# US 12,598,191 B2 · Secure content management through authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,598,191 B2 - Document ID: US12598191B2 - Status: Granted - Kind: B2 - Application number: 18/626,174 - Filed: 2024-04-03 - Published: 2024-07-25 - Granted: 2026-04-07 - Earliest claimed: 2020-03-31 - Assignees: LendingClub Bank, National Association - Applicants: Lendingclub Bank, National Association - Inventors: Hyunsuk Han; Mahesh Acharya - Web page: https://patentgrep.com/patent/US12598191B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/105: {Multiple levels of security} - G06F 16/9558: {Details of hyperlinks; Management of linked annotations} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques are described herein for performing authentication, and also “eager” or “lazy” fetch of data, for restricted webpages based on the restricted webpages being associated with an authentication tier in an AASD registry. Inclusion of a restricted webpage in the AASD registry enables AASD-based authentication for the webpage. According to embodiments, information for a restricted webpage included in the AASD registry includes one or more of the following for the webpage: an identifier, an authentication level, allowed fields, eager fetch fields, one or more sources for one or more fields, etc. When information for a webpage is included in the AASD registry, that information is used to perform eager fetch for one or more fields of the webpage that are not associated with authentication requirements indicated in the AASD registry information, or whose authentication requirements are already fulfilled by the requesting client. ## Claims ### Claim 1 A computer-executed method, comprising: receiving a request associated with a client to access a first resource; accessing registry information, wherein the registry information comprises, for each resource of a plurality of resources: an identifier; and a field-to-authentication-tier mapping that specifies an authentication tier associated with one or more data fields; wherein the field-to-authentication-tier mapping comprises registry information that associates individual data fields with respective authentication tiers; based at least in part on the registry information, identifying: a first authentication tier associated with a first data field associated with the first resource; and a second authentication tier associated with a second data field associated with the first resource; in response to determining that the client is associated with the first authentication tier, eager-fetching the first data field by retrieving data for the first data field; in response to determining that the client is not associated with the second authentication tier, lazy-fetching the second data field by providing a reference link for accessing the second data field; wherein the method is performed by one or more computing devices comprising a hardware processor. ### Claim 2 (depends on 1) The computer-executed method of claim 1, wherein eager-fetching the first data field comprises retrieving the data associated with the first data field. ### Claim 3 (depends on 1) The computer-executed method of claim 1, wherein lazy-fetching the second data field comprises retrieving a reference link associated with the second data field. ### Claim 4 (depends on 1) The computer-executed method of claim 1, further comprising: in response to determining that the client is not associated with the second authentication tier, causing an authentication request associated with the second authentication tier to be issued to the client. ### Claim 5 (depends on 4) The computer-executed method of claim 4, further comprising: in response to determining that the client has satisfied the authentication requirements associated with the second authentication tier, retrieving the data associated with the second data field. ### Claim 6 (depends on 1) The computer-executed method of claim 1, wherein the registry information references a plurality of authentication tiers, wherein each authentication tier is associated with a set of authentication requirements. ### Claim 7 (depends on 1) The computer-executed method of claim 1, wherein the identifier associated with each resource is a URL. ### Claim 8 A system comprising: at least one device including a hardware processor; the system being configured to perform operations comprising: accessing registry information, wherein the registry information comprises, for each resource of a plurality of resources: an identifier; and a field-to-authentication-tier mapping that specifies an authentication tier associated with one or more data fields; wherein the field-to-authentication-tier mapping comprises registry information that associates individual data fields with respective authentication tiers; based at least in part on the registry information, identifying: a first authentication tier associated with a first data field associated with the first resource; and a second authentication tier associated with a second data field associated with the first resource; in response to determining that the client is associated with the first authentication tier, eager-fetching the first data field by retrieving data for the first data field; in response to determining that the client is not associated with the second authentication tier, lazy-fetching the second data field by providing a reference link for accessing the second data field. ### Claim 9 (depends on 8) The system of claim 8, wherein eager-fetching the first data field comprises retrieving the data associated with the first data field. ### Claim 10 (depends on 8) The system of claim 8, wherein lazy-fetching the second data field comprises retrieving a reference link associated with the second data field. ### Claim 11 (depends on 8) The system of claim 8, further comprising: in response to determining that the client is not associated with the second authentication tier, causing an authentication request associated with the second authentication tier to be issued to the client. ### Claim 12 (depends on 11) The system of claim 11, further comprising: in response to determining that the client has satisfied the authentication requirements associated with the second authentication tier, retrieving the data associated with the second data field. ### Claim 13 (depends on 11) The system of claim 11, wherein the registry information references a plurality of authentication tiers, wherein each authentication tier is associated with a set of authentication requirements. ### Claim 14 (depends on 11) The system of claim 11, wherein the identifier associated with each resource is a URL. ### Claim 15 One or more non-transitory computer readable media comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising: accessing registry information, wherein the registry information comprises, for each resource of a plurality of resources: an identifier; and a field-to-authentication-tier mapping that specifies an authentication tier associated with one or more data fields; wherein the field-to-authentication-tier mapping comprises registry information that associates individual data fields with respective authentication tiers; based at least in part on the registry information, identifying: a first authentication tier associated with a first data field associated with the first resource; and a second authentication tier associated with a second data field associated with the first resource; in response to determining that the client is associated with the first authentication tier, eager-fetching the first data field by retrieving data for the first data field; in response to determining that the client is not associated with the second authentication tier, lazy-fetching the second data field by providing a reference link for accessing the second data field. ### Claim 16 (depends on 15) The non-transitory media of claim 15, wherein eager-fetching the first data field comprises retrieving the data associated with the first data field. ### Claim 17 (depends on 15) The non-transitory media of claim 15, wherein lazy-fetching the second data field comprises retrieving a reference link associated with the second data field. ### Claim 18 (depends on 15) The non-transitory media of claim 15, further comprising: in response to determining that the client is not associated with the second authentication tier, causing an authentication request associated with the second authentication tier to be issued to the client. ### Claim 19 (depends on 18) The non-transitory media of claim 18, further comprising: in response to determining that the client has satisfied the authentication requirements associated with the second authentication tier, retrieving the data associated with the second data field. ### Claim 20 (depends on 15) The non-transitory media of claim 15, wherein the registry information references a plurality of authentication tiers, wherein each authentication tier is associated with a set of authentication requirements.