US 12,353,596 B2
System, method, and computer program product for consent management
Kimberly E. Bella, Walnut Creek, CA (US); Nirmal Kumar Baid, San Jose, CA (US); Robert B. Hedges, Jr., Orford, NH (US); David Alan Henstock, San Francisco, CA (US); Shashi Kumar Velur, Austin, TX (US); Sonia Gupta, Pleasanton, CA (US); Cindy Hong, Palo Alto, CA (US); and Jonathan Twichell, Cedar Park, TX (US)
Assigned to Visa International Service Association, San Francisco, CA (US)
Filed by Visa International Service Association, San Francisco, CA (US)
Filed on Feb. 12, 2024, as Appl. No. 18/438,885.
Application 18/438,885 is a continuation of application No. 18/029,701, previously published as PCT/US2022/042136, filed on Aug. 31, 2022.
Claims priority of provisional application 63/314,744, filed on Feb. 28, 2022.
Claims priority of provisional application 63/238,945, filed on Aug. 31, 2021.
Prior Publication US 2024/0184916 A1, Jun. 6, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/62 (2013.01); G06F 16/23 (2019.01)
CPC G06F 21/6245 (2013.01) [G06F 16/2379 (2019.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
receiving, by a consent database, a first data request for user data associated with a user from a requester system, the user data stored in a user data database separate from the consent database;
communicating, by the consent database, a consent request to the requester system for display to the user on a user device associated with the user;
receiving, by the consent database, a consent response from the requester system based on input from the user device, the consent response indicating consent from the user to share the user data requested in the first data request;
storing, by the consent database, consent data associated with the consent response for the user data requested in the first data request;
receiving, by the consent database, a consent verification request from the user data database, the consent verification request based on a second data request for the user data from the requester system to the user data database;
verifying, by the consent database, the consent verification request based on the consent data;
communicating, by the consent database, a consent verification response based on verifying the consent verification request to the user data database, the consent verification response indicating consent from the user to share the user data from the user data database with the requester system;
receiving, by the consent database, from the requester system, utilization data associated with consented use of user data;
comparing, by the consent database, the utilization data associated with the user data with the consent data associated with the user data;
determining, by the consent database, compliance of the utilization data to conditions of the consent data;
storing, by the consent database, an indication of compliance of the utilization data;
receiving, by the consent database, an audit request associated with the user data from the user data database;
communicating, by the consent database, the indication of compliance of the utilization data associated with the user data to the user data database;
receiving, by the consent database, a revocation request of a consent associated with the user data from the user device;
updating, by the consent database, the consent response based on the revocation request; and
communicating, by the consent database, the updated consent response to the user data database.