SYSTEMS AND METHODS FOR MANAGING A DATA REQUEST INTERFACE

• US 20190332808A1
• Filed: 04/27/2018
• Published: 10/31/2019
• Est. Priority Date: 04/27/2018
• Status: Active Grant

• Current Assignee: Toronto-Dominion Bank
• Original Assignee: Toronto-Dominion Bank
• Inventors: DUNJIC, Milos, TAX, David Samuel, CHOW, Arthur Carroll, NAIRN, Peter Glen, HOOD, Edward James, LOZON, Martin Albert, LEE, John Jong-Suk, JAGGA, Arun Victor
• Granted Patent: US 11,120,165 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A computer system and method for managing a data request interface. The system includes a memory associated with the data request interface and coupled to a processor. The memory includes processor-executable instructions of the method for managing the data request interface. The method includes: receiving, from a first client device, a first signal including a primary authorization credential associated with a data record and a second signal including a request to generate an alternate authorization credential for use by a software module. The alternate authorization credential is associated with data retrieval constraints. The method includes generating the alternate authorization credential and configuring the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential. The method further includes sending, to the first client device or a second client device, a third signal including the alternate authorization credential.

Claims

1. A system for managing a data request interface, the system comprising:

a communications module for communicating over a network;

a processor coupled to the communications module; and

a memory associated with the data request interface and coupled to the processor, the memory storing processor-executable instructions that, when executed, cause the processor to;

receive, from a first client device and via the communications module, a first signal including a primary authorization credential associated with a data record;

receive, from the first client device and via the communications module, a second signal including a request to generate an alternate authorization credential for use by a software module associated with a second client device, the alternate authorization credential to be associated with data retrieval constraints;

generate the alternate authorization credential;

configure the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential from the second client device; and

send via the communications module to at least one of the first client device and the second client device a third signal including the alternate authorization credential.

2. The system of claim 1, wherein the data retrieval constraints identify a subset dataset from the data record, and wherein the instructions, when executed, further cause the processor to:

receive, from the first client device and via the communications module, selection of the subset dataset from the data record for including in the data retrieval constraints.

3. The system of claim 1, wherein the data retrieval constraints include a time constraint permitting data operations on the data record at a specified time.

4. The system of claim 1, wherein the instructions, when executed, further cause the processor to:

determine available data retrieval resources of the data request interface for responding to data operations; and

in response to determining that the data retrieval resources of the data request interface are deficient and upon receipt of a fourth signal including the alternate authorization credential from the second client device, dynamically reconfigure the data retrieval constraints for further constraining data operations on the data record.

5. The system of claim 4, wherein the processor is configured to dynamically reconfigure the data retrieval constraints by determining a time slot assignment to defer data operations on the data record by the second client device to a subsequent point in time.

6. The system of claim 1, wherein the instructions, when executed, further cause the processor to:

upon receipt of a fifth signal including the alternate authorization credential from the second client device during a peak time range, transmit a notification, via the data request interface, to the second client device for communicating that data operations for the data record are deferred to a subsequent point in time.

7. The system of claim 1, wherein the data retrieval constraints impose read-only data operations on the data record upon receipt of the alternate authorization credential.

8. The system of claim 1, wherein the data retrieval constraints permit data operation requests from a subset of client devices having a predefined client device identifier and constrain data operation requests from client devices not having the predefined client device identifier.

9. The system of claim 8, wherein the instructions, when executed, further cause the processor to:

determine, from historical access data, that a particular client device may include a software module for screen scraping or aggregating subset datasets; and

impose data retrieval constraints to data retrieval requests received from the particular client device.

10. The system of claim 1, wherein the instructions, when executed, further cause the processor to:

receive, from the first client device, a client device identifier associated with the second client device for receiving the alternate authorization credential,

and wherein sending via the communications module to the at least one of the first client device and the second client device the third signal including the alternate authorization credential comprises transmitting the third signal including the alternate authorization credential to the second client device.

11. The system of claim 1, wherein the instructions, when executed, further cause the processor to:

upon receiving a sixth signal including the alternate authorization credential from the second client device, generate a streamlined graphical interface for displaying a subset dataset defined by the data retrieval constraints such that screen scraping of the subset dataset by the second client device occupies reduced resources.

12. The system of claim 1, wherein the data retrieval constraints impose a time limit such that the alternate authorization credential becomes invalid after the time limit elapses.

13. The system of claim 1, wherein the software module includes at least one of a screen scraper application or an aggregator application.

14. The system of claim 1, wherein the alternate authorization credential is at least one of a password or a token.

15. A computer-implemented method for managing a data request interface, the method comprising:

receiving, from a first client device, a first signal including a primary authorization credential associated with a data record;

receiving, from the first client device, a second signal including a request to generate an alternate authorization credential for use by a software module associated with a second client device, the alternate authorization credential to be associated with data retrieval constraints;

generating the alternate authorization credential;

configuring the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential from the second client device; and

sending to at least one of the first client device and the second client device a third signal including the alternate authorization credential.

16. The method claimed in claim 15, further comprising:

determining available data retrieval resources of the data request interface for providing data operations; and

in response to determining that the data retrieval resources of the data request interface are deficient and upon receipt of a fourth signal including the alternate authorization credential from the second client device, dynamically reconfiguring the data retrieval constraints for further constraining data operations on the data record.

17. The method claimed in claim 16, wherein dynamically reconfiguring the data retrieval constraints for further constraining data operations of the data record includes determining a time slot assignment to defer data operations on the data record by the second client device to a subsequent point in time.

18. The method claimed in claim 15, further comprising:

upon receipt of a fifth signal including the alternate authorization credential from the second client device during a peak time range, transmitting a notification, via the data request interface, to the second client device for communicating that data operations for the data record is deferred to a subsequent point in time.

19. The method claimed in claim 15, further comprising:

receiving, from the first client device, a client device identifier associated with the second client device for receiving the alternate authorization credential,

and wherein sending to the at least one of the first client device and the second client device the third signal including the alternate authorization credential comprises transmitting the third signal including the alternate authorization credential to the second client device.

20. A non-transitory computer-readable storage medium storing instructions for managing a data request interface, the instructions, when executed by a processor of a computer system, cause the computer system to:

receive, from a first client device, a first signal including a primary authorization credential associated with a data record;

receive, from the first client device, a second signal including a request to generate an alternate authorization credential for use by a software module associated with a second client device, the alternate authorization credential to be associated with data retrieval constraints;

generate the alternate authorization credential;

configure the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential from the second client device; and

send to at least one of the first client device and the second client device a third signal including the alternate authorization credential.