Systems and methods for managing tokens and filtering data to control data access

A system comprising:

• memory;
• processing circuitry configured to:
• receive, at an intermediary entity, a first request from a user to grant authorization for a first data recipient to access user information associated with a data provider;
• in response to the data provider authenticating the first request, receive, at the intermediary entity, an authentication token from the data provider that enables access to user information associated with the data provider;
• generate, by the intermediary entity, a first token for the first data recipient and provide the first token to the first data recipient;
• in response to receiving, at the intermediary entity, the first token along with a request for user information from the first data recipient, obtain, by the intermediary entity, user information data using the authentication token and providing the user information data to the first data recipient;
• receive, at the intermediary entity, a second request, subsequent to the first request, from the user to grant authorization for a second data recipient to access user information associated with the data provider;
• in response to the data provider authenticating the second request, receive, at the intermediary entity, an updated version of the authentication token from the data provider that enables access to user information associated with the data provider;
• and
• generate, by the intermediary entity, a second token for the second data recipient and provide the second token to the second data recipient, wherein each of the first token and the second token is stored by the intermediary entity without personally identifiable information of the user;
• in response to receiving, at the intermediary entity, the second token along with a request for user information from the second data recipient, obtain, by the intermediary entity, user information data using the updated version of the authentication token and provide the user information data to the second data recipient.

A non-transitory computer-readable medium having non-transitory computer-readable instructions encoded thereon that, when executed by a processor, causes the processor to:

• receive, at an intermediary entity, a first request from a user to grant authorization for a first data recipient to access user information associated with a data provider;
• in response to the data provider authenticating the first request, receive, at the intermediary entity, an authentication token from the data provider that enables access to user information associated with the data provider;
• generate, by the intermediary entity, a first token for the first data recipient and provide the first token to the first data recipient;
• in response to receiving, at the intermediary entity, the first token along with a request for user information from the first data recipient, obtain, by the intermediary entity, user information data using the authentication token and providing the user information data to the first data recipient;
• receive, at the intermediary entity, a second request, subsequent to the first request, from the user to grant authorization for a second data recipient to access user information associated with the data provider;
• in response to the data provider authenticating the second request, receive, at the intermediary entity, an updated version of the authentication token from the data provider that enables access to user information associated with the data provider;
• generate, by the intermediary entity, a second token for the second data recipient and provide the second token to the second data recipient, wherein each of the first token and the second token is stored by the intermediary entity without personally identifiable information of the user;
• and
• in response to receiving, at the intermediary entity, the second token along with a request for user information from the second data recipient, obtain, by the intermediary entity, user information data using the updated version of the authentication token and provide the user information data to the second data recipient.