Network data management and data security

Patent metadata

Field	Value
Publication number	US-11978047-B2
Application number	US-202318166705-A
Country	US
Kind code	B2
Filing date	Feb 9, 2023
Priority date	Apr 1, 2020
Publication date	May 7, 2024
Grant date	May 7, 2024

Abstract

Systems, devices, methods, instructions, and other implementations are described for network data management. One embodiment involves request data received at a device associated with a digital lockbox, where the request data includes identifying information for an originating device associated with a location and is associated with a user device. A unique token is generated with the identifying information. The unique token can be used to tokenize a network link to create a secure one-time link. The system transmits the one-time link, which can then be used to facilitate secure communications between a computing system associated with the originating device and the user device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
storing sensitive user data in a digital lockbox of a server system, wherein the digital lockbox is associated with a network location;
receiving, at the server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and the network location, wherein the one-time link is tokenized to prevent sharing of the one-time link;
receiving, at the network location using the server system, a request for the sensitive user data;
transmitting the one-time link;
establishing, at the network location using the server system, a secure channel associated with the one-time link; and
transmitting the sensitive user data using the secure channel.

2. The computer-implemented method of claim 1 , further comprising:
dynamically updating the digital lockbox with tracking data associated with the secure channel.

3. The computer-implemented method of claim 1 , further comprising facilitating transmission of offer data using the secure channel, the personal identifying information, and the sensitive user data.

4. The computer-implemented method of claim 1 , wherein the request data further comprises location data associated with the request data; and
wherein establishing the secure channel includes performing a security check associated with the location data.

5. The computer-implemented method of claim 1 , further comprising:
automatically deleting the personal identifying information from the digital lockbox after transmitting the personal identifying information using the secure channel.

6. The computer-implemented method of claim 1 , wherein transmitting the sensitive user data using the secure channel includes transmitting application data including the sensitive user data via the digital lockbox as part of an application decision process.

7. The computer-implemented method of claim 1 , further comprising:
storing tracking data metrics including metrics for one or more of:
a merchant location offer acceptance rate, a merchant location use rate associated with the digital lockbox, a per location offer acceptance rate, a per location use rate associated with the digital lockbox of the server system, and per location security flag occurrence rates.

8. A server system, comprising:
memory; and
one or more processors coupled to the memory, the one or more processors configured for operations including:
storing sensitive user data in a digital lockbox, wherein the digital lockbox is associated with a network location;
receiving, at the server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and the network location, wherein the one-time link is tokenized to prevent sharing of the one-time link;
receiving, at the network location using the server system, a request for the sensitive user data;
transmitting the one-time link,
establishing, at the network location using the server system, a secure channel associated with the one-time link; and
transmitting the sensitive user data using the secure channel.

9. The server system of claim 8 , wherein the one or more processors are further configured for operations comprising:
dynamically updating the digital lockbox with tracking data associated with the secure channel.

10. The server system of claim 8 , wherein the one or more processors are further configured for operations comprising:
facilitating transmission of offer data using the secure channel, the personal identifying information, and the sensitive user data.

11. The server system of claim 8 , wherein the request data further comprises location data associated with the request data; and
wherein establishing the secure channel includes performing a security check associated with the location data.

12. The server system of claim 8 , wherein the one or more processors are further configured for operations comprising: automatically deleting the personal identifying information from the digital lockbox after transmitting the personal identifying information using the secure channel.

13. The server system of claim 8 , wherein transmitting the sensitive user data using the secure channel includes transmitting application data including the sensitive user data via the digital lockbox as part of an application decision process.

14. The server system of claim 8 , wherein the one or more processors are further configured for operations comprising:
storing tracking data metrics including metrics for one or more of a merchant location offer acceptance rate, a merchant location use rate associated with the digital lockbox, a per location offer acceptance rate, a per location use rate associated with the digital lockbox of the server system, and per location security flag occurrence rates.

15. A computer-readable storage medium comprising instructions that, when executed by one or more processors of a server system, cause the server system to perform operations including:
storing sensitive user data in a digital lockbox, wherein the digital lockbox is associated with a network location;
receiving, at the server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and the network location, wherein the one-time link is tokenized to prevent sharing of the one-time link;
receiving, at the network location using the server system, a request for the sensitive user data;
transmitting the one-time link;
establishing, at the network location using the server system, a secure channel associated with the one-time link; and
transmitting the sensitive user data using the secure channel.

16. The computer-readable storage medium of claim 15 , wherein the server system is further configured to perform operations including:
dynamically updating the digital lockbox with tracking data associated with the secure channel.

17. The computer-readable storage medium of claim 15 , wherein the server system is further configured to perform operations including:
facilitating transmission of offer data using the secure channel, the personal identifying information, and the sensitive user data.

18. The computer-readable storage medium of claim 15 , wherein the request data further comprises location data associated with the request data; and
wherein establishing the secure channel includes performing a security check associated with the location data.

19. The computer-readable storage medium of claim 15 , wherein the server system is further configured to perform operations including:
automatically deleting the personal identifying information from the digital lockbox after transmitting the personal identifying information using the secure channel.

20. The computer-readable storage medium of claim 15 , wherein transmitting the sensitive user data using the secure channel includes transmitting application data including the sensitive user data via the digital lockbox as part of an application decision process.

21. The computer-readable storage me

Assignees

• Synchrony Bank

Inventors

• Young Taylor
• Otten Chris

Classifications

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title

• G06F16/955

  using information identifiers, e.g. uniform resource locators [URL] · CPC title

• G06K7/1417

  2D bar codes · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04W12/65

  Environment-dependent, e.g. using captured environmental data · CPC title