Back to results
US 11,641,357 B1Granted
Systems and methods for managing tokens and filtering data to control data access
AssigneeAkoya LLC
InventorsDenis Babani, Asanka Dissanayake, Jeffrey Kukesh, Anil Mahalaha, Stuart Rubinstein
Life of this patent
Estimating the term…
Abstract
Systems and methods are described for receiving a request from a data recipient to access information from a data provider associated with a user, wherein the request comprises a data recipient token. The request is validated and in response to validating the request, a secondary token is transmitted to the data provider. The information is received from the data provider and a package of authorized information is generated based on the information received from the data provider. The package of authorized information is transmitted to the data recipient.
Claims19
A method comprising:
- receiving, at an intermediary entity, a request from a data recipient to access information from a data provider associated with a user, wherein the request comprises a data recipient token;
- validating, by the intermediary entity, the request;
- in response to validating the request, transmitting, by the intermediary entity, a secondary token to the data provider;
- receiving, at the intermediary entity and via a network, the information from the data provider;
- in response to receiving the information at the intermediary entity and via the network, transferring the received information to a temporary buffer memory at the intermediary entity;
- determining a data directive based on:
- a global data directive associated with the data provider that is applicable to any data recipient that requests information from the data provider via the intermediary entity;
- and
- a data recipient data directive that is specific to the data recipient or a user selection indicating information that is permitted to be shared with the data recipient;
- generating, by the intermediary entity, a package of authorized information from the information by removing, from the temporary buffer memory at the intermediary entity, information that is not permitted to be shared with the data recipient, wherein the removing is performed by the intermediary entity based on the determined data directive;
- and
- transmitting, by the intermediary entity, the package of authorized information to the data recipient.
9 more elements
A system comprising:
- memory;
- processing circuitry configured to:
- receive, at an intermediary entity, a request from a data recipient to access information from a data provider associated with a user, wherein the request comprises a data recipient token;
- validate, by the intermediary entity, the request;
- in response to validating the request, transmit at the intermediary entity, a secondary token to the data provider, wherein the secondary token is stored in the memory;
- receive, at the intermediary entity and via a network, the information from the data provider;
- in response to receiving the information at the intermediary entity and via the network, transfer the received information to a temporary buffer memory at the intermediary entity;
- determine a data directive based on:
- a global data directive associated with the data provider that is applicable to any data recipient that requests information from the data provider via the intermediary entity;
- and
- a data recipient data directive that is specific to the data recipient or a user selection indicating information that is permitted to be shared with the data recipient;
- generate, by the intermediary entity, a package of authorized information from the information by removing, from the temporary buffer memory at the intermediary entity, information that is not permitted to be shared with the data recipient, wherein the removing is performed by the intermediary entity based on the determined data directive;
- and
- transmit, by the intermediary entity, the package of authorized information to the data recipient.
11 more elements
A non-transitory computer-readable medium having non-transitory computer-readable instructions encoded thereon that, when executed by a processor, causes the processor to:
- receive, at an intermediary entity, a request from a data recipient to access information from a data provider associated with a user, wherein the request comprises a data recipient token;
- validate, by the intermediary entity, the request;
- in response to validating the request, transmit, by the intermediary entity, a secondary token to the data provider;
- receive, at the intermediary entity and via a network, the information from the data provider;
- in response to receiving the information at the intermediary entity and via the network, transfer the received information to a temporary buffer memory at the intermediary entity;
- determine a data directive based on:
- a global data directive associated with the data provider that is applicable to any data recipient that requests information from the data provider via the intermediary entity;
- and
- a data recipient data directive that is specific to the data recipient or a user selection indicating information that is permitted to be shared with the data recipient;
- generate, by the intermediary entity, a package of authorized information from the information by removing, from the temporary buffer memory at the intermediary entity, information that is not permitted to be shared with the data recipient, wherein the removing is performed by the intermediary entity based on the determined data directive;
- and
- transmit, by the intermediary entity, the package of authorized information to the data recipient.
9 more elements
Dependencies are inferred from the claim text.