Workflow Token Mediator for Secure Data Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face challenges in securely and efficiently sharing personal contact information with third-party entities for electronic activities, leading to potential data compromise and cumbersome processes.

Innovation Solution

A computer-based method and system that utilize a device-specific workflow token to execute secure workflows without accessing user data directly, enabling secure and direct communication between users and third-party entities while maintaining user data confidentiality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users provide personal contact information to third-party entities for electronic activities, then communication processes can be performed, but user data security deteriorates and data compromise risk increases

Engineering Contradiction:

Improvecommunication processVSAvoiduser data security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces a workflow service as an intermediary between the user and the third-party entity. The workflow service receives requests from third-party entities, executes workflows using user data stored in a secure database, and returns results without exposing the user data to the third-party entities. This mediator architecture enables communication functionality while maintaining data security through the secure workflow service layer.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If users share contact information with third-party entities, then direct contact can be established, but user control over personal information deteriorates

Engineering Contradiction:

Improvedirect contact capabilityVSAvoiduser control over personal information

Core Design Contradiction:

Ease of operationVSLoss of information

Solution Approach 1:

The workflow service acts as an intermediary that enables direct contact capability without transferring user data control to third-party entities. The service executes workflows that can communicate with users while all data processing occurs within the secure workflow service boundaries, maintaining user control over their personal information.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the system into distinct components: a secure workflow service that handles data processing, a user interface for user interactions, and third-party entity interfaces. This segmentation allows direct contact functionality to be implemented through workflow execution while keeping user data isolated in the secure service layer, preventing data loss to third-party entities.

Inventive Principle:

Principle #1Segmentation

3Productivity

If user data is stored with third-party entities for processing, then electronic activities can be performed, but data compromise opportunities increase

Engineering Contradiction:

Improveelectronic activity processingVSAvoiddata compromise opportunities

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The workflow service serves as a secure intermediary that processes electronic activities without requiring third-party entities to store or access user data. The service executes workflows that perform necessary processing operations while maintaining data isolation, thereby enabling productivity while eliminating data compromise opportunities at third-party locations.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Adaptability or versatility

If multiple entities access user data for various activities, then service functionality is enhanced, but data management complexity increases

Engineering Contradiction:

Improveservice functionalityVSAvoiddata management complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The workflow service provides universal functionality to handle various electronic activities and third-party requests through a single unified system. The service can execute different workflows for different purposes (communication, data processing, verification) while maintaining a consistent secure data management approach, thereby enhancing service versatility without increasing data management complexity through multiple separate systems.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20220198394A1Secured data workflow integration and methods thereof

Publication Date: 2022.06.23 CAPITAL ONE SERVICES LLC

AI summary

The present disclosure includes systems and methods enabling secure workflows by using a processor to receive an activity verification request from an initiator device associated with an entity in response to a user interaction by a user, where the activity verification request includes an identifier in an auxiliary data field of a messaging standard. Using the identifier from the auxiliary data field, the processor determines a secure workflow and generates a workflow token for validation with a workflow service. The processor transmits the workflow token to the initiator device and receives from the initiator device a workflow request including the workflow token. The processor executes, within the workflow service, an instance of the secure workflow according to the workflow request and confidential user data of the user inaccessible to the entity. The processor generates a notification according to the execution of the instance of the secure workflow.