SYSTEM AND METHOD FOR PROVIDING LIMITED ACCESS TO DATA

• US 20180013749A1
• Filed: 09/21/2017
• Published: 01/11/2018
• Est. Priority Date: 05/12/2010
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Financial Corporation
• Inventors: CHAPMAN, Jeffrey Michael
• Granted Patent: US 10,454,923 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system and computer-implemented method for providing access to data of a first party including receiving information for identifying the first party, authenticating the first party using the received information for identifying the first party and generating a first read-only personal identification number (PIN). The first read-only PIN is associated with a first set of access rights for the data of the first party and provided to a second party. The first read-only PIN is stored with the first set of access rights in a computer database. A third party receives the first read-only PIN from the second party, authenticates the received first read-only PIN using the stored first read-only PIN and provides the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

Claims

1. A computer-implemented method for providing access to data of a first party, the data stored in a computer database, comprising:

(a) receiving information for identifying the first party;

(b) authenticating the first party using the received information for identifying the first party;

(c) generating a first read-only personal identification number (PIN);

(d) associating the first read-only PIN with a first set of access rights for the data of the first party;

(e) providing the first read-only PIN to a second party;

(f) storing the first read-only PIN with the first set of access rights in the computer database;

(g) receiving the first read-only PIN from the second party;

(h) authenticating the received first read-only PIN using the stored first read-only PIN; and

(i) providing the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

2. The method of claim 1, further comprising:

(a) providing the first read-only PIN to a third party;

(b) receiving the first read-only PIN from the third party;

(c) authenticating the received first read-only PIN using the stored first read-only PIN; and

(d) providing the third party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

3. The method of claim 2, further comprising:

(a) determining usage information for the first read-only PIN; and

(b) providing the first party with the determined usage information.

4. The method of claim 2, further comprising:

cancelling the first read-only PIN to prevent access by the second party and the third party to the at least a portion of the data of the first party associated with the first set of access rights of the first read-only PIN.

5. The method of claim 4, further comprising:

(a) generating a second read-only personal identification number (PIN);

(b) associating the second read-only PIN with a second set of access rights for the data of the first party;

(c) providing the second read-only PIN to a fourth party;

(d) storing the second read-only PIN with the second set of access rights;

(e) receiving the first read-only PIN from the fourth party;

(f) authenticating the received second read-only PIN using the stored second read-only PIN; and

(g) providing the fourth party with access to at least a portion of the data of the first party using the second set of access rights associated with the second read-only PIN if the received second read-only PIN is authenticated.

6. The method of claim 5, wherein the fourth party is identical to the second party or the third party.

7. The method of claim 1, wherein the first set of access rights to the data of the first party is selected from the group consisting of:

rights to read the data, rights to view the data, rights to modify the data, rights to manipulate the data, rights to download the data, rights to upload the data, rights to transfer the data, rights to share the data, rights to aggregate the data, rights to mine the data, rights to analyze the data, access rights to a subset of the data, duration of access rights to the data, time of access rights to the data, payment requirements for receiving access rights to the data, terms and conditions for the data, and combinations thereof.

8. The method of claim 7, wherein the first set of access rights comprises rights to view the data and rights to modify a subset of the data.

9. The method of claim 8, further comprising:

(a) storing the data of the first party in a first computer file of a third party; and

(b) storing the subset of the data of the first party in a second computer file of the third party.

10. The method of claim 7, wherein the first set of access rights comprises payment requirements for receiving access rights to the data.

11. The method of claim 10, further comprising:

(a) receiving a payment from the second party;

(b) processing the received payment; and

(c) providing the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the first read-only PIN is authenticated and if the payment from the second party is received.

12. The method of claim 1, further comprising:

(a) selecting a third party for receiving the first read-only PIN;

(b) associating the first read-only PIN with information for identifying the selected third party and with a second set of access rights for the data of the first party;

(c) storing the first read-only PIN with the information for identifying the selected third party and with the second set of access rights in the computer database;

(d) receiving at least a portion of the information for identifying the selected third party;

(e) receiving the first read-only PIN from the selected third party;

(f) authenticating the received first read-only PIN using the stored first read-only PIN;

(g) authenticating the selected third party using the received at least a portion of the information for identifying the selected third party and the stored information for identifying the selected third party; and

(h) providing the selected third party with access to at least a portion of the data of the first party using the second set of access rights associated with the first read-only PIN if the first read-only PIN and the selected third party are authenticated.

13. The method of claim 1, wherein the first read-only PIN is a pseudo-randomly generated numeric value.

14. A computer-implemented method for providing access to data of a first party, the data stored in a computer database, comprising:

(a) receiving information for identifying the first party;

(b) authenticating the first party using the received information for identifying the first party;

(c) generating at least two unique read-only personal identification numbers (PINs);

(d) associating each unique read-only PIN with a unique party and a unique set of access rights for the data of the first party;

(e) providing each unique read-only PIN to each associated unique party;

(f) storing each unique read-only PIN with each associated unique set of access rights in the computer database;

(g) receiving one of said unique read-only PINs from the unique party associated with the received unique read-only PIN;

(h) authenticating the received unique read-only PIN using the stored read-only PINs; and

(i) providing the unique party associated with the received unique read-only PIN with access to at least a portion of the data of the first party using the unique set of access rights associated with the unique read-only PIN if the received unique read-only PIN is authenticated.

15. The method of claim 14, further comprising:

(a) determining usage information for one of the unique read-only PINs; and

(b) providing the first party with the determined usage information.

16. The method of claim 14, further comprising:

cancelling a unique read-only PIN to prevent access by the unique party associated with the cancelled unique read-only PIN to the at least a portion of the data of the first party associated with the unique set of access rights of the cancelled unique read-only PIN.

17. The method of claim 14, wherein each unique set of access rights to the data of the first party is selected from the group consisting of:

rights to read the data, rights to view the data, rights to modify the data, rights to manipulate the data, rights to download the data, rights to upload the data, rights to transfer the data, rights to share the data, rights to aggregate the data, rights to mine the data, rights to analyze the data, access rights to a subset of the data, duration of access rights to the data, time of access rights to the data, payment requirements for receiving access rights to the data, terms and conditions for the data, and combinations thereof.

18. The method of claim 17, wherein a set of access rights comprises rights to view the data and rights to modify a subset of the data.

19. The method of claim 18, further comprising:

(a) storing the data of the first party in a first computer file of a second party; and

(b) storing the subset of the data of the first party in a second computer file of the second party.

20. The method of claim 19, wherein a set of access rights comprises payment requirements for receiving access rights to the data.

21. The method of claim 20, further comprising:

(a) receiving a payment from a party associated with a unique set of access rights comprising payment requirements for receiving access rights to the data;

(b) processing the received payment;

(c) receiving a read-only PINs from the paying party;

(d) authenticating the received read-only PIN using the stored read-only PINs; and

(e) providing the paying party with access to at least a portion of the data of the first party using the unique set of access rights associated with the received read-only PIN if the received read-only PIN is authenticated and if the payment from the paying party is processed.

22. The method of claim 14, wherein each unique read-only PIN is a pseudo-randomly generated numeric value.

23. A system for providing access to data of a first party, comprising:

a computer processor having a computer readable storage medium, the computer readable storage medium comprising computer-executable instructions stored therein for executing on said processor, said instructions for causing said processor to;

(a) receive information for identifying the first party;

(b) authenticate the first party using the received information for identifying the first party;

(c) generate a first read-only personal identification number (PIN);

(d) associate the first read-only PIN with a first set of access rights for the data of the first party;

(e) provide the first read-only PIN to a second party;

(f) store the first read-only PIN with the first set of access rights;

(g) receive the first read-only PIN from the second party;

(h) authenticate the received first read-only PIN using the stored first read-only PIN; and

(i) provide the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

24. The system of claim 23, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) provide the first read-only PIN to a third party;

(b) receive the first read-only PIN from the third party;

(c) authenticate the received first read-only PIN using the stored first read-only PIN; and

(d) provide the third party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the received first read-only PIN is authenticated.

25. The system of claim 24, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) determine usage information for the first read-only PIN; and

(b) provide the first party with the determined usage information.

26. The system of claim 24, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

cancel the first read-only PIN to prevent access by the second party and the third party to the at least a portion of the data of the first party associated with the first set of access rights of the first read-only PIN.

27. The system of claim 26, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) generate a second read-only personal identification number (PIN);

(b) associate the second read-only PIN with a second set of access rights for the data of the first party;

(c) provide the second read-only PIN to a fourth party;

(d) store the second read-only PIN with the second set of access rights;

(e) receive the first read-only PIN from the fourth party;

(f) authenticate the received second read-only PIN using the stored second read-only PIN; and

(g) provide the fourth party with access to at least a portion of the data of the first party using the second set of access rights associated with the second read-only PIN if the received second read-only PIN is authenticated.

28. The system of claim 27, wherein the fourth party is identical to the second party or the third party.

29. The system of claim 23, wherein the first set of access rights to the data of the first party is selected from the group consisting of:

rights to read the data, rights to view the data, rights to modify the data, rights to manipulate the data, rights to download the data, rights to upload the data, rights to transfer the data, rights to share the data, rights to aggregate the data, rights to mine the data, rights to analyze the data, access rights to a subset of the data, duration of access rights to the data, time of access rights to the data, payment requirements for receiving access rights to the data, terms and conditions for the data, and combinations thereof.

30. The system of claim 29, wherein the first set of access rights comprises rights to view the data and rights to modify a subset of the data.

31. The system of claim 30, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) store the data of the first party in a first computer file of a third party; and

(b) store the subset of the data of the first party in a second computer file of the third party.

32. The system of claim 29, wherein the first set of access rights comprises payment requirements for receiving access rights to the data.

33. The system of claim 30, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) receive a payment from the second party;

(b) process the received payment; and

(c) provide the second party with access to at least a portion of the data of the first party using the first set of access rights associated with the first read-only PIN if the first read-only PIN is authenticated and if the payment from the second party is received.

34. The system of claim 23, the computer readable storage medium further comprising computer-executable instructions stored therein for causing said processor to:

(a) select a third party for receiving the first read-only PIN;

(b) associate the first read-only PIN with information for identifying the selected third party and with a second set of access rights for the data of the first party;

(c) store the first read-only PIN with the information for identifying the selected third party and with the second set of access rights;

(d) receive at least a portion of the information for identifying the selected third party;

(e) receive the first read-only PIN from the selected third party;

(f) authenticate the received first read-only PIN using the stored first read-only PIN;

(g) authenticate the selected third party using the received at least a portion of the information for identifying the selected third party and the stored information for identifying the selected third party; and

(h) provide the selected third party with access to at least a portion of the data of the first party using the second set of access rights associated with the first read-only PIN if the first read-only PIN and the selected third party are authenticated.

35. The system of claim 23, wherein the first read-only PIN is a pseudo-randomly generated numeric value.

36. A computer-implemented method for providing access to data of a first party, the data stored in a computer database, comprising:

(a) receiving information for identifying the first party;

(b) authenticating the first party using the received information for identifying the first party;

(c) generating at least two unique read-only personal identification numbers (PINs);

(d) associating each unique read-only PIN with a unique party and a unique set of access rights for the data of the first party;

(e) providing each unique read-only PIN to each associated unique party;

(f) storing each unique read-only PIN with each associated unique set of access rights in the computer database;

(g) receiving a payment from a party associated with a unique set of access rights comprising payment requirements for receiving access rights to the data of the first party;

(h) processing the received payment;

(i) receiving a read-only PIN from the paying party;

(j) authenticating the received read-only PIN using the stored read-only PINs; and

(k) providing the paying party with access to at least a portion of the data of the first party using the unique set of access rights associated with the received read-only PIN if the received read-only PIN is authenticated and if the payment from the paying party is processed.