Jailed environment restricting programmatic access to multi-tenant data

Patent metadata

Field	Value
Publication number	US-11935003-B2
Application number	US-202016882163-A
Country	US
Kind code	B2
Filing date	May 22, 2020
Priority date	May 23, 2019
Publication date	Mar 19, 2024
Grant date	Mar 19, 2024

Abstract

The system and methods described herein allow users to give their applicant information when seeking to submit an inquiry associated with a product provided by at least one entity, and have various lender microservices run in parallel, segregated by entity, in a jailed and self-contained, autonomous environment. The result of these microservices may be returned as a response to the inquity, being determined autonomously for each respective entity based on one or more respective rule sets or executable logic for each respective entity. Payloads for multiple entities may be combined in a single output from the jailed and self-contained environment due to outputs from the environment being encrypted in a universal format, wherein the outputs are decrypted in a user session in an application, allowing the user to see the results of the respective responses of each of the at least one entity, to their inquiry.

First claim

What is claimed is:

1. A method comprising:
receiving, at a server, one or more rule sets or executable logic from each of at least one entity;
storing the one or more rule sets or executable logic in a jailed and self-contained environment comprising a vault within the server, the one or more rule sets or executable logic being encrypted with an entity-specific key upon receipt of the one or more rule sets or executable logic for each such entity, or encrypted at a predetermined later time for each such entity, with an entity-specific key, wherein the rule sets or executable logic for each such entity are accessible in the jailed and self-contained environment by at least one entity-specific routing component dedicated for each such entity;
receiving, at the server, a request from a particular user via a user-facing application, the request relating to an inquiry associated with a product provided by each of the at least one entity, a response to the inquiry being determined autonomously for a respective entity based on the respective rule sets or executable logic for each respective entity;
decrypting autonomously, inside of the jailed and self-contained environment in the server, the rule sets or executable logic for one or more of the at least one entities, by the at least one entity-specific routing component for the respective at least one entity, wherein each one of the at least one entity-specific routing components corresponds to a particular entity of the at least one entity;
applying, autonomously by the at least one entity-specific routing component for each respective entity, one or more rule sets or executable logic to determine a respective response to the inquiry;
generating encrypted outputs autonomously in an entity-agnostic format by the at least one entity-specific routing component within the jailed and self-contained environment based on the respective responses by compiling the respective responses into a universally encrypted lender agnostic composite payload; and
transmitting said encrypted outputs from said server through an application protocol interface, sending the encrypted outputs onwards toward the user-facing application with segregated user sessions, and decrypting the outputs only in the particular user session of said application, such that the contents of the decrypted outputs are only visible to the particular user
wherein the vault is encrypted by the entity-specific key such that an administrator of the server cannot view its components.

2. The method of claim 1 , further comprising:
each entity corresponds to a lender; each entity-specific routing component corresponds to a lender-specific broker dedicated for a particular lender; each entity-specific key corresponds to a lender-specific key dedicated for the particular lender; the product is a loan provided by the lender; the request is for lender prequalification; the inquiry to which the request relates is for applicant financing of a commodity with at least one lender; the one or more rule sets or executable logic for each entity comprise one or more rule sets or executable logic for prequalifying an applicant, which are stored inside of the jailed and self-contained environment in a lender confidential data repository; and wherein to determine a respective response to the inquiry, the at least one lender-specific broker for each respective lender applies one or more rule sets or executable logic to applicant information which is submitted along with the inquiry, to assess applicant prequalification for each lender of the at least one lender of the inquiry, product eligibility for an applicant in lending from the at least one lender to purchase a particular product, and to further, if the applicant is found to prequalify for the lender and the product is eligible under the product eligibility process for the lender, assess pricing information to determine the terms for a loan offer.

3. The method of claim 2 , further comprising:
each lender may access and manipulate or edit only their respective rule sets or executable logic within the jailed and self-contained environment, and not that of any other lender, for prequalifying an applicant through a lender portal application user interface, wherein once any editing by the lender of their respective rule sets or executable logic takes place in the lender portal application user interface, a lender confidential data service is automatically called to make corresponding changes to rules or executable logic in the lender confidential data repository for that lender.

4. The method of claim 2 , further comprising:
logging the details of the one or more rule sets or executable logic that are executed in an audit repository stored inside of the jailed and self-contained environment.

5. The method of claim 2 , further comprising:
wherein the one or more rule sets or executable logic is applied to the applicant information to assess applicant prequalification or product eligibility for each lender of the at least one lender within the lender-specific broker corresponding to said each lender, within the jailed and self-contained environment.

6. The method of claim 2 , further comprising:
wherein the one or more rule sets or executable logic is applied to the prequalification request and applicant information within the lender-specific broker to, at least for one lender, modify the applicant information and prequalification request to match required lender parameters for an application protocol interface of a lender-based loan origination system which is in communication with the lender specific broker; and sending the prequalification request and applicant information to the lender-based loan origination system for the at least one lender having said lender-based loan origination system.

7. The method of claim 6 , further comprising:
assessing applicant prequalification for the at least one lender having said the lender-based loan origination system; and
returning an output response to the lender-specific broker in the jailed and self-contained environment.

8. The method of claim 6 , further comprising:
transforming the returned output response by the lender specific broker from parameters matching the application protocol interface of the lender-based loan origination system to a non-lender specific universal format used in the jailed and self-contained environment; and
encrypting said returned output response in a universal non-lender specific format, to be decrypted in the particular user session.

9. The method of claim 1 , wherein the rule sets or executable logic may comprise at least one of Boolean logic or machine-learning logic.

10. A system comprising:
a memory;
a server;
a lender confidential data repository comprising a database, present in said memory;
a processor coupled to said memory, the processor configured to:
receiving, at the server, through an application user interface, applicant information with respect to an application for applicant financing for a product with at least one lender, along with a request for prequalification, where said applicant information and the request for prequalification are encrypted upon receipt, or encrypted at a predetermined later time, in a universal non-lender-specific format;
receiving, at the server, through another application user interface, one or more rule sets or executable logic for prequalifying an applicant from the at least one lender, which is encrypted with a lender-specific key upon receipt of rule sets or executable logic for each such lender, or encrypted at predetermined later time for each such lender, with the lender-specific key;
decrypting autonomously, inside of a jailed and self-contained

Assignees

• Capital One Services Llc

Inventors

• Sundaram Dinesh
• Bajaj Raman
• Morel Jacques
• Yajnik Sanjiv
• Jones Trent
• Ilango Alan
• Creech Jacob
• Sarkar Avijit
• Vijayaraghavan Rajaboopathy
• Gupta Ishu
• Sickert Thomas

Classifications

• G06Q40/0305 Primary

  Platforms for credit or lending product research, comparison or matching · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L63/166

  at the transport layer · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/102

  Entity profiles · CPC title