Network data management and data security

Patent metadata

Field	Value
Publication number	US-12443948-B2
Application number	US-202418627857-A
Country	US
Kind code	B2
Filing date	Apr 5, 2024
Priority date	Apr 1, 2020
Publication date	Oct 14, 2025
Grant date	Oct 14, 2025

Abstract

Systems, devices, methods, instructions, and other implementations are described for network data management. One embodiment involves request data received at a device associated with a digital lockbox, where the request data includes identifying information for an originating device associated with a location and is associated with a user device. A unique token is generated with the identifying information. The unique token can be used to tokenize a network link to create a secure one-time link. The system transmits the one-time link, which can then be used to facilitate secure communications between a computing system associated with the originating device and the user device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, at a server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and a network location, wherein the one-time link is tokenized to prevent sharing of the one-time link, wherein the one-time link uses a token;
transmitting the one-time link;
establishing, at the network location using the server system, a secure channel associated with the one-time link;
receiving application data in response to the one-time link;
generating decision data in response to receiving the application data;
transmitting the decision data;
using the token; and
preventing an additional use of the token subsequent to the use of the token.

2. The computer-implemented method of claim 1 , wherein the request data comprises identifying information for the originating device.

3. The computer-implemented method of claim 1 , wherein generating the one-time link comprises applying a time limit to the one-time link.

4. The computer-implemented method of claim 1 , wherein the request data further comprises location data associated with the request data and wherein establishing the secure channel includes performing a security check associated with the location data.

5. The computer-implemented method of claim 1 , further comprising:
receiving, at the network location using the server system, a request for sensitive user data, wherein the sensitive user data is stored in a digital lockbox of the server system and is associated with the network location;
transmitting the sensitive user data using the secure channel; and
deleting the sensitive user data after transmitting the sensitive user data using the secure channel.

6. The computer-implemented method of claim 5 , further comprising facilitating transmission of offer data using the secure channel, the personal identifying information, and the sensitive user data.

7. A server system, comprising:
memory; and
one or more processors coupled to the memory, the one or more processors configured for operations including:
receiving, at the server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and a network location, wherein the one-time link is tokenized to prevent sharing of the one-time link, wherein the one-time link uses a token;
transmitting the one-time link;
establishing, at the network location using the server system, a secure channel associated with the one-time link;
receiving application data in response to the one-time link;
generating decision data in response to receiving the application data;
transmitting the decision data;
using the token; and
preventing an additional use of the token subsequent to the use of the token.

8. The server system of claim 7 , wherein the request data comprises identifying information for the originating device.

9. The server system of claim 7 , wherein generating the one-time link comprises applying a time limit to the one-time link.

10. The server system of claim 7 , wherein the request data further comprises location data associated with the request data and wherein establishing the secure channel includes performing a security check associated with the location data.

11. The server system of claim 7 , wherein the one or more processors are configured for additional operations including:
receiving, at the network location using the server system, a request for sensitive user data, wherein the sensitive user data is stored in a digital lockbox of the server system and is associated with the network location;
transmitting the sensitive user data using the secure channel; and
deleting the sensitive user data after transmitting the sensitive user data using the secure channel.

12. A computer-readable storage medium comprising instructions that, when executed by one or more processors of a server system, cause the server system to perform operations including:
receiving, at the server system, request data, wherein the request data includes personal identifying information for an originating device, and wherein the request data is further associated with a user device;
generating a one-time link using the personal identifying information and a network location, wherein the one-time link is tokenized to prevent sharing of the one-time link;
transmitting the one-time link, wherein the one-time link uses a token;
establishing, at the network location using the server system, a secure channel associated with the one-time link;
receiving application data in response to the one-time link;
generating decision data in response to receiving the application data;
transmitting the decision data;
using the token; and
preventing an additional use of the token subsequent to the use of the token.

13. The computer-readable storage medium of claim 12 , wherein the request data comprises identifying information for the originating device.

14. The computer-readable storage medium of claim 12 , wherein generating the one-time link comprises applying a time limit to the one-time link.

15. The computer-readable storage medium of claim 12 , wherein the request data further comprises location data associated with the request data and wherein establishing the secure channel includes performing a security check associated with the location data.

16. The computer-readable storage medium of claim 12 , wherein when executed by one or more processors of the server system, the instructions cause the server system to perform operations including:
receiving, at the network location using the server system, a request for sensitive user data, wherein the sensitive user data is stored in a digital lockbox of the server system and is associated with the network location;
transmitting the sensitive user data using the secure channel; and
deleting the sensitive user data after transmitting the sensitive user data using the secure channel.

17. The computer-readable storage medium of claim 12 , wherein the request data further comprises location data associated with the request data and wherein establishing the secure channel includes performing a security check associated with the location data.

Assignees

• Synchrony Bank

Inventors

• Young Taylor
• Otten Chris

Classifications

• G06K7/1417

  2D bar codes · CPC title

• H04W12/65

  Environment-dependent, e.g. using captured environmental data · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• G06F16/955

  using information identifiers, e.g. uniform resource locators [URL] · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title