IP Library Granted Patent US 11,120,158
Granted Patent B2
US 11,120,158 · App. 16/384,810 · Granted Sep 14, 2021

Secure permissioning of access to user accounts, including secure distribution of aggregated user account data

Inventors: William Hockey (San Francisco, CA); Joy Zheng (San Francisco, CA); Baker Shogry (San Francisco, CA); Michael Kelly (San Francisco, CA)
G06F21/6245G06Q20/3221G06Q40/12H04L63/0853H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,120,158
App. No.
16/384,810
Granted
Sep 14, 2021
Kind
B2
Abstract

A system and method for secure permissioning of access to user accounts, including secure distribution of aggregated user account data can include generating a financial report based on account information associated with one or more user accounts; receiving a financial report request for the financial report of the user account, wherein the financial report request is identified as being received from a third-party system; generating an audit report token associated with the financial report; sharing the audit token with the first third-party system in response to the financial report request; and providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report.

Claims (76)

1. A method for managing secure access to user account data comprising:

generating a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information;

receiving a financial report request for a financial report of the user account, wherein the financial report request is identified as being received from a first third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request;

providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report;

evaluating platform interactions of the second third-party system; and

automatically regulating access by the second third-party system and selectively permitting or denying access, based on analysis of the platform interactions of the second third-party system.

2. The method of claim 1 , wherein the financial report presents transaction data and account balance of a financial user over a designated and fixed time period.

3. The method of claim 1 , wherein providing the first third-party system account access to the financial report through the audit report token comprises receiving an access request from the first third-party system and returning the financial report to the first third-party system.

4. The method of claim 3 , wherein the access request specifies a media format; and wherein returning the financial report to the first third-party system comprises returning the financial report to the first third-party system in the media format.

5. The method of claim 1 , wherein providing the first third-party system access to the financial report through the audit report token comprise receiving an access request accompanied with the audit report token and presenting a financial report access user interface.

6. The method of claim 1 , wherein generating a financial report comprises receiving financial account credentials from a user client, authenticating with a financial institution using the financial account credentials and obtaining financial data from the financial institution, and compiling the financial record from at least the financial data.

7. The method of claim 6 , the financial report presents transaction data and account balance of a financial user over a designated and fixed time period, and wherein authenticating with a financial institution using the financial account credentials and obtaining financial data from the financial institution comprises:

authenticating with the financial institution with a virtualized instance of a mobile device application,

requesting, by the virtualized instance of the mobile device application and via a non-public API of the financial institution, the transaction data and account balance associated with the user account at the financial institution, and

receiving the transaction data and account balance associated with the user from the external computing device of the external institution.

8. The method of claim 6 , wherein compiling the financial record comprises processing the financial data and providing a financial analysis summary metric in the financial report.

9. The method of claim 1 , further comprising receiving access permissions through a management user interface and permitting access to the financial report in accordance with the access permissions.

10. The method of claim 9 , wherein receiving access permissions through the management user interface and permitting access to the financial report in accordance with the access permissions is comprised of notifying a user through the management user interface of a new access request, receiving user input to the new access request, and permitting the access request in accordance with the user input.

11. The method of claim 1 , further comprising receiving an audit report token request from the first third-party system for the second third-party system, the audit report token request specifying an identifier of the second third-party system; creating the secondary audit report token in association with an identifier of the second third-party, and communicating the secondary audit report token to the first third-party system; and providing a second third-party system access to the financial report through the audit report token.

12. The method of claim 1 , further comprising providing access history of the financial report within a management user interface to a user account.

13. The method of claim 1 , wherein the financial report comprises data of a financial user account obtained from a financial institution server; wherein the financial report comprises a listing of financial transactions and balance information.

14. The method of claim 13 , wherein the first third-party system is a first loan management system and the second third-party system is a second loan management system.

15. The method of claim 13 , wherein the first third-party system is a first loan management system and the second third-party system is computing system of an auditor.

16. The method of claim 1 , further comprising receiving an update request in association with the financial report; and, in response to the update request, creating an updated financial report updated based on new financial data and the original financial report request; sharing an updated report token for the updated financial report.

17. A system for secure access to user account data comprising:

at least one hardware processor and memory;

a data management platform configured to:

generate a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information;

receive a financial report request for the financial report of the user account, wherein the financial report request is identified as being received from a third-party system;

generating an audit report token associated with the financial report;

share the audit report token with the first third-party system in response to the financial report request;

provide the first third-party system account access to the financial report through the report token;

share the audit report token for the financial report with the first third-party system; and

provide the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report;

a management user interface accessible by the user account configured to regulate access to the financial report; and

a financial institution interface system configured to:

receive financial account credentials;

authenticate with a financial institution using the financial account credentials with a virtualized instance of a mobile device application;

obtain financial data from the financial institution through the virtualized instance of the mobile device application; and

compile the financial record from the financial data.

18. A non-transitory machine-readable storage medium comprising instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

generating a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information;

receiving a financial report request for the financial report of the user account, wherein the financial report request is identified as being received from a third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request;

providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report;

evaluating platform interactions of the second third-party system; and

automatically regulating access by the second third-party system and selectively permitting or denying access, based on analysis of the platform interactions of the second third-party system.

19. A method for managing secure access to user account data comprising:

generating a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information;

receiving a financial report request fora financial report of the user account, wherein the financial report request is identified as being received from a first third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request;

providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report

receiving an audit report token request from the first third-party system for the second third-party system, the audit report token request specifying an identifier of the second third-party system;

creating the secondary audit report token in association with an identifier of the second third-party, and communicating the secondary audit report token to the first third-party system; and

providing a second third-party system access to the financial report through the audit report token.

20. A method for managing secure access to user account data comprising:

generating a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information;

receiving a financial report request for a financial report of the user account, wherein the financial report request is identified as being received from a first third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request;

providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report and

receiving an update request in association with the financial report; and, in response to the update request, creating an updated financial report updated based on new financial data and the original financial report request; sharing an updated report token for the updated financial report.

21. A method for managing secure access to user account data comprising:

generating a financial report based on account information associated with one or more user accounts, each user account being associated with one or more institutions, where the account information includes financial information, and which comprises receiving financial account credentials from a user client, authenticating with a financial institution using the financial account credentials and obtaining financial data from the financial institution, and compiling the financial record from at least the financial data;

wherein authenticating with a financial institution using the financial account credentials and obtaining financial data from the financial institution comprises:

authenticating with the financial institution with a virtualized instance of a mobile device application,

requesting, by the virtualized instance of the mobile device application and via a non-public application programming interface (API) of the financial institution, the transaction data and account balance associated with the user account at the financial institution, and

receiving the transaction data and account balance associated with the user from the external computing device of the external institution;

receiving a financial report request for a financial report of the user account, wherein the financial report request is identified as being received from a first third-party system, wherein the financial report presents transaction data and account balance of a financial user over a designated and fixed time period;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request; and

providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 5, 2021
From: KELLY, MICHAEL; ZHENG, JOY; SHOGRY, BAKER; HOCKEY, WILLIAM
To: PLAID INC.
Reel/Frame 057087/0524 →
SECURITY INTEREST Recorded Jul 15, 2020
From: PLAID INC.; QUOVO, INC.; RAMBLER TRELLIS LLC
To: SILICON VALLEY BANK
Reel/Frame 053211/0898 →
Continuity (2)
Provisional Application 62657377 · Apr 13, 2018
Related Publication 20190318122A1 · Oct 17, 2019
Cited By (11)
US 12,198,413 US 12,217,104 US 12,238,101 US 12,335,164 US 12,374,097 US 12,406,316 US 12,475,698 US 12,489,751 US 12,548,015 US 12,646,039 US 12,664,547