# US 12,002,056 B2 · Systems and methods for use in provisioning data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,002,056 B2
- Document ID: US12002056B2
- Status: Granted
- Kind: B2
- Application number: 17/067,273
- Filed: 2020-10-09
- Published: 2021-04-15
- Granted: 2024-06-04
- Earliest claimed: 2019-10-11
- Assignees: Mastercard International Incorporated
- Applicants: Mastercard International Incorporated
- Inventors: Charles Sangwon Lee
- Web page: https://patentgrep.com/patent/US12002056B2

## CPC

- G06Q 20/4097: {using mutual authentication between devices and transaction partners}
- H04L 67/306: User profiles
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR}
- G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit}
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/40155: {for triggering transactions}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/42: Confirmation, e.g. check or permission by the legal debtor of payment
- G06Q 20/425: {using two different networks, one for transaction and one for security confirmation}
- H04L 67/125: involving control of end-device applications over a network
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods are provided for provisioning data based on network messaging. One exemplary method includes passing, by a network computing device, a message to an institution where the message includes an account identifier for an account of a user and data of a first party. The data of the first party includes a code associated with a category of the first party and/or an identifier of the first party. The method also includes detecting, by a computing device, the message based on inclusion of the account identifier in the message and retrieving a control for the user based on the account identifier. The method then includes identifying, by the computing device, data for the user to be shared with the first party based on the data of the first party satisfying the control and sharing the identified data with the first party apart from the network computing device.

## Claims

### Claim 1

A computer-implemented method for provisioning data based on network messaging, the method comprising:
passing, by a payment network, an authorization message along a first communication path through payment rails of the payment network, from a first party, through a first institution, to a second institution, the authorization message including an account identifier for an account specific to a user, a transaction identifier for a transaction between the first party and the user, and data associated with the first party, the data associated with the first party including at least one of a code associated with a category of the first party and/or an identifier of the first party;
detecting, by a data platform computing device of the payment network, the account identifier in the authorization message;
retrieving, by the data platform computing device, at least one control associated with the user and included in memory of the data platform computing device, based on the account identifier;
identifying, by the data platform computing device, data from a user profile for the user to be shared with the first party based on the data associated with the first party satisfying the at least one control, the data from the user profile including personal identifying data for the user;
notifying, by the data platform computing device, via the first communication path through the payment rails of the payment network, the first party of the identified data to be shared and the transaction identifier from the authorization message;
receiving, by the data platform computing device, via the first communication path through the payment rails of the payment network, from the first party, an acknowledgement of the identified data to be shared, the acknowledgement including a confirmation to send the data to be shared; and
in response to the confirmation, sharing, by the data platform computing device, the identified data with the first party, along a second communication path, via an application programming interface (API) and apart from the first communication path through the payment rails of the payment network and apart from the first institution and the second institution.

### Claim 2 (depends on 1)

The computer-implement method of claim 1, wherein the authorization message is consistent with the ISO 8583 standard.

### Claim 3 (depends on 1)

The computer-implement method of claim 1, wherein the account identifier includes a primary account number (PAN) for the account specific to the user; and
wherein the account includes a payment account.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein the data associated with the first party includes the code associated with the category of the first party;
wherein the code associated with the category of the first party includes a merchant category code (MCC); and
wherein the at least one control includes a class of data to be shared based on the MCC of the first party.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein the identified data includes a set of data within the user profile and excludes a different set of data in the user profile.

### Claim 6 (depends on 1)

The computer-implemented method of claim 1, further comprising generating, by the data platform computing device, the user profile for the user.

### Claim 7

A system for provisioning data based on network messaging, the system comprising:
a payment network computing device; and
a data platform computing device coupled in communication with the payment network computing device;
wherein the payment network computing device is configured to:
receive an authorization message along a first communication path through payment rails of the payment network, from a first party, through a first one of multiple financial institutions, the authorization message including data associated with a first party, a primary account number (PAN) for a payment account associated with a user, and a transaction identifier for a transaction between the first party and the user; and
pass, along the communication path, the authorization to a second one of the financial institutions, which is associated with the payment account; and
wherein the data platform computing device is configured to:
detect the authorization message based on the authorization message including the PAN;
retrieve at least one control for data associated with the user, based on the PAN;
identify data from a user profile associated with the user to be shared with the first party based on the data associated with the first party satisfying the at least one control, the data from the user profile including personal identifying data for the user;
notify, via the first communication path through the payment rails of the payment network, the first party of the identified data to be shared and the transaction identifier;
receive, from the first party, via the first communication path through the payment rails of the payment network, an acknowledgement of the identified data to be shared, the acknowledgement including a confirmation to send the data to be shared; and
in response to the confirmation, share the identified data with the first party, along a second communication path, via an application programming interface (API) and apart from the first communication path through the payment rails of the payment network and apart from the first and second ones of the financial institutions.

### Claim 8 (depends on 7)

The system of claim 7, wherein the authorization message includes a ISO 8583 message; and
wherein the first one of the financial institutions includes an acquirer associated with the first party and the second one of the financial institutions includes an issuer of the payment account.

### Claim 9 (depends on 7)

The system of claim 7, wherein the identified data includes a set of data within the user profile and excludes a different set of data in the user profile.

### Claim 10 (depends on 9)

The system of claim 9, wherein the data platform computing device is further configured to generate the user profile for the user.

### Claim 11

A non-transitory computer-readable storage medium including computer-executable instructions for provisioning data based on network messaging, which, when executed by a processor of a payment network, cause the processor to:
detect an authorization message along a first communication path through payment rails of the payment network, from a first party, through a first financial institution, to a second financial institution, based on a primary account number (PAN) included in the authorization message, the authorization message including data associated with the first party, a transaction identifier for a transaction between the first party and a user, and the PAN associated with a payment account of the user;
retrieve at least one control for data associated the user based on the PAN;
identify data from a user profile associated with the user to be shared with the first party based on the data associated with the first party satisfying the at least one control, the data from the user profile including personal identifying data for the user; user;
notify, via the first communication path through the payment rails of the payment network, the first party of the identified data to be shared and the transaction identifier;
receive, from the first party, via the first communication path through the payment rails of the payment network, an acknowledgement of the identified data to be shared, the acknowledgement including a confirmation to send the data to be shared; and
in response to the confirmation, share the identified data with the first party along a second communication path, via an application programming interface (API) and apart from the first communication path, through the payment rails of the payment network, including the first financial institution.

### Claim 12 (depends on 11)

The non-transitory computer-readable storage medium of claim 11, wherein the authorization message includes a ISO 8583 message; and
wherein the first financial institution includes an acquirer associated with the first party, and wherein the second financial institution includes an issuer of the payment account.