US 12,284,190 B2
Systems and methods for authenticating data access requests
Denny Devasia Kuruvilla, Toronto (CA); Esli Gjini, Etobicoke (CA); Sarah Reeve, Toronto (CA); Matija Bosnjakovic, Oakville (CA); Guy Dagmara, Toronto (CA); Jaspal Singh Samra, Brampton (CA); Abhiney Natarajan, Stoney Creek (CA); Haobin Li, Kitchener (CA); Richard Yu, Mississauga (CA); Md Abdur Razzak Chowdhury, Mississauga (CA); Dani Kartikay, Brampton (CA); Ryan Wu, Vaughan (CA); Andrey Petrov, Toronto (CA); Peter Horvath, Toronto (CA); Prashanth Dappula, King City (CA); Sivashanthan Sivapalan, Markham (CA); and Nolan Glynn-Udrow, Mississauga (CA)
Assigned to The Toronto-Dominion Bank, Toronto (CA)
Filed by The Toronto-Dominion Bank, Toronto (CA)
Filed on Sep. 26, 2023, as Appl. No. 18/474,748.
Application 18/474,748 is a continuation of application No. 17/583,315, filed on Jan. 25, 2022, granted, now 11,805,134.
Application 17/583,315 is a continuation of application No. 16/520,505, filed on Jul. 24, 2019, granted, now 11,271,947, issued on Mar. 8, 2022.
Prior Publication US 2024/0015166 A1, Jan. 11, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/108 (2013.01) [H04L 63/0428 (2013.01); H04L 63/083 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computing system, comprising:
a processor; and
a memory coupled to the processor, the memory storing instructions that, when executed by the processor, configure the processor to:
authenticate a user for login to a service for a first authenticated user session;
in response to authenticating the user, send, to a client device associated with the user, a first data string associated with a first validity period;
receive, from the client device after expiry of the first authenticated user session, a data access request to access protected data, the data access request including the first data string;
validate the first data string based on checking the first validity period; and
in response to determining that the first authenticated user session has expired and that the first data string is valid, transmit, to the client device, a data access response including at least a subset of the requested protected data.