Access control interface for managing entities and permissions
Systems, methods, and apparatuses for providing a customer a central location to manage permissions provided to third-parties and devices to access and use customer information maintained by a financial institution are described. The central location serves as a central portal where a customer of the financial institution can manage all access to account information and personal information stored at the financial institution. Accordingly, the customer does not need to log into each individual third-party system or customer device to manage previously provided access to the customer information or to provision new access to the customer information. A user additionally is able to have user data and third-party accounts of the user deleted from devices, applications, and third-party systems via a central portal.
1 . A computing device comprising:
a network interface configured to communicate via a telecommunications network; and
one or more processors and a memory storing a first application and a second application, the one or more processors configured to:
execute the first application to present, via one or more user interfaces, an interactive graphical interface that identifies the second application for which an access permission for access to user information is controlled, wherein a service provider computing system is identified as a storage location for the user information accessible via a user information application programming interface (API);
present, via the interactive graphical interface of the first application, a menu for selecting user information to be made accessible to the second application;
receive, from the one or more user interfaces, by the first application, a signal indicating a user input corresponding with a selection of the user information via the menu;
use the network interface to transmit an indication of the user information selected to grant the second application access to the selected user information, to cause the service provider computing system to update the access permission of the user information API to grant the second application access to the selected user information; and
execute the second application to retrieve, using the user information API, the selected user information from the service provider computing system.
2 . The device of claim 1 , wherein the menu enables selection of a subset of the user information to be made accessible to the second application without granting access to a remainder of the user information.
3 . The device of claim 1 , wherein the menu presents an option to selection between a first subset of the user information and a second subset of the user information to be made accessible to the second application.
4 . The device of claim 1 , wherein the indication is a first indication, and wherein the one or more processors are further configured to present, via the interactive graphical interface of the first application, a second indication of whether access to the user information is permitted or restricted for the second application.
5 . The device of claim 1 , wherein the menu is a first menu, and wherein the one or more processors are further configured to present, via the interactive graphical interface, a second menu for selecting between at least a first setting to permit access to the user information for the second application, and a second setting to restrict access to the user information for the second application.
6 . The device of claim 1 , wherein the first application is a financial services application.
7 . The device of claim 6 , wherein the second application is a calendar or scheduling application.
8 . The device of claim 6 , wherein the second application is an email application.
9 . The device of claim 6 , wherein the second application is a social media application.
10 . The device of claim 6 , wherein the second application is a third-party application of a third-party other than a provider of the first application.
11 . The device of claim 10 , wherein the user information comprises account data for financial transactions involving the third-party.
12 . The device of claim 1 , wherein the second application is configured to communicate with the service provider computing system to request access to the user information.
13 . A method for controlling access permissions on a user device comprising a network interface configured to communicate via a telecommunications network and memory storing a first application and a second application, the method comprising:
executing, the first application to present, via one or more user interfaces, an interactive graphical interface that identifies the second application for which an access permission for access to user information is controlled, wherein a service provider computing system is identified as a storage location for the user information accessible via a user information application programming interface (API);
presenting, via the interactive graphical interface of the first application, a menu for selecting user information to be made accessible to the second application;
receiving, via the one or more user interfaces, by the first application, a signal indicating a user input corresponding with a selection of the user information via the menu;
using the network interface to transmit an indication of the user information selected to grant the second application access to the selected user information, wherein the indication causes the service provider computing system to update the access permission of the user information API to grant the second application access to the selected user information; and
executing the second application to access the selected user information.
14 . The method of claim 13 , wherein the menu enables selection of a subset of the user information to be made accessible to the second application without granting access to a remainder of the user information.
15 . The method of claim 13 , wherein the menu presents an option to selection between a first subset of the user information and a second subset of the user information to be made accessible to the second application.
16 . The method of claim 13 , wherein the indication is a first indication, and wherein the method further comprises presenting, via the interactive graphical interface of the first application, a second indication of whether access to the user information is permitted or restricted for the second application.
17 . The method of claim 16 , wherein the menu is a first menu, and wherein the method further comprises presenting, via the interactive graphical interface of the first application, a second menu for selecting between at least a first setting to permit access to the user information for the second application, and a second setting to restrict access to the user information for the second application.
18 . The method of claim 13 , wherein the first application is a financial services application.
19 . The method of claim 18 , further comprising storing the second application as one of a calendar application, a scheduling application, an email application, or a social media application.
20 . The method of claim 18 , further comprising:
storing the second application as a third-party application of a third-party, wherein the user information is account data for financial transactions involving the third-party; and
executing the second application to communicate with the service provider computing system to request access to the user information.