IP Library Granted Patent US 11,368,441
Granted Patent B2
US 11,368,441 · App. 16/260,286 · Granted Jun 21, 2022

Method and system for general data protection compliance via blockchain

Inventors: Alonzo Benavides (San Francisco, CA); Ian Major (San Francisco, CA); Prem Chander Rajamohan (Jersey City, NJ); Thomas Hansen (San Francisco, CA); Duygu Gün (San Francisco, CA)
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
H04L63/061G06F16/903H04L9/0618H04L63/0492H04L63/0876H04L63/107H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,368,441
App. No.
16/260,286
Granted
Jun 21, 2022
Kind
B2
Abstract

A method for privacy control in release of protected information includes: receiving, from a first system, a decryption key, request identifier, and a payload identifier by a second system; storing, in the second system, a blockchain comprised of blockchain data values, each blockchain data value including a registration identifier and encrypted data set; identifying, by the second system, a specific blockchain data value where the registration identifier matches the payload identifier; decrypting, by the second system, the encrypted data set in the specific blockchain data value using the decryption key; and transmitting, by the second system, the decrypted data set to a third system using the request identifier.

Claims (34)

1. A method for privacy control in release of protected information, comprising:

receiving, by a receiver of a second computing system, a data message transmitted over a network from a first computing system, the data message including at least a decryption key included in a specific data pair, an account identifier, a payload identifier, and a requester identifier;

storing, in a memory of the second computing system, a blockchain comprised of a plurality of blocks, wherein each block includes at least a block header and one or more data values, each data value is comprised of at least a registration identifier and an encrypted data set;

executing, by a processing device of the second computing system, a query on the memory of the second computing system to identify a specific data value included in a block of the plurality of blocks where the included registration identifier corresponds to the payload identifier;

decrypting, by the processing device of the second computing system, the encrypted data set included in the specific data value to obtain an unencrypted data set using the decryption key received from the first computing system; and

transmitting, by a transmitter of the second computing system, over the network at least the unencrypted data set to a third computing system using the requester identifier.

2. The method of claim 1 , wherein the network for transmission from the first computing system to the second computing system is an external network.

3. The method of claim 1 , wherein

an account profile includes at least the requester identifier and a geographic location, and

the second computing system is located in a geographic area that includes the geographic location.

4. The method of claim 3 , wherein the second computing system is selected by the first computing system from a plurality of potential systems based on the geographic area and the geographic location.

5. The method of claim 3 , wherein the third computing system is located in the geographic area that includes the geographic location.

6. The method of claim 1 , wherein the specific data pair further includes the payload identifier.

7. The method of claim 1 , wherein

the first computing system receives a permission message including at least the payload identifier from an external computing device prior to the second computing system receiving the data message from the first computing system.

8. The method of claim 7 , wherein the permission message further includes the identification value.

9. The method of claim 1 , wherein two or more of the data values are associated with a single external computing device and each of the encrypted data sets of the two or more data values contain data with a different access permissions.

10. A system for privacy control in release of protected information, comprising:

a receiver of a second computing system configured to receive a data message transmitted over a network from a transmitter of the a first computing system, the data message including at least the decryption key included in a specific data pair, an account identifier, a payload identifier, and a requester identifier;

a memory of the second computing system configured to store a blockchain comprised of a plurality of blocks, wherein each block includes at least a block header and one or more data values, each data value is comprised of at least a registration identifier and an encrypted data set;

a processing device of the second computing system configured to

execute a query on the memory of the second computing system to identify a specific data value included in a block of the plurality of blocks where the included registration identifier corresponds to the payload identifier, and

decrypt the encrypted data set included in the specific data value to obtain an unencrypted data set using the decryption key received from the first computing system; and

a transmitter of the second computing system configured to transmit at least the unencrypted data set to a third computing system using the requester identifier.

11. The system of claim 10 , wherein the network for transmission from the first computing system to the second computing system utilizes is an external network.

12. The system of claim 10 , wherein

an account profile includes at least the requester identifier and a geographic location, and

the second computing system is located in a geographic area that includes the geographic location.

13. The system of claim 12 , wherein the second computing system is selected by the first computing system from a plurality of potential systems based on the geographic area and the geographic location.

14. The system of claim 12 , wherein the third computing system is located in the geographic area that includes the geographic location.

15. The system of claim 10 , wherein the specific data pair further includes the payload identifier.

16. The system of claim 10 , wherein first computing system is further configured to receive a permission message including at least the payload identifier from an external computing device prior to the second computing system receiving the data message from the first computing system.

17. The system of claim 16 , wherein the permission message further includes the identification value.

18. The system of claim 10 , wherein two or more of the data values are associated with a single external computing device and each of the encrypted data sets of the two or more data values contain data with a different entity access permissions.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 29, 2019
From: BENAVIDES, ALONZO; MAJOR, IAN; RAJAMOHAN, PREM CHANDER; HANSEN, THOMAS; GÜN, DUYGU
To: MASTERCARD INTERNATIONAL INCORPORATED
Reel/Frame 048177/0339 →
Continuity (1)
Related Publication 20200244634A1 · Jul 30, 2020
Cited By (5)
US 12,361,220 US 12,406,084 US 12,524,809 US 12,572,551 US 12,639,757