Back to results
US 12,762,559 B2Granted
Payments federated directory
AssigneeCapital One Financial Corporation
InventorsMicah J. Kerr, Alexander Jay Nathan, Julie Malikayil, Michael D. Hansen
Life of this patent
Estimating the term…
Abstract
Embodiments provide a methods and systems for securely providing access to sensitive information for a plurality of entities. The method includes receiving, by a payer credential service provider (CSP), from a payer, a request for payee electronically protected information (EPI). The payer CSP transmits to a payee CSP a request for payee EPI data. The payee CSP validates, using a distributed ledger system, whether the payer has permission to request the payee EPI. The payer CSP receives the payee EPI data from the payee CSP. The payer CSP sends the payee EPI data to the payer.
Claims20
A first credential service provider (CSP) that is configured to operate within a distributed network architecture as a first node of a permissioned, blockchain-based distributed ledger network, the first CSP comprising:
- at least one network interface;
- at least one processor;
- at least one non-transitory computer-readable medium;
- program instructions stored on the at least one non-transitory computer-readable medium that, when executed by the at least one processor, cause the first CSP to:
- provide a web-based user portal that enables a given payee to access the first CSP;
- receive, via the at least one network interface, (i) payee electronically protected information (EPI) of the given payee and (ii) payer access data indicating one or more payers that have been approved to access the payee EPI, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee, and wherein the payee EPI and the payer access data were entered by the given payee through the web-based user portal;
- based on receiving the payee EPI:
- (i) store the payee EPI of the given payee in a secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network;
- (ii) generate a hash that comprises a secure, one-way reference to the payee EPI;
- and
- (iii) record the hash on the permissioned, blockchain-based distributed ledger network such that the hash is accessible by other CSPs that are configured to operate within the distributed network architecture as nodes of the permissioned, blockchain-based distributed ledger network, wherein recording the hash on the permissioned, blockchain-based distributed ledger network enables independent validation of the payee EPI by the other CSPs without centralized storage of the payee EPI;
- based on receiving the payer access data, record, on the permissioned, blockchain-based distributed ledger network, an indication that the one or more payers are permitted to access the payee EPI of the given payee;
- receive from a second CSP that is configured to operate within the distributed network architecture as a second node of the permissioned, blockchain-based distributed ledger network over a secure communication channel between the second CSP and the first CSP established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, a request by a given payer for the payee EPI of the given payee, wherein the given payer is included in the one or more payers that have been approved to access the payee EPI;
- and
- after receiving the request for the payee EPI of the given payee, verify that the given payer has permission to access the payee EPI of the given payee by using permissioned, the blockchain-based distributed ledger network;
- and
- based on verifying that the given payer has permission to access the payee EPI of the given payee, (i) obtain the payee EPI of the given payee from the secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network, (ii) encrypt the payee EPI of the given payee, and (iii) transmit to the second CSP, over the secure communication channel established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, the encrypted payee EPI of the given payee, wherein the second CSP thereafter validates the payee EPI against the hash that was previously recorded on the permissioned, blockchain-based distributed ledger network before sending the payee EPI to the given payer.
14 more elements
A non-transitory computer readable medium storing executable instructions for a first credential service provider (CSP) that is configured to operate within a distributed network architecture as a first node of a permissioned, blockchain-based distributed ledger network, wherein the executable instructions, when executed by at least one processor of the first CSP, cause the first CSP to perform functions comprising:
- providing a web-based user portal that enables a given payee to access the first CSP;
- receiving, via at least one network interface, (i) payee electronically protected information (EPI) of a given payee and (ii) payer access data indicating one or more payers that have been approved to access the payee EPI, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee, and wherein the payee EPI and the payer access data were entered by the given payee through the web-based user portal;
- based on receiving the payee EPI:
- (i) storing the payee EPI of the given payee in a secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network;
- (ii) generating a hash that comprises a secure, one-way reference to the payee EPI;
- and
- (iii) recording the hash on the permissioned, blockchain-based distributed ledger network such that the hash is accessible by a other CSPs that are configured to operate within the distributed network architecture as nodes of the permissioned, blockchain-based distributed ledger network, wherein recording the hash on the permissioned, blockchain-based distributed 6 ledger network enables independent validation of the payee EPI by the other CSPs without centralized storage of the payee EPI;
- based on receiving the payer access data, recording, on the permissioned, blockchain-based distributed ledger network, an indication that the one or more payers are permitted to access the payee EPI of the given payee;
- receiving, from a second CSP that is configured to operate within the distributed network architecture as a second node of the permissioned, blockchain-based distributed ledger network over a secure communication channel between the second CSP and the first CSP established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, a request by a given payer for the payee EPI of the given payee, wherein the given payer is included in the one or more payers that have been approved to access the payee EPI;
- and
- after receiving the request for the payee EPI of the given payee, verifying that the given payer has permission to access the payee EPI of the given payee by using the permissioned, blockchain-based distributed ledger network;
- and
- based on verifying that the given payer has permission to access the payee EPI of the given payee, (i) obtaining the payee EPI of the given payee from the secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network, (ii) encrypting the payee EPI of the given payee, and (iii) transmitting to the second CSP, over the secure communication channel established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, the encrypted payee EPI of the given payee, wherein the second CSP thereafter validates the payee EPI against the hash that was previously recorded on the permissioned, blockchain-based distributed ledger network before sending the payee EPI to the given payer.
10 more elements
A method carried out by a first credential service provider (CSP) that is configured to operate within a distributed network architecture as a first node of a permissioned, blockchain-based distributed ledger network, the method comprising:
- providing a web-based user portal that enables a given payee to access the first CSP;
- receiving, via at least one network interface, (i) payee electronically protected information (EPI) of the given payee and (ii) payer access data indicating one or more payers that have been approved to access the payee EPI, wherein the payee EPI comprises at least one of tax information or bank account information of the given payee, and wherein the payee EPI and the payer access data were entered by the given payee through the web-based user portal;
- based on receiving the payee EPI:
- (i) storing the payee EPI of the given payee in a secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network;
- (ii) generating a hash that comprises a secure, one-way reference to the payee EPI;
- and
- (iii) recording the hash on the permissioned, blockchain-based distributed ledger network such that the hash is accessible by other CSPs that are configured to operate within the distributed network architecture as nodes of the permissioned, blockchain-based distributed ledger network, wherein recording the hash on the permissioned, blockchain-based distributed ledger network enables independent validation of the payee EPI by the other CSPs without centralized storage of the payee EPI;
- based on receiving the payer access data, recording, on the permissioned, blockchain-based distributed ledger network, an indication that the one or more payers are permitted to access the payee EPI of the given payee;
- receiving from a second CSP that is configured to operate within the distributed network architecture as a second node of the permissioned, blockchain-based distributed ledger network over a secure communication channel between the second CSP and the first CSP established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, a request by a given payer for the payee EPI of the given payee, wherein the given payer is included in the one or more payers that have been approved to access the payee EPI;
- and
- after receiving the request for the payee EPI of the given payee, verifying that the given payer has permission to access the payee EPI of the given payee by using the permissioned, blockchain-based distributed ledger;
- and
- based on verifying that the given payer has permission to access the payee EPI of the given payee, (i) obtaining the payee EPI of the given payee from the secure data store that is private to the first CSP and off of the permissioned, blockchain-based distributed ledger network, (ii) encrypting the payee EPI of the given payee, and (iii) transmitting to the second CSP, over the secure communication channel established through the at least one network interface that is separate from the permissioned, blockchain-based distributed ledger network, the encrypted payee EPI of the given payee, wherein the second CSP thereafter validates the payee EPI against the hash that was previously recorded on the permissioned, blockchain-based distributed ledger network before sending the payee EPI to the given payer.
10 more elements
Dependencies are inferred from the claim text.