# US 2019/0356672 A1 · Controlling access to secured data via timed filtering of data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0356672 A1
- Document ID: US20190356672A1
- Status: Published application
- Kind: A1
- Application number: 16/414,504
- Filed: 2019-05-16
- Published: 2019-11-21
- Earliest claimed: 2018-05-16
- Assignees: Equifax Inc.
- Applicants: Equifax Inc.
- Inventors: Rajkumar BONDUGULA; Christopher YASKO
- Web page: https://patentgrep.com/patent/US20190356672A1

## CPC

- H04L 63/0245: {Filtering by information in the payload}
- H04L 63/108: {when the policy decisions are valid for a limited amount of time}
- G06F 21/6227: {where protection concerns the structure of data, e.g. records, types, queries}
- H04L 63/0254: {Stateful filtering}
- H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)}
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS
- H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

According to certain implementations, an access control system controls access to secured data that is stored on a secured source. A requestor system may request information representing the secured data. The access control system receives the secured data from the secured source, and selects a portion of the secured data based on a lens including a filter criteria or a modification instruction. Adjusted data may be generated based on a modification of the selected portion of data, where the modification is based on the lens. The access control system provides the adjusted data to the requestor system via an access interface. In some cases, upon completion of a time period, the access control system prevents the requestor system from accessing the adjusted data, by disabling the access interface used to access the adjusted data. The adjusted data may be deleted from the access control system.

## Claims

### Claim 1

A system for controlling access to secured data, the system comprising:
a requestor system for generating a request for information from a secured source;
the secured source storing secured data that represents the information requested by the requestor system;
multiple lenses, each lens including one or more of a filter criteria or a modification instruction; and
an access control system remotely locatable from the requestor system and having a local memory device, wherein the access control system is capable of communicating i) with the secured source via a first access interface and a network and ii) with the requestor system via a second access interface and the network,
wherein the access control system is configured for:
receiving, via the second access interface, the request for information,
providing, via the first access interface, an access request indicating the requested information,
receiving, via the first access interface, (i) the secured data and (ii) an identification of a time period,
controlling access to secured data by the requestor system during the time period, wherein controlling access to the secured data comprises:
selecting, based on one or more of the multiple lenses, a portion of the secured data,
generating, on the local memory device, adjusted data comprising the requested information and a modification of the selected portion of the secured data, wherein the modification is based on the one or more of the multiple lenses and the selected portion of the secured data,
providing, via the second access interface, the adjusted data,
subsequent to completion of the time period:
preventing the requestor system from accessing the adjusted data by disabling the second access interface,
disabling the first access interface, and
deleting the adjusted data from the local memory device.

### Claim 2 (depends on 1)

The system of claim 1, wherein the modification of the selected portion of the secured data is a granularity modification, and
wherein the adjusted data includes multi-granularity data.

### Claim 3 (depends on 1)

The system of claim 1, the access control system further configured for selecting the one or more of the multiple lenses based on an indication received from one of: the requestor system, or the secured source.

### Claim 4 (depends on 1)

The system of claim 1, wherein the one or more of the multiple lenses includes one or more filter criteria and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data.

### Claim 5 (depends on 1)

The system of claim 1, wherein the one or more of the multiple lenses includes multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements.

### Claim 6 (depends on 1)

The system of claim 1, the access control system further configured for:
during the time period, determining (i) multiple dates associated with the portion of the secured data and (ii) a range of time associated with the multiple dates,
wherein generating the adjusted data comprises one of:
generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or
generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates.

### Claim 7 (depends on 1)

The system of claim 1, the access control system further configured for:
determining an attribute based on the selected portion of the secured data;
determining a trust associated with the attribute; and
generating a score based on the attribute and the associated trust, wherein the adjusted data includes the generated score.

### Claim 8

A method comprising:
receiving, from a requestor system, a request for information from a secured source;
providing, to the secured source, a first access interface and an access request indicating the requested information;
receiving, from the secured source and via the first access interface, (i) secured data including the requested information and (ii) an identification of a time period; and
controlling access to secured data by the requestor system during the time period, wherein controlling access to the secured data comprises:
selecting, based on a lens, a portion of the secured data,
generating, on a local memory device, adjusted data based on the lens and the selected portion of the secured data, wherein the adjusted data comprises a modification of the selected portion of the secured data and the requested information, and
providing a second access interface to the requestor system, wherein the adjusted data is available to the requestor system is capable of accessing via the second access interface,
subsequent to completion of the time period:
preventing the requestor system from accessing the adjusted data by disabling the second access interface,
disabling the first access interface, and
deleting the adjusted data from the local memory device.

### Claim 9 (depends on 8)

The method of claim 8, wherein the modification of the selected portion of the secured data is a granularity modification, and
wherein the adjusted data includes multi-granularity data.

### Claim 10 (depends on 8)

The method of claim 8, further comprising selecting the lens from a group of lenses, wherein the lens is selected based on an indication received from one of: the requestor system, or the secured source.

### Claim 11 (depends on 8)

The method of claim 8, wherein the lens includes one or more filter criteria and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data.

### Claim 12 (depends on 8)

The method of claim 8, wherein the lens includes multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
during the time period, determining (i) multiple dates associated with the portion of the secured data and (ii) a range of time associated with the multiple dates,
wherein generating the adjusted data comprises one of:
generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or
generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
determining an attribute based on the selected portion of the secured data;
determining a trust associated with the attribute; and
generating a score based on the attribute and the associated trust, wherein the adjusted data includes the generated score.

### Claim 15 (depends on 14)

The method of claim 14, wherein the attribute indicates an equivalency relationship between the selected portion of the secured data and the requested information.

### Claim 16

A system for controlling granular access to secured data, the system comprising:
an access control system having a local memory device, wherein the access control system is capable of communicating i) with a secured source via a first access interface and a network and ii) with a requestor system via a second access interface and the network, wherein the secured source stores secured data and the requestor system generates a request for information from the secured source; and
multiple lenses, each lens including one or more of a filter criteria or a modification instruction,
wherein the access control system is configured for:
receiving, via the second access interface, the request for information,
providing, via the first access interface, an access request indicating the requested information,
receiving, via the first access interface, (i) the secured data and (ii) an identification of a time period,
controlling access to secured data by the requestor system during the time period, wherein controlling access to the secured data comprises:
selecting, based on one or more of the multiple lenses, a high-granularity portion of the secured data,
generating, on the local memory device, adjusted data comprising a low-granularity representation of the requested information, wherein the low-granularity representation is based on the one or more of the multiple lenses and the high-granularity portion of the secured data,
providing, via the second access interface, the adjusted data,
subsequent to completion of the time period:
preventing the requestor system from accessing the adjusted data by disabling the second access interface,
disabling the first access interface, and
deleting the adjusted data from the local memory device.

### Claim 17 (depends on 16)

The system of claim 16, the access control system further configured for selecting the one or more of the multiple lenses based on an indication received from one of: the requestor system, or the secured source.

### Claim 18 (depends on 16)

The system of claim 16, wherein the one or more of the multiple lenses includes one or more filter criteria and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data.

### Claim 19 (depends on 16)

The system of claim 16, wherein the one or more of the multiple lenses includes multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements.

### Claim 20 (depends on 16)

The system of claim 16, the access control system further configured for:
during the time period, determining (i) multiple dates associated with the high-granularity portion of the secured data and (ii) a range of time associated with the multiple dates,
wherein generating the adjusted data comprises one of:
generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or
generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates.