Back to results
US 12,511,698 B2Granted
Systems and methods of access control and system integration
AssigneeXero Limited
InventorsRodney Kenneth Drury, Matthew John Vickers
Life of this patent
Estimating the term…
Abstract
Automated provisioning, according to one example embodiment, enables a mutual customer to establish an intelligent and automated connection between an accounting software system and their financial institution. For example, this might be achieved by allowing a financial institution customer to make feeds from their bank accounts available to the accounting software system within financial internet software (e.g., hosted and operated by the customer's financial institution). Once a customer selects the bank account(s) they want to share with the accounting software system, they are passed along to the accounting software system to link the selected bank account with an account they have set up in the accounting software system.
Claims20
A method comprising, at a data center of an accounting system:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server,
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- and
- at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.
6 more elements
A data center of an accounting system comprising:
- a memory;
- and
- a processor coupled to the memory and configured to perform operations comprising:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server;
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the data center of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- and
- at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.
9 more elements
A non-transitory machine-readable storage medium storing instructions thereon which, when executed by one or more processors of a data center of an accounting system, cause the accounting system to perform operations comprising:
- receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;
- authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;
- receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;
- receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server,
- using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;
- providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;
- receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution;
- and
- at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.
6 more elements
Dependencies are inferred from the claim text.