Retrieving hidden digital identifier

Patent metadata

Field	Value
Publication number	US-12339996-B2
Application number	US-202318094874-A
Country	US
Kind code	B2
Filing date	Jan 9, 2023
Priority date	Nov 2, 2018
Publication date	Jun 24, 2025
Grant date	Jun 24, 2025

Abstract

A method of providing access to securely held data is provided. A user interacts with the service provider to obtain access to a service by using a device to provide a digital identifier to the service provider, without the digital identifier being made known to the user. At a later date the user wishes to retrieve securely stored data relating to their use of the service. However, because the user does not know the digital identifier, they are unable to identify themselves to the service provider using the digital identifier. The present disclosure provides a secure method for exchanging private identifiers, which allows the user to identify themselves to the service provider in order to gain access to securely stored data relating to the user's previous use of the service. The user can do this using the device on which the digital identifier is stored, or another device.

First claim

What is claimed is:

1. A computer implemented method of providing access to securely stored data, the method comprising:
receiving, at a server, from a communications device, a list request for a list of services provided to a user by a service provider, said list request indicating user details, which are available to the user, but which were not indicated in service requests for the services, the user details including an account number of an account associated with a digital identifier, the account number different than the digital identifier;
generating, by the server, a special personal identifier number (sPIN), the sPIN indicating the user details, the sPIN different than the account number and the digital identifier;
sending, by the server, an identifier request for the digital identifier to a network processor, the identifier request including the sPIN;
receiving, at the server, from the network processor, a response to the identifier request for the digital identifier, said response including the digital identifier;
responsive thereto, obtaining, by the server, from an interactions database, multiple records associated with the services, a record of each of the services associated with the digital identifier; and
providing, by the server, to the communications device, the record of each of the services associated with the digital identifier, in response to the list request.

2. The method of claim 1 , wherein the communications device includes a user device; and
wherein the services include a transit service.

3. The method of claim 2 , wherein the digital identifier is stored in a secure element (SE) of the user device; and
wherein the digital identifier is a payment token.

4. The method of claim 1 , further comprising securely storing, by the server, the multiple records in the interaction database in association with the digital identifier.

5. The method of claim 1 , wherein the sPIN includes a format consistent with that of a primary account number (PAN).

6. The method of claim 1 , wherein the user details further include a sort code of the account associated with the digital identifier, the sort code indicative of at least an issuer of the account associated with the digital identifier.

7. The method of claim 1 , wherein the response, from the network processor, includes the sPIN.

8. The method of claim 1 , wherein the sPIN includes a flag, which indicates to the network processor that the sPIN indicates the user details; and
wherein the flag includes a single digit.

9. The method of claim 8 , wherein:
the sPIN includes a format consistent with that of a primary account number (PAN) for the account associated with the digital identifier;
the user details indicate one or both of the primary account number and a sort code of the account;
a first six digits of the sPIN indicate an issuer of the account and a first two digits of the sort code;
one of the remaining digits of the sPIN is the flag;
eight of the remaining digits of the sPIN indicate an account number specific to the account; and
four of the remaining digits of the sPIN indicate a last four digits of the sort code.

10. The method of claim 1 , wherein the sPIN includes a flag code corresponding to a code stored by the network processor and/or an issuer of the account associated with the digital identifier.

11. The method of claim 10 , wherein the sPIN consists of nineteen digits.

12. The method of claim 10 , wherein:
the sPIN is in a format corresponding to that of a primary account number (PAN) for the account associated with the digital identifier;
the user details indicate a sort code of the account;
a first six digits of the sPIN are the flag code, and identify an issuer of the account;
one of the remaining digits of the sPIN indicates a first two digits of the sort code;
eight of the remaining digits of the sPIN indicate an account number of the account, which is included in the PAN; and
four of the remaining digits of the sPIN include a last four digits of the sort code.

13. The method of claim 10 , wherein:
the sPIN is in a format corresponding to that of a primary account number (PAN) for the account associated with the digital identifier;
the user details indicate a sort code of the account;
a first six digits of the sPIN are the flag code, and identify an issuer of the account;
a final digit of the flag code indicates a digit of the sort code;
five of the remaining digits of the sPIN indicate a remainder of the sort code; and
eight of the remaining digits of the sPIN include an account number of the account, which is included in the PAN.

14. A server, associated with a service provider, for use in providing access to securely stored data, the server comprising at least one computing device configured to:
receive, from a communications device, a list request for a list of services provided to a user by a service provider, said list request indicating user details, which are available to the user, but which were not indicated in service requests for the services, the user details including an account number of an account associated with a digital identifier, the account number different than the digital identifier;
generate a special personal identifier number (sPIN), the sPIN indicating the user details, the sPIN different than the account number and the digital identifier;
send an identifier request for the digital identifier to a network processor, the identifier request including the sPIN;
receive, from the network processor, a response to the identifier request for the digital identifier, said response including the sPIN and the digital identifier;
responsive thereto, obtain, from an interactions database, multiple records associated with the services, a record of each of the services associated with the digital identifier; and
provide, to the communications device, the record of each of the services associated with the digital identifier, in response to the list request.

15. The server of claim 14 , wherein the services include a transit service; and
wherein the communications device includes the digital identifier in a secure element (SE) of the communications device.

16. The server of claim 15 , wherein the digital identifier is a payment token.

17. The server of claim 14 , wherein the sPIN includes a flag, which indicates to the network processor that the sPIN indicates the user details; and
wherein the flag includes a single digit.

18. The server of claim 17 , wherein:
the sPIN includes a format consistent with that of a primary account number (PAN) for the account associated with the digital identifier;
the user details indicate one or both of the primary account number and a sort code of the account;
a first six digits of the sPIN indicating an issuer of the account and a first two digits of the sort code;
one of the remaining digits of the sPIN is the flag;
eight of the remaining digits of the sPIN indicate an account number specific to the account; and
four of the remaining digits of the sPIN indicate a last four digits of the sort code.

19. A non-transitory computer-readable storage medium comprising instructions for providing access to securely stored data, which, when executed by a processor, cause the processor to:
receive, from a communications device, a list request for a list of services provided to a user by a service provider, said list request indicating user details, which are available to the user, but which were not indicated in service requests for the services, the use

Assignees

• Mastercard International Inc

Inventors

• Noe James
• Tierney John

Classifications

• G06Q20/342

  Cards defining paid or billed services or quantities · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3674

  involving authentication · CPC title

• G06Q20/3672

  initialising or reloading thereof · CPC title

• G06F21/6272

  by registering files or documents with a third party · CPC title