IP Library › Granted Patent US 11,741,468
Granted Patent B2
US 11,741,468 · App. 17/689,561 · Granted Aug 29, 2023

Systems and methods for automatically securing and validating multi-server electronic communications over a plurality of networks

Inventors: Jason Kruse (Brooklyn, NY); Boling Jiang (Brooklyn, NY); Andrew Roth (Scarsdale, NY)
Assignee: Lithic, Inc.
G06Q20/401H04L9/14H04L9/30H04L9/3247H04L63/0442H04L63/0407H04L63/06H04L2209/56
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,741,468
App. No.
17/689,561
Filed
Mar 8, 2022
Granted
Aug 29, 2023
Kind
B2
Art Unit
3685
USPC
705/75
Abstract

In one embodiment, a method includes receiving, at a first server, from a privacy component on a user device, a privacy communication request including device data for the user device and server data for a second server communicating with the user device, generating a privacy communication response to be transmitted by the second server to a third server, the privacy communication response including a privacy communication string tagged to the second server and a privacy communication string record identifying the second server, transmitting, to the privacy component, the privacy communication string, receiving, from the third server, an approval request for a secure exchange associated with the privacy communication string, the approval request identifying a requesting server associated with the secure exchange, analyzing the approval request to determine whether there is a match between the requesting server and the second server, and transmitting, to the third server, a validation response.

Claims (43)

1. A method comprising, by one or more computing devices:

receiving, at a first server, via a communication network, from a privacy component executed on a user device, a privacy communication request comprising device data associated with the user device and server data associated with a second server communicating with the user device;

generating, responsive to the privacy communication request, a privacy communication response comprising a privacy communication string tagged to the second server and a privacy communication string record identifying the second server based on the server data, wherein the privacy communication string is configured to be transmitted by the second server to a third server via the communication network;

transmitting, via the communication network, to the privacy component, the privacy communication string;

receiving, via the communication network, from the third server, an approval request for a secure exchange associated with the privacy communication string, wherein the approval request identifies a requesting server associated with the secure exchange;

analyzing the approval request to determine whether there is a match between the requesting server identified in the approval request and the second server identified in the privacy communication string record; and

transmitting, responsive to determining that the requesting server matches the second server, via the communication network, to the third server, a validation response to the approval request.

2. The method of claim 1 , wherein the privacy communication request is associated with a transaction process for an exchange of secure data between the user device and the second server.

3. The method of claim 2 , wherein the transaction process is associated with a user interface displayed on the user device.

4. The method of claim 3 , wherein the privacy communication request is received from the privacy component in response to a detection of the user interface displayed on the user device.

5. The method of claim 3 , wherein the privacy communication request is received from the privacy component in response to a user interaction with an interactive overlay associated with the first server displayed on the user interface.

6. The method of claim 2 , wherein the privacy communication request further comprises transaction data associated with the exchange of secure data between the user device and the second server.

7. The method of claim 6 , further comprising:

analyzing, in response to receiving the privacy communication request, the transaction data to determine that the privacy communication request is an authentic privacy communication request associated with the user device and the second server.

8. The method of claim 7 , wherein the privacy communication request is determined to be authentic using a behavioral pattern analysis based on previous transaction data associated with the user device.

9. The method of claim 7 , wherein the privacy communication request is determined to be authentic using a behavioral pattern analysis based on aggregated transaction data associated with a plurality of user devices.

10. The method of claim 1 , further comprising:

analyzing, in response to receiving the privacy communication request, the server data to identify an entity associated with the second server; and

determining that the entity associated with the second server is a valid entity.

11. The method of claim 10 , wherein the entity associated with the second server is determined to be a valid entity based on a predetermined risk threshold metric.

12. The method of claim 1 , wherein the privacy communication request comprises device data associated with a location of the user device.

13. The method of claim 12 , further comprising:

determining that the location of the user device is greater than a specified distance from one or more previous locations of the user device received in one or more previous communication requests; and

transmitting, to the privacy component, a prompt to authenticate the privacy communication request.

14. The method of claim 1 , wherein at least a portion of the privacy communication string is generated based on data received in the privacy communication request.

15. The method of claim 1 , wherein the privacy communication string is associated with a privacy payment card, and wherein the privacy communication string record identifies the second server as being associated with the privacy payment card.

16. The method of claim 15 , wherein the privacy communication response further comprises one or more authorization parameters for the privacy payment card.

17. The method of claim 16 , wherein the one or more authorization parameters identify one or more transaction thresholds for one or more secure exchanges associated with the privacy payment card.

18. The method of claim 17 , wherein the transaction thresholds include one or more of a total number of authorized transactions, a total number of authorized transactions in a specified time period, a value for a single authorized transaction, a total value of all authorized transactions, and a total value of all authorized transactions over a specified time period.

19. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive, at a first server, via a communication network, from a privacy component executed on a user device, a privacy communication request comprising device data associated with the user device and server data associated with a second server communicating with the user device;

generate, responsive to the privacy communication request, a privacy communication response comprising a privacy communication string tagged to the second server and a privacy communication string record identifying the second server based on the server data, wherein the privacy communication string is configured to be transmitted by the second server to a third server via the communication network;

transmit, via the communication network, to the privacy component, the privacy communication string;

receive, via the communication network, from the third server, an approval request for a secure exchange associated with the privacy communication string, wherein the approval request identifies a requesting server associated with the secure exchange;

analyze the approval request to determine whether there is a match between the requesting server identified in the approval request and the second server identified in the privacy communication string record; and

transmit, responsive to determining that the requesting server matches the second server, via the communication network, to the third server, a validation response to the approval request.

20. A system comprising: one or more processors; and a non-transitory memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:

receive, at a first server, via a communication network, from a privacy component executed on a user device, a privacy communication request comprising device data associated with the user device and server data associated with a second server communicating with the user device;

generate, responsive to the privacy communication request, a privacy communication response comprising a privacy communication string tagged to the second server and a privacy communication string record identifying the second server based on the server data, wherein the privacy communication string is configured to be transmitted by the second server to a third server via the communication network;

transmit, via the communication network, to the privacy component, the privacy communication string;

receive, via the communication network, from the third server, an approval request for a secure exchange associated with the privacy communication string, wherein the approval request identifies a requesting server associated with the secure exchange;

analyze the approval request to determine whether there is a match between the requesting server identified in the approval request and the second server identified in the privacy communication string record; and

transmit, responsive to determining that the requesting server matches the second server, via the communication network, to the third server, a validation response to the approval request.

Assignments (3)
SECURITY INTEREST Recorded Mar 5, 2026
From: LITHIC, INC.
To: FIFTH THIRD BANK, N.A., SUCCESSOR BY MERGER TO COMERICA BANK
Reel/Frame 073979/0181 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 7, 2022
From: KRUSE, JASON; JIANG, BOLING; ROTH, ANDREW
To: PAY WITH PRIVACY, INC.
Reel/Frame 061347/0894 →
CHANGE OF NAME Recorded Oct 7, 2022
From: PAY WITH PRIVACY, INC.
To: LITHIC, INC.
Reel/Frame 061624/0468 →
Continuity (4)
Continuation 17226881 · Apr 9, 2021
Division 15261368 · Sep 9, 2016
Provisional Application 62216219 · Sep 9, 2015
Related Publication 20220222666A1 · Jul 14, 2022
Cited By (2)
US 12,190,325 US 12,651,260