Method and system for sensitive data abstraction

• US 9,819,655 B1
• Filed: 03/20/2017
• Issued: 11/14/2017
• Est. Priority Date: 04/08/2015
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Desai, Prashant, Barrera, Bryant R.
• Primary Examiner(s): Brown, Anthony
• Application Number:
  US15/463,329
• Time in Patent Office: 239 Days
• Field of Search: 726 2- 4
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 69/28 Timers or timing mechanisms used in protocols
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04M 3/51 Centralised call answering arrangements requiring operator intervention , e.g. call or contact centers for telemarketing

Abstract

According to an embodiment of the present invention, a system and method for transmitting sensitive data in a contact center environment comprising a transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data; a computer processor, coupled to the computer store and programmed to: generate, using a computer processor, a transient key associated with a subset of data for the customer based on the current interaction data and a customer identity; transmit, using a computer processor, the transient key and non-sensitive data to the live agent; receive a request, the transient key and a requester identifier from a requesting component of the system, and identify a corresponding subset of data responsive to the transient key and the requester identifier.

Claims

1. An automated computer implemented system for transmitting sensitive data in a contact center environment, wherein the system comprising:

a transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data;

a computer processor, coupled to the computer store and programmed to;

receive from a remote customer, an electronic request to interact with for an agent during a current contact;

generate, using a computer processor, an electronic transient key associated with a subset of data for the remote customer;

transmit, using a computer processor, the electronic transient key and non-sensitive data to the agent in the contact center environment;

receive a request comprising the electronic transient key and a requester identifier from a requesting component of the system,

identify a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determine whether the corresponding subset of data comprises sensitive data;

transmit the corresponding subset of data to the requesting component; and

automatically remove the electronic transient key from the transient datastore.

2. The system of claim 1, wherein the electronic transient key comprises a token that expires after a predetermined period of time.

3. The system of claim 1, wherein a security feature is applied to the corresponding subset of data, the security feature comprises an encryption algorithm.

4. The system of claim 1, wherein the electronic transient key is removed from the transient database after a predetermined time period.

5. The system of claim 1, wherein the current content comprises interaction with an interactive voice response unit.

6. The system of claim 1, wherein the electronic transient key is encrypted or hashed.

7. The system of claim 1, wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

8. The system of claim 1, wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.

9. The system of claim 1, wherein the requesting component comprises an intermediate processing system.

10. The system of claim 1, wherein the corresponding subset of data is predetermined based on the requester identifier.

17. The method of claim 1, wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

11. An automated computer implemented method for transmitting sensitive data in a contact center environment, wherein the method comprising the steps of:

receiving, via an electronic input, from a remote customer, an electronic request to interact with for an agent during a current contact;

generating, using a computer processor, an electronic transient key associated with a subset of data for the remote customer;

transmitting, using a computer processor, the electronic transient key and non-sensitive data to the agent in the contact center environment;

receiving a request comprising the electronic transient key and a requester identifier from a requesting component of the system,

identifying a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determining whether the corresponding subset of data comprises sensitive data;

transmitting the corresponding subset of data to the requesting component; and

automatically removing the electronic transient key from the transient datastore;

the transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data.

12. The method of claim 11, wherein the electronic transient key comprises a token that expires after a predetermined period of time.

13. The method of claim 11, wherein a security feature is applied to the corresponding subset of data, the security feature comprises an encryption algorithm.

14. The method of claim 11, wherein the electronic transient key is removed from the transient database after a predetermined time period.

15. The method of claim 11, wherein the current content comprises interaction with an interactive voice response unit.

16. The method of claim 11, wherein the electronic transient key is encrypted or hashed.

18. The method of claim 11, wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.

19. The method of claim 11, wherein the requesting component comprises an intermediate processing system.

20. The method of claim 11, wherein the corresponding subset of data is predetermined based on the requester identifier.