# US 2023/0054085 A1 · Controlling access to secured data via timed filtering of data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0054085 A1 - Document ID: US20230054085A1 - Status: Published application - Kind: A1 - Application number: 18/048,320 - Filed: 2022-10-20 - Published: 2023-02-23 - Earliest claimed: 2018-05-16 - Assignees: Equifax Inc. - Applicants: Equifax Inc. - Inventors: Rajkumar BONDUGULA; Christopher YASKO - Web page: https://patentgrep.com/patent/US20230054085A1 ## CPC - H04L 63/0245: {Filtering by information in the payload} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - G06F 21/6227: {where protection concerns the structure of data, e.g. records, types, queries} - H04L 63/0254: {Stateful filtering} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract According to certain implementations, an access control system controls access to secured data that is stored on a secured source. A requestor system may request information representing the secured data. The access control system receives the secured data from the secured source, and selects a portion of the secured data based on a lens including a filter criteria or a modification instruction. Adjusted data may be generated based on a modification of the selected portion of data, where the modification is based on the lens. The access control system provides the adjusted data to the requestor system via an access interface. In some cases, upon completion of a time period, the access control system prevents the requestor system from accessing the adjusted data, by disabling the access interface used to access the adjusted data. The adjusted data may be deleted from the access control system. ## Claims ### Claim 1 A system for controlling access to secured data, the system comprising: a processing device; and a memory device in which instructions executable by the processing device are stored for causing the processing device to perform operations comprising: receiving, from a requestor system, a request for information represented by secured data stored in a secured source, providing an access request to the secured source indicating the requested information, receiving, from the secured source, the secured data and an identification of a time period, and controlling access of the requestor system to the secured data during the time period, wherein controlling access to the secured data comprises: selecting, based on one or more lenses, a portion of the secured data, each lens including one or more of a filter criterion or a modification instruction, generating, on a memory device, adjusted data comprising the requested information and a modification of the selected portion of the secured data, wherein the modification is based on the one or more lenses and comprises multi-granularity data that includes high-granularity data from a first part of the selected portion of the secured data and low-granularity data based on a second part of the selected portion of the secured data, providing the adjusted data to the requestor system, and subsequent to completion of the time period: preventing the requestor system from accessing the adjusted data, and deleting the adjusted data from the memory device. ### Claim 2 (depends on 1) The system of claim 1, wherein preventing the requestor system from accessing the adjusted data comprises disabling a first access interface through which the system is capable of communicating with the secured source and disabling a second access interface through which the system is capable of communicating with the requestor system. ### Claim 3 (depends on 1) The system of claim 1, wherein the operations further comprise selecting the one or more lenses based on an indication received from one of: the requestor system, or the secured source. ### Claim 4 (depends on 1) The system of claim 1, wherein the one or more lenses includes one or more filter criteria, and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data. ### Claim 5 (depends on 1) The system of claim 1, wherein the one or more lenses includes multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements. ### Claim 6 (depends on 1) The system of claim 1, wherein the operations further comprise: during the time period, determining (i) multiple dates associated with the portion of the secured data and (ii) a range of time associated with the multiple dates, wherein generating the adjusted data comprises one of: generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates. ### Claim 7 (depends on 1) The system of claim 1, wherein the operations further comprise: determining an attribute based on the selected portion of the secured data; determining a trust associated with the attribute; and generating a score based on the attribute and the associated trust, wherein the adjusted data includes the generated score. ### Claim 8 A method that includes one or more processing devices of an access control system performing operations comprising: providing, to a secured source, an access request indicating requested information by a requestor system; receiving, from the secured source, secured data including the requested information and an identification of a time period; and controlling access of the requestor system to the secured data during the time period, wherein controlling access to the secured data comprises: selecting, based on a lens, a portion of the secured data, generating, on a memory device, adjusted data based on the lens and the selected portion of the secured data, wherein the adjusted data comprises the requested information and a modification of the selected portion of the secured data, the modification comprising multi-granularity data including high-granularity data from a first part of the selected portion of the secured data and low-granularity data based on a second part of the selected portion of the secured data, enabling the adjusted data accessible by the requestor system and subsequent to completion of the time period: preventing the requestor system from accessing the adjusted data, and deleting the adjusted data from the memory device. ### Claim 9 (depends on 8) The method of claim 8, wherein preventing the requestor system from accessing the adjusted data comprises disabling a first access interface through which the access control system is capable of communicating with the secured source and disabling a second access interface through which the access control system is capable of communicating with the requestor system. ### Claim 10 (depends on 8) The method of claim 8, further comprising selecting the lens from a group of lenses, wherein the lens is selected based on an indication received from one of: the requestor system, or the secured source. ### Claim 11 (depends on 8) The method of claim 8, wherein the lens includes one or more filter criteria, and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data. ### Claim 12 (depends on 8) The method of claim 8, wherein the lens comprises multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements. ### Claim 13 (depends on 8) The method of claim 8, further comprising: during the time period, determining (i) multiple dates associated with the portion of the secured data and (ii) a range of time associated with the multiple dates, wherein generating the adjusted data comprises one of: generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates. ### Claim 14 (depends on 8) The method of claim 8, further comprising: determining an attribute based on the selected portion of the secured data; determining a trust associated with the attribute; and generating a score based on the attribute and the associated trust, wherein the adjusted data includes the generated score. ### Claim 15 (depends on 14) The method of claim 14, wherein the attribute indicates an equivalency relationship between the selected portion of the secured data and the requested information. ### Claim 16 A non-transitory computer-readable storage medium having program code that is executable by a processor device to cause a computing device to perform operations comprising: providing, to a secured source, an access request indicating requested information by a requestor system; receiving, from the secured source, secured data including the requested information and an identification of a time period; and controlling access of the requestor system to the secured data during the time period, wherein controlling access to the secured data comprises: selecting, based on a lens, a portion of the secured data, generating, on a memory device, adjusted data based on the lens and the selected portion of the secured data, wherein the adjusted data comprises the requested information and a modification of the selected portion of the secured data, the modification comprising multi-granularity data including high-granularity data from a first part of the selected portion of the secured data and low-granularity data based on a second part of the selected portion of the secured data, enabling the adjusted data accessible by the requestor system and subsequent to completion of the time period: preventing the requestor system from accessing the adjusted data, and deleting the adjusted data from the memory device. ### Claim 17 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the operations further comprise selecting the lens from a group of lenses, wherein the lens is selected based on an indication received from one of: the requestor system, or the secured source. ### Claim 18 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the lens comprises one or more filter criteria and the adjusted data is generated based on a filtered portion of the secured data selected by applying the one or more filter criteria to the secured data. ### Claim 19 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the lens comprises multiple filter criteria, wherein the filter criteria are each related to a given one of: anonymization, data equivalence, data abstraction, time decay, financial attributes, user preferences, data confidence, data granularity, categorization, transaction data, or regulatory requirements. ### Claim 20 (depends on 16) The non-transitory computer-readable storage medium of claim 16, wherein the operations further comprise: during the time period, determining (i) multiple dates associated with the portion of the secured data and (ii) a range of time associated with the multiple dates, wherein generating the adjusted data comprises one of: generating extrapolated data based on the multiple dates and a first target time range that is greater than the range of time associated with the multiple dates, or generating interpolated data based on the multiple dates and a second target time range that is less than the range of time associated with the multiple dates.