Back to results
US 12,505,493 B2Granted
Systems and methods of access control and system integration
AssigneeXero Limited
InventorsRodney Kenneth Drury, Matthew John Vickers
Life of this patent
Estimating the term…
Abstract
Automated provisioning, according to one example embodiment, enables a mutual customer to establish an intelligent and automated connection between an accounting software system and their financial institution. For example, this might be achieved by allowing a financial institution customer to make feeds from their bank accounts available to the accounting software system within financial internet software (e.g., hosted and operated by the customer's financial institution). Once a customer selects the bank account(s) they want to share with the accounting software system, they are passed along to the accounting software system to link the selected bank account with an account they have set up in the accounting software system.
Claims20
A method comprising, at a data center of an accounting system:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- allowing the user to establish an encrypted connection between the financial account at the financial institution and a user account associated with the user at the accounting system;
- and
- in response to the user selecting to establish the encrypted connection between the financial account at the financial institution and the user account associated with the user at the accounting system:
- registering to receive, from the bank server, banking records for the financial account via a secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, and banking records encrypted with the randomly generated symmetric key, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into the user account of the accounting system associated with the authenticated user;
- and
- from the user account associated with the user at the accounting system, issuing payment instructions to make a payment from the financial account at the financial institution.
9 more elements
An accounting system comprising:
- a memory;
- and
- a processor coupled to the memory and configured to perform operations comprising:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- allowing the user to establish an encrypted connection between the financial account at the financial institution and a user account associated with the user at the accounting system;
- and
- in response to the user selecting to establish the encrypted connection between the financial account at the financial institution and the user account associated with the user at the accounting system:
- registering to receive, from the bank server, banking records for the financial account via a secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, and banking records encrypted with the randomly generated symmetric key, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- using the decrypted symmetric key to decrypt the received banking records. and loading the decrypted banking records into the user account of the accounting system associated with the authenticated user;
- and
- from the user account associated with the user at the accounting system, issuing payment instructions to make a payment from the financial account at the financial institution.
12 more elements
A non-transitory machine-readable storage medium storing instructions thereon which, when executed by one or more processors of an accounting system, cause the accounting system to perform operations comprising:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- allowing the user to establish an encrypted connection between the financial account at the financial institution and a user account associated with the user at the accounting system;
- and
- in response to the user selecting to establish the encrypted connection between the financial account at the financial institution and the user account associated with the user at the accounting system:
- registering to receive, from the bank server, banking records for the financial account via a secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, and banking records encrypted with the randomly generated symmetric key, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into the user account of the accounting system associated with the authenticated user;
- and
- from the user account associated with the user at the accounting system, issuing payment instructions to make a payment from the financial account at the financial institution.
9 more elements
Dependencies are inferred from the claim text.