Patent ID: 11972016
Assignee: CAPITAL ONE SERVICES, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 9:
10. A system comprising:
a memory; and
at least one processor coupled to the memory and configured to perform operations comprising:
receiving a web form from a transaction account of a web application associated with a first user operating a first computing device, the web form indicating a request for sensitive information of a second user, wherein the first user is performing a transaction on behalf of the second user through the transaction account of the web application, wherein the web application is hosted across one or more servers and the transaction account of the first user is accessible from the first computing device;
verifying that the sensitive information of the second user exists in a data management system;
identifying, by one or more processors, contact information for the second user from the data management system;
providing, by the one or more processors, an electronic request for an authorization to the second user based on the contact information, wherein the electronic request for the authorization requests permission to release the sensitive information of the second user to the web application based on the request for the sensitive information from the transaction account associated with the first user, wherein the providing the electronic request for the authorization is performed subsequent to receiving the web form requesting the sensitive information;
receiving, responsive to the electronic request for the authorization, an authorization from the second user to release the sensitive information to the web application;
populating the web form with the sensitive information of the second user responsive to receiving the authorization from the second user to release the sensitive information; and
providing the populated web form including the sensitive information of the second user to the one or more servers hosting the web application, wherein the populated web form is inaccessible to the transaction account associated with the first user operating the first computing device.