System and method for managing data share requests

Patent metadata

Field	Value
Publication number	US-12061865-B2
Application number	US-202117548049-A
Country	US
Kind code	B2
Filing date	Dec 10, 2021
Priority date	Aug 2, 2017
Publication date	Aug 13, 2024
Grant date	Aug 13, 2024

Abstract

A system and method for managing data share requests. An electronic form processing module receives a request to share data relating to an organization with an entity not affiliated with the organization. The request includes responses to questions presented in an electronic form. At least some of the questions presented in the electronic form are presented based on a response to a previously asked question in the electronic form. A score calculation module calculates a score based on the responses to the questions presented in the electronic form. A risk analysis module determines whether to approve, deny or escalate the request to share databased on the score.

First claim

What is claimed:

1. A computer-implemented method comprising:
receiving, at a data share management system including one or more processors, one or more answers from a unified electronic form, wherein the unified electronic form presents questions assessing a plurality of risk factors and analysis silos associated with a set of data requested in a data share request, wherein the analysis silos are associated with organizational roles associated with the plurality of risk factors for the set of data, and wherein the one or more answers are associated with a requestor device requesting to share the set of data with a third party;
dynamically assessing the plurality of risk factors associated with the data share request using a workflow with dynamic form logic using additional questions presented to the requestor by way of the unified electronic form in response to the one or more answers, wherein the plurality of risk factors correspond to a plurality of risk types associated with the set of data, wherein risk factors are associated with validation endpoints, and wherein the validation endpoints are associated with the analysis silos;
determining a first score for a first silo associated with the one or more answers from the unified electronic form based on the plurality of risk factors and the workflow, wherein the first score is associated with a first risk type;
determining a second score for a second silo associated with the one or more answers from the unified electronic form based on the plurality of risk factors and the workflow, wherein the second score is associated with a second risk type;
determining that the first score and the second score exceed a corresponding threshold determined in association with the workflow, wherein the first risk type and the second risk type correspond to two or more different validation endpoints of the workflow; and
escalating the data share request based on a routing associated with the workflow and the determining that the first score and the second score exceed the corresponding threshold.

2. The method of claim 1 , wherein assessing the plurality of risk factors comprises:
presenting a series of questions regarding the plurality of risk factors, wherein the questions are presented within the unified electronic form, and wherein assessing the plurality of risk factors is based on the one or more answers to the series of questions.

3. The method of claim 2 , wherein the series of question is presented in a sequence in accordance with form logic, and wherein one or more subsequent questions are presented in real-time based on an answer to a previous question.

4. The method of claim 2 , further comprising:
determining that one or more of the validation endpoints has raised a challenge to one or more of the one or more answers; and
sending the data share request back to the requestor device.

5. The method of claim 1 , wherein assessing the plurality of risk factors associated with the data share request comprises:
determining that the data share request requires one or more modifications;
allowing the requestor device to modify the data share request;
receiving a modified data share request; and
assessing the modified data share request.

6. The method of claim 1 , further comprising:
determining that two or more validation endpoints have approved the data share request; and
allowing the set of data to be shared over a communication network with an unaffiliated third party in accordance with the data share request based on the determination.

7. The method of claim 1 , further comprising:
determining that the one or more answers are validated based on two or more validation endpoints not challenging any of the one or more answers; and
allowing the set of data to be shared over a communication network with an unaffiliated third party in accordance with the data share request based on the determination.

8. The method of claim 1 , further comprising determining a score for each of the plurality of risk types by solving a deterministic combinatorial problem in real-time.

9. The method of claim 1 , wherein the data share request is among a plurality of recurring data share requests, and further comprising:
re-evaluating the data share request periodically.

10. The method of claim 1 , wherein the plurality of risk factors associated with the data share request includes at least one of: a category of the set of data, a method for how the set of data is to be shared, a form of encryption, a form of protection, a type of relationship with the third party, a contractual relationship with the third party, data quality, data usage, type of data access, and data requirements.

11. A system comprising:
a communication interface that receives a data share request associated with a requestor device to share a set of electronic data with a third party; and
a processor that executes instructions stored in memory, wherein the processor executes the instructions to perform operations including:
receiving, at a data share management system including the processor, one or more answers from a unified electronic form, wherein the unified electronic form presents questions assessing a plurality of risk factors and analysis silos associated with a set of data requested in a data share request, wherein the analysis silos correspond to organizational roles for the plurality of risk factors for the set of data, and wherein the one or more answers are associated with a requestor device requesting to share the set of data with a third party;
dynamically assessing the plurality of risk factors associated with the data share request, wherein dynamically assessing includes using a workflow with dynamic form logic, wherein the dynamic form logic selects additional questions for presentation to the requestor by way of the unified electronic form and in response to the one or more answers, wherein the plurality of risk factors correspond to a plurality of risk types associated with the set of data, wherein risk factors are associated with validation endpoints, and wherein the validation endpoints are associated with the analysis silos;
determining a first score for a first silo associated with the one or more answers from the unified electronic form based on the plurality of risk factors and the workflow, wherein the first score is associated with a first risk type;
determining a second score for a second silo associated with the one or more answers from the unified electronic form based on the plurality of risk factors and the workflow, wherein the second score is associated with a second risk type;
determining that the first score and the second score exceed a corresponding threshold associated with the workflow, wherein the first risk type and the second risk type correspond to two or more different validation endpoints of the workflow; and
escalating the data share request based on a routing associated with the workflow and a determination that the first score and the second score exceed the corresponding threshold.

12. The system of claim 11 , wherein the processor assesses the plurality of risk factors by:
presenting a series of questions regarding the plurality of risk factors, wherein the questions are presented within the unified electronic form, and wherein assessing the plurality of risk factors is based on the one or more answers to the series of questions.

13. The system of claim 12 , wherein the series of question is presented in a sequence in accordance with form logic, and wherein one or more subsequent questions are presented in real-time based on an answer to a previous question.

14. The sy

Assignees

• Synchrony Bank

Inventors

• Pelta Murray
• Marks Rachel
• Miller Sven
• Nowak Annmarie
• Jurchak Joseph
• Mccarthy James
• Schultz Christine
• Heller Justin

Classifications

• G06Q10/0635 Primary

  Risk analysis of enterprise or organisation activities · CPC title

• G06F40/174 Primary

  Form filling; Merging · CPC title