Back to results
US 12,711,492 B2Granted
Access control tower
AssigneeWells Fargo Bank, N.A.
InventorsBrian M. Pearce, Benjamin Soccorsy
Life of this patent
Estimating the term…
Abstract
Systems, methods, and apparatuses for providing a customer a central location to manage permissions provided to third-parties and devices to access and use customer information maintained by a financial institution are described. The central location serves as a central portal where a customer of the financial institution can manage all access to account information and personal information stored at the financial institution. Accordingly, the customer does not need to log into each individual third-party system or customer device to manage previously provided access to the customer information or to provision new access to the customer information.
Claims20
A method of changing accessibility of accounts administered by a financial institution computing system comprising one or more processors, the method comprising:
- receiving, by the financial institution computing system, a first selection to disable a first third-party account from accessing a financial account of a user;
- configuring, by the financial institution computing system, in response to the first selection, a first application programming interface (API) to disallow access to the financial account by the first third-party account, wherein configuring the first API comprises updating, by the financial institution computing system, in response to the first selection, a permission for the first API via which a first external device or system accesses the financial account for the first third-party account;
- receiving, by the financial institution computing system, from the first external device or system via the first API, a first request to access the financial account;
- transmitting, by the financial institution computing system, to the first external device or system via the first API, based on the updated permission, a denial of the first request received via the first API from the first external device or system;
- receiving, by the financial institution computing system, a second selection to enable a second third-party account to access the financial account;
- provisioning, by the financial institution computing system responsive to the second selection, an account access token that corresponds to the financial account, the second third-party account, and a second external device or system corresponding to the second third-party account;
- receiving, by the financial institution computing system, from the second external device or system via the first API or a second API, a second request to access the financial account using the account access token;
- and
- transmitting, by the financial institution computing system, to the second external device or system via the first API or the second API, based on the account access token, account data corresponding to the financial account in response to the second request.
6 more elements
A financial institution computing system comprising one or more processors configured to:
- receive a first selection to disable a first third-party account from accessing a financial account of a user;
- configure, in response to the first selection, a first application programming interface (API) to disallow access to the financial account by the first third-party account, wherein configuring the first API comprises updating, by the financial institution computing system, in response to the first selection, a permission for the first API via which a first external device or system accesses the financial account for the first third-party account;
- receive, from the first external device or system via the first API, a first request to access the financial account;
- transmit, to the first external device or system via the first API, based on the updated permission, a denial of the first request received via the first API from the first external device or system;
- receive a second selection to enable a second third-party account to access the financial account;
- provision, responsive to the second selection, an account access token that corresponds to the financial account, the second third-party account, and a second external device or system corresponding to the second third-party account;
- receive, from the second external device or system via the first API or a second API, a second request to access the financial account using the account access token;
- and
- transmit, to the second external device or system via the first API or the second API, based on the account access token, account data corresponding to the financial account in response to the second request.
6 more elements
A non-transitory computer-readable storage medium comprising instructions executable by one or more processors to:
- receive a first selection to disable a first third-party account from accessing a financial account of a user;
- configure, in response to the first selection, a first application programming interface (API) to disallow access to the financial account by the first third-party account, wherein configuring the first API comprises updating, in response to the first selection, a permission for the first API via which a first external device or system accesses the financial account for the first third-party account;
- receive, from the first external device or system via the first API, a first request to access the financial account;
- transmit, to the first external device or system via the first API, based on the updated permission, a denial of the first request received via the first API from the first external device or system;
- receive a second selection to enable a second third-party account to access the financial account;
- provision, responsive to the second selection, an account access token that corresponds to the financial account, the second third-party account, and a second external device or system corresponding to the second third-party account;
- receive, from the second external device or system via the first API or a second API, a second request to access the financial account using the account access token;
- and
- transmit, to the second external device or system via the first API or the second API, based on the account access token, account data corresponding to the financial account in response to the second request.
6 more elements
Dependencies are inferred from the claim text.