IP Library Granted Patent US 9,628,488
Granted Patent B1
US 9,628,488 · App. 14/681,421 · Granted Apr 18, 2017

Method and system for sensitive data abstraction

Inventors: Prashant Desai (Land O Lakes, FL); Bryant R. Barrera (Wesley Chapel, FL)
Assignee: JPMORGAN CHASE BANK, N.A.
H04L63/10H04L9/3242H04L2209/24
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,628,488
App. No.
14/681,421
Granted
Apr 18, 2017
Kind
B1
Abstract

According to an embodiment of the present invention, a system and method for transmitting sensitive data in a contact center environment comprising a transient datastore containing data, for each customer, defining a customer's profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data; a computer processor, coupled to the computer store and programmed to: generate, using a computer processor, a transient key associated with a subset of data for the customer based on the current interaction data and a customer identity; transmit, using a computer processor, the transient key and non-sensitive data to the live agent; receive a request, the transient key and a requester identifier from a requesting component of the system, and identify a corresponding subset of data responsive to the transient key and the requester identifier.

Claims (42)

1. An automated computer implemented system for transmitting sensitive data in a contact center environment, wherein the system comprising:

a transient datastore containing data, for each customer, defining a customer's profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data;

a computer processor, coupled to the computer store and programmed to:

receive, via an electronic input, a contact from a remote customer via an electronic communication channel;

automatically capture current interaction data during a current contact between the remote customer and an automated interactive entity;

receive, from the remote customer, an electronic request to interact with a live agent during the current contact;

responsive to the current contact, generate, using a computer processor, an electronic transient key associated with a subset of data for the remote customer based on the current interaction data and a customer identity;

transmit, using a computer processor, the electronic transient key and non-sensitive data to the live agent in the contact center environment;

receive a request, the electronic transient key and a requester identifier from a requesting component of the system,

identify a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determine an appropriate security feature for the corresponding subset of data;

transmit only the corresponding subset of data with the appropriate security feature to the requesting component; and

automatically remove the electronic transient key from the transient datastore after a predetermined event.

2. The system of claim 1 , wherein the electronic transient key comprises a token that expires after a predetermined period of time.

3. The system of claim 1 , wherein the security feature comprises an encryption algorithm.

4. The system of claim 1 , wherein the predetermined event comprises a time period.

5. The system of claim 1 , wherein the automated interactive entity comprises an interactive voice response unit.

6. The system of claim 1 , wherein the electronic transient key is encrypted or hashed.

7. The system of claim 1 , wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

8. The system of claim 1 , wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.

9. The system of claim 1 , wherein the requesting component comprises an intermediate processing system.

10. The system of claim 1 , wherein the corresponding subset of data is predetermined based on the requester identifier.

11. An automated computer implemented method for transmitting sensitive data in a contact center environment, wherein the method comprising the steps of:

receiving, via an electronic input, a contact from a remote customer via an electronic communication channel;

automatically capturing current interaction data during a current contact between the customer and an automated interactive entity;

receiving, from the remote customer, an electronic request to interact with a live agent during the current contact;

responsive to the current contact, generating, using a computer processor, an electronic transient key associated with a subset of data for the customer based on the current interaction data and a customer identity;

transmitting, using a computer processor, the electronic transient key and non-sensitive data to the live agent in the contact center environment;

receiving a request, the electronic transient key and a requester identifier from a requesting component of the system,

identifying a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determining an appropriate security feature for corresponding the subset of data;

transmitting only the corresponding subset of data with the appropriate security feature to the requesting component; and

automatically removing the electronic transient key from a transient datastore after a predetermined event; the transient datastore containing data, for each customer, defining a customer's profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data.

12. The method of claim 11 , wherein the electronic transient key comprises a token that expires after a predetermined period of time.

13. The method of claim 11 , wherein the security feature comprises an encryption algorithm.

14. The method of claim 11 , wherein the predetermined event comprises a time period.

15. The method of claim 11 , wherein the automated interactive entity comprises an interactive voice response unit.

16. The method of claim 11 , wherein the electronic transient key is encrypted or hashed.

17. The method of claim 11 , wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

18. The method of claim 11 , wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.

19. The method of claim 1 , wherein the requesting component comprises an intermediate processing system.

20. The method of claim 1 , wherein the corresponding subset of data is predetermined based on the requester identifier.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 8, 2015
From: DESAI, PRASHANT; BARRERA, BRYANT R.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 035359/0946 →