System and method for managing data share requests

Patent metadata

Field	Value
Publication number	US-11232256-B1
Application number	US-201715666800-A
Country	US
Kind code	B1
Filing date	Aug 2, 2017
Priority date	Aug 2, 2017
Publication date	Jan 25, 2022
Grant date	Jan 25, 2022

Abstract

A system and method for managing data share requests. An electronic form processing module receives a request to share data relating to an organization with an entity not affiliated with the organization. The request includes responses to questions presented in an electronic form. At least some of the questions presented in the electronic form are presented based on a response to a previously asked question in the electronic form. A score calculation module calculates a score based on the responses to the questions presented in the electronic form. A risk analysis module determines whether to approve, deny or escalate the request to share data based on the score.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving a data share request associated with a requestor device to share data with an unaffiliated third party, wherein the data share request identifies data;
providing a unified electronic form that presents one or more questions assessing a plurality of different risks associated with the data identified by the data request in real-time, wherein the one or more questions are selected from among a plurality of questions corresponding to the plurality of different risks, wherein the plurality of different risks are associated with a plurality of different validation endpoints, when the one or more questions are received at the requestor device, the one or more questions are presented by the unified electronic form at the requestor device in a sequence determined in real-time according to a workflow of a plurality of possible workflows;
receiving one or more answers in real-time, wherein the received answers are associated with the requestor device, wherein the received answers are provided in response to the one or more questions, wherein the received answers modify the sequence for one or more subsequent questions presented by the unified electronic form in real-time according to the workflow, and wherein the one or more subsequent questions are presented by the unified electronic form in the modified sequence;
determining that two or more of the plurality of different risks correspond to the received answers to the modified sequence of questions, wherein the determined risks are associated with two or more of the validation endpoints;
determining a score in real-time for each of the determined risks associated with sharing the data, wherein the score for each of the determined risks is based on the received answers to the modified sequence of questions that correspond to the respective determined risk;
determining to route the data share request in real-time to the two or more validation endpoints based on the score for each of the determined risks exceeding a corresponding threshold; and
routing the data share request in real-time to the two or more validation endpoints that are associated with the determined risks corresponding to the modified sequence of questions.

2. The computer-implemented method of claim 1 , further comprising:
determining whether a prior relationship exists with an entity associated with the data share request, wherein when a prior relationship exists, the prior relationship is analyzed to determine whether a confidentiality provision exists.

3. The computer-implemented method of claim 1 , wherein the one or more answers are validated by the two or more validation endpoints, and further comprising:
updating the score for each of the two or more determined risks based on the validation by the two or more validation endpoints.

4. The computer-implemented method of claim 1 , wherein the one or more answers are evaluated to determine whether an answer is relevant to an organization.

5. The computer-implemented method of claim 1 , wherein when an answer is relevant to an organization, additional review by the two or more validation endpoints is implemented to determine whether the data share request needs to be modified.

6. The computer-implemented method of claim 1 , wherein how the data will be shared includes determining a form of data protection or encryption.

7. The computer-implemented method of claim 1 , wherein the answers are associated with text or a numeric value, and wherein the score for each of the determined risks is determined based on an average of the numeric values associated with the answers to the questions that correspond to the respective determined risk.

8. The computer-implemented method of claim 1 , wherein determining the score for each of the determined risks includes solving a deterministic combinatorial problem in real-time.

9. The computer-implemented method of claim 1 , further comprising:
determining to process a quality control review when the score for at least one of the determined risks does not exceed the corresponding threshold, wherein the quality control review includes a review of data quality, a review of data usage, a review of the types of data being shared, or a determination of how the data will be shared;
determining an updated score for the at least one determined risk associated with sharing the data, wherein the score for the at least one determined risk is updated when all of the one or more answers are validated or unchallenged; and
transmitting the determination for implementation when the updated score for the at least one determined risk does not exceed the threshold.

10. The computer-implemented method of claim 1 , further comprising:
determining that the data identified by the data request is subject to one or more internal requirements, standards, or policies, wherein presenting the one or more question is based on the determination.

11. The computer-implemented method of claim 1 , further comprising:
monitoring the data share request for one or more changes; and
updating the routing of the data share request when the one or more changes are detected.

12. A system, comprising:
one or more data processors; and
a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including:
receiving a data share request to share data with an unaffiliated third party, wherein the data share request identifies data;
providing a unified electronic form that presents one or more questions assessing a plurality of different risks associated with the data identified by the data request in real-time, wherein the one or more questions are selected from among a plurality of questions corresponding to the plurality of different risks, wherein the plurality of different risks are associated with a plurality of different validation endpoints, and wherein when the one or more questions are received at a requestor device, the one or more questions are presented by the unified electronic form at the request device in a sequence determined in real-time according to a workflow of a plurality of possible workflows;
receiving one or more answers in real-time, wherein the received answers are associated with the requestor device, wherein the received answers are provided in response to the one or more questions, wherein the received answers modify the sequence for one or more subsequent questions presented by the unified electronic form in real-time according to the workflow, and wherein the one or more subsequent questions are presented by the unified electronic form in the modified sequence;
determining that two or more of the plurality of different risks correspond to the received answers to the modified sequence of questions wherein the determined risks are associated with two or more of the validation endpoints;
determining a score in real-time for each of the determined risks associated with sharing the data, wherein the score for each of the determined risks is based on the received answers to the modified sequence of questions that correspond to the respective determined risk;
determining to route the data share request in real-time to the two or more validation endpoints based on the score for each of the determined risks exceeding a corresponding threshold; and
routing the data share request in real-time to the two or more validation endpoints that are associated with the determined risks corresponding to the modified sequence of questions.

13. The system of claim 12 , wherein t

Assignees

• Synchrony Bank

Inventors

• Pelta Murray
• Marks Rachel
• Miller Sven
• Nowak Annmarie
• Jurchak Joseph
• Mccarthy James
• Schultz Christine
• Heller Justin

Classifications

• G06Q10/0635 Primary

  Risk analysis of enterprise or organisation activities · CPC title

• G06F40/174 Primary

  Form filling; Merging · CPC title