Patent ID: 11880828
Assignee: NUGGETS LIMITED
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 10:
11. A computer implemented method for controlling access to data comprising:
storing user data for a user in a data repository as a plurality of individually encrypted components, wherein each individually encrypted component includes associated metadata indicating an owner and a content type of the individually encrypted component, wherein the data repository is independent and not tied to a particular bank, service, platform, brand or company such that any approved service can call upon the data repository;
via a data access interface,
receiving attestation of at least one of the individually encrypted components from a further party and recording said attestation for the at least one individually encrypted component in the data repository
receiving a request for data for the user from a merchant or service provider system for a transaction, wherein the request requires an API to dynamically map, for the request, individually encrypted components of the user data to the data requested in the request for data for the user, the API being configured to act as an intermediary between different merchants and the data repository,
dynamically mapping, for the request, individually encrypted components of the user data that correspond to the request for data for the user, and
upon receiving approval from the user, providing remote access to the merchant or service provider to the mapped individually encrypted components in encrypted form; and

via an authentication system,
receiving an authentication message from the user device approving access by the merchant or service provider to the requested user data, wherein the authentication message is received via an out-of-band communication with the user device that is separate and independent from communication with the merchant or service provider system, and
determining if attestation is recorded in the data repository for each individually encrypted component corresponding to the request for user data; and, where no attestation is recorded, providing the merchant or service provider system with selective access to each individually encrypted component corresponding to the request for user data in unencrypted form for the transaction upon authenticating the user for the respective component based on the authentication message and where attestation is recorded, providing the merchant or service provider system with the attestation instead of the user data in unencrypted form.