Item-access-based activation of an item set for an item-restricted token associated with a primary token

Patent metadata

Field	Value
Publication number	US-2025343691-A1
Application number	US-202519267473-A
Country	US
Kind code	A1
Filing date	Jul 11, 2025
Priority date	Jul 5, 2022
Publication date	Nov 6, 2025
Grant date	—

Abstract

In some embodiments, an item-restricted access token may be bound to one or more items. In some embodiments, a first item that is accessible via a first website accessed by a user may be detected. Based on the detection and an authentication of a user, an item-restricted access token may be activated for accessing an item that corresponds to the first item. After the activation of the item-restricted token, a request may be obtained for an action related to a candidate item. The action related to the candidate item may be validated based on the item-restricted access token, where the validation indicates that the action related to the candidate item is valid based on a determination that the candidate item corresponds to the first item.

First claim

What is claimed is:

1 . A token generation and authentication system for facilitating item-related network operations across different third-party entity systems using item-restricted access tokens associated with one or more primary access tokens of a user account, the system comprising:
one or more hardware processors and non-transitory computer readable media comprising instructions that, when executed by the one or more hardware processors, cause operations comprising:
in response to detecting a first item accessible via a first website associated with a first third-party entity by a first user, determining a plurality of item sets, wherein each item set of the plurality of item sets corresponds to the first item;
generating, based on authentication of the first user and the detection of the first item, a notification to be presented on a user device associated with the first user, the notification (i) indicating activation of an item-restricted access token, for a second user that is different than the first user, that is linked to a primary access token of an account of the first user and (ii) requesting a user selection of a first item set of the plurality of item sets to which the item-restricted access token is to be bound;
after the activation of the item-restricted access token and receiving the user selection of the first item set by the first user, binding the first item set to the item-restricted access token, wherein the item-restricted access token is restricted to network operations related to items that correspond to items of the first item set;
after the binding of the item-restricted access token, obtaining a request for a network operation related a candidate item accessible via a second website by the second user that is (i) not affiliated with the first website and (ii) associated with a second third-party entity different from the first third-party entity, the request indicating use of the item-restricted access token for accessing the candidate item; and
performing validation of the network operation related to the candidate item such that the validation indicates that the network operation related to the candidate item is valid in response to a determination that the candidate item corresponds to a respective item of the first item set.

2 . The system of claim 1 , the operations further comprising:
obtaining an access timestamp corresponding to access by the second user of the second website associated with the second third-party entity and an action timestamp corresponding to the network operation related to the candidate item, wherein the validation validates the network operation related to the candidate item further in response to (i) the candidate item matching the respective item of the first item set and (ii) the action timestamp matching the access timestamp.

3 . A method comprising:
in response to detecting a first item accessible via a first website accessed by a first user, determining a plurality of item sets, wherein each item set of the plurality of item sets corresponds to the first item, and wherein the first item is detected; generating, based on authentication of the first user and the detection of the first item, a notification to be presented on a user device associated with the first user, the notification (i) indicating activation of an item-restricted token, for a second user that is different than the first user, that is linked to a primary token of the first user and (ii) requesting a user-selection of a first item set of the plurality of item sets to which the item-restricted token is to be bound; after the activation of the item-restricted token and receiving the user-selection of the first item set, binding the first item set to the item-restricted token, wherein the user-selection of the first item set is received; after the binding of the item-restricted token, obtaining a request for an action related to a candidate item via the second user, the request indicating use of the item-restricted token for accessing the candidate item; and validating the action based on the candidate item corresponding to a respective item of the first item set.

4 . The method of claim 3 , wherein the plurality of item sets comprises the first item set and a second item set, the first item set comprising a first identifier associated with the first item and one or more other identifiers associated with other items accessible via the first website, the second item set comprising the first identifier without the one or more other identifiers.

5 . The method of claim 3 , further comprising:
obtaining an access timestamp corresponding to access by the second user of a second website associated with a second entity and an action timestamp corresponding to the action related to the candidate item, wherein the validation validates the action related to the candidate item further based on (i) the candidate item matching the respective item of the first item set and (ii) the action timestamp matching the access timestamp.

6 . The method of claim 3 , further comprising:
after an activation of the item-restricted token, detecting candidate items accessible via a second website associated with a second entity accessed by the second user; and storing, based on the detection of the candidate items, candidate item information in association with the second user in a database, the candidate item information indicating (i) the candidate item and (ii) an access timestamp corresponding to the access of the second website by the second user, wherein the validation validates the action related to the candidate item further based on (i) the candidate item matching the first item of the item-restricted token and (ii) an action timestamp corresponding to the action matching the access timestamp.

7 . The method of claim 3 , further comprising:
obtaining a first access timestamp corresponding to access of the first website by the first user, a second access timestamp corresponding to access by the second user of a second website associated with a second entity, and an action timestamp corresponding to the action; wherein the validation validates the action related to the candidate item further based on (i) the candidate item matching the respective item of the first item set, (ii) the first access timestamp being within a time threshold of the second access timestamp, and (iii) the action timestamp matching the second access timestamp.

8 . The method of claim 3 , wherein the validation validates the action related to the candidate item further based on a first item identifier of the candidate item being the same as a second item identifier of the respective item of the first item set.

9 . The method of claim 3 , wherein the validation validates the action related to the candidate item further based on the candidate item matching a version of the respective item of the first item set.

10 . The method of claim 3 , further comprising:
providing training data to a prediction model to train the prediction model, wherein the training data comprises item information of items; obtaining, based on the candidate item, candidate item-related data; obtaining item-related data corresponding to the first item set; providing (i) the candidate item-related data and (ii) the item-related data corresponding to the first item as input to the prediction model to generate an output indicating whether the candidate item corresponds to the respective item of the first item set; and in response to the output indicating that the candidate item corresponds to the respective item of the first item set, validating the action.

11 . The method of claim 10 , wherein the ite

Assignees

• Capital One Services Llc

Inventors

• Sneider Amanda
• Fenichel Allison
• Gupta Varun

Classifications

• G06F21/335

  for accessing specific resources, e.g. using Kerberos tickets · CPC title

• G06F21/1014

  to tokens · CPC title

• G06F21/1015

  to users · CPC title

• G06F21/101

  by binding digital rights to specific entities · CPC title

• H04L12/417

  with deterministic access, e.g. token passing · CPC title