IP Library › Granted Patent US 11,803,660
Granted Patent B2
US 11,803,660 · App. 17/395,900 · Granted Oct 31, 2023

Secure permissioning of access to user accounts, including secure distribution of aggregated user account data

Inventors: William Hockey (San Francisco, CA); Joy Zheng (San Francisco, CA); Baker Shogry (San Francisco, CA); Michael Kelly (San Francisco, CA)
Assignee: Plaid Inc.
G06F21/6245G06F21/31G06Q20/3221G06Q40/02G06Q40/12G06Q40/125H04L63/0853H04L63/102G06F2221/2141
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,803,660
App. No.
17/395,900
Granted
Oct 31, 2023
Kind
B2
Abstract

A system and method for secure permissioning of access to user accounts, including secure distribution of aggregated user account data can include generating a financial report based on account information associated with one or more user accounts; receiving a financial report request for the financial report of the user account, wherein the financial report request is identified as being received from a third-party system; generating an audit report token associated with the financial report; sharing the audit token with the first third-party system in response to the financial report request; and providing the first third-party system account access to the financial report through the report token, where the audit report token can be shared with a second third-party system and provided by the second third-party system in order to confirm authorization to the report and integrity of the report.

Claims (75)

1. A method for managing secure access to user account data comprising:

generating a financial report based on account information associated with a user account associated with an institution,

wherein the account information includes financial information;

receiving a financial report request for the financial report, and

wherein the financial report request is identified as being received from a first third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request; and

providing the first third-party system account access to the financial report based on the audit report token,

wherein the audit report token can be shared with a second third-party system and used by the second third-party system in order to verify authenticity of the report and to verify integrity of the report.

2. The method of claim 1 , wherein the financial report presents transaction data and an account balance of a financial user over a designated and fixed time period.

3. The method of claim 1 , wherein providing the first third-party system account access to the financial report based on the audit report token comprises receiving an access request from the first third-party system and returning the financial report to the first third-party system.

4. The method of claim 3 , wherein the access request specifies a media format, and

wherein returning the financial report to the first third-party system comprises returning the financial report to the first third-party system in the media format.

5. The method of claim 1 , wherein providing the first third-party system access to the financial report based on the audit report token comprises:

receiving an access request accompanied with the audit report token; and

presenting a financial report access user interface.

6. The method of claim 1 , wherein generating the financial report comprises:

receiving financial account credentials from a client;

authenticating with a financial institution using the financial account credentials and obtaining financial data from the financial institution; and

compiling a financial record from at least the financial data.

7. The method of claim 6 , wherein the financial report presents transaction data and an account balance of a financial user over a designated and fixed time period, and

wherein authenticating with the financial institution using the financial account credentials and obtaining the financial data from the financial institution comprises:

authenticating with the financial institution based on a virtualized instance of a mobile device application;

requesting, by the virtualized instance of the mobile device application and via a non-public API of the financial institution, the transaction data and the account balance; and

receiving the transaction data and the account balance from an external computing device of an external institution.

8. The method of claim 6 , wherein compiling the financial record comprises:

processing the financial data and providing a financial analysis summary metric in the financial report.

9. The method of claim 1 , further comprising:

receiving access permissions through a management user interface and permitting access to the financial report in accordance with the access permissions.

10. The method of claim 9 , wherein receiving the access permissions through the management user interface and permitting access to the financial report in accordance with the access permissions comprise:

notifying a user through the management user interface associated with a new access request;

receiving user input to the new access request; and

permitting access in accordance with the user input.

11. The method of claim 1 , further comprising automatically regulating access by the second third-party system and selectively permitting or denying access.

12. The method of claim 11 , further comprising evaluating platform interactions of the second third-party system; and

wherein automatically regulating access by the second third-party system and selectively permitting or denying access is based on an analysis of platform interactions of the second third-party system.

13. The method of claim 1 , further comprising:

receiving an audit report token request from the first third-party system for the second third-party system,

wherein the audit report token request specifies an identifier of the second third-party system;

creating a secondary audit report token in association with the identifier of the second third-party system;

communicating the secondary audit report token to the first third-party system; and

providing the second third-party system access to the financial report based on the audit report token.

14. The method of claim 1 , wherein the financial report comprises data of a financial user account obtained from a financial institution server and a listing of financial transactions and balance information.

15. The method of claim 14 , wherein the first third-party system is a first loan management system and the second third-party system is a second loan management system.

16. The method of claim 14 , wherein the first third-party system is a first loan management system and the second third-party system is a computing system of an auditor.

17. The method of claim 1 , further comprising:

receiving an update request in association with the financial report;

generating, in response to the update request, an updated financial report that is updated based on new financial data and the financial report request; and

sharing an updated report token for the updated financial report.

18. A system for secure access to user account data comprising:

a data management platform configured to:

generate a financial report based on account information associated with a user account associated with an institution,

wherein the account information includes financial information;

receive a financial report request for the financial report, and

wherein the financial report request is identified as being received from a first third-party system;

generate an audit report token associated with the financial report;

share the audit report token with the first third-party system in response to the financial report request; and

provide the first third-party system account access to the financial report based on the audit report token,

wherein the audit report token can be shared with a second third-party system and used by the second third-party system in order to verify authenticity of the report and to verify integrity of the report.

19. The system of claim 18 , further comprising:

a management user interface, accessible by the user account, configured to regulate access to the financial report; and

a financial institution interface system configured to:

receive financial account credentials;

authenticate with a financial institution using the financial account credentials with a virtualized instance of a mobile device application;

obtain financial data from the financial institution through the virtualized instance of the mobile device application; and

compile a financial record from the financial data.

20. A non-transitory machine-readable storage medium comprising instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

generating a financial report based on account information associated with a user account associated with an institution,

wherein the account information includes financial information;

receiving a financial report request for the financial report,

wherein the financial report request is identified as being received from a first third-party system;

generating an audit report token associated with the financial report;

sharing the audit report token with the first third-party system in response to the financial report request; and

providing the first third-party system account access to the financial report based on the audit report token,

wherein the audit report token can be shared with a second third-party system and used by the second third-party system in order to verify authenticity of the report and to verify integrity of the report.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 10, 2021
From: KELLY, MICHAEL; ZHENG, JOY; SHOGRY, BAKER; HOCKEY, WILLIAM
To: PLAID INC.
Reel/Frame 058072/0393 →
Continuity (3)
Continuation 16384810 · Apr 15, 2019
Provisional Application 62657377 · Apr 13, 2018
Related Publication 20220028012A1 · Jan 27, 2022
Cited By (1)
US 12,335,164