IP Library Granted Patent US 11,700,129
Granted Patent B2
US 11,700,129 · App. 16/906,705 · Granted Jul 11, 2023

Systems and methods for tokenized data delegation and protection

Inventors: Qiaochu Tang (The Colony, TX); Jason Hoover (Grapevine, TX); Micah Price (Plano, TX); Stephen Wylie (Carrollton, TX); Geoffrey Dagley (McKinney, TX)
Assignee: CAPITAL ONE SERVICES, LLC
H04L9/3234G06N20/00H04L63/06H04L63/083H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,700,129
App. No.
16/906,705
Granted
Jul 11, 2023
Kind
B2
Abstract

Example embodiments of systems and methods for data delegation and control through the use of tokenized data are provided. In an exemplary method of data delegation and control, a data device may store private information associated with a user and generate an access token, comprising tokenized data identifying the data device. The data device may transmit the access token to a user device through a front channel and receive an information request from a merchant device comprising the access token through a secure back channel. Upon authenticating the access token, the data device may transmit a portion of the private information to the merchant device through the secure back channel.

Claims (67)

1. A system for data control, comprising:

a data device comprising a processor and a memory; and

a database containing private information, wherein the database is in data communication with the data device,

wherein the data device:

generates an access token associated with the private information,

transmits the access token through a front channel,

receives an information request through a secure back channel, the information request comprising the access token, a secret key, an identification of a first portion of private information, and a second portion of private information, and

responsive to the information request, the data device:

authenticates the access token and the secret key,

retrieves a third portion of private information from the database based on the authentication of the access token and the secret key,

compares the second portion of private information to the third portion of private information,

generates a first similarity score based on the comparison of the second portion of private information to the third portion of private information, and

upon determining that the first similarity score exceeds a first threshold:

retrieves the first portion of private information from the database, and

transmits the first portion of private information through the secure back channel.

2. The system for data control of claim 1 , wherein the data device:

transmits a notification to a user device indicating receipt of the information request, and

transmits the first portion of private information upon receipt of an approval message from the user device.

3. The system for data control of claim 1 , wherein the data device transmits the first portion of private information unless a disapproval message is received within a specified time period.

4. The system for data control of claim 1 , wherein the data device applies a neural network to perform the comparison of the second portion of private information to the third portion of private information.

5. The system for data control of claim 1 , wherein the first threshold is established based on a user preference received from a user associated with the data device.

6. The system for data control of claim 1 , wherein the first threshold is established based on a previous comparison resulting in the generation of a previous similarity score for a previous information request.

7. The system for data control of claim 1 , wherein:

the information request is received from a requesting device, and

the first threshold is established based on the membership of the requesting device in a trusted network.

8. The system for data control of claim 1 , wherein:

the information request is received from a requesting device, and

the data device determines, based on the access token, whether the requesting device is in possession of any private information relating to the user.

9. The system for data control of claim 8 , wherein the data device, upon a determination that the requesting device is in possession of private information, requests that the requesting device transmit a fourth portion of private information to the data device through the secure back channel.

10. The system for data control of claim 9 , wherein, upon receipt of the fourth portion of private information, the data device:

retrieves a fifth portion of private information from the database,

compares the fifth portion of private information to the fourth portion of private information, and

generates a second similarity score based on the comparison.

11. A method of data control by a data device comprising a processor and a memory, comprising:

storing private information in the memory;

generating an access token comprising tokenized data identifying the data device;

transmitting, through a first front channel, the access token;

receiving, through a first secure back channel, an information request comprising the access token; and

responsive to the information request:

authenticating the access token,

transmitting, through the first secure back channel, a first portion of the private information based on the authentication of the access token,

receiving through a second secure back channel, a request for a second portion of private information,

receiving, through the second secure back channel, a third portion of private information,

comparing the third portion of private information to a fourth portion of the private information,

generating a first similarity score based on the comparison of the third portion of private information to the fourth portion of private information,

determining that the first similarity score exceeds a first threshold, and

upon determining that the first similarity score exceeds the first threshold, transmitting a share confirmation request.

12. The method of data control of claim 11 , wherein the information request further comprises a secret key.

13. The method of data control of claim 12 , wherein the secret key comprises an OAuth client secret.

14. The method of data control of claim 12 , wherein the secret key is a single-use key.

15. The method of data control of claim 11 , further comprising transmitting a confirmation request message upon authentication of the access token.

16. The method of data control of claim 11 , wherein the share confirmation request includes a request for a biometric identifier.

17. A non-transitory computer-accessible medium having stored thereon computer-executable instructions for providing data control, wherein, when a computer arrangement executes the instructions, the computer arrangement comprising a processor in data communication with a database containing private information, the computer arrangement is configured to perform procedures comprising:

receiving, through a front channel, a request for an access token associated with the private information;

generating an access token, the access token comprising a tokenized identifier for the computer arrangement;

transmitting the access token through the front channel;

receiving, through a secure back channel, the access token, a secret key, and a request for a first portion of private information; and

responsive to the request for the first portion of private information:

authenticating the access token and secret key,

receiving, through the secure back channel, a second portion of private information,

comparing the second portion of private information to a third portion of the private information,

generating a similarity score based on the comparison,

determining that the first similarity score exceeds a first threshold and

upon determining that the first similarity score exceeds the threshold, transmitting the first portion of private information through the secure back channel.

18. The non-transitory computer-accessible medium of claim 17 , wherein comparing the second portion of private information to the third portion of the private information comprises applying natural language processing to compare the second portion of private information to the third portion of the private information.

19. The non-transitory computer-accessible medium of claim 17 , wherein comparing the second portion of private information to the third portion of the private information comprises a direct textual comparison of the second portion of private information to the third portion of the private information.

20. The non-transitory computer-accessible medium of claim 17 , wherein the secure back channel comprises at least one selected from the group of a Hypertext Transfer Protocol (HTTP) secure socket layer (SSL) communication and a HTTP Secure (HTTPS) communication.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 19, 2020
From: TANG, QIAOCHU; HOOVER, JASON; PRICE, MICAH; WYLIE, STEPHEN; DAGLEY, GEOFFREY
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 052992/0089 →
Continuity (2)
Continuation 16683133 · Nov 13, 2019
Related Publication 20210144010A1 · May 13, 2021
Cited By (1)
US 12,694,445