# US 12,216,795 B2 · System and method of filtering consumer data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,216,795 B2
- Document ID: US12216795B2
- Status: Granted
- Kind: B2
- Application number: 18/500,773
- Filed: 2023-11-02
- Published: 2024-05-02
- Granted: 2025-02-04
- Earliest claimed: 2013-12-10
- Assignees: Early Warning Services, LLC
- Applicants: Early Warning Services, LLC
- Inventors: Michael Cook
- Web page: https://patentgrep.com/patent/US12216795B2

## CPC

- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06F 16/13: File access structures, e.g. distributed indices (arrangements of input from, or output to, record carriers G06F3/06)
- G06F 16/245: Query processing
- G06Q 20/027: {involving a payment switch or gateway}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A system may include an interface configured to couple to a network, and includes a processor and a memory accessible to the processor. The memory may be configured to store instructions that, when executed, cause the processor to process search results corresponding to multiple data owners to selectively filter personally identifiable information (PII) associated with one or more consumers from the set of search results according to data sharing permissions for each of the data owners to produce filtered results. The instructions may further cause the processor to provide the filtered results to a user device through the network.

## Claims

### Claim 1

A data management system, comprising:
a network interface;
at least one processor; and
a memory having instructions stored thereon that, when executed, cause the at least one processor to:
receive, using the network interface, data sharing permissions from each of a plurality of data sources;
receive, using the network interface, data from each of the plurality of data sources, wherein the data from each of the plurality of data sources comprises a source identifier that indicates a respective data source of the plurality of data sources from which the data was received;
store the data on one or more databases;
receive, using the network interface, a request for data from a computing device, the request comprising one or more criteria;
identify a subset of data matching the one or more criteria;
anonymize the source identifiers within a first portion of the subset of data into de-identified data based on the data sharing permissions from a first data source that provided the first portion of the subset of data; and
send, using the network interface, the subset of data to the computing device.

### Claim 2 (depends on 1)

The data management system of claim 1, wherein:
anonymizing the source identifiers comprises one or both of removing the source identifiers and altering the source identifiers.

### Claim 3 (depends on 1)

The data management system of claim 1, wherein:
at least some of the source identifiers comprise lender identifying information (LII).

### Claim 4 (depends on 1)

The data management system of claim 1, wherein:
the instructions further cause the at least one processor to convert at least some personally identifiable information within a second portion of the subset of data into de-identified data based on the data sharing permissions from a second data source that provided the second portion of the subset of data.

### Claim 5 (depends on 4)

The data management system of claim 4, wherein:
the first data source and the second data source are the same.

### Claim 6 (depends on 4)

The data management system of claim 4, wherein:
the first portion and the second portion are the same.

### Claim 7 (depends on 1)

The data management system of claim 1, wherein:
the first portion comprises an entirety of the subset of data.

### Claim 8

A method of operating a data management system, comprising:
receiving data sharing permissions from each of a plurality of data sources;
receiving data from each of the plurality of data sources, wherein the data from each of the plurality of data sources comprises a source identifier that indicates a respective data source of the plurality of data sources from which the data was received;
storing the data on one or more databases;
receiving a request for data from a computing device, the request comprising one or more criteria;
identifying a subset of data matching the one or more criteria;
anonymizing the source identifiers within a first portion of the subset of data into de-identified data based on the data sharing permissions from a first data source that provided the first portion of the subset of data; and
sending the subset of data to the computing device.

### Claim 9 (depends on 8)

The method of operating a data management system of claim 8, further comprising:
convert at least some personally identifiable information within a second portion of the subset of data into de-identified data based on the data sharing permissions from a second data source that provided the second portion of the subset of data.

### Claim 10 (depends on 9)

The method of operating a data management system of claim 9, wherein:
the personally identifiable information within the de-identified data is de-identified by at least one of removing the personally identifiable information, masking the personally identifiable information, obfuscating the personally identifiable information, scrambling the personally identifiable information, or replacing the personally identifiable information with a pseudonym.

### Claim 11 (depends on 8)

The method of operating a data management system of claim 8, further comprising:
encrypting personally identifiable information within the data prior to storing the data in the one or more databases.

### Claim 12 (depends on 8)

The method of operating a data management system of claim 8, further comprising:
aggregating the subset of data with at least one additional subset of data to form aggregated data; and
performing statistical analysis on the aggregated data to analyze trends within the aggregated data, identify patterns within the aggregated data, or both analyze trends and identify patterns within the aggregated data.

### Claim 13 (depends on 8)

The method of operating a data management system of claim 8, further comprising:
generating logs of data requested from the first data source; and
providing the logs of data to the first data source.

### Claim 14 (depends on 8)

The method of operating a data management system of claim 8, wherein:
each datum of the data comprises records associated with a loan.

### Claim 15

A non-transitory computer-readable medium having instructions stored thereon that, when executed by one or more processors, cause a data management system to:
receive data sharing permissions from each of a plurality of data sources;
receive data from each of the plurality of data sources, wherein the data from each of the plurality of data sources comprises a source identifier that indicates a respective data source of the plurality of data sources from which the data was received;
store the data on one or more databases;
receive a request for data from a computing device, the request comprising one or more criteria;
identify a subset of data matching the one or more criteria;
anonymize the source identifiers within a first portion of the subset of data into de-identified data based on the data sharing permissions from a first data source that provided the first portion of the subset of data; and
send the subset of data to the computing device.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the instructions further cause the data management system to:
convert at least some personally identifiable information within a second portion of the subset of data into de-identified data based on the data sharing permissions from a second data source that provided the second portion of the subset of data.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein:
the de-identified data is re-identifiable using a unique identifier that is assigned to each data record within the de-identified data.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein:
anonymizing the source identifiers comprises one or both of removing the source identifiers and altering the source identifiers.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein:
anonymizing the source identifiers comprises altering the source identifiers by replacing the source identifiers with a pseudonym.

### Claim 20 (depends on 19)

The non-transitory computer-readable medium of claim 19, wherein:
the pseudonym is generated randomly by the data management system.