# US 2026/0093599 A1 · Systems and methods for tracing used data by secondary entities > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0093599 A1 - Document ID: US20260093599A1 - Status: Published application - Kind: A1 - Application number: 18/904,475 - Filed: 2024-10-02 - Published: 2026-04-02 - Earliest claimed: 2024-10-02 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Manu Kurian; Sandra L. Dube; Marshall A. Johnson; Ana Maxim; Kathlyn Rooney; Sarah E. Tripodi; Michael R. Young - Web page: https://patentgrep.com/patent/US20260093599A1 ## CPC - G06F 11/3495: {for systems} - G06F 9/451: Execution arrangements for user interfaces - G06F 11/3438: {monitoring of user actions (tracking the activity of the user H04L67/535)} - H04L 63/10: {for controlling access to devices or network resources} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, computer program products, and methods are described herein for tracing used data by secondary entities. The present invention is configured to receive user data, store the user data on a distributed ledger, receive, from a plurality of entities, requests for access to subsets of the user data, render a first GUI for receiving input identifying permission levels for the plurality of entities to access the user data, provide the first GUI to a user device, receive a selected permission level for an entity selected by the user using the first GUI, generate a smart contract on the distributed ledger that permits devices with a token to access a subset of the user data, provide the token to a device associated with the selected entity, render a second GUI including a log of interactions, and provide the second GUI to the user device for display to the user. ## Claims ### Claim 1 A system for tracing used data by secondary entities, the system comprising: a network interface configured to communicate via a communication network; a non-transitory storage device comprising computer program code stored thereon; and a processing device operably coupled to the network interface, and the non-transitory storage device, wherein the computer program code comprises computer instructions configured to cause the processing device to: receive, using the network interface, user data associated with a user; store the user data on a distributed ledger; receive, from a plurality of entities, requests for access to subsets of the user data; render a first graphical user interface (GUI) for receiving, from the user, input identifying permission levels for the plurality of entities to access the user data; provide, using the network interface, the first GUI to a user device associated with the user for display to the user; receive, from the user device and using the network interface, a selected permission level for an entity of the plurality of entities selected by the user using the first graphical user interface, wherein each entity of the plurality of entities has a different permission level or a same permission level; generate, using the network interface, a smart contract on the distributed ledger that permits devices with a token to access a subset of the user data; provide, using the network interface, the token to a device associated with the selected entity; render a second GUI comprising a log of interactions between the selected entity and the subset of the user data; and provide, using the network interface, the second GUI to the user device associated with the user for display to the user. ### Claim 2 (depends on 1) The system of claim 1, wherein the selected permission level comprises: the subset of the user data the selected entity is allowed to access; a duration of allowed use of the subset of the user data; restrictions on the allowed use of the subset of the user data; and permissions regarding the selected entity distributing access to the subset of the user data to other entities. ### Claim 3 (depends on 2) The system of claim 2, wherein the system is configured to: render a third (GUI) comprising an up-to-date list of entities with active access to subsets of the user data; and provide, using the network interface, the third GUI to the user device associated with the user for display to the user. ### Claim 4 (depends on 3) The system of claim 3, wherein the third GUI comprises a map of access distributed by entities with permission to distribute access to subsets of the user data to other entities. ### Claim 5 (depends on 1) The system of claim 1, comprising a subsystem configured to: receive, using the network interface, the token from the device associated with the selected entity; analyze the smart contract on the distributed ledger associated with the token; determine the subset of the user data the selected entity is allowed to access via the token; generate a data packet of the subset of the user data the selected entity is allowed to access; provide, using the network interface, the data packet to the device associated with the selected entity; restrict any attempts to remove data from the data packet; and purge the data packet from the subsystem, upon the device of the selected entity terminating viewing of the data packet. ### Claim 6 (depends on 1) The system of claim 1, comprising an AI model configured to: receive, using the network interface, the requests for access to subsets of the user data; analyze a request of the requests for access; generate a threat determination of the request; approve, if the threat determination is below a threshold set by the user, the request automatically; generate, if the threat determination is above a threshold set by the user, a recommended response to the request; and transmit, using the network interface, a notification to the user device associated with the user comprising the recommended response to the request. ### Claim 7 (depends on 1) The system of claim 1, wherein the user inputting permission levels associated with the user data is a caretaker of the user data. ### Claim 8 A computer program product for tracing used data by secondary entities, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to: receive, using a network interface, user data associated with a user; store the user data on a distributed ledger; receive, from a plurality of entities, requests for access to subsets of the user data; render a first graphical user interface (GUI) for receiving, from the user, input identifying permission levels for the plurality of entities to access the user data; provide, using the network interface, the first GUI to a user device associated with the user for display to the user; receive, from the user device and using the network interface, a selected permission level for an entity of the plurality of entities selected by the user using the first graphical user interface, wherein each entity of the plurality of entities has a different permission level or a same permission level; generate, using the network interface, a smart contract on the distributed ledger that permits devices with a token to access a subset of the user data; provide, using the network interface, the token to a device associated with the selected entity; render a second GUI comprising a log of interactions between the selected entity and the subset of the user data; and provide, using the network interface, the second GUI to the user device associated with the user for display to the user. ### Claim 9 (depends on 8) The computer program product of claim 8, wherein the selected permission level comprises: the subset of the user data the selected entity is allowed to access; a duration of allowed use of the subset of the user data; restrictions on the allowed use of the subset of the user data; and permissions regarding the selected entity distributing access to the subset of the user data to other entities. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein the code causes the apparatus to: render a third (GUI) comprising an up-to-date list of entities with active access to subsets of the user data; and provide, using the network interface, the third GUI to the user device associated with the user for display to the user. ### Claim 11 (depends on 10) The computer program product of claim 10, wherein the third GUI comprises a map of access distributed by entities with permission to distribute access to subsets of the user data to other entities. ### Claim 12 (depends on 8) The computer program product of claim 8, comprising code causing a subsystem to: receive, using the network interface, the token from the device associated with the selected entity; analyze the smart contract on the distributed ledger associated with the token; determine the subset of the user data the selected entity is allowed to access via the token; generate a data packet of the subset of the user data the selected entity is allowed to access; provide, using the network interface, the data packet to the device associated with the selected entity; restrict any attempts to remove data from the data packet; and purge the data packet from the subsystem, upon the device of the selected entity terminating viewing of the data packet. ### Claim 13 (depends on 8) The computer program product of claim 8, comprising code causing an AI model to: receive, using the network interface, the requests for access to subsets of the user data; analyze a request of the requests for access; generate a threat determination of the request; approve, if the threat determination is below a threshold set by the user, the request automatically; generate, if the threat determination is above a threshold set by the user, a recommended response to the request; and transmit, using the network interface, a notification to the user device associated with the user comprising the recommended response to the request. ### Claim 14 (depends on 8) The computer program product of claim 8, wherein the user inputting permission levels associated with the user data is a caretaker of the user data. ### Claim 15 A method for tracing used data by secondary entities, the method comprising: receiving, using a network interface, user data associated with a user; storing the user data on a distributed ledger; receiving, from a plurality of entities, requests for access to subsets of the user data; rendering a first graphical user interface (GUI) for receiving, from the user, input identifying permission levels for the plurality of entities to access the user data; providing, using the network interface, the first GUI to a user device associated with the user for display to the user; receiving, from the user device and using the network interface, a selected permission level for an entity of the plurality of entities selected by the user using the first graphical user interface, wherein each entity of the plurality of entities has a different permission level or a same permission level; generating, using the network interface, a smart contract on the distributed ledger that permits devices with a token to access a subset of the user data; providing, using the network interface, the token to a device associated with the selected entity; rendering a second GUI comprising a log of interactions between the selected entity and the subset of the user data; and providing, using the network interface, the second GUI to the user device associated with the user for display to the user. ### Claim 16 (depends on 15) The method of claim 15, wherein the selected permission level comprises: providing the subset of the user data the selected entity is allowed to access; providing a duration of allowed use of the subset of the user data; providing restrictions on the allowed use of the subset of the user data; and providing permissions regarding the selected entity distributing access to the subset of the user data to other entities. ### Claim 17 (depends on 16) The method of claim 16, wherein the method comprises: rendering a third (GUI) comprising an up-to-date list of entities with active access to subsets of the user data; and providing, using the network interface, the third GUI to the user device associated with the user for display to the user. ### Claim 18 (depends on 17) The method of claim 17, wherein the third GUI comprises a map of access distributed by entities with permission to distribute access to subsets of the user data to other entities. ### Claim 19 (depends on 15) The method of claim 15, comprising a subsystem configured for: receiving, using the network interface, the token from the device associated with the selected entity; analyzing the smart contract on the distributed ledger associated with the token; determining the subset of the user data the selected entity is allowed to access via the token; generating a data packet of the subset of the user data the selected entity is allowed to access; providing, using the network interface, the data packet to the device associated with the selected entity; restricting any attempts to remove data from the data packet; and purging the data packet from the subsystem, upon the device of the selected entity terminating viewing of the data packet. ### Claim 20 (depends on 15) The method of claim 15, comprising an AI model configured for: receiving, using the network interface, the requests for access to subsets of the user data; analyzing a request of the requests for access; generating a threat determination of the request; approving, if the threat determination is below a threshold set by the user, the request automatically; generating, if the threat determination is above a threshold set by the user, a recommended response to the request; and transmitting, using the network interface, a notification to the user device associated with the user comprising the recommended response to the request.