Management of payroll lending within an enterprise system

• US 10,762,559 B2
• Filed: 04/15/2016
• Issued: 09/01/2020
• Est. Priority Date: 04/15/2016
• Status: Active Grant

• Current Assignee: ADP, Inc.
• Original Assignee: ADP LLC (ADP, Inc.)
• Inventors: Alejo, Newsbelkis C., Chauhan, Neel Lee, Lozano, Ruth T.
• Primary Examiner(s): Bartley, Kenneth
• Application Number:
  US15/099,896
• Publication Number:
  US 20170301013A1
• Time in Patent Office: 1,600 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof

Abstract

A method and apparatus for facilitating access to credit scores in an enterprise system. A request that includes a context resource identifier may be received at a proxy server from a client. The proxy server controls access to a resource associated with an interface that is referenced by the context resource identifier using a profile that is dynamically built for a user of the client based on a plurality of resource profiles received from a plurality of interfaces in communication with the proxy server. The proxy server sends a response generated by the resource to the client. The response includes a credit score for an entity that is based on a current financial state of the entity. Controlling access to the resource based on the context resource identifier and the profile for the user increases a speed of access to the resource in the enterprise system.

Claims

1. A method comprising:

a first processor transforming a uniform resource identifier into a context resource identifier, the context resource identifier different than the uniform resource identifier; and

a second processor implementing a proxy server to access a payroll credit score in an enterprise system, automatically discover authorization application programming interfaces for connected resources, build a profile for a user for the connected resources, and authorize the user for access on behalf of the connected resources by;

receiving a request that includes the context resource identifier from a client;

controlling access to a resource associated with an interface that is referenced by the context resource identifier using a dynamic profile that is dynamically built for the user of the client based on a plurality of resource profiles received from a plurality of interfaces in communication with the proxy server; and

sending a response generated by the resource to the client, wherein;

the resource is different than the proxy server;

the response includes the payroll credit score for an entity, where the payroll credit score is based on a current financial state of the entity and is related to payroll; and

controlled access using the context resource identifier improves speed of access to the resource.

2. The method of claim 1, wherein sending the response comprises:

receiving the payroll credit score from the resource for the user, wherein the entity is a business entity and wherein the payroll credit score is based on at least one of a current number of employees, a current general ledger, a current average size of payroll, a current number of years in business, a current financial standing of the business entity, a current tax state for the business entity, a current industry type, or a current status of funds; and

sending the payroll credit score to the client for use by the user of the client.

3. The method of claim 1, wherein controlling access to the resource comprises:

determining whether the interface referenced by the context resource identifier requires an authorization for the user; and

determining whether an existing profile for the user is present within a cache that is in communication with the proxy server in response to a determination that the interface requires the authorization for the user.

4. The method of claim 3, wherein controlling access to the resource further comprises:

building, dynamically, a new profile for the user in response to a determination that the existing profile is not present within the cache; and

storing the new profile in the cache in association with a logical expiration time and a physical expiration time for the new profile.

5. The method of claim 4, wherein controlling access to the resource further comprises:

determining whether the user is authorized to access the resource based on the new profile built for the user and a role of the user; and

routing the request to the resource in response to a determination that the user is authorized to access the resource.

6. The method of claim 5, wherein controlling access to the resource further comprises:

generating an error code in response to a determination that the user is not authorized to access the resource; and

sending the error code to the client through a gateway.

7. The method of claim 6, wherein building, dynamically, the new profile for the user comprises:

discovering, dynamically, the plurality of interfaces that are in communication with the proxy server;

obtaining the plurality of resource profiles from the plurality of interfaces, wherein each resource profile in the plurality of resource profiles is generated by a corresponding interface in the plurality of interfaces and includes a set of endpoint references and authorization information; and

building the new profile for the user based on the authorization information in each resource profile in the plurality of resource profiles.

8. The method of claim 1, wherein controlling access to the resource comprises:

determining whether the user is authorized to access the resource based on an existing profile built for the user; and

routing the request to the resource in response to a determination that the user is authorized to access the resource.

9. The method of claim 1, wherein sending the response comprises:

receiving the response that includes the payroll credit score from the resource through the interface after the user of the client has been authorized for access to the resource, wherein the resource is a payroll engine and the user is a financial institution.

10. The method of claim 9, wherein sending the response further comprises:

filtering the response based on a data privacy filter to form a modified response; and

sending the modified response to the client.

11. The method of claim 1, wherein dynamically building the dynamic profile comprises:

dynamically discovering the plurality of interfaces in communication with the proxy server;

requesting the plurality of resource profiles from the plurality of interfaces;

extracting an information section from the plurality of interfaces to form a plurality of information sections, wherein the information section corresponds to a financial institution from authorization information in each of the plurality of resource profiles; and

aggregating the plurality of information sections to form a new profile for the financial institution.

12. An apparatus comprising:

a first processor implementing a resource; and

a second processor implementing a proxy server in communication with the resource, wherein the proxy server automatically discovers authorization application programming interfaces for connected resources, dynamically builds a profile for a user for the connected resources, and automatically performs a profile-based authorization of the user for access on behalf of the connected resources by;

receiving a request that includes a context resource identifier from a client;

controlling access to the resource associated with an interface that is referenced by the context resource identifier using a dynamic profile that is dynamically built for the user of the client based on a plurality of resource profiles received from a plurality of interfaces in communication with the proxy server; and

sending a response generated by the resource to the client in which the response includes a payroll credit score for an entity that is based on a current financial state of the entity; and

wherein controlled access to the resource using the context resource identifier and the dynamic profile improves speed of access to the resource in an enterprise system.

13. The apparatus of claim 12, wherein the payroll credit score is based on at least one of a number of employees, a general ledger, an average size of payroll, a number of years in business, a financial standing of the entity, a current tax state for the entity, a business start date, an industry type, a status of funds, and a start date for joining the enterprise system.

14. The apparatus of claim 13, wherein the proxy server receives the request from the client through a gateway in communication with both the client and the proxy server.

15. The apparatus of claim 12, wherein the first processor and the second processor are a same processor.

16. A computing device comprising:

one or more processors; and

a non-transitory, computer-readable medium storing programming instructions executable by the one or more processors to implement a proxy server that automatically discovers authorization application programming interfaces for connected resources, automatically builds a user profile for a user of the connected resources, and automatically authorizes the user for access on behalf of the connected resources by;

receiving a request that includes a context resource identifier from a client;

controlling access to a resource associated with an interface that is referenced by the context resource identifier using the user profile that is dynamically built for the user of the client based on a plurality of resource profiles received from a plurality of interfaces in communication with the proxy server; and

sending a response generated by the resource to the client, wherein;

the resource is different than the proxy server;

the response includes a payroll credit score for an entity that is;

based on a current financial state of the entity; and

related to payroll; and

controlled access to the resource using the context resource identifier and the user profile improves speed of access to the resource in an enterprise system as compared to not controlling access using the context resource identifier and the user profile.

17. The computing device of claim 16, wherein sending the response comprises:

receiving the payroll credit score from the resource for the user, wherein the entity is a business entity and wherein the payroll credit score is based on at least one of a number of employees, a general ledger, an average size of payroll, a number of years in business, a financial standing of the business entity, a current tax state for the business entity, a business start date, an industry type, a status of funds, and a start date for joining the enterprise system; and

sending the payroll credit score to the client for use by the user of the client.

18. The computing device of claim 16, wherein controlling access to the resource comprises:

determining whether the interface referenced by the context resource identifier requires an authorization for the user; and

determining whether an existing profile for the user is present within a cache that is in communication with the proxy server in response to a determination that the interface requires the authorization for the user.

19. The computing device of claim 18, wherein controlling access to the resource further comprises:

dynamically building a new profile for the user in response to a determination that the existing profile is not present within the cache; and

storing the new profile in the cache in association with a logical expiration time and a physical expiration time for the new profile.

20. The computing device of claim 19, wherein controlling access to the resource further comprises:

determining whether the user is authorized to access the resource based on the new profile built for the user and a role of the user; and

routing the request to the resource in response to a determination that the user is authorized to access the resource.

21. The computing device of claim 20, wherein controlling access to the resource further comprises:

generating an error code in response to a determination that the user is not authorized to access the resource; and

sending the error code to the client through a gateway.

22. The computing device of claim 21, wherein dynamically building the new profile for the user comprises:

dynamically discovering the plurality of interfaces that are in communication with the proxy server;

obtaining the plurality of resource profiles from the plurality of interfaces, wherein each resource profile in the plurality of resource profiles is generated by a corresponding interface in the plurality of interfaces and includes a set of endpoint references and authorization information; and

building the new profile for the user based on the authorization information in each resource profile in the plurality of resource profiles.

23. The computing device of claim 16, wherein the speed of access to the resource increases efficiency and speed of performing a payroll operation.

24. The computing device of claim 23, wherein the payroll operation and a credit line operation may be performed without a direct communication between the enterprise system and a financial institution.