US 12,413,628 B2
Authentication of data sharing
Eric K. Barnum, Midlothian, VA (US); and Robert Dwane Wokaty, Jr., Glen Allen, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Nov. 5, 2021, as Appl. No. 17/453,769.
Prior Publication US 2023/0145127 A1, May 11, 2023
Int. Cl. H04L 9/40 (2022.01); G06F 21/00 (2013.01); G06F 21/60 (2013.01); G06Q 20/40 (2012.01)
CPC H04L 63/205 (2013.01) [G06F 21/604 (2013.01); G06Q 20/40145 (2013.01); H04L 63/0853 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for authentication of data sharing, the system comprising:
one or more memories; and
one or more processors, communicatively coupled to the one or more memories, configured to:
receive, from a terminal, an account identifier, a biometric credential, and a request for data associated with a user based on an interaction between the terminal and a physical medium associated with the account identifier,
wherein the biometric credential is communicated from the physical medium to the terminal, and
wherein the request is one of:
a specific request that identifies one or more requested data items associated with the account identifier, or
a general request that does not identify any requested data items;
authenticate the request using the biometric credential;
identify user contact information associated with the account identifier based on authenticating the request;
transmit a message to a user device based on the user contact information, wherein content of the message depends on whether the request is the specific request or the general request;
receive, from the user device, an indication to approve transmission of the data to a third party device associated with the terminal,
wherein the indication approves transmission of the one or more requested data items if the request is the specific request, or
wherein the indication indicates one or more user-specified data items to be transmitted to the third party device if the request is the general request; and
transmit the data or information that enables access to the data to the third party device based on receiving the indication,
wherein the data includes the one or more requested data items if the request is the specific request, or
wherein the data includes the one or more user-specified data items if the request is the general request.