Customer centric grid for customer services

• US 10,735,406 B1
• Filed: 12/21/2016
• Issued: 08/04/2020
• Est. Priority Date: 12/21/2016
• Status: Active Grant

• Current Assignee: Wells Fargo Bank NA (Wells Fargo & Company)
• Original Assignee: Wells Fargo Bank NA (Wells Fargo & Company)
• Inventors: Ramanathan, Ramanathan, Sankolli, Suhas D., Ketharaju, Rameshchandra B.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Kaplan, Benjamin A
• Application Number:
  US15/386,732
• Time in Patent Office: 1,322 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

A method implemented on an electronic computing device for facilitating access to user information includes receiving from a user data to be made available for access on the electronic computing device. A time duration for which the data is permitted to be accessed is received from the user. Conditions to be met in order for one of a plurality of entities to access the data are received from the user. A request from an entity is received to access the data. A determination is made as to whether the entity satisfies the conditions. A determination is made as to whether a time at which the request is made is within the time duration. When the entity satisfies the conditions and when the request is made within the time duration, the entity is permitted to access the data.

Claims

1. A method implemented on a first electronic computing device for facilitating access to user information, the method comprising:

receiving, from a user, first data to be made available for access by a first entity on the first electronic computing device, the first data including information relating to personal interests of the user, the first entity being a first organization or another user other than a controller of the first electronic computing device;

storing the first data in a secure area of the first electronic computing device;

receiving, from the user, a first time duration for which the first data is permitted to be accessed from the secure area by the first entity, the first data in the secure area being unavailable for access by the first entity after the first time duration has elapsed;

receiving, from the user, first conditions to be met in order for one of a plurality of entities to access the first data;

receiving a request from the first entity to access the first data;

determining whether the first entity satisfies the first conditions;

determining whether a time at which the request is made by the first entity is within the first time duration;

when the first entity satisfies the first conditions and when the request is made within the first time duration, permitting the first entity to access the first data; and

receiving information regarding a product or service offered by the first entity, the product or service being suggested by the first entity to meet a need of the user, based on the personal interests of the user identified in the first data.

2. The method of claim 1, further comprising:

receiving from the user an identifier of one or more of the plurality of entities that are permitted to access the first data;

determining whether the first entity is one of the plurality of entities that are permitted to access the first data; and

when the first entity is not one of the plurality of entities that are permitted to access the first data, preventing the first entity from accessing the first data.

3. The method of claim 1, further comprising:

receiving, from the first entity, a request for a first password;

determining whether the first entity is one of the plurality of entities that are permitted to access the first data; and

when a determination is made that the first entity is one of the plurality of entities that is permitted the first data, send a password for accessing the first data to the first entity.

4. The method of claim 1, further comprising:

receiving from the first entity a first password for accessing the first data;

preventing the first entity from accessing the first data until a determination is made that the first password is an acceptable password; and

when a determination is made that the first password is an acceptable password, when the first entity satisfies the first conditions and when the request is made within the first time duration, permitting the first entity to access the first data.

5. The method of claim 4, wherein after the first entity accesses the first data, further comprising removing the first password as an acceptable password and preventing the first entity to access the first data again when using the first password.

6. The method of claim 1, wherein the first conditions to be met include:

a condition requiring an entity to be authorized by the user to access the first data; and

a condition requiring a valid password for accessing the first data.

7. The method of claim 1, further comprising preventing access to the first data after the first time duration expires.

8. The method of claim 1, further comprising removing the first data from a temporary storage location on the first electronic computing device after the first time duration expires.

9. The method of claim 1, further comprising:

prior to receiving the information regarding the product or service offered by the first entity;

receiving a request from the user to subscribe to product and service information from the one or more of the plurality of entities; and

sending, to the user, second product and service information from the one or more of the plurality of entities.

10. The method of claim 1, further comprising:

receiving ratings from one or more of the user and one or more additional users regarding a quality of products and services provided from the plurality of entities; and

making the ratings available to the user and the one or more additional users.

11. The method of claim 1, further comprising:

receiving a first policy from the user, the first policy specifying rules regarding transmission of data between the user and the first entity, the first policy identifying the first data and the first conditions.

12. The method of claim 11, wherein the first policy is one or a plurality of policies that specify rules regarding transmission of data between users and organizations.

13. An electronic computing device comprising:

a processing unit; and

system memory, the system memory including instructions which, when executed by the processing unit, cause the electronic computing device to;

receive, from a user, first data to be made available for access on the electronic computing device, the first data including information relating to personal interests of the user;

receive, from the user, one or more selections of one or more entities that are designated by the user as being permitted to access at least a portion of the first data, an entity comprising an organization or another user;

receive, from the user, one or more fields of the first data for which the one or more entities are permitted to access second data, the second data corresponding to the one or more fields of the first data;

receive, from the user, an end date associated with at least one of the one or more fields of the second data;

receive a request from a first entity other than the user to access one or more fields of the second data, the request including a password;

determine whether the first entity is permitted to access the second data;

determine whether the first entity is permitted to access the one or more fields of the second data;

determine whether a time that the request is made is earlier or the same as the end date associated with the at least one of the one or more fields of the second data;

determine whether the password is a correct password to permit access to the at least one of the one or more fields of the second data;

when a determination is made that the first entity is permitted to access the one or more fields of the first data, when a determination is made that the time at which the request is made is earlier or the same as the end date associated with the at least one of the one or more fields of the second data and when a determination is made that the password to permit access to the at least one of the one or more fields of the second data is correct, permit the first entity to access the one or more fields of the second data;

receive information regarding a product or service offered by the first entity, the product or service being suggested by the first entity to meet a need of the user, based on the personal interests of the user identified in the first data.