Systems and methods for an authorized identification system

A system comprising:

• a network interface structure to facilitate data transmission over a network;
• an accounts database including a plurality of user identifiers and associated encrypted authentication information;
• and
• a server system comprising a processor and instructions stored in non-transitory machine-readable media, the instructions configured to cause the server system to:
• receive, from an aggregator computing system, an access request of an account at a financial institution, wherein the access request comprises at least one of the plurality of user identifiers and the encrypted authentication information, the at least of the plurality of user identifiers associated with a user of the account, and wherein the aggregator computing system has previously received a first account information of the account during a prior access request, wherein the encrypted authentication information comprises user device data and a token identifier;
• decrypt the encrypted authentication information;
• derive a device identifier of the user device data from the decrypted authentication information;
• verify that the derived device identifier and the token identifier contained in the decrypted authentication information correspond to a stored authentication information associated with the at least one of the plurality of user identifiers;
• query a mobile network operator for updated data about the derived device identifier;
• receive, from the mobile network operator, the updated data;
• verify the updated data against the user device data;
• identify the first account information provided during the prior access request;
• transmit, to the aggregator computing system, a challenge question to the aggregator computing system, the challenge question comprising a request for the previously provided first account information;
• receive, from the aggregator computing system, a challenge answer to the challenge question;
• compare the challenge answer to the first account information;
• authenticate the aggregator computing system based on the challenge answer matching the first account information and based on the verification of the decrypted authentication information;
• and
• provide an authentication decision to the aggregator computing system, the authentication decision enabling the aggregator computing system to access and display information of the account to the user.

A non-transitory computer readable media having computer-executable instructions embodied therein that, when executed by a computing system, cause the computing system to perform operations comprising:

• receiving, from an aggregator computing system, an access request of an account at a financial institution, wherein the access request comprises a user identifier and encrypted authentication information, the user identifier associated with a user of the account, and wherein the aggregator computing system has previously received a first account information of the account during a prior access request, wherein the encrypted authentication information comprises user device data and a token identifier;
• decrypting the encrypted authentication information;
• deriving a device identifier of the user device data from the decrypted authentication information;
• verifying that the derived device identifier and the token identifier contained in the decrypted authentication information correspond to a stored authentication information associated with the user identifier;
• querying a mobile network operator for updated data about the derived device identifier;
• receiving from the mobile network operator, the updated data;
• verifying the updated data against the user device data;
• identifying the first account information provided during the prior access request;
• transmitting, to the aggregator computing system, a challenge question to the aggregator computing system, the challenge question comprising a request for the previously provided first account information;
• receiving, from the aggregator computing system, a challenge answer to the challenge question;
• comparing the challenge answer to the first account information;
• authenticating the aggregator computing system based on the challenge answer matching the first account information and based on the verification of the decrypted authentication information;
• and
• providing an authentication decision to the aggregator computing system, the authentication decision enabling the aggregator computing system to access and display information of the account to the user.