IP Library › Granted Patent US 10,419,219
Granted Patent B1
US 10,419,219 · App. 16/154,283 · Granted Sep 17, 2019

System, method, and computer-accessible medium for actionable push notifications

Inventors: Jeffrey Wieker (Fairfax, VA); Zainab Zaki (Reston, VA); Clayton Johnson (Edgewood, MD)
Assignee: CAPITAL ONE SERVICES, LLC
H04L9/32G06F21/6245H04L9/0866H04L63/0428
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,419,219
App. No.
16/154,283
Granted
Sep 17, 2019
Kind
B1
Abstract

An exemplary system, method, and computer-accessible medium can include, for example, receiving at a first entity from a second entity, a first request for encrypted user information associated with at least one user, wherein the first request includes a user identifier associated with the at least one user, and wherein the first entity is different from the second entity, sending, from the first entity, a second request to a user device associated with the at least one user, wherein the second request includes a notification to the at least one user for an affirmation of the first request or a denial of the first request, receiving at the first entity from the user device, the affirmation or the denial, and sending, from the first entity to the second entity, (i) the encrypted user information if the affirmation is received or (ii) a denied notification if the denial is received.

Claims (52)

1. A method, comprising:

receiving at a first entity from a second entity, a first request for user information associated with at least one user, wherein the first request includes a user identifier associated with the at least one user, wherein the first entity is different from the second entity, and the user information associated with the at least one user includes a plurality of elements of data having different confidential levels;

sending, from the first entity to the second entity, a first set of elements of data from the plurality of elements of data having a first confidentiality level below a particular confidentiality level;

sending, from the first entity, a second request to a user device associated with the at least one user for a second set of elements of data having a second confidentiality level above the particular confidentiality level, wherein the second request includes a notification to the at least one user to authorize the first request;

receiving at the first entity from the user device, an affirmation for the first request;

in response to the affirmation received, sending, from the first entity to the second entity the second set of elements of data, the second set of elements of data is encrypted using quantum cryptography, and is automatically deleted after a predetermined amount of time;

monitoring, by the first entity, usage information of the second set of elements of data at the second entity;

detecting, at the first entity, information related to a data breach at the second entity;

sending, by the first entity to the second entity, falsified user data in response to additional requests for the user data from the second entity after the information related to the data breach at the second entity is detected;

sending, by the first entity, a breach notification to the at least one user;

deleting, by the first entity, the second set of elements of data at the second entity based on the information related to the data breach detected.

2. The method of claim 1 , further comprising sending, from the first entity to the second entity, decryption information used to decrypt the second set of elements of data.

3. The method of claim 2 , further comprising sending from the first entity to the second entity an encryption request to automatically re-encrypt the second set of elements of data after a particular period of time.

4. The method of claim 3 , wherein the decryption information is at least one of (i) time-based information, (ii) location-based information, (iii) hardware profile-based information, or (iv) internet protocol-based information.

5. The method of claim 1 , further comprising determining a number of times the second entity has requested access to the second set of elements of data.

6. The method of claim 5 , further comprising sending, from the first entity to the user device, the number of times if the number of times exceeds a pre-determined threshold.

7. The method of claim 1 further comprising:

receiving, at the first entity from the second entity, a first extension request to extend the predetermined amount of time;

sending, from the first entity to the user device, a second extension request that is based on the first extension request, wherein the second extension request includes a notification to the at least one user for a further affirmation of the first extension request;

receiving at the first entity from the user device, the further affirmation;

sending an extension information from the first entity to the second entity to extend the predetermined amount of time.

8. The method of claim 1 , further comprising:

sending, from the first entity to the second entity, falsified user data in response to additional requests for the user information by the second entity after receiving the information related to the data breach at the second entity.

9. The method of the claim 1 , further comprising initiating, at the first entity, a deletion or destruction of the second set of elements of data located at the second entity based on the information related to the data breach detected.

10. The method of claim 9 , further comprising:

receiving, at the first entity from the user device, a deletion request to delete the second set of elements of data stored at the second entity;

sending, from the first entity to the second entity, a further deletion request to automatically delete the second set of elements of data.

11. The method of claim 1 , further comprising receiving from the user device a deletion request to delete second set of elements of data at the first entity.

12. The method of claim 1 , further comprising receiving, at the first entity from the second entity, a validation request to validate credentials of the second entity.

13. The method of claim 12 , further comprising:

validating the credentials of the second entity; and

sending, from the first entity to the second entity, a validation token if the second entity's credentials are valid.

14. The method of claim 1 , further comprising:

receive at the first entity updated second set of elements of data related to the at least one user;

encrypting at the first entity the updated second set of elements of data.

15. The method of claim 14 , further comprising sending the updated second set of elements of data to the second entity.

16. A non-transitory computer-accessible medium having stored thereon computer-executable instructions for providing encrypted user information, wherein, when a computer arrangement executes the instructions, the computer arrangement is configured to perform procedures comprising:

receiving, at a first entity from a second entity, a validation request to validate credentials of the second entity;

validating, by the first entity, the credentials of the second entity;

sending, from the first entity to the second entity, a validation token if the credentials are valid;

receiving, at the first entity from the second entity, a first request for user information associated with at least one user, wherein the first request includes a user identifier associated with the at least one user, wherein the first entity is different from the second entity; and the user information associated with the at least one user includes a plurality of elements of data having different confidential levels;

sending, from the first entity to the second entity, a first set of elements of data from the plurality of elements of data having a first confidentiality level below a particular confidentiality level:

sending, from the first entity, a second request to a user device associated with the at least one user for a second set of elements of data of the elements of data having a second confidentiality level above the particular confidentiality level, wherein the second request includes a notification to the at least one user to authorize the first request;

receiving at the first entity from the user device, an affirmation for the first request;

in response to the affirmation received, sending, from the first entity to the second entity, the second set of elements of data, the second set of elements of data is encrypted using quantum cryptography, and is automatically deleted after a predetermined amount of time;

receiving, at the first entity from the second entity, a request far a time-limited decryption key;

sending, from the first entity to the second entity, the time-limited decryption key;

monitoring, by the first entity, usage information of the second set of elements of data at the second entity;

detecting, at the first entity, information related to a data breach at the second entity;

sending, by the first entity to the second entity, falsified user data in response to additional requests for the user data from the second entity after the information related to the data breach at the second entity is detected;

sending, by the first entity, a breach notification to the at least one user;

deleting, by the first entity, the second set of elements of data at the second entity based on the information related to the data breach detected.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 8, 2018
From: WIEKER, JEFFREY; ZAKI, ZAINAB; JOHNSON, CLAYTON
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 047094/0729 →
Cited By (1)
US 12,506,750