IP Library Granted Patent US 11,159,510
Granted Patent B2
US 11,159,510 · App. 16/210,117 · Granted Oct 26, 2021

Utilizing federated user identifiers to enable secure information sharing

Inventor: Hitesh Shah (Seattle, WA)
Assignee: Bank of America Corporation
H04L63/0815H04L63/083H04L63/10H04L63/20H04L67/06H04L67/26
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,159,510
App. No.
16/210,117
Granted
Oct 26, 2021
Kind
B2
Abstract

Aspects of the disclosure relate to utilizing federated user identifiers to enable secure information sharing. A computing platform may receive, from an external application host platform, a federated login request comprising user identification information associated with a user account. Based on receiving the federated login request, the computing platform may send, to a client computing device linked to the user account, a push notification prompting a user of the client computing device to authenticate. Then, the computing platform may authenticate the user of the client computing device to the user account. Based on authenticating the user, the computing platform may generate an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform and may send the orchestration message to the data hub platform to initiate a transfer of external information associated with the user of the client computing device.

Claims (63)

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from an external application host platform, a first federated login request comprising first user identification information associated with a first user account;

based on receiving the first federated login request comprising the first user identification information associated with the first user account, send, via the communication interface, to a first client computing device linked to the first user account, a first push notification prompting a user of the first client computing device to authenticate;

authenticate the user of the first client computing device to the first user account;

based on authenticating the user of the first client computing device to the first user account, generate an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform;

send, via the communication interface, to the data hub platform, the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, wherein sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform causes the data hub platform to initiate a transfer of external information associated with the user of the first client computing device and maintained on at least one external data source server from the at least one external data source server to the external application host platform; and

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, initiate a transfer of internal information associated with the user of the first client computing device to the external application host platform,

wherein a first portion of the internal information associated with the user of the first client computing device is maintained on an account portal computing platform, and

wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the account portal computing platform, the at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform.

2. The computing platform of claim 1 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a client portal hosted by the account portal computing platform.

3. The computing platform of claim 1 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a mobile application associated with a client portal hosted by the account portal computing platform.

4. The computing platform of claim 1 , wherein authenticating the user of the first client computing device to the first user account comprises validating one or more of a username received from the user of the first client computing device, a password received from the user of the first client computing device, a one-time passcode received from the user of the first client computing device, biometric input received from the user of the first client computing device, or security question input received from the user of the first client computing device.

5. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

prior to generating the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, send, via the communication interface, to the first client computing device linked to the first user account, a second push notification prompting the user of the first client computing device to consent to user-specific information being shared with the external application host platform.

6. The computing platform of claim 1 ,

wherein a second portion of the internal information associated with the user of the first client computing device is maintained on enterprise server infrastructure, and

wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the enterprise server infrastructure to send the second portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the enterprise server infrastructure, the at least one command directing the enterprise server infrastructure to send the second portion of the internal information associated with the user of the first client computing device to the external application host platform.

7. The computing platform of claim 1 , wherein the internal information associated with the user of the first client computing device comprises entity verification data attesting to successful authentication of the user of the first client computing device to the first user account by the computing platform.

8. The computing platform of claim 1 , wherein the internal information associated with the user of the first client computing device comprises registered contact information associated with the user of the first client computing device.

9. The computing platform of claim 1 , wherein the internal information associated with the user of the first client computing device comprises account information associated with the user of the first client computing device.

10. The computing platform of claim 1 , wherein the internal information associated with the user of the first client computing device comprises historical information associated with the user of the first client computing device.

11. The computing platform of claim 1 , wherein the internal information associated with the user of the first client computing device comprises timing information associated with the user of the first client computing device.

12. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, update a subscription database to indicate that user-specific data associated with the first user account has been shared with the external application host platform.

13. The computing platform of claim 12 , wherein updating the subscription database to indicate that the user-specific data associated with the first user account has been shared with the external application host platform causes the account portal computing platform to provide at least one subscription manager interface to the first client computing device.

14. The computing platform of claim 13 , wherein the at least one subscription manager interface provided to the first client computing device comprises a user-selectable option to revoke access to the user-specific data associated with the first user account from the external application host platform.

15. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, from the external application host platform, a second federated login request comprising second user identification information associated with a second user account;

determine that the second user account is hosted by a second organization different from a first organization that hosts the first user account; and

based on determining that the second user account is hosted by the second organization different from the first organization that hosts the first user account, route the second federated login request comprising the second user identification information associated with the second user account to an authentication server associated with the second organization via the data hub platform.

16. A method, comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

receiving, by the at least one processor, via the communication interface, from an external application host platform, a first federated login request comprising first user identification information associated with a first user account;

based on receiving the first federated login request comprising the first user identification information associated with the first user account, sending, by the at least one processor, via the communication interface, to a first client computing device linked to the first user account, a first push notification prompting a user of the first client computing device to authenticate;

authenticating, by the at least one processor, the user of the first client computing device to the first user account;

based on authenticating the user of the first client computing device to the first user account, generating, by the at least one processor, an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform;

sending, by the at least one processor, via the communication interface, to the data hub platform, the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, wherein sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform causes the data hub platform to initiate a transfer of external information associated with the user of the first client computing device and maintained on at least one external data source server from the at least one external data source server to the external application host platform; and

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, initiate a transfer of internal information associated with the user of the first client computing device to the external application host platform,

wherein a first portion of the internal information associated with the user of the first client computing device is maintained on an account portal computing platform, and

wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the account portal computing platform, the at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform.

17. The method of claim 16 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a mobile application associated with a client portal hosted by the account portal computing platform.

18. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

receive, via the communication interface, from an external application host platform, a first federated login request comprising first user identification information associated with a first user account;

based on receiving the first federated login request comprising the first user identification information associated with the first user account, send, via the communication interface, to a first client computing device linked to the first user account, a first push notification prompting a user of the first client computing device to authenticate;

authenticate the user of the first client computing device to the first user account;

based on authenticating the user of the first client computing device to the first user account, generate an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform;

send, via the communication interface, to the data hub platform, the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, wherein sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform causes the data hub platform to initiate a transfer of external information associated with the user of the first client computing device and maintained on at least one external data source server from the at least one external data source server to the external application host platform; and

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, initiate a transfer of internal information associated with the user of the first client computing device to the external application host platform,

wherein a first portion of the internal information associated with the user of the first client computing device is maintained on an account portal computing platform, and

wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the account portal computing platform, the at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform.

19. The method of claim 16 , wherein authenticating the user of the first client computing device to the first user account comprises validating one or more of a username received from the user of the first client computing device, a password received from the user of the first client computing device, a one-time passcode received from the user of the first client computing device, biometric input received from the user of the first client computing device, or security question input received from the user of the first client computing device.

20. The one or more non-transitory computer-readable media of claim 18 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a mobile application associated with a client portal hosted by the account portal computing platform.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 5, 2018
From: SHAH, HITESH
To: BANK OF AMERICA CORPORATION
Reel/Frame 047677/0463 →
Continuity (1)
Related Publication 20200186518A1 · Jun 11, 2020
Cited By (2)
US 12,355,750 US 12,574,433