System and method for single sign on process for websites with multiple applications and services

• US 7,461,265 B2
• Filed: 02/09/2006
• Issued: 12/02/2008
• Est. Priority Date: 07/02/1999
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Ellmore, Kimberly
• Primary Examiner(s): NGUYEN, MINH DIEU T
• Application Number:
  US11/350,104
• Publication Number:
  US 20060129835A1
• Time in Patent Office: 1,027 Days
• Field of Search: 726 2- 5, 713182-184, 705/1, 705 3- 5, 705/42, 705/72, 705/76
• US Class Current: 713/183
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for integrating the Internet front end -sign on processes of the various systems of a financial institution which allows a customer to view and access its various financial accounts with the institution.

During the initial sign up for the online access. to its accounts, a customer creates his/her User ID and password online during the same session. Once the customer has signed on (password) and verified ownership of at least one account, the system displays all of the customer'"'"'s accounts that are available for access via the Internet website. The online ownership verification uses only a single account of the customer and the ownership verification criteria associated with the account. The account used for verifying a customer is first determined based on the accounts selected by the customer for accessing online. From the selected accounts, the system of the present invention creates a verification hierarchy with respect to the accounts. When determining the verification to use for the single ownership verification, the present invention selects the account from the hierarchy with the most stringent requirements.

Claims

1. A method for controlling access to a plurality of financial accounts, the method comprising:

establishing a user account comprising;

establishing a user identification associated with the user account,

establishing a user password associated with the user identification,

displaying available financial services to the user,

receiving from the user a selection of desired financial services comprising one or more of the available financial services,

authorizing the user comprising;

identifying one or more legal agreements associated with the desired financial services,

presenting the one or more legal agreements to the user for acceptance,

receiving acceptance of at least one of the one or more legal agreements from the user, and

designating one or more authorized financial services, the one or more authorized financial services comprising the one or more desired financial services for which the user has accepted the respective one or more legal agreements; and

providing access to the user account, subsequent to establishing the user account, comprising;

receiving the user identification and user password,

verifying the user identification and user password,

determining whether one or more updated legal agreements exist for any of the one or more authorized financial services,

presenting the one or more updated legal agreements to the user for acceptance,

receiving acceptance of at least one of the one or more updated legal agreements, and

granting the user access to one or more updated authorized financial services, the one or more updated authorized financial services comprising each of the one or more authorized financial services for which the user has accepted the respective one or more updated legal agreements, and each of the one or more authorized financial services for which no updated legal agreement was determined to exist.

2. The method of claim 1, wherein the step of establishing the user account further comprises:

prompting the user for user-provided ownership verification information related to one or more of the desired financial services;

receiving user-provided ownership verification information from the user;

determining the ownership verification information requirements for the one or more desired financial services;

determining whether the user-provided ownership verification information satisfies the ownership verification information requirements for the one or more desired financial services; and

excluding from the one or more authorized financial services any of the one or more desired financial services for which the user-provided ownership verification information does not satisfy the respective ownership verification information requirements.

3. The method of claim 1, wherein the step of establishing the user account further comprises:

prompting the user for user-provided ownership verification information related to one or more of the desired financial services;

receiving the user-provided ownership verification information from the user;

determining the ownership verification information requirements for the one or more desired financial services;

ranking the ownership verification information requirements for the one or more desired financial services according to the stringency of the ownership verification information requirements for each of the one or more desired financial services;

identifying a first desired financial services having the most stringent ownership verification information requirements satisfied by the user-provided ownership verification information; and

excluding from the one or more authorized financial services any of the one or more desired financial services having more stringent ownership verification information requirements than the first desired financial service.

4. The method of claim 1, wherein the step of providing access to the user account further comprises:

determining whether one or more additional financial services are available in addition to the one or more authorized financial services;

displaying the additional financial services to the user;

receiving from the user a selection of additional desired financial services comprising one or more of the additional available financial services;

authorizing the user comprising;

identifying one or more additional legal agreements associated with the additional desired financial services,

presenting the one or more additional legal agreements to the user for acceptance,

receiving acceptance of at least one of the one or more additional legal agreements from the user, and

designating the one or more additional desired financial services for which the user has accepted the respective one or more additional legal agreements as authorized financial services.

5. The method of claim 4, further comprising:

determining the ownership verification information requirements for each of the one or more additional desired financial services;

comparing the ownership verification information requirements for the one or more additional desired financial services with user-provided ownership verification information; and

excluding from the one or more authorized financial services any of the one or more additional desired financial services for which the user-provided ownership verification information does not satisfy the respective ownership verification information requirements.

6. The method of claim 5, further comprising:

prompting the user for the user-provided ownership verification information; and

receiving the user-provided ownership verification information from the user.

7. The method of claim 5, further comprising retrieving the user-provided ownership verification information from a database.

8. The method of claim 4, further comprising:

determining the ownership verification information requirements for each of the one or more additional desired financial services;

ranking the ownership verification information requirements for the one or more additional desired financial services according to the stringency of the ownership verification information requirements for each of the one or more additional desired financial services;

identifying a first additional desired financial services having the most stringent ownership verification information requirements satisfied by user-provided ownership verification information; and

excluding from the one or more authorized financial services any of the one or more additional desired financial services having more stringent ownership verification information requirements than the first additional desired financial service.

9. The method of claim 8, further comprising:

prompting the user for the user-provided ownership verification information; and

receiving the user-provided ownership verification information from the user.

10. The method of claim 8, further comprising retrieving the user-provided ownership verification information from a database.

11. A system for controlling access to a plurality of financial accounts, the system comprising:

a user account establishment system comprising one or more processors adapted to;

establish a user identification associated with a user and a user account,

establish a user password associated with the user identification,

interface with a user terminal to display available financial services to a user,

interface with the user terminal to receive from the user a selection of desired financial services comprising one or more of the available financial services,

identify one or more legal agreements associated with the desired financial services,

interface with the user terminal to present the one or more legal agreements to the user for acceptance,

interface with the user terminal to receive acceptance of at least one of the one or more legal agreements from the user, and

designate one or more authorized financial services, the one or more authorized financial services comprising the one or more desired financial services for which the user has accepted the respective one or more legal agreements; and

an account access system comprising one or more processors adapted to;

interface with the user terminal to receive the user identification and user password,

verify the user identification and user password,

determine whether one or more updated legal agreements exist for any of the one or more authorized financial services,

interface with the user terminal to present the one or more updated legal agreements to the user for acceptance,

interface with the user terminal to receive acceptance of at least one of the one or more updated legal agreements, and

interface with the user terminal to provide the user access to one or more updated authorized financial services, the one or more updated authorized financial services comprising each of the one or more authorized financial services for which the user has accepted the respective one or more updated legal agreements, and each of the one or more authorized financial services for which no updated legal agreement was determined to exist.

12. The system of claim 11, wherein the user account establishment system is further adapted to:

interface with the user terminal to prompt the user for user-provided ownership verification information related to one or more of the desired financial services;

interface with the user terminal to receive user-provided ownership verification information from the user;

determine the ownership verification information requirements for the one or more desired financial services;

determine whether the user-provided ownership verification information satisfies the ownership verification information requirements for the one or more desired financial services; and

exclude from the one or more authorized financial services any of the one or more desired financial services for which the user-provided ownership verification information does not satisfy the respective ownership verification information requirements.

13. The system of claim 11, wherein the user account establishment system is further adapted to:

interface with the user terminal to prompt the user for user-provided ownership verification information related to one or more of the desired financial services;

interface with the user terminal to receive the user-provided ownership verification information from the user;

determine the ownership verification information requirements for the one or more desired financial services;

rank the ownership verification information requirements for the one or more desired financial services according to the stringency of the ownership verification information requirements for each of the one or more desired financial services;

identify a first desired financial services having the most stringent ownership verification information requirements satisfied by the user-provided ownership verification information; and

exclude from the one or more authorized financial services any of the one or more desired financial services having more stringent ownership verification information requirements than the first desired financial service.

14. The system of claim 11, wherein the account access system is further adapted to:

determine whether one or more additional financial services are available in addition to the one or more authorized financial services;

interface with the user terminal to display the additional financial services to the user;

interface with the user terminal to receive from the user a selection of additional desired financial services comprising one or more of the additional available financial services;

identify one or more additional legal agreements associated with the additional desired financial services;

interface with the user terminal to present the one or more additional legal agreements to the user for acceptance;

interface with the user terminal to receive acceptance of at least one of the one or more additional legal agreements from the user; and

designate the one or more additional desired financial services for which the user has accepted the respective one or more additional legal agreements as authorized financial services.

15. The system of claim 14, wherein the account access system is further adapted to:

determine the ownership verification information requirements for each of the one or more additional desired financial services;

compare the ownership verification information requirements for the one or more additional desired financial services with user-provided ownership verification information; and

exclude from the one or more authorized financial services any of the one or more additional desired financial services for which the user-provided ownership verification information does not satisfy the respective ownership verification information requirements.

16. The system of claim 15, wherein the account access system is further adapted to:

interface with the user terminal to prompt the user for the user-provided ownership verification information; and

interface with the user terminal to receive the user-provided ownership verification information from the user.

17. The system of claim 15, wherein the account access system is further adapted to retrieve the user-provided ownership verification information from a database.

18. The system of claim 14, wherein the account access system is further adapted to:

determine the ownership verification information requirements for each of the one or more additional desired financial services;

rank the ownership verification information requirements for the one or more additional desired financial services according to the stringency of the ownership verification information requirements for each of the one or more additional desired financial services;

identify a first additional desired financial services having the most stringent ownership verification information requirements satisfied by user-provided ownership verification information; and

exclude from the one or more authorized financial services any of the one or more additional desired financial services having more stringent ownership verification information requirements than the first additional desired financial service.

19. The system of claim 18, wherein the account access system is further adapted to:

interface with the user terminal to prompt the user for the user-provided ownership verification information; and

interface with the user terminal to receive the user-provided ownership verification information from the user.

20. The system of claim 18, wherein the account access system is further adapted to retrieve the user-provided ownership verification information from a database.