System and method for single sign on process for websites with multiple applications and services

• US 8,590,008 B1
• Filed: 10/30/2008
• Issued: 11/19/2013
• Est. Priority Date: 07/02/1999
• Status: Expired due to Term

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Ellmore, Kimberly
• Primary Examiner(s): Rahman, Mohammad L
• Application Number:
  US12/261,259
• Time in Patent Office: 1,846 Days
• Field of Search: 726 2- 5, 713182-184, 705/1, 705 3- 5, 705/42, 705/72, 705/76
• US Class Current: 726/2
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for integrating the Internet front end-sign on processes of the various systems of a financial institution which allows a customer to view and access its various financial accounts with the institution.

During the initial sign up for the online access. to its accounts, a customer creates his/her User ID and password online during the same session. Once the customer has signed on (password) and verified ownership of at least one account, the system displays all of the customer'"'"'s accounts that are available for access via the Internet website. The online ownership verification uses only a single account of the customer and the ownership verification criteria associated with the account. The account used for verifying a customer is first determined based on the accounts selected by the customer for accessing online. From the selected accounts, the system of the present invention creates a verification hierarchy with respect to the accounts. When determining the verification to use for the single ownership verification, the present invention selects the account from the hierarchy with the most stringent requirements.

Claims

1. A method for controlling access to a financial account, the method comprising:

receiving a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identifying, using at least one computer processor, one or more updated legal agreements associated with the selected at least one financial service, wherein the one or more updated legal agreements were updated since a previous user acceptance or previous user access to the selected at least one financial service;

providing, to an electronic device, the one or more updated legal agreements for user acceptance;

receiving user acceptance to the one or more updated legal agreements;

authorizing access to the user account based on the received user acceptance; and

providing access to the user account, wherein access is provided to the at least one financial service corresponding to the accepted one or more updated legal agreements.

2. The method of claim 1, wherein identifying one or more updated legal agreements comprises scanning the user account for one or more legal agreements that have not been previously accepted.

3. The method of claim 1, wherein identifying one or more updated legal agreements comprises scanning the user account for one or more legal agreements that have been previously accepted but have since been updated.

4. The method of claim 1, wherein presenting the one or more legal agreements comprises presenting at least an updated portion of the one or more updated legal agreements for user acceptance.

5. The method of claim 4, wherein presenting the one or more updated legal agreements further comprises presenting previously disclosed portions of one or more complete updated legal agreements for user acceptance.

6. The method of claim 1, wherein authorizing access to the user account further comprises:

prompting for user verification information;

receiving the user verification information; and

determining that the received user verification information satisfies authorization requirements for access to the user account.

7. The method of claim 6, further comprising ranking the user verification information based on stringency of requirements corresponding to the plurality of financial services.

8. The method of claim 1, further comprising storing the received user acceptance of the one or more updated legal agreements.

9. The method of claim 8, wherein the stored user acceptance of the one or more updated legal agreements is used for at least one of future access to the at least one financial service and updating one or more updated legal agreements for future presentation.

10. A non-transitory computer readable medium comprising code to perform the steps of:

receiving a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identifying one or more updated legal agreements associated with the selected at least one financial service, wherein the one or more updated legal agreements were updated since a previous user acceptance or previous user access to the selected at least one financial service;

presenting the one or more updated legal agreements for user acceptance;

receiving user acceptance to the one or more updated legal agreements;

authorizing access to the user account based on the received user acceptance; and

providing access to the user account, wherein access is provided to the at least one financial service corresponding to the accepted one or more updated legal agreements.

11. A system for controlling access to a financial account, the system comprising:

a receiver and at least one computer processor, wherein the system is configured to;

receive, at the receiver, a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identify, at the at least one computer processor, one or more updated legal agreements associated with the selected at least one financial service, wherein the one or more updated legal agreements were updated since a previous user acceptance or previous user access to the selected at least one financial service;

present, by the at least one computer processor, the one or more updated legal agreements for user acceptance;

receive, at the receiver, user acceptance to the one or more updated legal agreements;

authorizing, by the at least one computer processor, access to the user account based on the received user acceptance; and

providing, by the at least one computer processor, access to the user account, wherein access is to the at least one financial service of the user account corresponding to the accepted one or more updated legal agreements.

12. The system of claim 11, wherein one or more updated legal agreements is identified by scanning the user account for one or more legal agreements that have not been previously accepted.

13. The system of claim 11, wherein the one or more updated legal agreements is identified by scanning the user account for one or more legal agreements that have been previously accepted but have since been updated.

14. The system of claim 11, wherein the at least one computer processor presents at least an updated portion of the one or more updated legal agreements for user acceptance.

15. The system of claim 14, wherein the at least one computer processor presents previously disclosed portions of one or more complete updated legal agreements for user acceptance.

16. The system of claim 11, wherein the at least one computer processor is further configured to authorize access to the user account by:

prompting for user verification information;

receiving the user verification information; and

determining that the received user verification information satisfies authorization requirements for access to the user account.

17. The system of claim 16, wherein the at least one computer processor is further configured to rank the user verification information based on stringency of requirements corresponding to the plurality of financial services.

18. The system of claim 11, further comprising storing the received user acceptance of the one or more updated legal agreements.

19. The system of claim 18, further comprising at least one data storage unit configured to store user acceptance of the one or more updated legal agreements for at least one of future access to the at least one financial service and updating one or more updated legal agreements for future presentation by the at least one computer processor.

20. A method for controlling access to a financial account, the method comprising:

receiving a selection from a user to access a plurality of financial services associated with a user account;

identifying, using at least one computer processor, one or more updated legal agreements associated with each of the plurality of financial services, wherein the one or more updated legal agreements were updated since a previous user acceptance or previous user access to the selected at least one financial service;

providing, to an electronic device, the one or more updated legal agreements for user acceptance;

receiving user acceptance to the one or more updated legal agreements;

authorizing access to the financial services of the user account associated to the one or more updated legal agreements that have received user acceptance; and

providing access to the user account for the authorized financial services.

21. A method for controlling access to a financial account, the method comprising:

receiving a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identifying, using at least one computer processor, one or more updated legal agreements associated with the selected at least one financial service;

providing, to an electronic device, the one or more updated legal agreements for user acceptance;

receiving user acceptance to the one or more updated legal agreements;

authorizing access to the user account based on the received user acceptance; and

providing access to the user account, wherein access is provided to the at least one financial service corresponding to the accepted one or more updated legal agreements,

wherein authorizing access to the user account further comprises;

prompting for user verification information;

receiving the user verification information;

determining that the received user verification information satisfies authorization requirements for access to the user account; and

ranking the user verification information based on stringency of requirements corresponding to the plurality of financial services.

22. A system for controlling access to a financial account, the system comprising:

a receiver and at least one computer processor, wherein the system is configured to;

receive, at the receiver, a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identify, at the at least one computer processor, one or more updated legal agreements associated with the selected at least one financial service;

present, by the at least one computer processor, the one or more updated legal agreements for user acceptance;

receive, at the receiver, user acceptance to the one or more updated legal agreements;

authorizing, by the at least one computer processor, access to the user account based on the received user acceptance; and

providing, by the at least one computer processor, access to the user account, wherein access is to the at least one financial service of the user account corresponding to the accepted one or more updated legal agreements,

wherein the at least one computer processor is further configured to authorize access to the user account by;

prompting for user verification information;

receiving the user verification information; and

determining that the received user verification information satisfies authorization requirements for access to the user account; and

ranking the user verification information based on stringency of requirements corresponding to the plurality of financial services.

23. A method for controlling access to a financial account, the method comprising:

using an electronic device, receiving a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identifying a legal agreement associated with the selected at least one financial service, wherein the legal agreement has not been accepted by the user;

presenting the legal agreement for user acceptance on the electronic device;

receiving user acceptance to the legal agreement; and

sending an electronic copy of the accepted and executed legal agreement to the electronic device by electronic mail.

24. The method of claim 23, further comprising:

authorizing access to the user account based on the received user acceptance; and

providing access to the user account, wherein access is provided to the at least one financial service corresponding to the accepted legal agreement.

25. The method of claim 23, further comprising:

sending the electronic copy of the accepted and executed agreement to customer for storage on the electronic device.

26. A method for controlling access to a financial account, the method comprising:

using an electronic device, receiving a selection from a user to access at least one financial service from a plurality of financial services associated with a user account;

identifying a legal agreement associated with the selected at least one financial service, wherein the legal agreement has not been accepted by the user;

presenting the legal agreement for user acceptance on the electronic device;

receiving user acceptance to the legal agreement; and

sending an electronic copy of the accepted and executed legal agreement to the electronic device; and

wherein the legal agreement is an update to a legal agreement that was agreed to by the user.