Secure selective sharing of account information on an internet information aggregation system

• US 7,120,928 B2
• Filed: 08/30/2001
• Issued: 10/10/2006
• Est. Priority Date: 06/15/2001
• Status: Expired due to Fees

• Current Assignee: Finastra USA Corporation (Finastra Group Holdings Ltd.)
• Original Assignee: Bysakh Bhasi, Dinesh Sheth
• Inventors: Bhasi, Bysakh, Sheth, Dinesh
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): HERRING, VIRGIL A
• Application Number:
  US09/944,333
• Publication Number:
  US 20020194502A1
• Time in Patent Office: 1,867 Days
• Field of Search: None
• US Class Current: 726/4
• CPC Class Codes: G06F 16/954 Navigation, e.g. using categorised browsing

Abstract

A computerized method of providing and allowing secure selective sharing of account information between users of an Internet information aggregation system. A grantor user creates one or more view pages, each of the view pages having a plurality of monitors therein. A unique visitation access code is assigned to each of a plurality of grantee users of the system. The grantor uses the visitation access codes to selectively grant visitation access to the grantor'"'"'s view pages to selected grantees. When a grantee logs onto the Internet information aggregation system via a processor, such as a computer or a mobile device, the system allows the grantee user to select one of the grantors'"'"' view pages, whereupon the system displays the selected grantor'"'"'s view page on the grantee user'"'"'s display.

Claims

1. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system comprising:

a grantor user creating one or more view pages,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantee users of the Internet information aggregation system,

storing said visitation codes in a database of the Internet information aggregation system,

said grantor selectively obtaining said visitation access codes from one or more of said grantees, and

said grantor using said visitation access codes to selectively grant visitation access to one or more of said grantor'"'"'s view pages to one or more of said grantees.

2. The method of claim 1, wherein said grantor'"'"'s view pages include

a public view that displays non-sensitive information,

a private view that displays sensitive information, and

an advisor view that displays selected account information pertaining to obtaining advice from an advisor, such as a financial, health, or travel advisor.

3. The method of claim 1, wherein said step of using said visitation access codes to selectively grant visitation access to one or more of said grantor'"'"'s view pages to one or more of said grantees comprises:

receiving input from said grantor for granting visitation access,

verifying that said grantor is authorized to grant visitation access,

if said grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether said grantor entered a correct visitation access code,

if said grantor entered a correct visitation access code, displaying a list of said grantor'"'"'s available view pages, and

receiving input from said grantor for selectively granting access to one or more of said grantor'"'"'s view pages to said selected grantee.

4. The method of claim 3, further comprising, in said step of selectively granting access to one or more of said grantor'"'"'s view pages, selectively assigning one of three levels of access for each said view page for which access is granted, said level of access selected from the group consisting of Read Access, Refresh Access, and Full Access.

5. The method of claim 1, further comprising said grantor selectively granting visitation access privileges to one or more of said grantees.

6. The method of claim 5, further comprising, in said step of selectively granting access to one or more of the grantor'"'"'s view pages, selectively granting a right of Read Access to said selected grantee, wherein said Internet information aggregation system permits said grantee to view account information displayed on the grantor'"'"'s view page but does not permit said grantee to manipulate said account information or otherwise alter said view page.

7. The method of claim 5, further comprising, in said step of selectively granting access to one or more of the grantor'"'"'s view pages, selectively granting a right of Refresh Access to said selected grantee, wherein said Internet information aggregation system permits said grantee to view account information displayed on the grantor'"'"'s view page and to selectively refresh said account information.

8. The method of claim 5, further comprising, in said step of selectively granting access to one or more of the grantor'"'"'s view pages, selectively granting a right of Full Access to said selected grantee, wherein said Internet information aggregation system permits said grantee to view and manipulate account information displayed on the grantor'"'"'s view page as though said grantee were the grantor.

9. The method of claim 5, further comprising, in said step of selectively granting access to one or more of the grantor'"'"'s view pages, selectively assigning a right to one of three levels of access for each said view page for which access is granted, said level of access selected from the group consisting of Read Access, Refresh Access, and Full Access.

10. The method of claim 5, further comprising exchanging messages between the users in a secure format, wherein said secure messages are transmitted to recipient users in an encrypted read-only format, and wherein said secure messages are stored only on the Internet information aggregation system.

11. The method of claim 1, further comprising the grantor selectively revoking visitation access privileges to one or more of said grantees.

12. The method of claim 1, further comprising:

a grantee logging onto the Internet information aggregation system via a processor,

displaying one of said grantee'"'"'s view pages on a display of said grantee'"'"'s processor, said display including an option for selectively viewing view pages of grantors who have granted visitation access to said grantee,

said grantee selecting one of the grantors'"'"' view pages, and

displaying said selected grantor'"'"'s view page on said grantee'"'"'s display.

13. The method of claim 12, wherein said step of displaying said selected grantor'"'"'s view page on said grantee'"'"'s display comprises:

retrieving said selected grantor'"'"'s view from said view pages database,

retrieving the grantor'"'"'s decryption and encryption keys from a grantor decryption and encryption keys database,

retrieving said grantee'"'"'s decryption and encryption keys from a reviewer decryption and encryption keys database,

retrieving the grantor'"'"'s visitation access permissions from a grantor permissions database, and

utilizing the grantor'"'"'s decryption and encryption keys, said grantee'"'"'s decryption and encryption keys, and the grantor'"'"'s visitation access permissions to display said selected grantor'"'"'s view page on said grantee'"'"'s display.

14. The method of claim 13, wherein said processor is a mobile device.

15. The method of claim 12, further comprising determining whether said grantee has been granted a right to Read Access, Refresh Access, or Full Access, and limiting said grantee'"'"'s use of said selected grantor'"'"'s view page to said granted right of access.

16. The method of claim 15, wherein said step of determining whether said grantee has been granted a right to_Read Access, Refresh Access, or Full Access comprises:

determining whether said grantee has been granted a right to_Read Access, and, if said grantee has been granted said right to_Read Access, retrieving said selected grantor'"'"'s view page, displaying said selected grantor'"'"'s view page on said grantee'"'"'s display, and permitting said grantee to view said view page in a read-only mode;

if said grantee has not been limited only to Read Access, determining whether said grantee has been granted a right to Refresh Access, and, if said grantee has been granted said right to Refresh Access, retrieving said selected host user'"'"'s view page, displaying said selected grantor'"'"'s view on said grantee'"'"'s display, and enabling said grantee to selectively refresh selected information on said selected grantor'"'"'s view page; and

if said grantee has not been limited only to Read Access or Refresh Access, retrieving said selected grantor'"'"'s view page, displaying said selected grantor'"'"'s view on said grantee'"'"'s display, enabling said grantee to selectively refresh selected information on said selected grantor'"'"'s view page, and enabling said grantee to carry out functions on the grantor'"'"'s view page as though said grantee were the grantor, said functions including carrying out transactions, logging in to selected web-sites, and modifying the grantor'"'"'s account information.

17. The method of claim 16, wherein said processor is a mobile device.

18. The method of claim 15, wherein said processor is a mobile device.

19. The method of claim 12, wherein said processor is a mobile device.

20. The method of claim 12, further comprising exchanging messages between the users in a secure format, wherein said secure messages are transmitted to recipient users in an encrypted read-only format, and wherein said secure messages are stored only on the Internet information aggregation system.

21. The method of claim 1, further comprising exchanging messages between the users in a secure format, wherein said secure messages are transmitted to recipient users in an encrypted read-only format, and wherein said secure messages are stored only on the Internet information aggregation system.

22. A computerized system for providing and allowing secure sharing of account information between users of an Internet information aggregation system, the Internet account aggregation system aggregating and displaying Internet account information on processors of the users, the users'"'"' processors each having a display and being interactively connected to a host server processor via the Internet, wherein a grantor is a user who selectively grants the right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a means for the grantors to create one or more view pages,

said host processor programmed to store said view pages created by the grantors in a view pages database of the Internet information aggregation system,

a means for assigning a unique visitation access code to each of the grantees,

said host processor programmed to store said visitation access codes in a visitation access code database of the Internet information aggregation system, and

a means for granting visitation access to the grantees, whereby the grantors use said visitation access codes to selectively grant access to selected grantor view pages to selected grantees.

23. The system of claim 22, wherein said grantor view pages include a Public View that displays non-sensitive account information of the grantor.

24. The system of claim 22, wherein said grantor view pages include a Private View that displays sensitive account information of the grantor.

25. The system of claim 22, wherein said grantor view pages include an Advisor View that displays selected account information of the grantor that pertains to obtaining advice from an advisor, such as a financial, health, or travel advisor.

26. The system of claim 22, wherein said means for selectively granting visitation access further includes a means for selectively granting Read Access, wherein said Internet information aggregation system permits said grantee to view account information displayed on the grantor'"'"'s view page but does not permit said grantee to manipulate said account information or otherwise alter said view page.

27. The system of claim 22, wherein said means for selectively granting visitation access further includes a means for selectively granting Refresh Access, wherein said Internet information aggregation system permits said grantee to view account information displayed on the grantor'"'"'s view page and to selectively refresh said account information.

28. The system of claim 22, wherein said means for selectively granting visitation access further includes a means for selectively granting Full Access, wherein said Internet information aggregation system permits said grantee to view and manipulate account information displayed on the grantor'"'"'s view page as though said grantee were the grantor.

29. The system of claim 22, further comprising a means for the grantors to selectively revoke visitation access privileges to one or more of said grantees.

30. The system of claim 22, further comprising:

the host processor programmed to display on each grantee'"'"'s display available grantor view pages to which the grantee has been granted visitation access rights, said display including a means for the grantee to select an available grantor view page for viewing, and

the host processor programmed to display said selected grantor'"'"'s view page on said grantee'"'"'s display.

31. The system of claim 30, further comprising the host processor programmed to determine whether each grantee has been granted a right to Read Access, Refresh Access, or Full Access, and to limit each grantee'"'"'s use of said selected grantor'"'"'s view page to said granted right of access.

32. The system of claim 31, wherein said processor is a mobile device.

33. The system of claim 30, wherein said processor is a mobile device.

34. The system of claim 30, further comprising a means for exchanging messages between the users in a secure format, wherein said secure messages are transmitted to recipient users in an encrypted read-only format, and wherein said secure messages are stored only on the Internet information aggregation system.

35. The system of claim 22, further comprising a means for exchanging messages between the users in a secure format, wherein said secure messages are transmitted to recipient users in an encrypted read-only format, and wherein said secure messages are stored only on the Internet information aggregation system.

36. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a grantor creating one or more view pages, each said view page having a plurality of monitors therein,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system, assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system,

the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee.

37. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a grantor creating one or more view pages, each said view page having a plurality of monitors therein,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system,

the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee, including selectively assigning a right to one of three levels of access for each said view page for which access is granted, said level of access selected from the group consisting of Read Access, Refresh Access, and Full Access.

38. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a grantor creating one or more view pages, each said view page having a plurality of monitors therein,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system,

the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee,

a grantee logging onto the Internet information aggregation system via a processor,

displaying one of said grantee'"'"'s view pages on a display of said grantee'"'"'s processor, said display including an option for selectively viewing view pages of grantors who have granted visitation access to said grantee,

said grantee selecting one of the grantors'"'"' view pages, and

displaying said selected grantor'"'"'s view page on said grantee'"'"'s display.

39. The method of claim 38, wherein said processor is a mobile device.

40. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantor'"'"'s view pages, comprising:

a grantor creating one or more view pages, each said view page having a plurality of monitors therein,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system,

the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee, including selectively assigning a right to one of three levels of access for each said view page for which access is granted, said level of access selected from the group consisting of Read Access, Refresh Access, and Full Access,

a grantee logging onto the Internet information aggregation system via a processor,

displaying one of said grantee'"'"'s view pages on a display of said grantee'"'"'s processor, said display including an option for selectively viewing view pages of grantors who have granted visitation access to said grantee,

said grantee selecting one of the grantors'"'"' view pages,

retrieving said selected grantor'"'"'s view from said view pages database,

retrieving the grantor'"'"'s decryption and encryption keys from a grantor decryption and encryption keys database,

retrieving said grantee'"'"'s decryption and encryption keys from a reviewer decryption and encryption keys database,

retrieving the grantor'"'"'s visitation access permissions from a grantor permissions database, and

utilizing the grantor'"'"'s decryption and encryption keys, said grantee'"'"'s decryption and encryption keys, and the grantor'"'"'s visitation access permissions to display said selected grantor'"'"'s view page on said grantee'"'"'s display.

41. The method of claim 40, further comprising determining whether said grantee has been granted a right to Read Access, Refresh Access, or Full Access, and limiting said grantee'"'"'s use of said selected grantor'"'"'s view page to said granted right of access.

42. The method of claim 41, wherein said step of determining whether said grantee has been granted a right to Read Access, Refresh Access, or Full Access comprises:

determining whether said grantee has been granted a right to Read Access, and, if said grantee has been granted said right to Read Access, retrieving said selected grantor'"'"'s view page, displaying said selected grantor'"'"'s view page on said grantee'"'"'s display, and permitting said grantee to view said view page in a read-only mode;

if said grantee has not been limited only to Read Access, determining whether said grantee has been granted a right to Refresh Access, and, if said grantee has been granted said right to Refresh Access, retrieving said selected host user'"'"'s view page, displaying said selected grantor'"'"'s view on said grantee'"'"'s display, and enabling said grantee to selectively refresh selected information on said selected grantor'"'"'s view page; and

if said grantee has not been limited only to Read Access or Refresh Access, retrieving said selected grantor'"'"'s view page, displaying said selected grantor'"'"'s view on said grantee'"'"'s display, enabling said grantee to selectively refresh selected information on said selected grantor'"'"'s view page, and enabling said grantee to carry out functions on the grantor'"'"'s view page as though said grantee were the grantor, said functions including carrying out transactions, logging in to selected web-sites, and modifying the grantor'"'"'s account information.

43. The method of claim 40, wherein said processor is a mobile device.

44. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a grantor creating one or more view pages, each said view page having three columns, each of said columns having at least one monitor therein,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system,

the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee,

a grantee logging onto the Internet information aggregation system via a processor,

displaying one of said grantee'"'"'s view pages on a display of said grantee'"'"'s processor, said display including an option for selectively viewing view pages of grantors who have granted visitation access to said grantee,

said grantee selecting one of the grantors'"'"' view pages, and

displaying said selected grantor'"'"'s view page on said grantee'"'"'s display.

45. The method of claim 44, wherein said processor is a mobile device.

46. A computerized method of providing and allowing secure sharing of account information between users of an Internet information aggregation system, including secure sharing of messages, wherein a grantor is a user who selectively grants a right to access account information displayed on the grantor user'"'"'s view pages, and a grantee is a user who receives such right to access account information on the grantors'"'"' view pages, comprising:

a grantor creating one or more view pages,

storing the grantor'"'"'s view pages in a view pages database of the Internet information aggregation system,

assigning a unique visitation access code to each of a plurality of grantees of the Internet information aggregation system,

storing said visitation access codes in a database of the Internet information aggregation system, the grantor selectively obtaining said visitation access codes from one or more of said grantees,

receiving input from the grantor for granting visitation access,

verifying that the grantor is authorized to grant visitation access,

if the grantor is authorized to grant visitation access, presenting a graphical user interface for granting visitation access,

receiving input from the grantor for a visitation access code of a selected grantee,

determining whether the grantor entered a correct visitation access code,

if the grantor entered a correct visitation access code, displaying a list of the grantor'"'"'s available view pages, and

receiving input from the grantor for selectively granting access to one or more of the grantor'"'"'s view pages to said selected grantee,

a grantee logging onto the Internet information aggregation system via a processor,

displaying one of said grantee'"'"'s view pages on a display of said grantee'"'"'s processor, said display including an option for selectively viewing view pages of grantors who have granted visitation access to said grantee,

said grantee selecting one of the grantors'"'"' view pages,

displaying said selected grantor'"'"'s view page on said grantee'"'"'s display,

receiving input from a composing user for composition of a secure message, said composing user being either a grantor or a grantee,

receiving input from said composing user for selection of a recipient of said secure message, said recipient being either a grantor or a grantee,

receiving input from said composing user for transmitting said secure message to said recipient, and

upon receipt of said input for transmitting said secure message, transmitting said secure message to a processor of said recipient in an encrypted read-only format.

47. The method of claim 46, further comprising decrypting said secure message when said secure message reaches said recipient'"'"'s processor, and displaying said secure message on a display of said recipient'"'"'s processor.

48. The method of claim 46, wherein, if said recipient was not logged into the Internet information aggregation system when said secure message was transmitted to said recipient, storing said secure message in an encrypted format in a secure messaging database of the Internet information aggregation system.

49. The method of claim 48, further comprising retrieving said secure message from said secure messaging database when said recipient logs into the Internet information aggregation system, and transmitting said secure message to said processor of said recipient in an encrypted format.

50. The method of claim 49, further comprising decrypting said secure message when said secure message reaches said recipient'"'"'s processor, and displaying said secure message on a display of said recipient'"'"'s processor.

51. The method of claim 48, further comprising said composing user selectively deleting secure messages from said secure messaging database.

52. The method of claim 46, further comprising forwarding secure messages to a mobile device of said recipient.