Multiple trust modes for handling data

• US 7,203,845 B2
• Filed: 01/11/2002
• Issued: 04/10/2007
• Est. Priority Date: 01/11/2002
• Status: Active Grant

• Current Assignee: Checkfree Services Corporation (Fiserv Incorporated)
• Original Assignee: CashEdge Incorporated (Fiserv Incorporated)
• Inventors: Dilip, Venkatachari, Dheer, Sanjeev, Sokolic, Jeremy N.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US10/044,289
• Publication Number:
  US 20030135752A1
• Time in Patent Office: 1,915 Days
• Field of Search: None
• US Class Current: 713/194
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A user is presented with multiple modes of operation, such that the multiple modes of operation define different trust options for handling data (such as login credentials or other sensitive data) associated with the user. A selection of one of the multiple modes of operation is received from the user. Data associated with the user is handled in accordance with the selected mode of operation.

Claims

1. A method implemented by a financial analysis system, the method comprising:

identifying multiple financial accounts associated with a user, wherein the multiple financial accounts are with a plurality of financial institutions;

presenting the user with a plurality of modes, each of which can be associated with one of the plurality of financial institutions, wherein the user has user authentication data for each of the plurality of financial institutions, and wherein each mode directs the financial analysis system to handle user authentication data received from the user in a specified manner, the modes comprising,

a low trust mode that directs the financial analysis system to temporarily use the user authentication data received from the user without storing the data; and

a plurality of higher trust modes that each direct the financial analysis system to store the user authentication data;

receiving a selection of a mode from the user for each of the multiple financial institutions;

associating a selected mode with each of the plurality of financial institutions;

storing financial institution data for each of the plurality of financial institutions, comprising data which may be used to locate and communicate with each of the plurality of financial institutions;

storing the associated modes; and

handling the user authentication data associated with each of the plurality of financial institutions as directed by an associated mode each time the financial analysis system accesses one of the multiple financial institutions on behalf of the user.

2. A method as recited in claim 1 wherein the plurality of higher trust modes comprises a moderate trust mode that directs the financial analysis system to encrypt the user authentication data, and store the encrypted user authentication data.

3. A method as recited in claim 2 wherein the moderate trust mode directs the financial analysis system to encrypt the user authentication data using one-way encryption.

4. A method as recited in claim 1 wherein the plurality of higher trust modes comprises a high trust mode that directs the financial analysis system to encrypt the user authentication data using two-way encryption, and store the encrypted user authentication data.

5. A method as recited in claim 1 further comprising associating a default mode with each account if the user does not select a valid mode.

6. A method comprising:

identifying multiple financial accounts associated with a use, wherein the multiple financial accounts are with at least one financial institution;

presenting the user with a low trust mode that can be associated with the at least one financial institution, wherein die low trust mode comprises retrieving sensitive data from the user each time the user requests a service requiring the sensitive data, wherein the sensitive data is required to access the at least one financial institution as the user;

presenting the user with a high trust mode that can be associated with at least one financial institution, wherein the high trust made comprises storing in an encrypted format, remote from the at least one financial institution, the sensitive data received from the user;

receiving a selection from the user indicating one of the low trust mode and the high trust mode for each of the multiple financial institution;

storing, remote from the at least one financial institution, data identifying each of the multiple financial accounts, financial institution data for each of the at least one financial institutions, and a selected mode associated with each of the multiple financial institutions;

receiving a request from the user to access one of the at least one financial institutions; and

in response, communicating with the at least one financial institution, and handling the sensitive data received from the user in accordance with the selected mode of operation associated with the financial institution.

7. A method as recited in claim 6 further comprising presenting the user with a moderate trust mode that can be associated with at least one financial institution, wherein the moderate trust mode stores sensitive data from the user in an encrypted format using a password known to the user;

and wherein receiving a selection from the user includes receiving a selection indicating one of the low trust mode, the high trust mode, and the moderate trust mode for each of the multiple financial institutions.

8. A method as recited in claim 6 further comprising associating a default trust mode with each financial institution for which the user does not select a valid mode.

9. One or more computer-readable storage media containing a computer program that is executable by a processor to perform the method recited in claim 6.

10. A method comprising:

identifying multiple financial accounts associated with a user, wherein the multiple financial accounts are with a plurality of financial institutions;

presenting the user with a moderate trust mode that can be associated with at least one of the plurality of financial institution, wherein the moderate trust mode comprises the storing of sensitive data from the user a one-way encrypted format, remote from the plurality of financial institutions, using a password known to the user;

presenting the user with a high trust mode that can be associated wit at least one of the plurality of financial institutions, wherein the high trust mode comprises storing, remote from the plurality of financial institutions, sensitive data from the user in a two-way encrypted format;

receiving a selection from the user indicating one of the moderate trust mode and the high trust mode for each of the plurality of financial institutions; and

handling sensitive data associated with each financial account of the user at the financial institution in accordance with the mode associated with the financial institution.

11. One or more computer-readable storage media containing a computer program that is executable by a processor to perform the method recited in claim 10.

12. A method comprising:

identifying multiple financial institutions at which a user has financial accounts;

presenting the user with a moderate trust mode that can be associated with at least one of the multiple financial institutions, wherein be moderate trust mode comprises storing, remote from the multiple financial institutions, sensitive data from the user in an encrypted format using a password known to the user;

presenting the user with a low trust mode that can be associated with at least one of the multiple financial institutions, wherein the low trust mode comprises the financial analysis system retrieving sensitive data from the user each time the user requests a service requiring the sensitive data;

receiving a selection from the user indicating one of the moderate trust mode and the low trust mode trust mode for each of the multiple financial institutions;

storing data identifying each of the multiple financial accounts, financial institution data for each of the at least one financial institutions, and a selected trust mode associated with each of the multiple financial institutions;

receiving a request from the user to access one of the multiple financial institutions; and

in response, communicating with the financial institution, and handling sensitive data associated with each financial account of the user at the financial institution in accordance with the mode associated with the financial institution.

13. One or more computer-readable storage media containing a computer program that is executable by a processor to perform the method recited in claim 12.

14. One or more computer-readable storage media having stored thereon a computer program that, when executed by one or more processors, causes the one or more processors to:

identify multiple financial accounts associated with a user, wherein the multiple financial accounts are with a plurality of financial institutions;

present the user with a plurality of mode, each of which can be associated with one or more of the plurality of financial institutions, wherein each mode directs a server remote from the plurality of financial institutions to handle the sensitive data in a particular manner, and wherein the sensitive data comprises user login data used to access accounts online at one of the plurality of financial institutions;

receive a selection of a mode from the user for each of the multiple financial institutions

associate a selected mode with each of the multiple financial institutions;

store,

financial institution data for each of the plurality of financial institutions, comprising data which may be used to locate and communicate with the plurality of financial institutions;

data identifying the multiple financial accounts; and

the associated modes; and

handle the sensitive data associated with each of the plurality of financial institutions in accordance with an associated mode each time the user accesses one of the plurality of financial institutions.

15. One or more computer-readable storage media as recited in claim 14 wherein the plurality of modes include a low trust mode for handling sensitive data associated with the user, the low trust mode configured to retrieve the sensitive data from the user each time the user requests a service requiring the sensitive data.

16. One or more computer-readable storage media as recited in claim 15 wherein the low trust mode does not persistently store the sensitive data after the requested service requiring the sensitive data is complete.

17. One or more computer-readable storage media as recited in claim 14 wherein the plurality of modes include a high trust mode for handling the sensitive data associated with the user, the high trust mode comprising retrieving the sensitive data from the user and storing the sensitive data in a two-way encrypted format.

18. One or more computer-readable storage media as recited in claim 14 wherein, the plurality of modes include a moderate trust made for handling the sensitive data associated with the user, the moderate trust mode configured to retrieve the sensitive data from the user and store the sensitive data in a one-way encrypted format using a password known only to the user.