Limiting data exposure in authenticated multi-system transactions
AssigneeThe Active Network, Inc.
InventorDoug Johnson
Life of this patent
Estimating the term…
Abstract
The limiting of data exposure in authenticated multi-system transactions is disclosed. A client system authenticates and requests secured data and unsecured data with an initial system. The initial system transmits to an external system a token request that corresponds to the request for the secured data. A token is generated and passed to the initial system, which relays the same to the client system. The client system uses the token to access the secured data on the external system, while also retrieving the unsecured data on the initial system. The initial system thus does not have access to the secured data, while the request therefor is known.
Claims11
A method for limiting exposure of secured data in an authenticated transaction over multiple systems, the method comprising:
- receiving a transaction request from an authenticated user of a client system on an initial system;
- deriving from the transaction request a first request for the secured data stored on an external system independent of the initial system and a second request for unsecured data stored on the initial system, the first request and the second request being combined in the transaction request;
- transmitting to the external system a token request corresponding to the first request for the secured data, the external system being configured to generate a token associated with the token request;
- receiving on the initial system the generated token from the external system;
- and
- transmitting from the initial system to the client system the token and the requested unsecured data stored on the initial system;
- wherein the token is presentable by the client system to the external system to retrieve the secured data stored on the external system independently of the transmission of the unsecured data upon validation of the token thereby by the external system.
An article of manufacture comprising a non-transitory program storage medium readable by a computer, the medium tangibly embodying one or more programs of instructions executable by the computer to perform a method for limiting exposure of secured data in an authenticated transaction over multiple systems, the method comprising:
- receiving a transaction request from an authenticated user of a client system on an initial system;
- deriving from the transaction request a first request for the secured data stored on an external system independent of the initial system and a second request for unsecured data stored on the initial system, the first request and the second request being combined in the transaction request;
- transmitting to the external system a token request corresponding to the first request for the secured data, the external system being configured to generate a token associated with the token request;
- receiving on the initial system the generated token from the external system;
- and
- transmitting from the initial system to the client system the token and the requested unsecured data stored on the initial system;
- wherein the token is presentable by the client system to the external system to retrieve the secured data stored on the external system independently of the transmission of the unsecured data upon validation of the token by the external system.
Dependencies are inferred from the claim text.