Method and system for sensitive data abstraction

• US 9,628,488 B1
• Filed: 04/08/2015
• Issued: 04/18/2017
• Est. Priority Date: 04/08/2015
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Barrera, Bryant R., Desai, Prashant
• Primary Examiner(s): Brown, Anthony
• Application Number:
  US14/681,421
• Time in Patent Office: 741 Days
• Field of Search: 726 4
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 69/28 Timers or timing mechanisms used in protocols
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04M 3/51 Centralised call answering arrangements requiring operator intervention , e.g. call or contact centers for telemarketing

Abstract

According to an embodiment of the present invention, a system and method for transmitting sensitive data in a contact center environment comprising a transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data; a computer processor, coupled to the computer store and programmed to: generate, using a computer processor, a transient key associated with a subset of data for the customer based on the current interaction data and a customer identity; transmit, using a computer processor, the transient key and non-sensitive data to the live agent; receive a request, the transient key and a requester identifier from a requesting component of the system, and identify a corresponding subset of data responsive to the transient key and the requester identifier.

Claims

1. An automated computer implemented system for transmitting sensitive data in a contact center environment, wherein the system comprising:

a transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data;

a computer processor, coupled to the computer store and programmed to;

receive, via an electronic input, a contact from a remote customer via an electronic communication channel;

automatically capture current interaction data during a current contact between the remote customer and an automated interactive entity;

receive, from the remote customer, an electronic request to interact with a live agent during the current contact;

responsive to the current contact, generate, using a computer processor, an electronic transient key associated with a subset of data for the remote customer based on the current interaction data and a customer identity;

transmit, using a computer processor, the electronic transient key and non-sensitive data to the live agent in the contact center environment;

receive a request, the electronic transient key and a requester identifier from a requesting component of the system,

identify a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determine an appropriate security feature for the corresponding subset of data;

transmit only the corresponding subset of data with the appropriate security feature to the requesting component; and

automatically remove the electronic transient key from the transient datastore after a predetermined event.

2. The system of claim 1, wherein the electronic transient key comprises a token that expires after a predetermined period of time.

3. The system of claim 1, wherein the security feature comprises an encryption algorithm.

4. The system of claim 1, wherein the predetermined event comprises a time period.

5. The system of claim 1, wherein the automated interactive entity comprises an interactive voice response unit.

6. The system of claim 1, wherein the electronic transient key is encrypted or hashed.

7. The system of claim 1, wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

8. The system of claim 1, wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.

9. The system of claim 1, wherein the requesting component comprises an intermediate processing system.

10. The system of claim 1, wherein the corresponding subset of data is predetermined based on the requester identifier.

19. The method of claim 1, wherein the requesting component comprises an intermediate processing system.

20. The method of claim 1, wherein the corresponding subset of data is predetermined based on the requester identifier.

11. An automated computer implemented method for transmitting sensitive data in a contact center environment, wherein the method comprising the steps of:

receiving, via an electronic input, a contact from a remote customer via an electronic communication channel;

automatically capturing current interaction data during a current contact between the customer and an automated interactive entity;

receiving, from the remote customer, an electronic request to interact with a live agent during the current contact;

responsive to the current contact, generating, using a computer processor, an electronic transient key associated with a subset of data for the customer based on the current interaction data and a customer identity;

transmitting, using a computer processor, the electronic transient key and non-sensitive data to the live agent in the contact center environment;

receiving a request, the electronic transient key and a requester identifier from a requesting component of the system,

identifying a corresponding subset of data responsive to the electronic transient key and the requester identifier;

determining an appropriate security feature for corresponding the subset of data;

transmitting only the corresponding subset of data with the appropriate security feature to the requesting component; and

automatically removing the electronic transient key from a transient datastore after a predetermined event;

the transient datastore containing data, for each customer, defining a customer'"'"'s profile including historical interactions with a host entity and account information, the customer profile containing sensitive and non-sensitive data.

12. The method of claim 11, wherein the electronic transient key comprises a token that expires after a predetermined period of time.

13. The method of claim 11, wherein the security feature comprises an encryption algorithm.

14. The method of claim 11, wherein the predetermined event comprises a time period.

15. The method of claim 11, wherein the automated interactive entity comprises an interactive voice response unit.

16. The method of claim 11, wherein the electronic transient key is encrypted or hashed.

17. The method of claim 11, wherein the electronic transient key comprises a producer identifier, a consumer client identifier, a data sequence identifier and data sensitivity identifier.

18. The method of claim 11, wherein the electronic transient key is further associated with an application name, client identifier, and DNS name.