ACCESS CONTROL INTERFACE FOR MANAGING ENTITIES AND PERMISSIONS
Systems, methods, and apparatuses for providing a customer a central location to manage permissions provided to third-parties and devices to access and use customer information maintained by a financial institution are described. The central location serves as a central portal where a customer of the financial institution can manage all access to account information and personal information stored at the financial institution. Accordingly, the customer does not need to log into each individual third-party system or customer device to manage previously provided access to the customer information or to provision new access to the customer information. A user additionally is able to have user data and third-party accounts of the user deleted from devices, applications, and third-party systems via a central portal.
1 . A computing device comprising:
a network interface configured to communicate via a telecommunications network;
one or more user interfaces for visually presenting graphical elements and for receiving user inputs; and
one or more processors and a memory having stored thereon instructions which, when executed by the one or more processors, cause the one or more processors to:
present, via an interactive graphical interface, a menu enabling a selection relating to user information to be made accessible to an application;
receive, via the one or more user interfaces, a signal indicating a user input corresponding to the selection relating to access to the user information;
use the network interface to transmit, to a service provider computing system, an indication of the selection relating to the access to the user information by the application;
present, via the interactive graphical interface, an alert from the service provider computing system that indicates that a frequency of access to the user information by the application exceeds a predetermined frequency threshold, the alert indicating that access to the user information by the application has been automatically revoked;
receive, via the interactive graphical interface, an interaction with the alert to indicate that the access to the user information by the application is authorized; and
transmit a reversal request indicating that the access to the user information by the application is to be restored.
2 . The device of claim 1 , wherein the indication is a first indication and wherein the instructions further cause the processor to present, via the interactive graphical interface, a second indication of whether access to the user information is permitted or restricted for the application.
3 . The device of claim 2 , wherein the menu is a first menu and wherein the instructions further cause the processor to present, via the interactive graphical interface, a second menu for selecting between at least a first setting to permit access to the user information for the application, and a second setting to restrict access to the user information for the application.
4 . The device of claim 1 , wherein the application is a first application, and wherein the interactive graphical interface is presented in a second application executing on the computing device.
5 . The device of claim 4 , wherein the first and second applications both run on the computing device.
6 . The device of claim 4 , wherein the second application is a financial services application.
7 . The device of claim 1 , wherein the application is associated with a third-party computing system.
8 . The device of claim 7 , wherein the third-party computing system is associated with a merchant.
9 . The device of claim 7 , wherein the user information is account data for transactions involving the third-party computing system.
10 . The device of claim 9 , wherein the transactions are financial transactions.
11 . The device of claim 1 , wherein the interactive graphical interface identifies the application as an application for which an access permission for access to the user information is controllable.
12 . The device of claim 11 , wherein the access is via an application programming interface (API).
13 . The device of claim 1 , wherein the selection corresponds to which one of a first subset of the user information or a second subset of the user information is to be accessible the application.
14 . A method for controlling access permissions to user devices, the method comprising:
presenting, by a computing device, via an interactive graphical interface, a menu enabling a selection relating to user information to be made accessible to an application;
receiving, by the computing device, from the one or more user interfaces, a signal indicating a user input corresponding to the selection relating to access to the user information;
using, by the computing device, a network interface to transmit, to a service provider computing system, an indication of the selection relating to the access to the user information by the application;
presenting, by the computing device, via the interactive graphical interface, an alert from the service provider computing system that indicates that a frequency of access to the user information by the application exceeds a predetermined frequency threshold, the alert indicating that access to the user information by the application has been automatically revoked;
receiving, by the computing device, via the interactive graphical interface, an interaction with the alert to indicate that the access to the user information by the application is authorized; and
transmitting, by the computing device, an indication that the access to the user information by the application is to be restored.
15 . The method of claim 14 , wherein the indication is a first indication and further comprising presenting, via the interactive graphical interface, a second indication of whether access to the user information is permitted or restricted for the application.
16 . The method of claim 15 , wherein the menu is a first menu, the method further comprising presenting, via the interactive graphical interface, a second menu for selecting between at least a first setting to permit access to the user information for the application, and a second setting to restrict access to the user information for the application.
17 . The method of claim 14 , wherein the application is a first application, and wherein the interactive graphical interface is presented in a second application executing on the computing device.
18 . The method of claim 14 , wherein the application is a third-party computing system associated with a merchant, and wherein the user information is account data for making purchases from the merchant.
19 . The method of claim 14 , wherein the interactive graphical interface identifies the application as an application for which an access permission for access to the user information is controllable, and wherein the access is via an application programming interface (API).
20 . A non-transitory computer readable medium having machine-executable instructions stored thereon, the instructions being executable by one or more processors of a computing device to cause the one or more processors to perform operations comprising:
presenting, via an interactive graphical interface, a menu enabling a selection relating to user information to be made accessible to an application;
receiving, via the one or more user interfaces, a signal indicating a user input corresponding to the selection relating to the access to the user information via the menu;
using a network interface to transmit, to a service provider computing system, an indication of the selection relating to the access to the user information by the application;
presenting, via the interactive graphical interface, an alert from the service provider computing system that indicates that a frequency of access to the user information by the application exceeds a predetermined frequency threshold, the alert indicating that access to the user information by the application has been automatically revoked;
receive, via the interactive graphical interface, an interaction with the alert to indicate that the access to the user information by the application is authorized or unauthorized; and
transmit a reversal request indicating that the access to the user information by the application is to be restored.