Granted Patent B2

US 12,657,331 · App. 17/899,497 · Granted Jun 16, 2026

Inventors: Bryn Anthony Robinson-Morgan (Mosborough Village, GB); Liang Tian (Rye Brook, NY); Prashant Sharma (Madison, NJ); John O'Neill (Darien, CT)

Assignee: MASTERCARD INTERNATIONAL INCORPORATED

G06F21/6245G06F2221/2101

Abstract

Claims (60)

1 . A computer-implemented method for use in generating audit logs for data packet transactions, the method comprising:

receiving, from a user, via a mobile device associated with the user, a request to share identifying data specific to a user with a computing device of a first party;

in response to the request, retrieving, by an identity provider computing device, the identifying data identified in the request, the identity provider computing device separate from the computing device of the first party;

generating, by the identity provider computing device, a transaction ID specific to the request, the transaction ID unique to the request to share the identifying data;

generating a group ID associated with a journey including the request to share the identifying data with the first party;

compiling, by the identity provider computing device, a data packet including at least the transaction ID and the retrieved identifying data;

applying, by the identity provider computing device, a hashing algorithm to the data packet to generate a signature value for the data packet;

transmitting, by the identity provider computing device, the data packet to the computing device of the first party as a transaction; and

appending, by the identity provider computing device, an entry to an audit log, which includes the transaction ID and the signature value, but not the retrieved identifying data included in the data packet, thereby enabling subsequent verification of the data packet transmitted to the first party, based on the transaction ID; and

wherein the entry and at least one other entry to the audit log include the group ID.

2 . The computer-implemented method of claim 1 , wherein the first party includes one of a relying party and a verification provider.

3 . The computer-implemented method of claim 1 , wherein compiling the data packet includes compiling the data packet to include an identifier of the first party.

4 . The computer-implemented method of claim 1 , wherein the retrieved identifying data includes a government ID number, a birth date, and/or a phone number.

5 . The computer-implemented method of claim 1 , further comprising:

receiving, by the computing device, a dispute from the first party for the transaction, the dispute including the transaction ID and said data packet;

retrieving, by the computing device, the signature value from the audit log based on the transaction ID;

applying the hashing algorithm to the data packet to generate a second signature value for the data packet received from the first party;

comparing the second signature value for the data packet received from the first party to the signature value for the data packet transmitted to the first party; and

transmitting a result of the comparison to the first party.

6 . The computer-implemented method of claim 1 , further comprising signing, by the computing device, the data packet with a private key prior to transmitting the data packet to the first party.

7 . A system for use in generating audit logs for data packet transactions, the system comprising:

an identification provider (IDP) computing device including a processor, a memory, the memory including executable instructions, the processor configured, by the executable instructions, to:

receive, from a user, via a mobile device associated with the user, a request to share identifying data specific to a user with a computing device of a relying party;

in response to the request, retrieve the identifying data identified in the request;

generate a transaction ID for the request, the transaction ID unique to the request to share the identifying data;

generate a group ID associated with a journey including the request to share the identifying data with the first party;

compile a data packet including at least the transaction ID and the retrieved identifying data;

apply a hashing algorithm to the data packet to generate a signature value for the data packet;

transmit the data packet to the relying party as a transaction; and

append an entry to an audit log included in a data repository, the entry including the transaction ID and the signature value, but not the retrieved identifying data included in the data packet, thereby enabling subsequent verification of the data packet transmitted to the relying party, based on the transaction ID; and

wherein the entry and at least one other entry to the audit log include the group ID.

8 . The system of claim 7 , wherein the IDP computing device is further configured to sign the data packet with a private key, specific to the IDP computing device, prior to transmitting the data packet to the relying party.

9 . The system of claim 7 , wherein the retrieved identifying data includes a government ID number.

10 . The system of claim 7 , wherein the IDP computing device is further configured to:

receive a dispute from the relying party for the transaction, the dispute including the transaction ID and said data packet;

retrieve the signature value from the audit log based on the transaction ID;

apply the hashing algorithm to generate a second signature value for the data packet received from the relying party;

compare the second signature value for the data packet received from the relying party to the signature value for the data packet transmitted to the relying party; and

transmit a result of the comparison to the relying party.

11 . A non-transitory computer-readable storage medium comprising executable instructions for use in generating audit logs for data packet transactions, which when executed by at least one processor, cause the at least one processor to:

receive, from a user, via a mobile device associated with the user, a request to share identifying data specific to a user with a computing device of a first party;

in response to the request, retrieve the identifying data identified in the request;

generate a transaction ID for the request, the transaction ID unique to the request to share the identifying data;

generate a group ID associated with a journey including the request to share the identifying data with the first party;

compile a data packet including at least the transaction ID and the retrieved identifying data;

apply a hashing algorithm to the data packet to generate a signature value for the data packet;

transmit the data packet to the first party as a transaction; and

append an entry to an audit log, which includes the transaction ID and the signature value, but not the retrieved data included in the data packet, thereby enabling subsequent verification of the data packet transmitted to the first party, based on the transaction ID; and

wherein the entry and at least one other entry to the audit log include the group ID.

12 . The non-transitory computer-readable storage medium of claim 11 , wherein the first party includes a relying party; and

wherein the retrieved identifying data includes a government ID and a birth date.

13 . The non-transitory computer-readable storage medium of claim 11 , wherein the executable instructions, when executed by the at least one processor, cause the at least one processor to:

compile the data packet to include an identifier of the first party; and

sign the data packet with a private key, prior to transmitting the data packet to the first party.

14 . The non-transitory computer-readable storage medium of claim 11 , wherein the executable instructions, when executed by the at least one processor, further cause the at least one processor to:

receive a dispute from the first party for the transaction, the dispute including the transaction ID and said data packet;

retrieve the signature value from the audit log based on the transaction ID;

apply the hashing algorithm to generate a second signature value for the data packet received from the first party;

compare the second signature value for the data packet received from the first party to the signature value for the data packet transmitted to the first party; and

transmit a result of the comparison to the first party.

Assignments (1)

Continuity (2)

References Cited (56)