Patent ID: 9699160
Date: 2017-07-04
CPC Classifications: G06F,H04L

Claim:
1. A method for correlating protected data between a first protected data system and a second protected data system, the method comprising: receiving, at a first enterprise server via a first network, a first login credential associated with a first user, wherein the first enterprise server includes a data table that includes a plurality of unique identifiers each associated with a login credential of a single user; generating, at the first enterprise server, a session identifier in response to receiving the first login credential; receiving, at the first enterprise server via the first network, a request to login to a second enterprise server, wherein the request includes a second login credential associated with the first user for the second enterprise and the session identifier; transmitting, by the first enterprise server via the first network, the request to the second enterprise server and receiving, in response to the request, a login confirmation from the second enterprise server; generating, at first enterprise server, a first assertion message from the first enterprise server, wherein the first assertion message includes a first unique identifier that is associated with the first login credential of the first user and the session identifier; sending, to a first correlation server via the first network, the first assertion message, wherein the first correlation server generates and sends via a second network, in response to the first assertion message, a notification message to a second correlation server that includes the first unique identifier and the session identifier, and wherein, based on the session identifier, first data held by the first enterprise and associated with the first login credential and second data held by the second enterprise and associated with the second login credential are correlated in the second correlation server, wherein the first and second correlation servers are in communication with, via the second network, an identity exchange service (IXS) infrastructure in communication with the correlation server via a second network, the IXS infrastructure comprising: