Securing lender output data
A multi-lender architecture is configured to provide a loan applicant with automated pre-qualification and automobile loan eligibility evaluation for multiple candidate lenders. Lender output data may include sensitive data. The lender output data is stored in a data object of a first format and one or more fields of the data object are encrypted at the field level. The encrypted data object may be transmitted through multiple application layers or terminals. The encrypted data object may be reformatted at one or more application layers or terminals without decryption. A reformatted encrypted data object containing the lender output data may be decrypted at the last layer before forwarding the lender output data to the loan applicant.
1. A system for encrypting data in a flexible format, the system comprising:
a server implemented in hardware configured to:
process applicant data to generate lender output data comprising sensitive data and non-sensitive data;
encrypt the sensitive data, using an unencrypted version of a first data key, while leaving the non-sensitive data unencrypted; discard the unencrypted version of the first data key after encryption of the sensitive data at the server;
store the lender output data in a data object formatted in a first format, the data object comprising:
a first data element;
a second data element comprising the non-sensitive unencrypted data; and
encryption metadata comprising:
the encrypted sensitive data;
a first path identifying the first data element in the first format; and
an encrypted data key; and
an experience layer configured to:
receive a request comprising the applicant data;
forward the request to the server;
receive, from the server, the data object comprising the lender output data;
reformat the data object to generate a new data object of a second format by:
capturing the first path identifying the first data element of the data object and a second path of a third data element of the new data object using a dynamic proxy; and
copying the second element, the encrypted sensitive data, and the encrypted data key from the data object to the new data object in response to capturing the first and second path;
decrypt the new data object; and
send the decrypted new data object to an applicant.
2. The system of claim 1 , wherein the server is further configured to:
authenticate with an encryption service; and
receive, from the encryption service, the first data key and the encrypted data key,
wherein the first data key comprises a symmetric encryption key and the encrypted data key comprises the first data key encrypted using a master key.
3. The system of claim 1 , wherein the experience layer is further configured to:
retrieve the encrypted data key from new encryption metadata of the new data object;
perform authentication with an encryption service;
send the encrypted data key to the encryption service; and
receive, from the encryption service, a decrypted data key.
4. The system of claim 3 , wherein the decrypting of the data object comprises:
decrypting the encrypted sensitive data of the new data object using the decrypted data key; and
storing the decrypted sensitive data in the third data element of the new data object.
5. The system of claim 3 , wherein the new encryption metadata comprises:
the second path identifying the third element of the new data object, the encrypted sensitive data, and the encrypted data key,
wherein
the first path is different from the second path, or
a path identifying the second data element of the data object of the first format is different from a path identifying the corresponding data element in the new data object of the second format.
6. A method of encrypting data in a flexible format, the method comprising:
receiving a request comprising applicant data;
processing the applicant data to generate lender output data comprising sensitive data and non-sensitive data;
encrypting the sensitive data, using an unencrypted version of a first data key, while leaving the non-sensitive data unencrypted;
discarding the unencrypted version of the first data key after the encrypting the sensitive data;
storing the lender output data in a data object formatted in a first format, the data object comprising:
a first data element;
a second data element comprising the non-sensitive unencrypted data; and
encryption metadata comprising:
the encrypted sensitive data;
a first path identifying the first data element in the first format; and
an encrypted data key;
receiving the data object comprising the lender output data; and
reformatting the data object to generate a new data object of a second format by:
capturing the first path identifying the first data element of the data object and a second path of a third data element of the new data object using a dynamic proxy; and
copying the second element, the encrypted sensitive data, and the encrypted data key from the data object to the new data object in response to capturing the first and second path; and
decrypting the new data object.
7. The method of claim 6 , further comprising:
authenticating with an encryption service; and
receiving, from the encryption service, the first data key and the encrypted data key,
wherein the first data key comprises a symmetric encryption key and the encrypted data key comprises the first data key encrypted using a master key.
8. The method of claim 6 , further comprising wherein the new data object includes a new encryption metadata and the new encryption meta data comprises:
the second path identifying the third element of the new data object, the encrypted sensitive data, and the encrypted data key,
wherein
the first path is different from the second path, or
a path identifying the second data element of the data object of the first format is different from a path identifying the corresponding data element in the new data object of the second format.
9. The method of claim 8 , further comprising:
retrieving the encrypted data key from the new encryption metadata of the new data object;
performing authentication with an encryption service;
sending the encrypted data key to the encryption service;
receiving a decrypted data key from the encryption service; and
decrypting the new data object using the decrypted data key.
10. The method claim 6 , further comprising:
sending the decrypted new data object to the applicant.
11. The method of claim 10 , wherein the sending of the decrypted new data object comprises sending the decrypted new data object using transport layer security or secure sockets layer.
12. A non-transitory computer-readable memory device storing instructions that, when executed by a processor, cause the processor to perform the steps of:
receiving a request comprising applicant data;
processing the applicant data to generate lender output data comprising sensitive data and non-sensitive data;
encrypting the sensitive data, using an unencrypted version of a first data key, while leaving the non-sensitive data unencrypted;
discarding the unencrypted version of the first data key after the encrypting the sensitive data;
storing the lender output data in a data object formatted in a first format, the data object comprising:
a first data element;
a second data element comprising the non-sensitive unencrypted data; and
encryption metadata comprising:
the encrypted sensitive data;
a first path identifying the first data element in the first format; and
an encrypted data key;
receiving the data object comprising the lender output data; and
reformatting the data object to generate a new data object of a second format by:
capturing the first path identifying the first data element of the data object and a second path of a third data element of the new data object using a dynamic proxy; and
copying the second element, the encrypted sensitive data, and the encrypted data key from the data object to the new data object in response to capturing the first and second path; and
decrypting the new data object.
13. The non-transitory computer-readable memory device of claim 12 storing instructions that, when executed by a processor, cause the processor to further perform the step of:
authenticating with an encryption service; and
receiving, from the encryption service, the first data key and the encrypted data key,
wherein the first data key comprises a symmetric encryption key and the encrypted data key comprises the first data key encrypted using a master key.
14. The non-transitory computer-readable memory device of claim 12 wherein the new data object includes a new encryption metadata and the new encryption meta data comprises:
the second path identifying the third element of the new data object, the encrypted sensitive data, and the encrypted data key,
wherein:
the first path is different from the second path; or
a path identifying the second data element of the data object of the first format is different from a path identifying the corresponding data element in the new data object of the second format.
15. The non-transitory computer-readable memory device of claim 14 storing instructions that, when executed by a processor, cause the processor to further perform the steps of:
retrieving the encrypted data key from the new encryption metadata of the new data object;
performing authentication with an encryption service;
sending the encrypted data key to the encryption service;
receiving a decrypted data key from the encryption service; and
decrypting the new data object using the decrypted data key.
16. The non-transitory computer-readable memory device of claim 12 storing instructions that, when executed by a processor, cause the processor to further perform the steps of:
sending the decrypted new data object to the applicant.
17. The non-transitory computer-readable memory device of claim 12 wherein the sending of the decrypted new data object comprises sending the decrypted new data object using transport layer security or secure sockets layer.