# US 12,192,187 B2 · Aggregating permissions across multiple platforms with co-signers > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,187 B2 - Document ID: US12192187B2 - Status: Granted - Kind: B2 - Application number: 17/661,839 - Filed: 2022-05-03 - Published: 2023-11-09 - Granted: 2025-01-07 - Earliest claimed: 2022-05-03 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Brad Norcross; Sandeep K. Vanka; Mitchell Mays; Roshni Rao; Susan Hannagan; Tahressa Moore; Bryan Parker; Camille Gaelle Gupta; Arielle Mcmahon; Rebecca Hummel; Jiaxin Guo; Mia Frederick; Alexis Pritchard; Srikanth Vadlapati - Web page: https://patentgrep.com/patent/US12192187B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/102: {Entity profiles} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system, process, and computer-readable medium for securely transferring user personal identification information (PII) across platforms, based on specific permissions, are described. One or more aspects provide greater control, to a user, of when that user's PII may be released from a secure storage in a first platform and securely provided to a second platform. The timing of those releases of the PII may be controlled by specific authorizations from the user via one or more processes. Also, in addition to improving the security associated with the PII transferred between platforms, one or more aspects improve users' experiences by permitting controlled reuse of users' PII to simplify how users provide their PII to separate processes being performed on separate platforms. ## Claims ### Claim 1 A computer-implemented method comprising: receiving, by a computing device and from a first user device, first personal identifiable information (PII) of a first user and a first authorization for a first permission; associating the first PII with a first identifier; enabling, by the computing device and for one or more third-party computing systems, access to a result based on at least part of the first PII and consistent with the first permission, wherein the result is associated with a second identifier; based on the result, sending, by the computing device and to the first user device, a request for a second user; receiving, by the computing device and from the first user device, contact information associated with the second user; sending, by the computing device and to a second user device, a request for second PII of a second user; receiving a request for a second permission of the first user from a first third-party computing system of the one or more third-party computing systems, wherein the first third-party computing system is associated with a third identifier; sending, to the first user device and to the second user device, an encoded link as part of a request for a second authorization for the second permission, wherein the encoded link comprises the first identifier, the second identifier, and the third identifier; receiving, via access to the encoded link and from the first user device, a first response to the request for the second authorization, wherein the first response comprises the second authorization, the first identifier, the second identifier, and the third identifier; receiving, via access to the encoded link and from the second user device, a second response to the request for the second authorization, wherein the second response comprises the second authorization, the first identifier, the second identifier, and the third identifier; and enabling, by the computing device and for a second third-party computing system, access to at least part of the first PII and the second PII to initiate a process consistent with the second permission and a third permission, wherein the access is via a secure channel. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, further comprising: encrypting the first PII responsive to the first authorization; storing the encrypted first PII associated with a first identifier, wherein the first identifier comprises a first user identifier; accessing, by the computing device and based on receiving the second authorization, the encrypted first PII; and decrypting the encrypted first PII, wherein accessing the encrypted first PII is further based on the first identifier, the second identifier, and the third identifier. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, further comprising: accessing, by the computing device, a second result from the process; encrypting the second result; and storing, associated with the first identifier and the second identifier, the encrypted second result. ### Claim 4 (depends on 2) The computer-implemented method of claim 2, wherein the enabling access to at least part of the decrypted first PII further comprises: enabling access to the first identifier, the second identifier, and the third identifier. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising: accessing, by the computing device, a second result from the process; and enabling access, by a third third-party computing system, to the second result. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein receiving the first response from the first user device further comprises receiving first user authentication information, and the method further comprising: authenticating, by the computing device and based on the received first user authentication information, the first user device, wherein the enabling access to the at least part of the first PII and the second PII is based on the authenticating the first user device. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein the enabling access to the result further comprises: enabling, by the computing device and for the one or more third-party computing systems, access to an immutable document comprising the first authorization for the first permission. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, further comprising: enabling, by the computing device and for the first third-party computing system, access to an immutable document comprising the second authorization for the second permission. ### Claim 9 An apparatus comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the apparatus to: receive, by a computing device and from a first user device, first personal identifiable information (PII) of a first user and a first authorization for a first permission; associate the first PII with a first identifier; enable, by the computing device and for one or more third-party computing systems, access to a result based on at least part of the first PII and consistent with the first permission, wherein the result is associated with a second identifier; based on the result, send, by the computing device and to the first user device, a request for a second user; receive, by the computing device and from the first user device, contact information associated with the second user; send, by the computing device and to a second user device, a request for second PII of a second user; receive a request for a second permission of the first user from a first third-party computing system of the one or more third-party computing systems, wherein the first third-party computing system is associated with a third identifier; send, to the first user device and to the second user device, an encoded link as part of a request for a second authorization for the second permission, wherein the encoded link comprises the first identifier, the second identifier, and the third identifier; receive, via access to the encoded link and from the first user device, a first response to the request for the second authorization, wherein the first response comprises the second authorization, the first identifier, the second identifier, and the third identifier; receive, via access to the encoded link and from the second user device, a second response to the request for the second authorization, wherein the second response comprises the second authorization, the first identifier, the second identifier, and the third identifier; and enable, by the computing device and for a second third-party computing system, access to at least part of the first PII and the second PII to initiate a process consistent with the second permission and a third permission, wherein the access is via a secure channel. ### Claim 10 (depends on 9) The apparatus of claim 9, wherein the instructions to access the first PII further cause the apparatus to: encrypt the first PII responsive to the first authorization; store, in a storage, the encrypted first PII associated with a first identifier, wherein the first identifier comprises a first user identifier; access, based on receiving the second authorization, the encrypted first PII; and decrypt the encrypted first PII, wherein the instructions to access the encrypted first PII are based on the first identifier, the second identifier, and the third identifier. ### Claim 11 (depends on 10) The apparatus of claim 10, wherein the instructions further cause the apparatus to: access a second result from the process; encrypt the second result; and store, in the storage and associated with the first identifier and the second identifier, the encrypted second result. ### Claim 12 (depends on 10) The apparatus of claim 10, wherein the instructions to enable access further cause the apparatus to: enable access to the first identifier, the second identifier, and the third identifier. ### Claim 13 (depends on 9) The apparatus of claim 9, wherein the instructions further cause the apparatus to: access a second result from the process; and enable access, by a third third-party computing system, to the second result. ### Claim 14 (depends on 9) The apparatus of claim 9, wherein the first response from the first user device further comprises first user authentication information, and wherein the instructions further cause the apparatus to: authenticate, based on the received first user authentication information, the first user device, wherein the instructions to enable access to the at least part of the first PII and the second PII are based on an authentication of the first user device. ### Claim 15 (depends on 9) The apparatus of claim 9, wherein the response to the request for the second authorization further comprises at least one of: a username and password; a biometric identifier; or a one-time code. ### Claim 16 (depends on 9) The apparatus of claim 9, wherein the second authorization comprises multi-factor authentication. ### Claim 17 One or more non-transitory media storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising: receiving, by a computing device and from a first user device, first personal identifiable information (PII) of a first user and a first authorization for a first permission; associating the first PII with a first identifier; enabling, by the computing device and for one or more third-party computing systems, access to a result based on at least part of the first PII and consistent with the first permission, wherein the result is associated with a second identifier; based on the result, sending, by the computing device and to the first user device, a request for a second user; receiving, by the computing device and from the first user device, contact information associated with the second user; sending, by the computing device and to a second user device, a request for second PII of a second user; receiving a request for a second permission of the first user from a first third-party computing system of the one or more third-party computing systems, wherein the first third-party computing system is associated with a third identifier; sending, to the first user device and to the second user device, an encoded link as part of a request for a second authorization for the second permission, wherein the encoded link comprises the first identifier, the second identifier, and the third identifier; receiving, via access to the encoded link and from the first user device, a first response to the request for the second authorization, wherein the first response comprises the second authorization, the first identifier, the second identifier, and the third identifier; receiving, via access to the encoded link and from the second user device, a second response to the request for the second authorization, wherein the second response comprises the second authorization, the first identifier, the second identifier, and the third identifier; and enabling, by the computing device and for a second third-party computing system, access to at least part of the first PII and the second PII to initiate a process consistent with the second permission and a third permission, wherein the access is via a secure channel. ### Claim 18 (depends on 17) The one or more non-transitory media of claim 17, the instructions further cause the one or more processors to perform steps comprising: encrypting the first PII responsive to the first authorization; storing the encrypted first PII associated with a first identifier, wherein the first identifier comprises a first user identifier; accessing, by the computing device and based on receiving the second authorization, the encrypted first PII; and decrypting the encrypted first PII, wherein accessing the encrypted first PII is further based on the first identifier, the second identifier, and the third identifier. ### Claim 19 (depends on 18) The one or more non-transitory media of claim 18, wherein the instructions further cause the one or more processors to perform steps comprising: accessing, by the computing device, a second result from the process; encrypting the second result; and storing, associated with the first identifier and the second identifier, the encrypted second result. ### Claim 20 (depends on 18) The one or more non-transitory media of claim 18, wherein the instructions enabling access to at least part of the decrypted first PII further comprise: enabling access to the first identifier, the second identifier, and the third identifier.