Self-service lender portal

Patent metadata

Field	Value
Publication number	US-11915196-B2
Application number	US-202016881860-A
Country	US
Kind code	B2
Filing date	May 22, 2020
Priority date	May 23, 2019
Publication date	Feb 27, 2024
Grant date	Feb 27, 2024

Abstract

A self-service lender portal provides lenders with a suite of tools for interacting with a multi-lender architecture configured to provide loan applicants with automated pre-qualification and eligibility evaluation for multiple candidate lenders. The lender portal provides lenders with an interface for uploading rule sets defining lending and eligibility criteria, downloading operational data generated from processing loan applicant information, generating and managing security keys for encryption and decryption of sensitive data, and managing access policies for providing single sign-on by interfacing with the lender's own identity management systems.

First claim

What is claimed is:

1. A system for secure management of customer data, the system comprising:
memory; and
a processor coupled to the memory and configured to perform operations comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key; and
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packet for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules.

2. The system of claim 1 , wherein the operations further comprise:
receiving, from a user associated with the transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

3. The system of claim 1 , wherein the sending the respective data packets comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and
sending the data stream to the server.

4. The system of claim 1 , wherein the operations further comprise:
sending an asymmetric encryption key and a data query to the server;
receiving, from the server, encrypted operational data corresponding to the data query,
wherein the encrypted operational data is encrypted using the asymmetric encryption key;
decrypting the encrypted operational data using an asymmetric decryption key corresponding to the asymmetric encryption key; and
displaying the decrypted operational data.

5. The system of claim 4 , wherein the asymmetric encryption key is a public key and the asymmetric decryption key is a private key.

6. The system of claim 4 , wherein the operations further comprise:
generating the asymmetric encryption key and the asymmetric decryption key using a public key infrastructure; or
generating the asymmetric encryption key and the asymmetric decryption key using an encryption service; or
importing the asymmetric encryption key and the asymmetric decryption key from a local storage.

7. The system of claim 1 , wherein the encrypted data key is encrypted using envelope encryption.

8. A method for secure management of customer data, the method comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key; and
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packet for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules.

9. The method of claim 8 , further comprising:
receiving, from a user associated with the transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

10. The method of claim 8 , wherein the sending the respective data packets further comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and
sending the data stream to the server.

11. The method of claim 8 , further comprising:
sending an asymmetric encryption key and a data query to the server;
receiving from the server, encrypted operational data, corresponding to the data query,
wherein the encrypted operational data is encrypted using the asymmetric encryption key;
decrypting the encrypted operational data using an asymmetric decryption key corresponding to the asymmetric encryption key; and
displaying the decrypted operational data.

12. The method of claim 11 , wherein the asymmetric encryption key is a public key and the asymmetric decryption key is a private key.

13. The method of claim 11 , further comprising:
generating the asymmetric encryption key and the asymmetric decryption key using public key infrastructure; or
generating the asymmetric encryption key and the asymmetric decryption key using an encryption service; or
importing the asymmetric encryption key and the asymmetric decryption key from a local storage.

14. The method of claim 8 , wherein the encrypted data key is encrypted using envelope encryption.

15. A non-transitory computer-readable medium with instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key; and
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packet for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules.

16. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
receiving, from a user associated with the transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

17. The non-transitory computer-readable medium of claim 15 , wherein the sending the respective data packets further comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and
sending the data stream to the server.

18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
sending an asymmetric encryption key and a data query to the server;
receiving from the server, encrypted operational data, corresponding to the data query,
wherein the encrypted operational data is encrypted using the asymmetric encryption key;
decrypting the encrypted operational data using an asymmetric decryption key corresponding to the asymmetric encryption key; and
displaying the decrypted operational data.

19. The non-transitory computer-readable medium of claim 18 , wherein the operations further comprise:
generating the asymmetric encryption key and the asymmetric decryption key using public key infrastructure; or
generating the asymmetric encryption key and the asymmetric decryption key using an encryption service; or
importing the asymmetric encryption key and the asymmetric decryption key from a local storage.

20. The non-transitory computer-readable medium of claim 15 , wherein the encrypted data key is encrypted using envelope encryption.

Assignees

• Capital One Services Llc

Inventors

• Sundaram Dinesh
• Yajnik Sanjiv
• Bajaj Raman
• Morel Jacques
• Baird Alex
• Vijayaraghavan Rajaboopathy

Classifications

• G06Q40/0305 Primary

  Platforms for credit or lending product research, comparison or matching · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L63/166

  at the transport layer · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/102

  Entity profiles · CPC title