Self-service lender portal

Patent metadata

Field	Value
Publication number	US-12321895-B2
Application number	US-202418588542-A
Country	US
Kind code	B2
Filing date	Feb 27, 2024
Priority date	May 23, 2019
Publication date	Jun 3, 2025
Grant date	Jun 3, 2025

Abstract

A self-service lender portal provides lenders with a suite of tools for interacting with a multi-lender architecture configured to provide loan applicants with automated pre-qualification and eligibility evaluation for multiple candidate lenders. The lender portal provides lenders with an interface for uploading rule sets defining lending and eligibility criteria, downloading operational data generated from processing loan applicant information, generating and managing security keys for encryption and decryption of sensitive data, and managing access policies for providing single sign-on by interfacing with the lender's own identity management systems.

First claim

What is claimed is:

1. A system for secure management of customer data, the system comprising:
memory; and
a processor coupled to the memory and configured to perform operations comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key;
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packets for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules; and
sending at least one of the first transaction information to the first entity to facilitate an audit of the first transaction information by the first entity, or the second transaction information to the second entity to facilitate an audit of the second transaction information by the second entity.

2. The system of claim 1 , wherein the operations further comprise:
receiving, from a user associated with the first transaction or the second transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

3. The system of claim 1 , wherein the sending the respective data packets comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and
sending the data stream to the server.

4. The system of claim 1 , wherein the operations further comprise:
sending an asymmetric encryption key and a data query to the server;
receiving, from the server, encrypted operational data corresponding to the data query,
wherein the encrypted operational data is encrypted using the asymmetric encryption key;
decrypting the encrypted operational data using an asymmetric decryption key corresponding to the asymmetric encryption key; and
displaying the decrypted operational data.

5. The system of claim 4 , wherein the asymmetric encryption key is a public key and the asymmetric decryption key is a private key.

6. The system of claim 4 , wherein the operations further comprise:
generating the asymmetric encryption key and the asymmetric decryption key using a public key infrastructure; or
generating the asymmetric encryption key and the asymmetric decryption key using an encryption service; or
importing the asymmetric encryption key and the asymmetric decryption key from a local storage.

7. The system of claim 1 , wherein the respective encrypted data key is encrypted using envelope encryption.

8. A method for secure management of customer data, the method comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key;
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packets for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules; and
sending at least one of the first transaction information to the first entity to facilitate an audit of the first transaction information by the first entity, or the second transaction information to the second entity to facilitate an audit of the second transaction information by the second entity.

9. The method of claim 8 , further comprising:
receiving, from a user associated with the first transaction or the second transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

10. The method of claim 8 , wherein the sending the respective data packets further comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and

sending the data stream to the server.

11. The method of claim 8 , further comprising:
sending an asymmetric encryption key and a data query to the server;
receiving from the server, encrypted operational data, corresponding to the data query,
wherein the encrypted operational data is encrypted using the asymmetric encryption key;
decrypting the encrypted operational data using an asymmetric decryption key corresponding to the asymmetric encryption key; and
displaying the decrypted operational data.

12. The method of claim 11 , wherein the asymmetric encryption key is a public key and the asymmetric decryption key is a private key.

13. The method of claim 11 , further comprising:
generating the asymmetric encryption key and the asymmetric decryption key using public key infrastructure; or
generating the asymmetric encryption key and the asymmetric decryption key using an encryption service; or
importing the asymmetric encryption key and the asymmetric decryption key from a local storage.

14. The method of claim 8 , wherein the respective encrypted data key is encrypted using envelope encryption.

15. A non-transitory computer-readable medium with instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:
encrypting respective sensitive data for a first and second entity into respective data packets;
sending, to a server, the respective data packets for the first and second entity comprising, a respective encrypted data key, and a respective decryption identifier that indicates at least one of a prefix or a suffix of the respective encrypted data key;
generating, based on the respective data packets for the first entity decrypted by a first microservice and the respective data packet for the second entity decrypted by a second microservice in parallel using the respective decryption identifiers within a jailed environment of the server, first and second transaction information that each facilitate a transaction using different rules; and
sending at least one of the first transaction information to the first entity to facilitate an audit of the first transaction information by the first entity, or the second transaction information to the second entity to facilitate an audit of the second transaction information by the second entity.

16. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
receiving, from a user associated with the first transaction or the second transaction, assets comprising at least one of images or documents; and
sending the assets to the server.

17. The non-transitory computer-readable medium of claim 15 , wherein the sending the respective data packets further comprises:
encrypting a data stream comprising the respective data packets based on a secure mode of a network communications protocol; and
sending the data stream to the server.

18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
sending an asymmetric encryption key and a d

Assignees

• Capital One Services Llc

Inventors

• Sundaram Dinesh
• Yajnik Sanjiv
• Bajaj Raman
• Morel Jacques
• Baird Alex
• Vijayaraghavan Rajaboopathy

Classifications

• G06Q40/0305 Primary

  Platforms for credit or lending product research, comparison or matching · CPC title

• G06Q40/03

  Credit; Loans; Processing thereof · CPC title

• G06N3/048

  Activation functions · CPC title

• G06N5/01

  Dynamic search techniques; Heuristics; Dynamic trees; Branch-and-bound · CPC title

• G06N5/047

  Pattern matching networks; Rete networks · CPC title