US 11,232,496 B2Granted

System and method for providing limited access to data

AssigneeCapital One Services, LLC

InventorJeffrey Michael Chapman

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method for providing access to data of a first party including receiving information for identifying the first party, authenticating the first party using the received information for identifying the first party and generating a first read-only personal identification number (PIN). The first read-only PIN is associated with a first set of access rights for the data of the first party and provided to a second party. The first read-only PIN is stored with the first set of access rights in a computer database. A third party receives the first read-only PIN from the second party, authenticates the received first read-only PIN using the stored first read-only PIN and provides the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

Claims20

Dependent claims

A system for providing access to data of a first party comprising:

one or more processors;
and
memory, including a database that stores a plurality of tokens, a plurality of access rights, a plurality of party identifiers, and computer-executable instructions that, when executed, cause the one or more processors to:
receive a first party identifier from a first party device;
authenticate, using the first party identifier, the first party device;
receive a request for a token from the first party device;
generate, using a random, or pseudo-random, number generator, the token;
receive a second party identifier from the first party device;
associate the token with a second party identifier and a first set of limited access rights to access first party data;
store, in the database, the token;
send the token to a second party device associated with the second party identifier;
receive an attempted token from the second party device;
compare the attempted token to the token stored in the database to authenticate the attempted token;
determine that the attempted token has exceeded a predetermined number of failed authentication attempts;
cancel the attempted token to prevent access to the first party data;
receive a request for a new token from the first party device;
generate the new token;
associate the new token with the second party identifier and the first set of limited access rights;
store the new token with the first set of limited access rights in the database;
and
send the new token to the second party device.

18 more elements

A method for providing access to first party data comprising:

receiving a first party identifier from a first party device;
authenticating, with one or more processors, the first party device using the first party identifier;
receiving a request for a token from the first party device;
generating, using a random number generator, the token;
receiving a second party identifier from the first party device;
associating the token with the second party identifier and a first set of limited access rights to access first party data;
storing, in a database, the token;
sending the token to a second party device associated with the second party identifier;
receiving an attempted token from the second party device;
comparing the attempted token with the token stored in the database to authenticate the attempted token;
determining that the attempted token has exceeded a predetermined number of successful authentication attempts;
cancelling the attempted token to prevent access to the first party data;
receiving a request for a new token from the first party device;
generating the new token;
associating the new token with a second set of limited access rights;
storing the new token with the second set of limited access rights in the database;
and
providing the new token to the second party device.

15 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/568,991Filed 12 Sep 2019 · continuation
Priority: 12 May 2010
Published: US 2020/0007526 A12 Jan 2020
Granted: 25 Jan 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06Q 30/06
Commerce: buying, selling or leasing transactions
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G07F 7/1025
Together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric…
H04L 63/083
For authentication of entities: using passwords

Family

Application12/778,380Parent of this continuation · filed 12 May 2010
Application15/226,042Parent of this continuation · filed 2 Aug 2016
US 9,406,186 B2Parent of this continuation · filed 2 Aug 2016
Application15/710,978Parent of this continuation · filed 21 Sep 2017
US 9,800,572 B2Parent of this continuation · filed 24 Oct 2017
US 2020/0007526 A1Pre-grant publication · published 2 Jan 2020
US 10,454,923 B2Parent of this continuation
US 2011/0282678 A1Published application
US 2016/0344722 A1Published application
US 2018/0013749 A1Published application
US 11,232,496 B2This patent

From the US filing history. Foreign family members aren’t listed.