PAYMENTS FEDERATED DIRECTORY
Embodiments provide a methods and systems for securely providing access to sensitive information for a plurality of entities. The method includes receiving, by a payer credential service provider (CSP), from a payer, a request for payee electronically protected information (EPI). The payer CSP transmits to a payee CSP a request for payee EPI data. The payee CSP validates, using a distributed ledger system, whether the payer has permission to request the payee EPI. The payer CSP receives the payee EPI data from the payee CSP. The payer CSP sends the payee EPI data to the payer.
1 . A payee credential service provider (CSP) that is configured to operate as a first node of a distributed ledger, the payee CSP comprising:
at least one network interface;
at least one processor;
at least one non-transitory computer readable medium;
program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
receive payee electronically protected information (EPI) of a given payee, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee
store the payee EPI of the given payee in a data store that is off of the distributed ledger;
store a hash of the payee EPI on the distributed ledger such that it is accessible by a payer CSP that is configured to operate as a second node of the distributed ledger;
receive from the payer CSP, over a communication channel between the payer CSP and the payee CSP, a request for the payee EPI of the given payee; and
after receiving the request for the payee EPI of the given payee, verify that the given payor has permission to access the payee EPI of the given payee; and
based on verifying that the given payor has permission to access the payee EPI of the given payee, (i) obtain the payee EPI of the given payee from the data store that is off of the distributed ledger and (ii) transmit to the payer CSP, over the communication channel, the payee EPI of the given payee.
2 . The payee CSP of claim 1 , wherein the program instructions that, when executed by the at least one processor, cause the payee CSP to verify that the given payor has permission to access the payee EPI of the given payee comprise program instructions that, when executed by the at least one processor, cause the payee CSP to:
verify that the given payor has permission to access the payee EPI of the given payee using an access list that is stored on the distributed ledger.
3 . The payee CSP of claim 1 , wherein the program instructions that, when executed by the at least one processor, cause the payee CSP to verify that the given payor has permission to access the payee EPI of the given payee comprise program instructions that, when executed by the at least one processor, cause the payee CSP to:
send the given payee a request to grant the given payor permission to access the payee EPI of the given payee; and
receive, from the given payee, an approval of the request to grant the given payor permission to access the payee EPI of the given payee.
4 . The payee CSP of claim 1 , wherein the program instructions that, when executed by the at least one processor, cause the payee CSP to verify that the given payor has permission to access the payee EPI of the given payee comprise program instructions that, when executed by the at least one processor, further cause the payee CSP to:
update an access list that is stored on the distributed ledger to indicate that the given payor has permission to access the payee EPI of the given payee.
5 . The payee CSP of claim 1 , further comprising program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
prior to transmitting the payee EPI of the given payee to the payer CSP over the communication channel, encrypt the payee EPI of the given payee.
6 . The payee CSP of claim 1 , further comprising program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
prior to storing the payee EPI of the given payee in the data store that is off of the distributed ledger, validate the payee EPI of the given payee.
7 . The payee CSP of claim 1 , further comprising program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
receive updated payee EPI of the given payee;
store the updated payee EPI of the given payee in the data store that is off of the distributed ledger; and
store an updated hash of the updated payee EPI on the distributed ledger such that it is accessible by the payer CSP.
8 . The payee CSP of claim 1 , further comprising program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
receive, from the given payee, an access list that indicates which payors have permission to access the payee EPI of the given payee; and
store the access list on the distributed ledger.
9 . The payee CSP of claim 1 , further comprising program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the payee CSP to:
prior to receiving the payee EPI of the given payee, establishing a federated directory account for the given payee.
10 . A non-transitory computer readable medium storing executable instructions for a payee credential service provider (CSP) that is configured to operate as a first node of a distributed ledger, wherein the executable instructions, when executed by at least one processor of the payee CSP, cause the payee CSP to perform functions comprising:
receiving payee electronically protected information (EPI) of a given payee, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee
storing the payee EPI of the given payee in a data store that is off of the distributed ledger;
storing a hash of the payee EPI on the distributed ledger such that it is accessible by a payer CSP that is configured to operate as a second node of the distributed ledger;
receiving from the payer CSP, over a communication channel between the payer CSP and the payee CSP, a request for the payee EPI of the given payee; and
after receiving the request for the payee EPI of the given payee, verifying that the given payor has permission to access the payee EPI of the given payee; and
based on verifying that the given payor has permission to access the payee EPI of the given payee, (i) obtaining the payee EPI of the given payee from the data store that is off of the distributed ledger and (ii) transmitting to the payer CSP, over the communication channel, the payee EPI of the given payee.
11 . The non-transitory computer readable medium of claim 10 , wherein verifying that the given payor has permission to access the payee EPI of the given payee comprises:
verifying that the given payor has permission to access the payee EPI of the given payee using an access list that is stored on the distributed ledger.
12 . The non-transitory computer readable medium of claim 10 , wherein verifying that the given payor has permission to access the payee EPI of the given payee comprises:
sending the given payee a request to grant the given payor permission to access the payee EPI of the given payee; and
receiving, from the given payee, an approval of the request to grant the given payor permission to access the payee EPI of the given payee.
13 . The non-transitory computer readable medium of claim 10 , wherein verifying that the given payor has permission to access the payee EPI of the given payee comprises:
updating an access list that is stored on the distributed ledger to indicate that the given payor has permission to access the payee EPI of the given payee.
14 . The non-transitory computer readable medium of claim 10 , wherein the executable instructions, when executed by at least one processor of the payee CSP, cause the payee CSP to perform further functions comprising:
prior to transmitting the payee EPI of the given payee to the payer CSP over the communication channel, encrypting the payee EPI of the given payee.
15 . The non-transitory computer readable medium of claim 10 , wherein the executable instructions, when executed by at least one processor of the payee CSP, cause the payee CSP to perform further functions comprising:
receiving updated payee EPI of the given payee;
storing the updated payee EPI of the given payee in the data store that is off of the distributed ledger; and
storing an updated hash of the updated payee EPI on the distributed ledger such that it is accessible by the payer CSP.
16 . A method carried out by a payee credential service provider (CSP) that is configured to operate as a first node of a distributed ledger, the method comprising:
receiving payee electronically protected information (EPI) of a given payee, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee
storing the payee EPI of the given payee in a data store that is off of the distributed ledger;
storing a hash of the payee EPI on the distributed ledger such that it is accessible by a payer CSP that is configured to operate as a second node of the distributed ledger;
receiving from the payer CSP, over a communication channel between the payer CSP and the payee CSP, a request for the payee EPI of the given payee; and
after receiving the request for the payee EPI of the given payee, verifying that the given payor has permission to access the payee EPI of the given payee; and
based on verifying that the given payor has permission to access the payee EPI of the given payee, (i) obtaining the payee EPI of the given payee from the data store that is off of the distributed ledger and (ii) transmitting to the payer CSP, over the communication channel, the payee EPI of the given payee.
17 . The method of claim 16 , wherein verifying that the given payor has permission to access the payee EPI of the given payee comprises:
verifying that the given payor has permission to access the payee EPI of the given payee using an access list that is stored on the distributed ledger.
18 . The method of claim 16 , wherein verifying that the given payor has permission to access the payee EPI of the given payee comprises:
sending the given payee a request to grant the given payor permission to access the payee EPI of the given payee;
receiving, from the given payee, an approval of the request to grant the given payor permission to access the payee EPI of the given payee.
19 . The method of claim 16 , further comprising:
prior to transmitting the payee EPI of the given payee to the payer CSP over the communication channel, encrypting the payee EPI of the given payee.
20 . The method of claim 16 , further comprising:
receiving updated payee EPI of the given payee;
storing the updated payee EPI of the given payee in the data store that is off of the distributed ledger, and
storing an updated bash of the updated payee EPI on the distributed ledger such that it is accessible by the payer CSP.