Patent ID: 11928241
Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 8:
9. A computer program product comprising at least one non-transitory computer-readable medium including one or more program instructions that, when executed by at least one processor, cause the at least one processor to:
receive a first data request comprising at least one use case for user data associated with a user from a requester system, the user data stored in a user data database separate from a consent database;
communicate a response to the first data request to the requester system, the response indicating that the first data request is verified based on determining the to least one use case meets the consent standards associated with at least one permissible user case;
communicate a consent request to the requester system for display to the user on a user device associated with the user;
receive a consent response from the requester system based on input from the user device, the consent response indicating consent from the user to share the user data requested in the first data request;
store consent data associated with the consent response for the user data requested in the first data request in an immutable ledger;
receive a consent verification request from the user data database, the consent verification request based on a second data request for the user data from the requester system to the user data database;
verify the consent verification request based on the consent data stored in the immutable ledger;
communicate a consent verification response based on verifying the consent verification request to the user data database, the consent verification response indicating consent from the user to share the user data from the user data database with the requester system;
receive, from the requester system, utilization data associated with consented use of user data;
store the utilization data associated with the user data in the immutable ledger;
compare the utilization data associated with the user data with the consent data associated with the user data;
determine compliance of the utilization data to conditions of the consent data;
store an indication of compliance of the utilization data in the immutable ledger;
receive an audit request associated with the user data from the user data database; and
communicate the indication of compliance of the utilization data associated with the user data to the user data database.