Patent ID: 11880828
Assignee: NUGGETS LIMITED
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 16:
17. A data protection system comprising:
a data repository storing user data for a user, the user data comprising a plurality of individually encrypted components, wherein each individually encrypted component includes associated metadata indicating an owner and a content type of the individually encrypted component, wherein the data repository is independent and not tied to a particular bank, service, platform, brand or company such that any approved service can call upon the data repository;
a data access interface configured to:
receive attestation of at least one of the individually encrypted components from a further party and record said attestation for the at least one individually encrypted component in the data repository,
receive a request for data for the user from a merchant or service provider system for a transaction, wherein the request requires an API to dynamically map, for the request, individually encrypted components of the user data to the data requested in the request for data for the user, the API being configured to act as an intermediary between different merchants and the data repository, and
upon receiving approval from the user, provide remote access, to the merchant or service provider, to the mapped individually encrypted components in encrypted form; and

an authentication system configured to:
receive an authentication message from the user device approving access by the merchant or service provider to the requested user data, wherein the authentication message is received via an out-of-band communication with the user device that is separate and independent from communication with the merchant or service provider system, and
provide the merchant or service provider system with selective access to each individually encrypted component in unencrypted form for the transaction upon the authentication system authenticating the user for the respective component based on the authentication message,

wherein the attestation comprises a cryptographic signature on the component by the further party attesting to the component, the cryptographic signature being verifiable by the merchant or service provider system, the cryptographic signature includes a value attestation up to which the component may be relied upon in a transaction.