Computing devices and methods for propagating updates to user profile data

Patent metadata

Field	Value
Publication number	US-11057382-B2
Application number	US-201816170986-A
Country	US
Kind code	B2
Filing date	Oct 25, 2018
Priority date	Oct 25, 2018
Publication date	Jul 6, 2021
Grant date	Jul 6, 2021

Abstract

A data update computing device is provided. The data update computing device receives, from one of a user computing device and a first relying party computing device, a first access authorization message, wherein the first access authorization message identifies (i) a first relying party and (ii) a first user data element of the user to be shared with the first relying party. The data update computing device generates a first globally unique identifier (GUID), wherein the first GUID is uniquely associated in a first record in a GUID database table with the first user data element and the first relying party; receives an updated value of the first user data element of the user; stores the updated value of the first user data element in the first record, and flag the first record as updated in the GUID database table; and transmits the first GUID to the first relying party.

First claim

What is claimed is:

1. A data update computing device comprising at least one processor in communication with a memory device and a database, the database storing values for a plurality of user data elements of a plurality of users, the memory device storing instructions that are executable by the at least one processor to cause the at least one processor to:
receive, from one of a user computing device and a first relying party computing device, a first access authorization message, wherein the first access authorization message identifies (i) a first relying party and (ii) a label for a first user data element of a first user of the plurality of users, the first access authorization message indicating that updates to the value of the first user data element are to be shared with the first relying party;
create, in response to the first access authorization message, a first record in a globally unique identifier (GUID) database table in the database, the GUID database table containing a plurality of records, each of the records associating a respective GUID, a corresponding label of one of the user data elements of one of the users, and a corresponding relying party, wherein the first record associates a first GUID, the label of the first user data element, and the first relying party, and wherein each of the GUIDs in the GUID database table is unique;
receive, and store in the database, an updated value of the first user data element of the user;
flag the first record as updated in the GUID database table;
receive, from the first relying party computing device, an update status request identifying the first relying party;
parse the GUID database table to identify flagged records associated with the first relying party, including the first record;
extract the first GUID from the first record for transmission to the first relying party; and
transmit the first GUID to the first relying party.

2. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to transmit the first GUID in response to:
retrieving, from the database, a watch list comprising a plurality of subscribed relying parties, each of the subscribed relying parties having authorization to receive updates associated with at least one of the plurality of users;
identifying the first relying party in the watch list;
parsing the GUID database table to identify flagged records associated with the first relying party, including the first record; and
extracting the first GUID from the first record for transmission to the first relying party.

3. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to, prior to transmitting the GUID to the first relying party:
encrypt the first GUID in a first encryption layer using a private key A associated with the data update computing device to generate an A-encrypted first GUID; and
encrypt the A-encrypted first GUID in a second encryption layer using a public key B associated with the first relying party to generate a double-encrypted first GUID, wherein transmitting the first GUID comprises transmitting the double-encrypted first GUID to the first relying party.

4. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to:
transmit the first GUID by transmitting an update list including the first GUID to the first relying party;
receive, in response to transmitting the update list, an update pull request from the first relying party, the update pull request including the first GUID; and
transmit, in response to the update pull request, the updated value to the first relying party.

5. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to transmit the updated value to the first relying party simultaneously with the transmission of the first GUID.

6. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to transmit the updated value to a representational state transfer (REST)-compliant endpoint maintained by the first relying party.

7. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to:
encrypt the updated value in a first encryption layer using a private key A associated with the data update computing device to generate an A-encrypted updated value;
encrypt the A-encrypted updated value in a second encryption layer using a public key B associated with the first relying party to generate a double-encrypted updated value; and
transmit the double-encrypted updated value to the first relying party.

8. The data update computing device of claim 1 , wherein the first access authorization message further includes an authentication key, and wherein the instructions are further executable by the at least one processor to cause the at least one processor to validate that the user authorizes the first relying party to access the first user data element based on the authentication key.

9. The data update computing device of claim 1 , wherein the instructions are further executable by the at least one processor to cause the at least one processor to:
receive, from one of the user computing device and a second relying party computing device, a second access authorization message, wherein the second access authorization message identifies (i) a second relying party and (ii) the first user data element;
create, in response to the second access authorization message, a second record in the GUID database table, wherein the second record associates a second globally unique identifier (GUID), the first user data element, and the second relying party;
in response to receiving and storing the updated value of the first user data element, flag the second record as updated in the GUID database table; and
transmit the second GUID to the second relying party.

10. A computer-implemented method for propagating updates to user profile data, the user profile data comprising values for a plurality of user data elements of a plurality of users, the method implemented using a data update computing device in communication with a database storing the user profile data, the method comprising:
receiving, from one of a user computing device and a first relying party computing device, a first access authorization message, wherein the first access authorization message identifies (i) a first relying party and (ii) a label for a first user data element of a first user of the plurality of users, the first access authorization message indicating that updates to a value of the first user data element are to be shared with the first relying party;
creating, in response to the first access authorization message, a first record in a globally unique identifier (GUID) database table in the database, the GUID database table containing a plurality of records, each of the records associating a respective GUID, a corresponding label of one of the user data elements of one of the users, and a corresponding relying party, wherein the first record associates a first GUID, the label of the first user data element, and the first relying party, and wherein each of the GUIDs in the GUID database table is unique;
receiving, and storing in the database, an updated value of the first user data element of the user;
flagging the firs

Assignees

• Mastercard International Inc

Inventors

• Allen John
• Hosny Ahmed
• Groarke Peter J

Classifications

• G06F16/2379

  Updates performed during online database operations; commit processing · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• H04L63/0478

  applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title