# US 12,112,368 B1 · Methods and systems for accessing account information electronically > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,112,368 B1 - Document ID: US12112368B1 - Status: Granted - Kind: B1 - Application number: 17/165,519 - Filed: 2021-02-02 - Granted: 2024-10-08 - Earliest claimed: 2013-02-28 - Assignees: Citibank, N.A. - Applicants: Citibank, N.A. - Inventors: Andres Wolberg-Stok; Sonia Olivo Alfieri; Dominic Varacalli; Syed Rahat; Wayne Browning - Web page: https://patentgrep.com/patent/US12112368B1 ## CPC - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - G06F 21/44: Program or device authentication - G06Q 20/3221: {Access to banking information through M-devices} - H04W 12/06: Authentication - G06Q 2220/10: Usage protection of distributed data files - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/71: Hardware identity - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods and systems for accessing customer account information involve, for example, binding a computing device with a customer's profile via one or more attributes of the computing device and an encrypted token stored on the computing device and thereafter receiving an authentication request consisting at least in part of the computing device attributes and the encrypted token stored on the computing device. A determination is made as to whether or not entry of a customer credential was received within a pre-determined preceding interval of time, and predefined customer account information is displayed on the computing device without requiring entry of the customer credential when a determination is made that entry of the customer credential was received within the pre-determined preceding interval of time. ## Claims ### Claim 1 A method, comprising: receiving, by one or more processors, on a first occasion, a first occasion authentication request comprising an entry of a customer credential associated with a customer profile of a customer; receiving, by the one or more processors without entry of the customer credential, on a succeeding occasion, a succeeding occasion authentication request comprising at least one attribute of a computing device associated with the customer profile; determining, by the one or more processors, that an interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than a pre-determined time interval; and generating for display, by the one or more processors, in response to the succeeding occasion authentication request, non-personally identifiable customer account transaction information for a pre-determined number of transactions on the computing device when the interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than the pre-determined time interval. ### Claim 2 (depends on 1) The method of claim 1, further comprising binding, by the one or more processors, the computing device with the customer profile comprising the customer credential via the at least one attribute of the computing device and an encrypted token stored on the computing device. ### Claim 3 (depends on 2) The method of claim 2, wherein binding the computing device further comprises binding the computing device with the customer profile only when an opt in selection is received from the customer. ### Claim 4 (depends on 2) The method of claim 2, wherein binding the computing device further comprises binding the computing device only if a confirmation of an opt in selection is received from the customer. ### Claim 5 (depends on 2) The method of claim 2, further comprising disabling the binding of the computing device at any time an opt out selection is received from the customer after receiving an opt in selection from the customer. ### Claim 6 (depends on 2) The method of claim 2, further comprising disabling the binding of the computing device at any time a request to change the customer credential is received from the customer. ### Claim 7 (depends on 2) The method of claim 2, comprising disabling the binding of the computing device at any time a request is received to bind a different computing device with the customer profile. ### Claim 8 (depends on 1) The method of claim 1, wherein the customer credential comprises a customer password. ### Claim 9 (depends on 1) The method of claim 1, wherein at least one computing device attribute comprises a unique computing device identifier. ### Claim 10 (depends on 1) The method of claim 1, wherein the computing device comprises a mobile communication device and at least one computing device attribute further comprises mobile network details. ### Claim 11 (depends on 2) The method of claim 2, wherein the encrypted token comprises a token encrypted using a hash algorithm. ### Claim 12 (depends on 1) The method of claim 1, wherein generating for display the non-personally identifiable customer account transaction information further comprises generating for display non-personally identifiable customer checking, savings, and credit card account information on the computing device. ### Claim 13 (depends on 12) The method of claim 12, wherein generating for display non-personally identifiable customer checking account information further comprises generating for display a partial checking account identifier and one or more available balances of a checking account on the computing device. ### Claim 14 (depends on 13) The method of claim 13, wherein the partial checking account identifier comprises a pre-determined portion of a checking account number. ### Claim 15 (depends on 12) The method of claim 12 wherein generating for display non-personally identifiable customer savings account information further comprises displaying a partial savings account identifier and one or more savings account balances on the computing device. ### Claim 16 (depends on 12) The method of claim 12, wherein generating for display non-personally identifiable customer credit card account information further comprises displaying a partial credit card account identifier and one or more credit card balances on the computing device. ### Claim 17 (depends on 1) The method of claim 1, further comprising denying a customer transaction request received without entry of the customer credential. ### Claim 18 (depends on 1) The method of claim 1, further comprising generating for display, by the one or more processors, in response to the succeeding occasion authentication request, predefined customer account information limited to non-personally identifiable customer account information comprising a pre-determined portion of an account number and at least in part of an account balance on the computing device when the interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than the pre-determined time interval. ### Claim 19 A system, comprising: one or more processors coupled to memory, the one or more processors being programmed to: receive on a first occasion, an authentication request comprising an entry of a customer credential associated with a customer profile; receive on a succeeding occasion, an authentication request comprising at least one attribute of a computing device associated with the customer profile and without entry of the customer credential; determine that an interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than a pre-determined time interval; and generating for display, by the one or more processors, in response to the succeeding occasion authentication request, non-personally identifiable customer account transaction information for a pre-determined number of transactions on the computing device when the interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than the pre-determined time interval. ### Claim 20 (depends on 19) The system of claim 19, the one or more processors being further programmed to display in response to the succeeding occasion authentication request, predefined customer account information limited to non-personally identifiable customer account information comprising a pre-determined portion of an account number and at least in part of an account balance on the computing device when the interval of time between the first occasion authentication request and the succeeding occasion authentication request is less than the pre-determined time interval.