US 12,229,312 B2
Methods and systems for leveraging existing user data to verify user credentials
Ya Liu, Arlington, VA (US); and Matthew Carson, Arlington, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Jan. 10, 2024, as Appl. No. 18/409,273.
Application 18/409,273 is a continuation of application No. 18/183,105, filed on Mar. 13, 2023, granted, now 11,907,400.
Application 18/183,105 is a continuation of application No. 17/710,883, filed on Mar. 31, 2022, granted, now 11,630,915, issued on Apr. 18, 2023.
Application 17/710,883 is a continuation of application No. 16/883,680, filed on May 26, 2020, granted, now 11,321,484, issued on May 3, 2022.
Application 16/883,680 is a continuation of application No. 16/654,046, filed on Oct. 16, 2019, granted, now 10,685,137, issued on Jun. 16, 2020.
Prior Publication US 2024/0143832 A1, May 2, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 16/2455 (2019.01); G06F 21/62 (2013.01); H04W 12/02 (2009.01); H04W 12/06 (2021.01)
CPC G06F 21/6245 (2013.01) [G06F 16/2455 (2019.01); H04L 63/08 (2013.01); H04W 12/02 (2013.01); H04W 12/06 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for protecting personal data while verifying user credentials, the system comprising:
a database configured to store user data for a user; and
control circuitry configured to:
receive, from a remote computing device, a verification request for credentials of the user and user-provided data corresponding to the verification request;
determine whether the user-provided data includes a category of required data for the verification request based on a type of the verification request, an identity of a requestor of the verification request, and a verification request purpose of the verification request;
in response to determining that the user-provided data includes the category:
verify the user-provided data in the category using the stored user data;
in response to verifying the user-provided data in the category, generate an assurance level of the credentials of the user based on a default algorithm;
in response to determining that the user-provided data does not include the category:
determine whether a criterion associated with the stored user data in the category is approved by the user for use in responding to the verification request to protect the stored user data in response to determining that the stored user data includes the category;
generate the assurance level of the credentials of the user in response to determining that the criterion is approved by the user for use in responding to the verification request to protect the stored user data; and
transmitting the assurance level to the remote computing device.