# US 12,216,775 B2 · Systems and methods for mediating permissions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,216,775 B2
- Document ID: US12216775B2
- Status: Granted
- Kind: B2
- Application number: 18/529,289
- Filed: 2023-12-05
- Published: 2024-06-13
- Granted: 2025-02-04
- Earliest claimed: 2020-04-15
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Mark Watson; Jeremy Goodsitt; Austin Walters; Anh Truong; Vincent Pham
- Web page: https://patentgrep.com/patent/US12216775B2

## CPC

- G06F 21/604: {Tools and structures for managing or administering access control systems}
- G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
- G06N 20/00: Machine learning
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 63/102: {Entity profiles}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods mediate permissions for applications on user devices using predictive models. Data communications are monitored on a user device for permission requests and responses. A predictive model is trained with these permission requests and responses until a threshold is met. Then, a default permission response is provided on behalf of the user device in response to a permission request.

## Claims

### Claim 1

A permission mediating system, comprising:
a memory;
a processor;
a permissions monitor, wherein the permissions monitor includes at least one selected from a group consisting of a network traffic sniffer, a browser extension associated with a web application, and a tracker on a client device, and is configured to:
request a permission from a user of the client device to monitor data communications for permissions requests and permissions responses;
monitor the permissions requests and the permissions responses communicated between the client device and one or more applications;
ignore data communications unrelated to the permissions requests and the permissions responses; and
update a database with the communicated permissions requests and the communicated permissions responses;
a predictive model, wherein the predictive model is capable of predicting a default permission response to a future or current permission request based on the communicated permissions requests and the communicated permissions responses; and
a permissions manager executed by the processor, wherein the permission manager is configured to:
train the predictive model with a target and the communicated permissions requests and the communicated permissions responses, the target being a target variable in predictive analytics; and
provide the default permission response to the future or current permission request using the predictive model.

### Claim 2 (depends on 1)

The permission mediating system of claim 1, wherein the default permission response includes one or more of: an application type, a permission option, and a permission category.

### Claim 3 (depends on 1)

The permission mediating system of claim 1, wherein:
the permissions requests requesting permission from the client device to grant access to the one or more applications, and
the permissions responses either granting or not granting the requested access to the one or more applications.

### Claim 4 (depends on 1)

The permission mediating system of claim 1, wherein the permissions manager is further configured to:
select a seed model for training the predictive model based on a location associated with the client device, and
train the predictive model using the seed model.

### Claim 5 (depends on 4)

The permission mediating system of claim 4, wherein:
the seed model is pre-trained for a generic user, and
the seed model is used initially as the predictive model.

### Claim 6 (depends on 4)

The permission mediating system of claim 4, wherein:
the seed model is pre-trained for a type of user, and
the seed model is used initially as the predictive model.

### Claim 7 (depends on 6)

The permission mediating system of claim 6, wherein the type of user is associated with a type of client device.

### Claim 8 (depends on 6)

The permission mediating system of claim 6, wherein the type of user is associated with an identifiable category.

### Claim 9 (depends on 4)

The permission mediating system of claim 4, wherein:
the seed model is pre-trained for a particular language, and
the seed model is used initially as the predictive model.

### Claim 10 (depends on 1)

The permission mediating system of claim 1, wherein the permissions manager is further configured to change a unique identifier associated with the client device in the data communications monitored by the permissions monitor.

### Claim 11

A method, comprising:
requesting, by a permissions monitor, a permission from a user of a client device to monitor data communications for permissions requests and permissions responses, wherein the permissions monitor includes at least one selected from a group consisting of a network traffic sniffer, a browser extension associated with a web application, and a tracker on the client device;
monitoring, by the permissions monitor, the permissions requests and the permissions responses communicated between the client device and one or more applications;
ignoring, by the permissions monitor, data communications unrelated to the permissions requests and the permissions responses;
updating, by the permissions monitor, a database with the communicated permissions requests and the communicated permissions responses;
training, by a permissions manager, a predictive model with a target and the communicated permissions requests and the communicated permissions responses, wherein the target is a target variable in predictive analytics, and the predictive model is capable of predicting a default permission response to a future or current permission request based on the communicated permissions requests and the communicated permissions responses; and
providing, by the permissions manager, the default permission response to the future or current permission request using the predictive model.

### Claim 12 (depends on 11)

The method of claim 11, further comprising refining, by the permissions manager, the predictive model using the communicated permissions requests and the communicated permissions responses stored in the database until a threshold is met.

### Claim 13 (depends on 12)

The method of claim 12, wherein the threshold comprises a ratio of permission acceptances to permission rejections.

### Claim 14 (depends on 12)

The method of claim 12, wherein the threshold comprises a threshold level of user engagement.

### Claim 15 (depends on 12)

The method of claim 12, wherein the threshold comprises an amount of data.

### Claim 16 (depends on 11)

The method of claim 11, further comprising encrypting and distributing, by a cloud hosting service, the default permission response to a second user device.

### Claim 17 (depends on 11)

The method of claim 11, further comprising transferring the predictive model to a second user device, wherein the predictive model provides the default permission response on behalf of the second user device in response to one of the permissions requests.

### Claim 18 (depends on 11)

The method of claim 11, wherein the predictive model is pre-trained for one or more selected from: (1) a type of permission, (2) a type of user, (3) a type of application, (4) a privacy setting, and (5) an operating system.

### Claim 19 (depends on 11)

The method of claim 11, wherein the predictive model is pre-trained for a type of service that sends one of the permissions requests.

### Claim 20

A permission mediating system, comprising:
a processor;
a memory containing a predictive model, the predictive model being capable of predicting a default permission response;
a database storing permissions requests and permissions responses in data communications between a client device and an application;
a permissions monitor, executed by the processor, configured to:
request a permission from a user of the client device to monitor data communications for the permissions requests and the permissions responses,
monitor the permissions requests and the permissions responses communicated between the client device and the application, and
ignore data communications unrelated to the permissions requests and the permissions responses; and
a permissions manager, executed by the processor, configured to:
select a seed model for training the predictive model based on a location associated with the client device,
train the predictive model using the seed model, the permissions requests, and the permissions responses stored in the database, and
provide the default permission response using the predictive model.