FINANCIAL ACCOUNT AUTHENTICATION

• US 20150012443A1
• Filed: 07/02/2013
• Published: 01/08/2015
• Est. Priority Date: 07/02/2013
• Status: Active Grant

• Current Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Original Assignee: Yodlee Incorporated (Envestnet Incorporated)
• Inventors: Bhat, Dheeraj, Shetty, Sachinraj, Makam, Saran
• Granted Patent: US 10,489,852 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 9/451 Execution arrangements for user interfaces
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for receiving, from a user device, a request to include financial data describing a financial account in an interface, the financial account being associated with a particular financial institution; identifying one or more metadata attributes for accessing the financial account associated with the particular financial institution; obtaining a public digital key associated with the financial institution; providing, to the user device, data describing the one or more metadata attributes and the public digital key associated with the financial institution; receiving, from the user device, respective values for the one or more metadata attributes, the corresponding values having been encrypted by the user device using the public digital key; and storing the encrypted values for the one or more metadata attributes for use in accessing and aggregating financial data describing the financial account.

Claims

1. A computer-implemented method, comprising:

receiving, from a user device, a request to include financial data describing a financial account in an interface, the financial account being associated with a particular financial institution;

identifying one or more metadata attributes for accessing the financial account associated with the particular financial institution;

obtaining a public digital key associated with the financial institution;

providing, to the user device, data describing the one or more metadata attributes and the public digital key associated with the financial institution;

receiving, from the user device, respective values for the one or more metadata attributes, the corresponding values having been encrypted by the user device using the public digital key; and

storing the encrypted values for the one or more metadata attributes for use in accessing and aggregating financial data describing the financial account.

2. The method of claim 1, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution, obtaining access to the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.

3. The method of claim 2, wherein access to the financial account associated with the financial institution is restricted to read-only access based on the respective values for the one or more metadata attributes being encrypted.

4. The method of claim 1, wherein the public digital key and a private digital key that corresponds to the public digital key are both generated by the financial institution.

5. The method of claim 1, wherein obtaining a public digital key associated with the financial institution comprises obtaining the public digital key from the financial institution.

6. The method of claim 1, wherein the one or more metadata attributes include a login, password, and one or more multi-factor authentication questions associated with the user device.

7. The method of claim 1, further comprising:

determining that the public digital key associated with the financial institution has expired; and

in response to determining that the public digital key associated with the financial institution has expired, deleting the stored encrypted values for the one or more metadata attributes.

8. The method of claim 1, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

obtaining access to the financial account associated with the financial institution; and

receiving, from the financial institution, an alternative set of credentials for accessing the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.

9. A computer storage medium encoded with a computer program, the program comprising instructions that when executed by data processing apparatus cause the data processing apparatus to perform operations comprising:

receiving, from a user device, a request to include financial data describing a financial account in an interface, the financial account being associated with a particular financial institution;

identifying one or more metadata attributes for accessing the financial account associated with the particular financial institution;

obtaining a public digital key associated with the financial institution;

providing, to the user device, data describing the one or more metadata attributes and the public digital key associated with the financial institution;

receiving, from the user device, respective values for the one or more metadata attributes, the corresponding values having been encrypted by the user device using the public digital key; and

storing the encrypted values for the one or more metadata attributes for use in accessing and aggregating financial data describing the financial account.

10. The computer storage medium of claim 9, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution, obtaining access to the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.

11. The computer storage medium of claim 10, wherein access to the financial account associated with the financial institution is restricted to read-only access based on the respective values for the one or more metadata attributes being encrypted.

12. The computer storage medium of claim 9, wherein the public digital key and a private digital key that corresponds to the public digital key are both generated by the financial institution.

13. The computer storage medium of claim 9, wherein obtaining a public digital key associated with the financial institution comprises obtaining the public digital key from the financial institution.

14. The computer storage medium of claim 9, wherein the one or more metadata attributes include a login, password, and one or more multi-factor authentication questions associated with the user device.

15. The computer storage medium of claim 9, further comprising:

determining that the public digital key associated with the financial institution has expired; and

in response to determining that the public digital key associated with the financial institution has expired, deleting the stored encrypted values for the one or more metadata attributes.

16. The computer storage medium of claim 9, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

obtaining access to the financial account associated with the financial institution; and

receiving, from the financial institution, an alternative set of credentials for accessing the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.

17. A system comprising one or more computers programmed to perform operations comprising:

receiving, from a user device, a request to include financial data describing a financial account in an interface, the financial account being associated with a particular financial institution;

identifying one or more metadata attributes for accessing the financial account associated with the particular financial institution;

obtaining a public digital key associated with the financial institution;

providing, to the user device, data describing the one or more metadata attributes and the public digital key associated with the financial institution;

receiving, from the user device, respective values for the one or more metadata attributes, the corresponding values having been encrypted by the user device using the public digital key; and

storing the encrypted values for the one or more metadata attributes for use in accessing and aggregating financial data describing the financial account.

18. The system of claim 17, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution, obtaining access to the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.

19. The system of claim 18, wherein access to the financial account associated with the financial institution is restricted to read-only access based on the respective values for the one or more metadata attributes being encrypted.

20. The system of claim 17, wherein the public digital key and a private digital key that corresponds to the public digital key are both generated by the financial institution.

21. The system of claim 17, wherein obtaining a public digital key associated with the financial institution comprises obtaining the public digital key from the financial institution.

22. The system of claim 17, wherein the one or more metadata attributes include a login, password, and one or more multi-factor authentication questions associated with the user device.

23. The system of claim 17, further comprising:

determining that the public digital key associated with the financial institution has expired; and

in response to determining that the public digital key associated with the financial institution has expired, deleting the stored encrypted values for the one or more metadata attributes.

24. The system of claim 17, further comprising:

providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

in response to providing the encrypted values for the one or more metadata attributes to one or more login webpages associated with the financial institution;

obtaining access to the financial account associated with the financial institution; and

receiving, from the financial institution, an alternative set of credentials for accessing the financial account associated with the financial institution;

obtaining, from the financial institution, financial data describing the financial account; and

aggregating the obtained financial data for use in describing the financial account in the interface.