Systems and methods for tokenized data delegation and protection

Patent metadata

Field	Value
Publication number	US-11700129-B2
Application number	US-202016906705-A
Country	US
Kind code	B2
Filing date	Jun 19, 2020
Priority date	Nov 13, 2019
Publication date	Jul 11, 2023
Grant date	Jul 11, 2023

Abstract

Example embodiments of systems and methods for data delegation and control through the use of tokenized data are provided. In an exemplary method of data delegation and control, a data device may store private information associated with a user and generate an access token, comprising tokenized data identifying the data device. The data device may transmit the access token to a user device through a front channel and receive an information request from a merchant device comprising the access token through a secure back channel. Upon authenticating the access token, the data device may transmit a portion of the private information to the merchant device through the secure back channel.

First claim

What is claimed is:

1. A system for data control, comprising:
a data device comprising a processor and a memory; and
a database containing private information, wherein the database is in data communication with the data device,
wherein the data device:
generates an access token associated with the private information,
transmits the access token through a front channel,
receives an information request through a secure back channel, the information request comprising the access token, a secret key, an identification of a first portion of private information, and a second portion of private information, and
responsive to the information request, the data device:
authenticates the access token and the secret key,
retrieves a third portion of private information from the database based on the authentication of the access token and the secret key,
compares the second portion of private information to the third portion of private information,
generates a first similarity score based on the comparison of the second portion of private information to the third portion of private information, and
upon determining that the first similarity score exceeds a first threshold:
retrieves the first portion of private information from the database, and
transmits the first portion of private information through the secure back channel.

2. The system for data control of claim 1 , wherein the data device:
transmits a notification to a user device indicating receipt of the information request, and
transmits the first portion of private information upon receipt of an approval message from the user device.

3. The system for data control of claim 1 , wherein the data device transmits the first portion of private information unless a disapproval message is received within a specified time period.

4. The system for data control of claim 1 , wherein the data device applies a neural network to perform the comparison of the second portion of private information to the third portion of private information.

5. The system for data control of claim 1 , wherein the first threshold is established based on a user preference received from a user associated with the data device.

6. The system for data control of claim 1 , wherein the first threshold is established based on a previous comparison resulting in the generation of a previous similarity score for a previous information request.

7. The system for data control of claim 1 , wherein:
the information request is received from a requesting device, and
the first threshold is established based on the membership of the requesting device in a trusted network.

8. The system for data control of claim 1 , wherein:
the information request is received from a requesting device, and
the data device determines, based on the access token, whether the requesting device is in possession of any private information relating to the user.

9. The system for data control of claim 8 , wherein the data device, upon a determination that the requesting device is in possession of private information, requests that the requesting device transmit a fourth portion of private information to the data device through the secure back channel.

10. The system for data control of claim 9 , wherein, upon receipt of the fourth portion of private information, the data device:
retrieves a fifth portion of private information from the database,
compares the fifth portion of private information to the fourth portion of private information, and
generates a second similarity score based on the comparison.

11. A method of data control by a data device comprising a processor and a memory, comprising:
storing private information in the memory;
generating an access token comprising tokenized data identifying the data device;
transmitting, through a first front channel, the access token;
receiving, through a first secure back channel, an information request comprising the access token; and
responsive to the information request:
authenticating the access token,
transmitting, through the first secure back channel, a first portion of the private information based on the authentication of the access token,
receiving through a second secure back channel, a request for a second portion of private information,
receiving, through the second secure back channel, a third portion of private information,
comparing the third portion of private information to a fourth portion of the private information,
generating a first similarity score based on the comparison of the third portion of private information to the fourth portion of private information,
determining that the first similarity score exceeds a first threshold, and
upon determining that the first similarity score exceeds the first threshold, transmitting a share confirmation request.

12. The method of data control of claim 11 , wherein the information request further comprises a secret key.

13. The method of data control of claim 12 , wherein the secret key comprises an OAuth client secret.

14. The method of data control of claim 12 , wherein the secret key is a single-use key.

15. The method of data control of claim 11 , further comprising transmitting a confirmation request message upon authentication of the access token.

16. The method of data control of claim 11 , wherein the share confirmation request includes a request for a biometric identifier.

17. A non-transitory computer-accessible medium having stored thereon computer-executable instructions for providing data control, wherein, when a computer arrangement executes the instructions, the computer arrangement comprising a processor in data communication with a database containing private information, the computer arrangement is configured to perform procedures comprising:
receiving, through a front channel, a request for an access token associated with the private information;
generating an access token, the access token comprising a tokenized identifier for the computer arrangement;
transmitting the access token through the front channel;
receiving, through a secure back channel, the access token, a secret key, and a request for a first portion of private information; and
responsive to the request for the first portion of private information:
authenticating the access token and secret key,
receiving, through the secure back channel, a second portion of private information,
comparing the second portion of private information to a third portion of the private information,
generating a similarity score based on the comparison,
determining that the first similarity score exceeds a first threshold and
upon determining that the first similarity score exceeds the threshold, transmitting the first portion of private information through the secure back channel.

18. The non-transitory computer-accessible medium of claim 17 , wherein comparing the second portion of private information to the third portion of the private information comprises applying natural language processing to compare the second portion of private information to the third portion of the private information.

19. The non-transitory computer-accessible medium of claim 17 , wherein comparing the second portion of private information to the third portion of the private information comprises a direct textual comparison of the second portion of private information to the third portion of the private information.

20. The non-transitory computer-accessible medium of claim 17 , wherein the secure back channel comprises at

Assignees

• Capital One Services Llc

Inventors

• Tang Qiaochu
• Hoover Jason
• Price Micah
• Wylie Stephen
• Dagley Geoffrey

Classifications

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06N20/00

  Machine learning · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L9/3234 Primary

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title