Configuring access to online accounts for third parties not associated with the online account

• US 9,942,238 B2
• Filed: 08/28/2015
• Issued: 04/10/2018
• Est. Priority Date: 08/28/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Votaw, Elizabeth S., Belchee, William B.
• Primary Examiner(s): LE, KHOI V
• Application Number:
  US14/839,184
• Publication Number:
  US 20170063866A1
• Time in Patent Office: 956 Days
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles

Abstract

According to one embodiment, a system includes a memory comprising instructions, an interface, and a processor communicatively coupled to the memory and the interface. The interface is configured to receive, from a first user associated with an online account, a first request to allow access, by a second user not associated with the online account, to the online account, send, in response to the first request, a second request to the second user for credentials, and receive, in response to the second request, credentials from the second user. The process is configured, when executing the instructions, to generate, for the online account based on the first and the credentials received from the second user, an access profile associated with the second user.

Claims

1. A system, comprising:

a memory comprising instructions;

an interface configured to;

receive, from a first user associated with an online account, a first request to allow access, by a second user not associated with the online account, to the online account, wherein;

the first request indicates one or more access rules associated with the second user,

the access rules indicate one or more of a plurality of functions that are associated with the online account that the second user may access, and

the access rules indicate one or more types of information associated with the online account that the second user may access;

send, in response to the first request, a second request to the second user for credentials; and

receive, in response to the second request, credentials from the second user; and

a processor communicatively coupled to the memory and the interface, the processor configured, when executing the instructions, to;

generate, for the online account based on the first request and the credentials received from the second user, an access profile associated with the second user,

modify a user interface for the online account based on the access profile to display the one or more functions that are associated with the online account that the second user may access and the one or more types of information associated with the online account that the second user may access,

receive, from the second user, a third request to perform a function associated with the online account,

verify the access profile associated with the second user;

allow the third request to perform the function associated with the online account when the access profile satisfies the access rules; and

deny the third request to perform the function associated with the online account when the access profile does not satisfy the access rules.

2. The system of claim 1, wherein the first request contains contact information for the second user.

3. The system of claim 1, wherein the second request comprises a link configured to direct the second user to a prompt for the credentials.

4. A method, comprising:

receiving, from a first user associated with an online account, a first request to allow access, by a second user not associated with the online account, to the online account, wherein;

the first request indicates one or more access rules associated with the second user,

the access rules indicate one or more of a plurality of functions that are associated with the online account that the second user may access, and

the access rules indicate one or more types of information associated with the online account that the second user may access;

sending, in response to the first request, a second request to the second user for credentials;

receiving, in response to the second request, credentials from the second user;

generating, for the online account based on the first request and the credentials received from the second user, an access profile associated with the second user;

modifying a user interface for the online account based on the access profile to display the one or more functions that are associated with the online account that the second user may access and the one or more types of information associated with the online account that the second user may access;

receiving, from the second user, a third request to perform a function associated with the online account;

verifying the access profile associated with the second user;

allowing the third request to perform the function associated with the online account when the access profile satisfies the access rules; and

denying the third request to perform the function associated with the online account when the access profile does not satisfy the access rules.

5. The method of claim 4, wherein the first request contains contact information for the second user.

6. The method of claim 4, wherein the second request comprises a link configured to direct the second user to a prompt for the credentials.

7. A computer-readable medium comprising instructions that are configured, when executed by a processor, to:

receive, from a first user associated with an online account, a first request to allow access, by a second user not associated with the online account, to the online account, wherein;

the first request indicates one or more access rules associated with the second user,

the access rules indicate one or more of a plurality of functions that are associated with the online account that the second user may access, and

the access rules indicate one or more types of information associated with the online account that the second user may access;

send, in response to the first request, a second request to the second user for credentials;

receive, in response to the second request, credentials from the second user;

generate, for the online account based on the first request and the credentials received from the second user, an access profile associated with the second user;

modify a user interface for the online account based on the access profile to display the one or more functions that are associated with the online account that the second user may access and the one or more types of information associated with the online account that the second user may access;

receive, from the second user, a third request to perform a function associated with the online account;

verify the access profile associated with the second user;

allow the third request to perform the function associated with the online account when the access profile satisfies the access rules; and

deny the third request to perform the function associated with the online account when the access profile does not satisfy the access rules.

8. The computer-readable medium of claim 7, wherein the first request contains contact information for the second user.

9. The computer-readable medium of claim 7, wherein the second request comprises a link configured to direct the second user to a prompt for the credentials.