server hosting the webpage.

9. The system of claim 8 , further comprising:

creating, by a client-side application, a token based at least on the sensitive data; and

sending the token to a server-side application to conduct a transaction, wherein the client-side application does not send the sensitive data to the server-side application.

10. The system of claim 8 , further comprising

dynamically adjusting a width of a first data entry element in the plurality of configurable data entry elements visible on the webpage during the user data entry session, wherein the first data entry element corresponds to a card number data entry field.

11. The system of claim 8 , further comprising:

detecting, by the secure processor, an issuing country of a financial instrument associated with the sensitive information;

determining a visibility of a second data entry element in the plurality of configurable data entry elements on the webpage during the user data entry session, wherein the second data entry element corresponds to a postal code data entry field; and

dynamically adjusting a width of a first data entry element to accommodate a width of the postal code data entry field.

12. The system of claim 11 , wherein the financial instrument is a credit card.

13. The system of claim 8 , further comprising

generating a third data entry element in the plurality of configurable data entry elements in a first iframe hosted by the first server, wherein the first iframe includes a hidden controller, and the third data entry element includes a hidden autofill input field;

generating a hidden input field associated with the hidden autofill input field outside of the first iframe;

receiving a portion of the sensitive data at the third data entry element; and

displaying, via a browser autofill tool, autofill data simultaneously across the plurality of configurable data entry elements.

14. The system of claim 9 , wherein the server-side application executes on the second server.

15. A computer readable medium comprising instructions which, cause a processor to perform operations, comprising:

generating a plurality of configurable data entry elements configured into a webpage;

receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session;

generating a hidden controller iframe in the webpage;

communicating, b the iframe, with a metrics backend system to perform A/B testing;

aggregating, by the hidden controller iframe, the sensitive data across the plurality of configurable data entry elements; and

directing the aggregated sensitive data to a secure processor hosted by a first server separate from a second server hosting the webpage.

16. The computer readable medium of claim 15 , further comprising:

creating, by a client-side application, a token based at least on the sensitive data; and

sending the token to a server-side application to conduct a transaction, wherein the client-side application does not send the sensitive data to the server-side application.

17. The computer readable medium of claim 15 , further comprising:

dynamically adjusting a width of a first data entry element in the plurality of configurable data entry elements visible on the webpage during the user data entry session, wherein the first data entry element corresponds to a card number data entry field.

18. The computer readable medium of claim 15 , further comprising:

detecting an issuing country of a financial instrument associated with the sensitive information;

determining a visibility of a second data entry element in the plurality of configurable data entry elements on the webpage during the user data entry session, wherein the second data entry element corresponds to a postal code data entry field; and

dynamically adjusting a width of a first data entry element to accommodate a width of the postal code data entry field.

19. The computer readable medium of claim 8 , herein the financial instrument is a credit card.

20. The computer readable medium of claim 15 , further comprising:

generating a third data entry element in the plurality of configurable data entry elements in a first iframe hosted by the first server, wherein the first iframe includes a hidden controller, and the third data entry element includes a hidden autofill input field;

generating a hidden input field associated with the hidden autofill input field outside of the first iframe;

receiving a portion of the sensitive data at the third data entry element; and

displaying, via a browser autofill tool, autofill data simultaneously across the plurality of configurable data entry elements.

Assignments (2)
CHANGE OF NAME Recorded Jan 30, 2026
From: STRIPE, INC.
To: STRIPE, LLC
Reel/Frame 074572/0345 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 19, 2020
From: BU, YUE
To: STRIPE, INC.
Reel/Frame 052171/0925 →
Continuity (1)
Continuation 15789668 · Oct 20, 2017
Cited By (1)
US 12,282,910