US 2022/0067735 A1Published application

Systems and methods for use with network authentication

AssigneeMastercard International Incorporated

InventorDenise E. Tinnon

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are provided for sharing personal identifying information with relying parties. One exemplary computer-implemented method includes generating a token for personal identifying information (PII) included in a record of a user and linking the token to the record. The method then includes, in response to a request for the token, accessing the record, authenticating the user, compiling a response to the request that includes the token, and transmitting the response to a communication device of the user, whereby the token included in the response is populated, at the communication device, into an interface associated with a relying party based on a network interaction between the user and the relying party. The method further includes, in response to a request for the PII from the relying party, retrieving the PII for the user based on the token included in the request and transmitting the PII to the relying party.

Claims20

Dependent claims

A computer-implemented method for use in sharing personal identifying information with a relying party, the method comprising:

generating an identity record for a user and storing the identity record in a data structure, the identity record including personal identifying information (PII) for the user;
generating a token specific to the PII included in the identity record for the user and linking the token to the identity record in the data structure;
in response to a request for the token from a communication device associated with the user, accessing, by a computing device, the identity record for the user in the data structure, the request including an authentication input for the user captured by the communication device;
authenticating, by the computing device, the user based on the accessed identity record and the authentication input included in the request;
after authentication of the user, compiling, by the computing device, a response to the request that includes the token;
transmitting, by the computing device, the response to the communication device associated with the user, whereby the token included in the response is populated, at the communication device, into an interface associated with a relying party based on a network interaction between the user and the relying party;
and
in response to a request for the PII from the relying party, retrieving, by the computing device, the PII for the user, based on inclusion of the token in the request from the relying party, and transmitting the retrieved PII to the relying party.

5 more elements

A system for use in sharing personal identifying information with a relying party, the system comprising an identity provider computing device configured to:

generate a token specific to personal identifying information (PII) included in an identity record for a user and link the token to the identity record in a data structure associated with the identity provider computing device;
receive a request for the token from a communication device associated with the user;
in response to the request, access the identity record for the user in the data structure based on an identifier for the user included in the request, the request including an authentication input for the user captured by the communication device;
authenticate the user based on the accessed identity record and the authentication input included in the request;
in response to authentication of the user, retrieve the token linked to the identity record and append the token to a response to the request;
transmit the response to the communication device associated with the user, whereby the token appended to the response is populated, at the communication device, into an interface associated with a relying party in connection with a network interaction between the user and the relying party;
receive a request for the PII from the relying party, wherein the request includes the token, and validate the token for the PII included in the identity record of the user;
and
in response to validation of the token, transmit a validation indication to the relying party for the PII based on validation of the token or transmit the PII to the relying party.

6 more elements

A non-transitory computer-readable storage medium comprising computer-executable instructions for use in sharing personal identifying information (PII) with a relying party, which when executed by at least one processor, cause the at least one processor to:

generate an identity record for a user and store the identity record in a data structure, the identity record including PII for the user;
generate a token specific to the PII included in the identity record for the user and link the token to the identity record in the data structure;
in response to a request for the token from a communication device associated with the user, access the identity record for the user in the data structure, the request including an authentication input for the user captured by the communication device;
authenticate the user based on the accessed identity record and the authentication input included in the request;
in response to authentication of the user, compile a response to the request that includes the token;
transmit the response to the communication device associated with the user, whereby the token included in the response is populated, at the communication device, into an interface associated with a relying party based on a network interaction between the user and the relying party;
and
in response to a request for the PII from the relying party, retrieve the PII for the user, based on inclusion of the token in the request from the relying party, and transmit the retrieved PII to the relying party.

5 more elements

Dependencies are inferred from the claim text.