Method and system for securely controlling access to data

A consolidation server comprising:

• a processor;
• a transmitter communicatively coupled to the processor;
• a receiver communicatively coupled to the processor, and a memory communicatively coupled to the processor and storing instructions which, when executed by the processor, cause the consolidation server to
• receive, from a first issuer server, first encrypted data comprising a user device identifier (ID), a first application (app) ID for a first app stored on a user device, and a first account ID for a first account issued by a first issuer, indicating authorization for the first app to access data relating to the first account;
• receive, from a second issuer server, second encrypted data comprising the user device ID, a second app ID for a second app stored on the user device, and a second account ID for a second account issued by a second issuer, indicating authorization for the second app to access data relating to the second account;
• create and securely store a consolidated file labelled by the user device ID, the consolidated file comprising:
• a first record comprising the first app ID and the first account ID;
• and
• a second record comprising the second app ID and the second account ID;
• transmit third encrypted data, comprising the consolidated file, to the user device;
• and
• receive fourth encrypted data, comprising the user device ID, the first app ID, and the first account ID, indicating a request to modify the first record from the user device.

A non-transitory computer-readable storage medium having instructions stored thereon for securely controlling access to data in a consolidation server, which when executed by one or more processors, cause the one or more processors to:

• receive, from a first issuer server, first encrypted data comprising a user device identifier (ID), a first application (app) ID for a first app stored on a user device, and a first account ID for a first account issued by a first issuer, indicating authorization for the first app to access data relating to the first account;
• receive, from a second issuer server, second encrypted data comprising the user device ID, a second app ID for a second app stored on the user device, and a second account ID for a second account issued by a second issuer, indicating authorization for the second app to access data relating to the second account;
• create and securely store a consolidated file labelled by the user device ID, the consolidated file comprising:
• a first record comprising the first app ID and the first account ID;
• and
• a second record comprising the second app ID and the second account ID;
• transmit third encrypted data, comprising the consolidated file, to the user device;
• and
• receive fourth encrypted data, comprising the user device ID, the first app ID, and the first account ID, indicating a request to modify the first record from the user device.