Methods, apparatus and computer program products for securely accessing account data
Customer data is securely downloaded to a browser toolbar by performing a check to determine whether a request for customer data includes a request for personal identifiable information requiring encryption by a public encryption key generated by the browser toolbar. The customer is authenticated based on a set of a user credential and an account specific access credential. The account specific access credential is associated with the account of the customer. Requested personal identifiable information is encrypted using the public encryption key generated by the browser toolbar. Encrypted personal identifiable information is transmitted to the browser toolbar.
1. A method, comprising:
generating, at a browser toolbar, a cryptographic key usable to decrypt encrypted account information of an account holder, wherein the account information is usable to conduct a transaction with the account holder;
detecting, by the browser toolbar, a first request to obtain the account information of the account holder;
sending, by the browser toolbar, a second request for the account information to a secure datastore that stores the account information;
using, by the browser toolbar, the cryptographic key to decrypt encrypted data received from the secure datastore, wherein the encrypted data includes the account information;
securely storing, by the browser toolbar, the account information at the browser toolbar; and
providing, by the browser toolbar, the account information to a web service in response to the first request.
2. The method according to claim 1 , further including retrieving, by the browser toolbar, generic account data, wherein the generic account data represents the account information.
3. The method according to claim 2 , further including presenting, by the browser toolbar, the generic account data.
4. The method according to claim 1 , wherein generating the cryptographic key further includes creating a public/private key pair usable to encrypt the account information prior to storage of the account information in the secure datastore.
5. The method according to claim 4 , further including transmitting a public key of the public/private key pair to the secure datastore prior to storage of the account information for encrypting the account information.
6. The method according to claim 1 , wherein the securely storing further includes, after providing the account information to the web service, deleting the stored account information from the browser toolbar.
7. The method according to claim 6 , wherein the deleting is performed in response to termination of a browser session associated with the web service.
8. The method according to claim 1 , further including, prior to receiving the encrypted data, the browser toolbar providing credentials of the account holder to a server configured to verify that the account holder is permitted to access the account information.
9. The method according to claim 1 , wherein providing the account information comprises the browser toolbar completing one or more fields of a web page.
10. The method according to claim 1 , wherein the cryptographic key is generated based on user attributes.
11. A non-transitory computer-readable medium having stored thereon processor-executable instructions, which instructions, when executed by a processor, cause the processor to perform steps comprising:
generating, at a browser toolbar, a cryptographic key usable to decrypt encrypted account information of an account holder, wherein the account information is usable to conduct a transaction with the account holder;
detecting, by the browser toolbar, a first request to obtain the account information of the account holder;
sending, by the browser toolbar, a second request for the account information to a secure datastore that stores the account information;
using, by the browser toolbar, the cryptographic key to decrypt encrypted data received from the secure datastore, wherein the encrypted data includes the account information;
securely storing, by the browser toolbar, the account information at the browser toolbar; and
providing, by the browser toolbar, the account information to a web service in response to the first request.
12. The non-transitory computer-readable medium according to claim 11 , wherein said instructions further cause the processor to perform steps including retrieving, by the browser toolbar, generic account data, wherein the generic account data represents the account information.
13. The non-transitory computer-readable medium according to claim 12 , wherein said instructions further cause the processor to perform steps including presenting, by the browser toolbar, the generic account data.
14. The non-transitory computer-readable medium according to claim 11 , wherein generating the cryptographic key further includes creating a public/private key pair usable to encrypt the account information prior to storage of the account information in the secure datastore.
15. The non-transitory computer-readable medium according to claim 14 , wherein said instructions further cause the processor to perform steps including transmitting a public key of the public/private key pair to the secure datastore prior to storage of the account information for encrypting the account information.
16. The non-transitory computer-readable medium according to claim 11 , wherein securely storing further includes, after providing the account information to the web service, deleting the stored account information from the browser toolbar.
17. The non-transitory computer-readable medium according to claim 16 , wherein the deleting is performed in response to termination of a browser session associated with the web service.
18. The non-transitory computer-readable medium according to claim 11 , wherein said instructions further cause the processor to perform steps including, prior to receiving the encrypted data, the browser toolbar providing credentials of the account holder to a server configured to verify that the account holder is permitted to access the account information.
19. The non-transitory computer-readable medium according to claim 11 , wherein providing the account information comprises the browser toolbar completing one or more fields of a web page.
20. The non-transitory computer-readable medium according to claim 11 , wherein the cryptographic key is generated based on user attributes.