Capital One Services, LLC

Dinesh Sundaram

Trent Jones

Raman Bajaj

Sanjiv Yajnik

Rajaboopathy Vijayaraghavan

Jacques Morel

Alan Ilango

Jacob Creech

Thomas Sickert

Alex Baird

Hala Salim El-Ali

Katelyn Ge

Ishu Gupta

Avijit Sarkar

Micah Price

Staevan Alan Duckworth

Olalekan Awoyemi

Vikramaditya Repaka

Jayson Sellers

Hala Salim Eli-Ali

Praveen Kumar Gadipelly

Sripavan Sanka

Sandeep Manepalli

Kasey Greuner

Chaofeng Xu

The system and methods described herein allow users to give their applicant information to at least one entity when seeking to submit an inquiry associated with an item, and have various lender microservices run in parallel, segregated by entity, in a jailed environment. The result of these microservices may be returned as a response to the inquiry, being determined autonomously for each respective entity based on one or more respective rule sets or executable logic for each respective entity. Payloads for multiple entities may be combined in a single output from the jailed environment due to outputs from the environment being encrypted in a universal format.

Jailed environment restricting programmatic access to multi-tenant data

A multi-lender architecture is configured to provide a loan applicant with automated pre-qualification and automobile loan eligibility evaluation for multiple candidate lenders. Lender output data may include sensitive data. The lender output data is stored in a data object of a first format and one or more fields of the data object are encrypted at the field level. The encrypted data object may be transmitted through multiple application layers or terminals. The encrypted data object may be reformatted at one or more application layers or terminals without decryption. A reformatted encrypted data object containing the lender output data may be decrypted at the last layer before forwarding the lender output data to the loan applicant.

Securing lender output data

Auditing data containing sensitive data are stored in a data structure comprising data objects. Each data object comprises one or more pairs of a name and a value. Pairs that are flagged or identified as containing sensitive data are partially encrypted; the value is encrypted using an asymmetric key and the name corresponding to the encrypted value remains unencrypted. Some pairs that are not flagged or identified as containing sensitive data are left unencrypted. Unencrypted data may be stored in the partially encrypted auditing data as plain text. The auditing data may be analyzed to generate business metrics and identify application errors. The auditing data may also be queried, and data objects containing unencrypted pairs and/or partially encrypted pairs may be returned based on matching unencrypted names and/or values to the data query.

Searchable index encryption

A self-service lender portal provides lenders with a suite of tools for interacting with a multi-lender architecture configured to provide loan applicants with automated pre-qualification and eligibility evaluation for multiple candidate lenders. The lender portal provides lenders with an interface for uploading rule sets defining lending and eligibility criteria, downloading operational data generated from processing loan applicant information, generating and managing security keys for encryption and decryption of sensitive data, and managing access policies for providing single sign-on by interfacing with the lender's own identity management systems.

Self-service lender portal

The system and methods described herein allow users to give their applicant information when seeking to submit an inquiry associated with a product provided by at least one entity, and have various lender microservices run in parallel, segregated by entity, in a jailed and self-contained, autonomous environment. The result of these microservices may be returned as a response to the inquity, being determined autonomously for each respective entity based on one or more respective rule sets or executable logic for each respective entity. Payloads for multiple entities may be combined in a single output from the jailed and self-contained environment due to outputs from the environment being encrypted in a universal format, wherein the outputs are decrypted in a user session in an application, allowing the user to see the results of the respective responses of each of the at least one entity, to their inquiry.

The system and methods described herein allow users to apply for a purchase of a good from multiple providers using provider specific methodologies for generating offers for the product. For example, the system described herein may include a multi-layer architecture that includes interactive micro-services that communicate together in a bi-directional manner to create a normalized process for the purchase of a good, such as commercial goods/products (e.g. a vehicle) or real property. The micro-services may assess prequalification for a loan or financing for a good, followed by determining eligibility of the good for financing, and further followed by calculating pricing details for loans (e.g. for financing purchase of the good) that would be offered for a consumer's particular financial credentials, for each of a plurality of lenders. Prequalification and pricing may be performed on a good by good basis, or for a plurality of goods near or substantially simultaneously.

Multi-lender platform that securely stores proprietary information for generating offers

A multi-lender architecture evaluates applicant data against lending rule sets of multiple lenders. Rule sets provided by different lenders may be expressed differently. The multi-lender architecture transforms the rules in each rule set and represents the rules in a normalization grid. The normalization grid allows a single algorithm to evaluate the rules of different lenders.

Normalization grid for secured multi-lender platform

Described herein is a system, method, and non-transitory computer readable medium related to a service provider using a third party identity provider to authenticate a user with improved security. An authentication token is received from the identity provider, and can be verified against internal configuration information. The internal configuration information includes data that is not included in the authentication token, and therefore, is not vulnerable to some security attacks, such as a man-in-the-middle attack. After the authentication token is verified, the internal configuration information and authentication token may be used to create a custom identifier, referred to as an identity ID. The identity ID may be used by the service provider to verify user access to resources.

Single sign-on through customer authentication systems

Multi-lender platform that securely stores proprietary information for pre-qualifying an applicant

Normalization grid

Growing community of inventors

Plano, TX, United States of America

Dinesh Sundaram