Methods and systems for leveraging existing user data to verify user credentials
AssigneeCapital One Services, LLC
InventorsYa Liu, Matthew Carson
Life of this patent
Estimating the term…
Abstract
Methods, systems, and devices for leveraging data already collected on a user in a secure and private manner, in particular to verify user credentials for third parties. The methods, systems, and devices innovate beyond traditional security and privacy platforms in computer systems by processing the data to create a useable metric for the purposes of the third parties, in which the useable metric preserves the security and privacy of the underlying data.
Claims20
A system for protecting personal data while verifying user credentials, the system comprising:
- a database configured to store user data for a user;
- and
- control circuitry configured to:
- receive, from a remote server, a verification request for credentials of the user and user-provided data corresponding to the verification request;
- determine whether the user-provided data includes a category of required data for the verification request based on a type of the verification request, an identity of a requestor of the verification request, and a verification request purpose of the verification request;
- in response to determining that the user-provided data includes the category:
- verify the user-provided data in the category using the stored user data;
- in response to verifying the user-provided data in the category, select a default algorithm for responding to the verification request, wherein the default algorithm is selected by the requestor;
- generate an assurance level of the credentials of the user based on the default algorithm;
- in response to determining that the user-provided data does not include the category:
- determine whether the stored user data includes the category;
- determine whether criteria associated with the stored user data in the category is approved by the user for use in responding to the verification request to protect the stored user data in response to determining that the stored user data includes the category;
- generate the assurance level of the credentials of the user in response to determining that the criteria is approved by the user for use in responding to the verification request to protect the stored user data;
- and
- transmitting the assurance level to the remote server.
A method for protecting personal data while verifying user credentials, the method comprising:
- receiving, from a remote server, a verification request for credentials of a user;
- determining whether stored user data includes a category of required data for the verification request based on a type of the verification request, an identity of a requestor of the verification request, and a verification request purpose of the verification request;
- in response to determining that the stored user data includes the category, determining whether criteria associated with the stored user data in the category is approved by the user for use in responding to the verification request to protect the stored user data;
- in response to determining that the criteria is approved by the user for use in responding to the verification request to protect the stored user data, generating an assurance level of the credentials of the user;
- and
- transmitting the assurance level to the remote server.
A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors, cause operations comprising:
- receiving a verification request for credentials of a user;
- determining whether stored user data includes a category of required data for the verification request based on a type of the verification request, an identity of a requestor of the verification request, and a verification request purpose of the verification request;
- in response to determining that the stored user data includes the category, determining whether criteria associated with the stored user data in the category is approved by the user for use in responding to the verification request to protect the stored user data;
- in response to determining that the criteria is approved by the user for use in responding to the verification request to protect the stored user data, generating an assurance level of the credentials of the user;
- and
- transmitting the assurance level to the requestor associated with the verification request.
Dependencies are inferred from the claim text.