System and method for providing customers with seamless entry to a remote server

• US 8,438,086 B2
• Filed: 11/28/2001
• Issued: 05/07/2013
• Est. Priority Date: 06/12/2000
• Status: Active Grant

• Current Assignee: Chase Manhattan Mortgage Corporation (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Rosko, Robert, Gudipati, Jayashree
• Primary Examiner(s): Oyebisi, Ojo O
• Application Number:
  US09/994,725
• Publication Number:
  US 20030101116A1
• Time in Patent Office: 4,178 Days
• Field of Search: 713/183, 713/202, 705/42, 705/35
• US Class Current: 705/35
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99954 Version management

Abstract

The present invention provides a seamless entry system that comprises a universal session manager. Users connect to the host service provider with a unique username and password. Then, through a series of data exchanges between the universal session manager, a validation database, and the remote service module, the customer may be transparently logged into remote service providers. Internet banking customers utilize a browser system to connect to a host server providing a range of banking services supported by a remote or distinct server. According to the method, the customer first enters a username and password to gain access to the host service provider. The universal session manager transmits data required for login to the remote service provider. The user is thus able to utilize the remote services with his/her web browser system without having entered a username or password particular to the remote service.

Claims

1. A banking system for offering a plurality of financial services to customers via a login, comprising:

a host server;

a universal session manager operatively disposed on the host server, the universal session manager maintaining the sign-on process;

an interface to a plurality of remote servers by which a customer interfaces with the remote servers, the interface generated by the universal session manager, the interface having multiple frames; and

a validation module operatively linked to the universal session manager through an electronic network, such that the universal session manager retrieves validation information from the validation database in order to validate a customer;

the universal session manager, in conjunction with the validation module, enabling customers of the banking system to access the host server and the plurality of remote servers via a single login to the host server;

the host server providing a consolidated homepage, via the interface, that gives a customer summary information on accounts of the customer with the banking system, and the host server further providing links to the accounts in a first frame of the interface, the accounts being respectively maintained by the plurality of remote servers; and

upon selection of a link by a customer, the universal session manager;

checks, based on information in the validation database, that the customer is allowed access to the remote server;

provides access to a particular remote server, by hosting the remote server in a second frame of the interface, so as to allow the customer use of services on the remote server; and

simultaneously presents the first frame, containing the links to the accounts, while presenting the second frame; and

the universal session manager updating a last accessed time (LAT) variable based on access to the remote server through the second frame, the LAT variable controlling session timeouts; and

the universal session manager sending a communication to the remote server upon either customer timeout or logout.

2. The banking system of claim 1, wherein said consolidated homepage includes value-add features.

3. The banking system of claim 1, wherein said consolidated homepage includes customizable features.

4. The banking system of claim 1, wherein said validation module further includes a database storing information required for registering a customer in the remote service provider.

5. The banking system of claim 1, further comprising a trusted service module that serves as an intermediary between the host server and a trusted service provider.

6. The banking system of claim 1, wherein said trusted service provider comprises a remote server with special access requirements.

7. The banking system of claim 1, where the remote service provider further comprises a registration module and a login module.

8. The banking system of claim 7, wherein the login module receives the data for gaining access to the services provided by the remote service provider.

9. The banking system of claim 7, wherein the registration module receives the data for registering a customer in the remote service provider.

10. The banking system of claim 1, wherein the consolidated homepage provides automated clearinghouse access.

25. The banking system of claim 1, the universal session manager maintains both the first frame and a third frame, while hosting the remote server in the second frame.

26. The banking system of claim 1, in which the universal session manager checking, based on information in the validation database, that the customer is allowed access to the remote server includes the universal session manager checking whether the customer has logged into the remote server during a current Internet banking session.

27. The banking system of claim 26, the universal session manager checking whether the customer has logged into the remote server during a current Internet banking session includes:

the universal session manager checking a session activity table of the customer.

28. The banking system of claim 26, the universal session manager checking whether the customer has logged into the remote server during a current Internet banking session includes:

the universal session manager providing the customer access to the remote server in the second frame without further authentication if the customer has logged into the remote server during a current Internet banking session; and

the universal session manager performing further authentication, prior to providing the customer access to the remote server in the second frame, if the customer has not logged into the remote server during a current Internet banking session.

29. The banking system of claim 28, the further authentication including performing a handshake protocol with the remote server.

33. The banking system of claim 1, the universal session manager sending a communication to the remote server constituted by a communication from the universal session manager to the remote server without directing the customer to the remote server.

11. A method for accessing a plurality of financial services offered by a banking system comprising a host server and a plurality of remote servers operatively linked across an electronic network, the method comprising:

receiving login information, for accessing the host server, from a customer;

the host server providing a consolidated homepage providing (1) an overview of available services that can be accessed a single login on to the banking system, and (2) links to the available services, the consolidated homepage including a first frame and a second frame;

retrieving data for accessing at least one remote server based at least in part on the received login information;

transmitting said data to the at least one remote server;

authenticating that access by the customer to the at least one remote server is allowed; and

transparently connecting the customer to the remote server such that the customer is provided access to the remote server, by hosting the remote server in the second frame of the interface, so as to allow the customer use of services on the remote server, the method including simultaneously presenting the first frame, containing the links to the accounts, while presenting the second frame; and

updating, by a universal session manager associated with the host server, a last accessed time (LAT) variable based on access to the at least one remote server through the second frame, the LAT variable controlling session timeouts of the consolidated homepage; and

sending, by the universal session manager, a communication to the at least one remote server upon either customer logout or timeout, such constituted by a communication from the universal session manager to the at least one remote server without directing the customer to the at least one remote server.

12. The method of claim 11, wherein said consolidated homepage provides a customer products and with a read-only summary of information on accounts of the customer with the banking system.

13. The method of claim 11 wherein said consolidated homepage provides a customer with information on value-add features.

14. The method of claim 11, wherein said consolidated homepage is customizable by the customer to show only active accounts, information and views the customer wishes to have displayed upon successful login.

15. The method of claim 11, wherein said consolidated homepage provides automated clearinghouse access.

16. The method of claim 11, further comprising:

a customer accessing a credit card service or a bill payment service.

17. The method of claim 11, further comprising the steps of:

authenticating the identity of a customer; and

transparently login the customer to all the services for which the customer has signed up.

18. The method of claim 11, wherein said consolidated homepage includes:

a tab for accessing banking products and services a customer may be entitled to have but does not currently have; and

a planning tab for providing financial planning assistance.

19. The method of claim 11, further comprising:

determining customer data, and customer preferences; and

dynamically generating a customized homepage based on said customer data and customer preferences.

20. The method of claim 11, further comprising dynamically determining what offers to target to customers.

21. The method of claim 11, further comprising:

a customer bookmarking an internal service page; and

directly accessing said bookmarked service page without accessing the homepage.

22. The method of claim 11, further comprising a customer accessing a frequently asked questions page with links to information sources.

23. The method of claim 11, further comprising the steps of:

a customer linking to the host server or a remote server from a partnered site.

24. The method of claim 23, wherein said partnered site comprises a search engine.

30. The method of claim 11, the first frame is maintained by the host server, and the second frame is maintained by a remote server providing services;

and

wherein the transmitting said data to the at least one remote server includes the host server directly sending login information to the at least one remote server, the login information including a customer username and password.

31. The method of claim 11, further comprising the steps of:

authenticating the identity of a customer; and

transparently login the customer to all the services for which the customer has signed up;

wherein said consolidated homepage includes;

a tab for accessing banking products and services a customer may be entitled to have but does not currently have; and

a planning tab for providing financial planning assistance; and

the method further comprising;

determining customer data, and customer preferences; and

dynamically generating a customized homepage based on said customer data and customer preferences; and

the first frame is maintained by the host server, and the second frame is maintained by a remote server providing services.

32. The method of claim 11, wherein the sending, by the universal session manager, a communication to the at least one remote server upon either customer logout or timeout includes:

a respective communication from the universal session manager to each of a plurality of remote servers without directing the customer to such remote servers.

34. A banking system that offers a plurality of financial services to customers via a sign-on process, comprising:

a host server;

a universal session manager operatively disposed on the host server, the universal session manager maintaining the sign-on process;

an interface to a plurality of remote servers by which a customer interfaces with the remote servers, the interface generated by the universal session manager, the interface having multiple frames; and

a validation module operatively linked to the universal session manager through an electronic network, such that the universal session manager retrieves validation information from the validation database in order to validate a customer;

the universal session manager, in conjunction with the validation module, enabling customers of the banking system to access the host server and the plurality of remote servers via a single login to the host server;

the host server providing a consolidated homepage, via the interface, that gives a customer summary information on accounts of the customer with the banking system, and the host server further providing links to the accounts in a first frame of the interface, the accounts being respectively maintained by the plurality of remote servers; and

upon selection of a link by a customer, the universal session manager;

checks, based on information in the validation database, that the customer is allowed access to the remote server;

provides access to a particular remote server, by hosting the remote server in a second frame of the interface, so as to allow the customer use of services on the remote server; and

simultaneously presents the first frame, containing the links to the accounts, while presenting the second frame; and

the universal session manager updating a last accessed time (LAT) variable based on access to the remote server through the second frame, the LAT variable controlling session timeouts; and

the universal session manager sending a communication to the remote server based on activity of the user.

35. The banking system of claim 34, the activity of the user comprising at least one of customer timeout or logout.