Jailed environment restricting programmatic access to multi-tenant data

Patent metadata

Field	Value
Publication number	US-12417434-B2
Application number	US-202418595786-A
Country	US
Kind code	B2
Filing date	Mar 5, 2024
Priority date	May 23, 2019
Publication date	Sep 16, 2025
Grant date	Sep 16, 2025

Abstract

The system and methods described herein allow users to give their applicant information to at least one entity when seeking to submit an inquiry associated with an item, and have various lender microservices run in parallel, segregated by entity, in a jailed environment. The result of these microservices may be returned as a response to the inquiry, being determined autonomously for each respective entity based on one or more respective rule sets or executable logic for each respective entity. Payloads for multiple entities may be combined in a single output from the jailed environment due to outputs from the environment being encrypted in a universal format.

First claim

What is claimed is:

1. A method comprising:
identifying a self-contained network, wherein a plurality of entities, including both a first entity and second entity, manage their own separate accounts on the self-contained network, wherein each of the plurality of entities stores confidential information on the self-contained network accessible only to a respective entity through their own entity-specific key;
receiving a first rule from the first entity and a second rule from the second entity;
storing the first rule being encrypted with a first entity-specific key for the first entity and the second rule being encrypted with a second entity-specific key for the second entity in the self-contained network that restricts an entity from accessing any entity-specific rules that are not associated with the entity;
receiving, from a user device, an inquiry associated with a user;
requesting, for an item, an entity response to the inquiry for each of the first entity and the second entity;
decrypting, in response to the inquiry and within the the self-contained network, the first rule for the first entity via the first entity-specific key and the second rule for the second entity via the second entity-specific key;
generating, as the entity responses, a first response based on the decrypted first rule for the first entity and a second response based on the decrypted second rule for the second entity;
generating, within the the self-contained network, a universally encrypted entity-agnostic composite payload comprising the first response and the second response;
sending the universally encrypted entity-agnostic composite payload to the user device;
retrieving host and infrastructure metrics regarding a performance of one or more devices of the self-contained network, wherein the host and infrastructure metrics exclude the confidential information; and
providing a dashboard regarding a health of the self-contained network based on the host and infrastructure metrics.

2. The method of claim 1 , further comprising:
receiving, at a server, one or more rule sets or executable logic from each of at least one entity;
storing the one or more rule sets or executable logic in the self-contained network environment in the server, the one or more rule sets or executable logic being encrypted with an entity-specific key upon receipt of the one or more rule sets or executable logic for each such entity, or encrypted at a predetermined later time for each such entity, with the entity-specific key, wherein the one or more rule sets or executable logic for each such entity are accessible in the self-contained network environment by at least one entity-specific routing component dedicated for each such entity.

3. The method of claim 2 , wherein each entity corresponds to a lender; each entity-specific routing component corresponds to a lender-specific broker dedicated for a particular lender; each entity-specific key corresponds to a lender-specific key dedicated for a particular lender; the item is a loan provided by a lender; the requesting is a request for lender prequalification relating to an inquiry associated with the item; the inquiry to which the request relates is for applicant financing of a commodity with at least one lender; the one or more rule sets or executable logic for each entity comprise one or more rule sets or executable logic for prequalifying an applicant, which are stored inside of the self-contained network in a lender confidential data repository; and wherein to determine a respective response to the inquiry, the lender-specific broker for each respective lender applies the one or more rule sets or executable logic to applicant information which is submitted along with the inquiry to assess applicant prequalification for each lender of the at least one lender of the inquiry and product eligibility for an applicant in lending from the at least one lender to purchase a particular product, and to further, if the applicant is found to prequalify for a lender and the particular product is eligible under a product eligibility process for the lender, assess pricing information to determine terms for a loan offer.

4. The method of claim 3 , wherein each lender may access and manipulate or edit only their respective one or more rule sets or executable logic within the self-contained network, and not that of any other lender, for prequalifying an applicant through a lender portal application user interface, wherein once any editing by a lender of their respective one or more rule sets or executable logic takes place in the lender portal application user interface, a lender confidential data service is automatically called to make corresponding changes to rules or executable logic in the lender confidential data repository for that lender.

5. The method of claim 3 , further comprising:
logging details of the one or more rule sets or executable logic that are executed in an audit repository stored inside of the self-contained network.

6. The method of claim 3 , further comprising:
wherein the one or more rule sets or executable logic is applied to the applicant information to assess applicant prequalification or product eligibility for each lender of the at least one lender within the lender-specific broker corresponding to each said lender, within the self-contained network.

7. The method of claim 3 , further comprising:
wherein the one or more rule sets or executable logic is applied to the lender prequalification request and applicant information within the lender-specific broker to, at least for one lender, modify the applicant information and lender prequalification request to match required lender parameters for an application protocol interface of a lender-based loan origination system which is in communication with the lender-specific broker; and sending the lender prequalification request and applicant information to the lender-based loan origination system for the at least one lender having said lender-based loan origination system.

8. The method of claim 7 , further comprising:
assessing applicant prequalification for the at least one lender having said lender-based loan origination system; and
returning an output response to the lender-specific broker in the self-contained network.

9. The method of claim 8 , further comprising:
transforming the returned output response by the lender-specific broker from the parameters matching the application protocol interface of the lender-based loan origination system to a non-lender specific universal format used in the self-contained network; and
encrypting said returned output response in a universal non-lender specific format to be decrypted in a particular user session.

10. The method of claim 2 , wherein the one or more rule sets or executable logic may comprise at least one of boolean logic or machine-learning logic.

11. A system comprising:
a memory;
a server;
a processor coupled to said memory, the processor configured to:
identify a self-contained network, wherein a plurality of entities, including both a first entity and second entity, manage their own separate accounts on the self-contained network, wherein each of the plurality of entities stores confidential information on the self-contained network accessible only to a respective entity through their own entity-specific key;
receive a first rule from the first entity and a second rule from the second entity;
store the first rule being encrypted with a first entity-specific key for the first entity and the second rule being encrypted with a second entity-specific key for the second entity in the self-contained network that restricts an entity from accessing any entity-spe

Assignees

• Capital One Services Llc

Inventors

• Sundaram Dinesh
• Bajaj Raman
• Morel Jacques
• Yajnik Sanjiv
• Jones Trent
• Ilango Alan
• Creech Jacob
• Sarkar Avijit
• Vijayaraghavan Rajaboopathy
• Gupta Ishu
• Sickert Thomas

Classifications

• G06Q40/0305 Primary

  Platforms for credit or lending product research, comparison or matching · CPC title

• G06Q40/03

  Credit; Loans; Processing thereof · CPC title

• G06N3/048

  Activation functions · CPC title

• G06N5/01

  Dynamic search techniques; Heuristics; Dynamic trees; Branch-and-bound · CPC title

• G06N5/047

  Pattern matching networks; Rete networks · CPC title