System, method and architecture for secure sharing of customer intelligence

Patent metadata

Field	Value
Publication number	US-2023057802-A1
Application number	US-202217980781-A
Country	US
Kind code	A1
Filing date	Nov 4, 2022
Priority date	Oct 7, 2018
Publication date	Feb 23, 2023
Grant date	—

Abstract

A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and/or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

First claim

What is claimed is:

1 . A computer-implemented method, comprising:
authorizing, using at least one processor, at least one party for access to a client intelligence data, the client intelligence data being indicative of at least one internet activity by a client and being associated with at least one client identifier; receiving, using the at least one processor, a request, from the at least one authorized party, to access the client intelligence data, the request including at least one key, the at least one key is generated for providing access to the client intelligence data and provided to the at least one authorized party; generating, using the at least one processor, a decoding associated with the client intelligence data, and transmitting the decoding to the at least one authorized party; and providing, using the at least one processor, access to the client intelligence data to the at least one authorized party based on the decoding, wherein the provided client intelligence data has the at least one client identifier removed.

2 . The method according to claim 1 , wherein the at least one key is a deidentified key having the at least one client identifier removed from the at least one key.

3 . The method according to claim 1 , wherein the at least one key is generated using at least one of the following: random number generator, a hash function, and any combination thereof.

4 . The method according to claim 1 , wherein the client intelligence data is uninterpretable to one or more parties not authorized for access to the client intelligence data.

5 . The method according to claim 4 , wherein the at least one authorized party, based on the authorizing, is configured to interpret, using the decoding, the client intelligence data.

6 . The method according to claim 1 , wherein the at least one key, the client intelligence data and a mapping between the least one key and the client intelligence data are stored in at least one key table.

7 . The method according to claim 1 , wherein the at least one internet activity includes at least one website visited by the client.

8 . The method according to claim 1 , wherein the providing including pushing the provided client intelligence data to the at least one authorized party.

9 . The method according to claim 1 , wherein the at least one key is generated by transforming, using the at least one processor, the at least one client identifier.

10 . The method according to claim 9 , wherein the provided client intelligence data includes an obfuscated client intelligence data having at least one obfuscated portion.

11 . The method according to claim 10 , wherein the obfuscated client intelligence data is combined with the at least one key and provided to the at least one authorized party.

12 . The method according to claim 11 , wherein the providing includes
generating, using the at least one processor, a cookie including a combination of the at least one key and the obfuscated client intelligence data; and providing, using the at least one processor, the cookie to the at least one authorized party.

13 . A system, comprising:
at least one processor; and at least one non-transitory storage media storing instructions, that when executed by the at least one processor, cause the at least one processor to perform operations including
authorizing at least one party for access to a client intelligence data, the client intelligence data being indicative of at least one internet activity by a client and being associated with at least one client identifier;
receiving a request, from the at least one authorized party, to access the client intelligence data, the request including at least one key, the at least one key is generated by transforming the at least one client identifier and generated for providing access to the client intelligence data and provided to the at least one authorized party;
generating a decoding associated with the client intelligence data, and transmitting the decoding to the at least one authorized party; and
pushing the client intelligence data to the at least one authorized party, wherein the at least one authorized party is configured to use the decoding to access the pushed client intelligence data, wherein the pushed client intelligence data has the at least one client identifier removed.

14 . The system according to claim 13 , wherein the at least one key is a deidentified key having the at least one client identifier removed from the at least one key;
the at least one key is generated using at least one of the following: random number generator, a hash function, and any combination thereof.

15 . The system according to claim 13 , wherein the client intelligence data is uninterpretable to one or more parties not authorized for access to the client intelligence data.

16 . The system according to claim 13 , wherein the at least one authorized party, based on the authorizing, is configured to interpret, using the decoding, the client intelligence data.

17 . The system according to claim 13 , wherein the at least one key, the client intelligence data and a mapping between the least one key and the client intelligence data are stored in at least one key table.

18 . The system according to claim 13 , wherein the at least one internet activity includes at least one website visited by the client.

19 . The system according to claim 13 , wherein the pushed client intelligence data includes an obfuscated client intelligence data having at least one obfuscated portion, the obfuscated client intelligence data is combined with the at least one key and pushed to the at least one authorized party.

20 . A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising:
authorizing at least one party for access to a client intelligence data, the client intelligence data being indicative of at least one internet activity by a client and being associated with at least one client identifier; receiving a request, from the at least one authorized party, to access the client intelligence data, the request including at least one key, the at least one key is generated for providing access to the client intelligence data and provided to the at least one authorized party; generating a decoding associated with the client intelligence data, and transmitting the decoding to the at least one authorized party; and providing access to the client intelligence data to the at least one authorized party based on the decoding, wherein the provided client intelligence data has the at least one client identifier removed, wherein the providing includes generating a cookie including a combination of the at least one key and an obfuscated client intelligence data and providing the cookie to the at least one authorized party.

Assignees

• Capital One Services Llc

Inventors

• Yoches Jeremy
• Covalucci Christopher Vito
• Johnson Scott

Classifications

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L9/083 Primary

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L67/53

  using third party service providers · CPC title

• G06F16/903

  Querying (for retrieval from the web G06F16/953) · CPC title

• H04L63/0414

  during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication · CPC title