IP Library › Granted Patent US 12,244,588
Granted Patent B2
US 12,244,588 · App. 18/220,186 · Granted Mar 4, 2025

Secure communications via third-party systems through frames

Inventors: Nathan C. Freeling (Lafayette, CA); Imran Haider (San Francisco, CA); Ranganathan Kanchi (Danville, CA); Andrew-An Truong Luu (Berkeley, CA); Nancy Y. Mao (San Francisco, CA); Kumaran Perumal (San Ramon, CA)
Assignee: Wells Fargo Bank, N.A.
H04L63/0853G06F9/547G06Q20/401G06Q30/0601G06Q30/0613H04L9/3213H04L67/142H04L67/51
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,244,588
App. No.
18/220,186
Granted
Mar 4, 2025
Kind
B2
Abstract

Disclosed are methods, systems, and devices for facilitating secure and private communications, via a website or application of a third-party computing system (TPCS), between a user device and a service provider computing system (SPCS). The communications may be conducted via a frame in a website served by the TPCS. The TPCS may serve a website that incorporates a customizable SDK component provided by the SPCS. The communications allow the user to, for example, open a new account. The SDK component may be initialized via a script from the SPCS, and authenticated via a session token obtained from the SPCS via the TPCS. The SDK component may provide user information, input into the frame, to the SPCS via API calls to the SPCS. The user does not navigate away from the website while securely engaging the SPCS. The third-party/partner need not develop its own user interface, security protocols, etc.

Claims (37)

1. A method comprising:

receiving, via a networking gateway, an authentication API call from a third-party computing system providing a website to a user device, the authentication API call requesting a session token;

transmitting, in response to the authentication API call, the session token to the third-party computing system;

receiving from the user device, via the networking gateway during a communication session using the session token, user data input by a user into the user device;

determining whether to approve a new account for the user based on the user data received from the user device during the communication session; and

transmitting, to the user device, a response indicative of a result of the determining whether to approve the new account.

2. The method of claim 1 , wherein transmitting the response to the user device comprises transmitting the response to an SDK component incorporated in the website.

3. The method of claim 1 , wherein the response indicative of the result is transmitted without directing the user to a second website or application of the service provider.

4. The method of claim 1 , wherein the result indicates the new account is approved, and wherein opening of the new account is not based on user data that is received via a second website or application of the service provider after the authentication API call from the third-party computing system.

5. The method of claim 1 , further comprising receiving from the third-party computing system, via the networking gateway, a servicing API call requesting information regarding the result.

6. The method of claim 5 , wherein the new account is approved, and wherein the servicing API call requests an account number for the new account.

7. The method of claim 6 , wherein the new account is a credit card, and wherein the account number is a credit card account number.

8. The method of claim 6 , further comprising transmitting, in response to receiving the servicing API call, the account number to the third-party computing system.

9. The method of claim 8 , further comprising receiving, from the third-party computing system, a request to use the new account in a transaction.

10. The method of claim 9 , wherein the transaction is a purchase by the user of the user device of one or more items presented by the third-party computing system via the website.

11. The method of claim 10 , wherein the new account is a credit card, and wherein the method further comprises charging the purchase to the credit card.

12. The method of claim 1 , further comprising receiving, via the website, a request for an initialization script which, when executed by the website, initializes an SDK component incorporated in the website.

13. The method of claim 12 , further comprising transmitting, in response to receiving the request, the initialization script to the user device.

14. A method comprising:

receiving, from a third-party computing system, a request for a session token;

transmitting, in response to the request, the session token to the third-party computing system;

receiving from the user device, via a frame in the third-party website, user data input into the user device;

determining whether to approve a new account for the user based on the user data received via the frame in the website; and

transmitting to the user device a response indicative of a result of the determining whether to approve the new account.

15. The method of claim 14 , wherein the frame is an inline frame.

16. The method of claim 14 , wherein receiving the request from the third-party computing system comprises receiving, via an API gateway, an authentication API call requesting the session token.

17. The method of claim 14 , wherein receiving the user data via the frame comprises receiving one or more origination API calls from the user device.

18. The method of claim 14 , wherein the new account is approved and opened without directing the user to a second website or application of the service provider.

19. The method of claim 14 , wherein determining whether to approve the new account is not based on user data that is received via a second website or application of the service provider after the request for the session token is received from the third-party computing system.

20. A method, implemented via a user device, comprising:

presenting, via one or more user interfaces configured to receive inputs from a user and provide outputs to the user, a website served by a third-party computing system;

receiving, via the one or more user interfaces, a selection indicating a user request for a new account;

initializing a frame in the website to enable private communication between the user and the service provider computing system;

receiving, via the one or more user interfaces, user data input by the user into the frame;

securely transmitting the user data to the service provider computing system via the frame in the website;

receiving from the service provider computing system a transmission indicating whether the new account has been approved; and

presenting to the user, via the one or more user interfaces, information on whether the new account has been approved based on the transmission.

Continuity (4)
Continuation 17344579 · Jun 10, 2021
Continuation 16450199 · Jun 24, 2019
Continuation 16448916 · Jun 21, 2019
Related Publication 20230353560A1 · Nov 2, 2023
References Cited (241)
US 1044246A · Reid · 1912 [cited by applicant]
US 6347306B1 · Swart · 2002 [cited by applicant]
US 6721776B1 · Erickson et al. · 2004 [cited by applicant]
US 6957199B1 · Fisher · 2005 [cited by examiner]
US 7249097B2 · Hutchison et al. · 2007 [cited by applicant]
US 7356506B2 · Watson et al. · 2008 [cited by applicant]
US 7444676B1 · Asghari-Kamrani et al. · 2008 [cited by applicant]
US 7523068B2 · Britney et al. · 2009 [cited by applicant]
US 7536326B2 · Tyson-Quah · 2009 [cited by applicant]
US 7610233B1 · Leong et al. · 2009 [cited by applicant]
US 7725875B2 · Waldrep · 2010 [cited by applicant]
US 7729994B2 · Gupta et al. · 2010 [cited by applicant]
US 7831521B1 · Ball et al. · 2010 [cited by applicant]
US 7870078B2 · Clark et al. · 2011 [cited by applicant]
US 7890393B2 · Talbert et al. · 2011 [cited by applicant]
US 8301500B2 · Pharris · 2012 [cited by applicant]
US 8352323B2 · Fisher · 2013 [cited by applicant]
US 8352370B1 · White et al. · 2013 [cited by applicant]
US 8412625B2 · Pilo′ · 2013 [cited by applicant]
US 8423456B2 · Egnatios · 2013 [cited by examiner]
US 8447630B2 · O'Brien et al. · 2013 [cited by applicant]
US 8452708B1 · Birenbaum et al. · 2013 [cited by applicant]
US 8453925B2 · Fisher et al. · 2013 [cited by applicant]
US 8527408B2 · Campbell et al. · 2013 [cited by applicant]
US 8606670B2 · Patton · 2013 [cited by applicant]
US 8745194B2 · Uribe-Etxebarria Jimenez · 2014 [cited by applicant]
US 8818870B2 · Fisher · 2014 [cited by applicant]
US 8838503B2 · Pelegero · 2014 [cited by applicant]
US 9135618B1 · Dorsey et al. · 2015 [cited by applicant]
US 9219736B1 · Lewis et al. · 2015 [cited by applicant]
US 9225707B1 · De Sousa et al. · 2015 [cited by applicant]
US 9235839B2 · Dua · 2016 [cited by examiner]
US 9378356B2 · Rockwell · 2016 [cited by applicant]
US 9471913B1 · Kaptcan et al. · 2016 [cited by applicant]
US 9479491B1 · Farnsworth · 2016 [cited by examiner]
US 9495699B2 · Mangaru et al. · 2016 [cited by applicant]
US 9525690B2 · Burgess et al. · 2016 [cited by applicant]
US 9542673B2 · Tanner et al. · 2017 [cited by applicant]
US 9589268B2 · Hammad · 2017 [cited by applicant]
US 9633341B2 · Kim et al. · 2017 [cited by applicant]
US 9646297B2 · Van Den Broeck et al. · 2017 [cited by applicant]
US 9665854B1 · Burger et al. · 2017 [cited by applicant]
US 9705999B1 · Lewis et al. · 2017 [cited by applicant]
US 9760871B1 · Pourfallah · 2017 [cited by examiner]
US 9779436B2 · Bui · 2017 [cited by applicant]
US 9830606B2 · Boncimino · 2017 [cited by applicant]
US 9846872B2 · Hogg et al. · 2017 [cited by applicant]
US 9876803B2 · Miu et al. · 2018 [cited by applicant]
US 9892386B2 · Liberty · 2018 [cited by applicant]
US 9922381B2 · Isaacson et al. · 2018 [cited by applicant]
US 9990621B1 · Ng et al. · 2018 [cited by applicant]
US 10055740B2 · Hanson et al. · 2018 [cited by applicant]
US 10062072B2 · Davis et al. · 2018 [cited by applicant]
US 10062073B2 · Baldie · 2018 [cited by applicant]
US 10068295B1 · Allen · 2018 [cited by applicant]
US 10073953B2 · Xing · 2018 [cited by applicant]
US 10083427B2 · Cummins et al. · 2018 [cited by applicant]
US 10089617B2 · Royyuru et al. · 2018 [cited by applicant]
US 10121129B2 · Kalgi · 2018 [cited by applicant]
US 10121133B2 · Nelms et al. · 2018 [cited by applicant]
US 10127528B2 · Solis · 2018 [cited by applicant]
US 10127549B2 · Keresman et al. · 2018 [cited by applicant]
US 10148659B2 · Nandakumar · 2018 [cited by applicant]
US 10157375B2 · Balasubramanian et al. · 2018 [cited by applicant]
US 10163086B2 · Keresman et al. · 2018 [cited by applicant]
US 10181119B2 · Cyr et al. · 2019 [cited by applicant]
US 10181162B2 · Drury et al. · 2019 [cited by applicant]
US 10185954B2 · Mizhen et al. · 2019 [cited by applicant]
US 10210345B2 · Beye et al. · 2019 [cited by applicant]
US 10210514B2 · Musser et al. · 2019 [cited by applicant]
US 10217102B2 · Pitroda · 2019 [cited by examiner]
US 10354240B2 · Purves et al. · 2019 [cited by applicant]
US 10362010B2 · Sharp et al. · 2019 [cited by applicant]
US 10467689B2 · Chen · 2019 [cited by applicant]
US 10510082B1 · Zimmerman et al. · 2019 [cited by applicant]
US 10621658B1 · Sahni et al. · 2020 [cited by applicant]
US 10708054B2 · Donaldson et al. · 2020 [cited by applicant]
US 11044092B1 · Freeling · 2021 [cited by examiner]
US 11044246B1 · Freeling et al. · 2021 [cited by applicant]
US 11050565B1 · Freeling · 2021 [cited by examiner]
US 11063926B1 · Narayanan · 2021 [cited by examiner]
US 11093912B1 · Fakhraie · 2021 [cited by examiner]
US 11354673B1 · Brock · 2022 [cited by applicant]
US 11429971B1 · Ouellette et al. · 2022 [cited by applicant]
US 11695560B1 · Freeling · 2023 [cited by examiner]
US 11700122B1 · Freeling · 2023 [cited by examiner]
US 11700248B1 · Freeling et al. · 2023 [cited by applicant]
US 20020181710A1 · Adam et al. · 2002 [cited by applicant]
US 20040177047A1 · Graves et al. · 2004 [cited by applicant]
US 20050262026A1 · Watkins · 2005 [cited by applicant]
US 20060020783A1 · Fisher · 2006 [cited by examiner]
US 20060059569A1 · Dasgupta et al. · 2006 [cited by applicant]
US 20060129896A1 · Rohn · 2006 [cited by applicant]
US 20060277128A1 · Anandarao et al. · 2006 [cited by applicant]
US 20070271149A1 · Siegel et al. · 2007 [cited by applicant]
US 20070288377A1 · Shaked · 2007 [cited by applicant]
US 20080052183A1 · Hobson et al. · 2008 [cited by applicant]
US 20080086417A1 · Bykov et al. · 2008 [cited by applicant]
US 20080120235A1 · Chu · 2008 [cited by applicant]
US 20080167944A1 · Keithley et al. · 2008 [cited by applicant]
US 20080183593A1 · Dierks · 2008 [cited by applicant]
US 20080288405A1 · John · 2008 [cited by applicant]
US 20080301022A1 · Patel et al. · 2008 [cited by applicant]
US 20090043667A1 · Deyoe et al. · 2009 [cited by applicant]
US 20090076934A1 · Shahbazi et al. · 2009 [cited by applicant]
US 20090089190A1 · Girulat, Jr. · 2009 [cited by applicant]
US 20090249448A1 · Choi et al. · 2009 [cited by applicant]
US 20090259560A1 · Bachenheimer · 2009 [cited by applicant]
US 20090320106A1 · Jones et al. · 2009 [cited by applicant]
US 20100094719A1 · Sines et al. · 2010 [cited by applicant]
US 20100100454A1 · Sines · 2010 [cited by examiner]
US 20100169223A1 · Yuan · 2010 [cited by applicant]
US 20100223184A1 · Perlman · 2010 [cited by examiner]
US 20110137804A1 · Peterson · 2011 [cited by applicant]
US 20110270751A1 · Csinger et al. · 2011 [cited by applicant]
US 20120198535A1 · Oberheide et al. · 2012 [cited by applicant]
US 20130013512A1 · Cloud et al. · 2013 [cited by applicant]
US 20130103578A1 · Mallean et al. · 2013 [cited by applicant]
US 20130117832A1 · Gandhi et al. · 2013 [cited by applicant]
US 20130179957A1 · Takata et al. · 2013 [cited by applicant]
US 20130198066A1 · Wall et al. · 2013 [cited by applicant]
US 20130276078A1 · Rockwell · 2013 [cited by applicant]
US 20130282588A1 · Hruska · 2013 [cited by applicant]
US 20130339231A1 · Chaitanya · 2013 [cited by applicant]
US 20130346302A1 · Purves et al. · 2013 [cited by applicant]
US 20140012701A1 · Wall · 2014 [cited by examiner]
US 20140129435A1 · Pardo et al. · 2014 [cited by applicant]
US 20140165156A1 · Fushman · 2014 [cited by examiner]
US 20140223578A1 · Ross · 2014 [cited by applicant]
US 20140256425A1 · Flaherty · 2014 [cited by applicant]
US 20140258046A1 · Wendling et al. · 2014 [cited by applicant]
US 20140258136A1 · Ellis · 2014 [cited by applicant]
US 20140279546A1 · Poole et al. · 2014 [cited by applicant]
US 20140307735A1 · Lerner · 2014 [cited by examiner]
US 20140324690A1 · Allen et al. · 2014 [cited by applicant]
US 20140359722A1 · Schultz et al. · 2014 [cited by applicant]
US 20150019423A1 · Dowling et al. · 2015 [cited by applicant]
US 20150026061A1 · Siegel et al. · 2015 [cited by applicant]
US 20150039452A1 · Barve et al. · 2015 [cited by applicant]
US 20150052005A1 · Howe · 2015 [cited by applicant]
US 20150058931A1 · Miu et al. · 2015 [cited by applicant]
US 20150074407A1 · Palmeri et al. · 2015 [cited by applicant]
US 20150089409A1 · Asseily et al. · 2015 [cited by applicant]
US 20150089615A1 · Krawczyk et al. · 2015 [cited by applicant]
US 20150121462A1 · Courage et al. · 2015 [cited by applicant]
US 20150154588A1 · Purves et al. · 2015 [cited by applicant]
US 20150161608A1 · Gilbert et al. · 2015 [cited by applicant]
US 20150188900A1 · Charbonneau et al. · 2015 [cited by applicant]
US 20150188915A1 · Li · 2015 [cited by applicant]
US 20150242834A1 · Goldsmith et al. · 2015 [cited by applicant]
US 20150242949A1 · Phillips, IV · 2015 [cited by applicant]
US 20150254638A1 · Bondesen et al. · 2015 [cited by applicant]
US 20150278811A1 · Lalchandani et al. · 2015 [cited by applicant]
US 20150310497A1 · Valin et al. · 2015 [cited by applicant]
US 20150363581A1 · Ranadive et al. · 2015 [cited by applicant]
US 20150371226A1 · Hurley et al. · 2015 [cited by applicant]
US 20160005113A1 · Mendez et al. · 2016 [cited by applicant]
US 20160012465A1 · Sharp · 2016 [cited by applicant]
US 20160019536A1 · Ortiz et al. · 2016 [cited by applicant]
US 20160034900A1 · Nelsen · 2016 [cited by examiner]
US 20160132877A1 · Carrott · 2016 [cited by applicant]
US 20160189145A1 · William · 2016 [cited by applicant]
US 20160239840A1 · Preibisch · 2016 [cited by applicant]
US 20160267449A1 · Forzley · 2016 [cited by applicant]
US 20170004719A1 · Laud et al. · 2017 [cited by applicant]
US 20170024716A1 · Jiam et al. · 2017 [cited by applicant]
US 20170070500A1 · Hockey et al. · 2017 [cited by applicant]
US 20170076274A1 · Royyuru et al. · 2017 [cited by applicant]
US 20170116615A1 · Burgess · 2017 [cited by examiner]
US 20170126649A1 · Votaw et al. · 2017 [cited by applicant]
US 20170180960A1 · Drake · 2017 [cited by applicant]
US 20170286281A1 · Dahan · 2017 [cited by examiner]
US 20170286958A1 · Herman · 2017 [cited by applicant]
US 20170289140A1 · Cai et al. · 2017 [cited by applicant]
US 20170289809A1 · Smith · 2017 [cited by applicant]
US 20170308880A1 · Phillips et al. · 2017 [cited by applicant]
US 20170310771A1 · Lewis et al. · 2017 [cited by applicant]
US 20170351514A1 · Chou et al. · 2017 [cited by applicant]
US 20170372275A1 · Sigmund · 2017 [cited by applicant]
US 20180025333A1 · Cunningham · 2018 [cited by applicant]
US 20180060965A1 · Kumar · 2018 [cited by applicant]
US 20180068312A1 · Kim et al. · 2018 [cited by applicant]
US 20180121896A1 · Potadar · 2018 [cited by applicant]
US 20180130051A1 · Matthews et al. · 2018 [cited by applicant]
US 20180139109A1 · Zuerner · 2018 [cited by applicant]
US 20180150823A1 · Omojola et al. · 2018 [cited by applicant]
US 20180150826A1 · Schwartz et al. · 2018 [cited by applicant]
US 20180165659A1 · Raouda El-Balah · 2018 [cited by applicant]
US 20180189777A1 · Grassadonia et al. · 2018 [cited by applicant]
US 20180189778A1 · Grassadonia et al. · 2018 [cited by applicant]
US 20180198845A1 · Kulp et al. · 2018 [cited by applicant]
US 20180225789A1 · Cook · 2018 [cited by applicant]
US 20180240095A1 · Buckley et al. · 2018 [cited by applicant]
US 20180247654A1 · Bhaya et al. · 2018 [cited by applicant]
US 20180253727A1 · Ortiz et al. · 2018 [cited by applicant]
US 20180267847A1 · Smith et al. · 2018 [cited by applicant]
US 20180276053A1 · Kesavan et al. · 2018 [cited by applicant]
US 20180315024A1 · Rauch et al. · 2018 [cited by applicant]
US 20180349891A1 · Putre et al. · 2018 [cited by applicant]
US 20190005467A1 · Varagani et al. · 2019 [cited by applicant]
US 20190012646A1 · Seidl et al. · 2019 [cited by applicant]
US 20190034393A1 · Rose · 2019 [cited by applicant]
US 20190043138A1 · Blake et al. · 2019 [cited by applicant]
US 20190050845A1 · Deshmukh et al. · 2019 [cited by applicant]
US 20190058707A1 · Chung et al. · 2019 [cited by applicant]
US 20190066090A1 · Mei et al. · 2019 [cited by applicant]
US 20190087809A1 · Bloy et al. · 2019 [cited by applicant]
US 20190087894A1 · Bloy · 2019 [cited by examiner]
US 20190096005A1 · Drury et al. · 2019 [cited by applicant]
US 20190130750A1 · Cole · 2019 [cited by examiner]
US 20190205851A1 · Sinha et al. · 2019 [cited by applicant]
US 20190244263A1 · Nelson et al. · 2019 [cited by applicant]
US 20190281051A1 · Burmester et al. · 2019 [cited by applicant]
US 20190303910A1 · Asbe et al. · 2019 [cited by applicant]
US 20190312746A1 · Myers et al. · 2019 [cited by applicant]
US 20190318122A1 · Hockey et al. · 2019 [cited by applicant]
US 20200053061A1 · Cambou · 2020 [cited by applicant]
US 20200076813A1 · Felice-Steele · 2020 [cited by examiner]
US 20200092108A1 · Lyu · 2020 [cited by applicant]
US 20200092272A1 · Eisen · 2020 [cited by examiner]
US 20200118205A1 · Bloy · 2020 [cited by examiner]
US 20200366484A1 · So · 2020 [cited by examiner]
US 20210224767A1 · Devan et al. · 2021 [cited by applicant]
US 20220277306A1 · Levitt · 2022 [cited by examiner]
WO WO2010085370 · 2010 [cited by applicant]
WO WO2017160877A1 · 2017 [cited by applicant]
WO WO2017181185A1 · 2017 [cited by applicant]
Tiwari, Ayu ⋅ Sanyal, Sudip ⋅ Abraham, Ajith ⋅ Knapskog, Svein Johan⋅ Sanyal, Sugata, A Mul Ti-Factor Security Protocol for Wireless Payment—Secure Web Authentication Using Mobile Devices, Nov. 13, 2011, p. 4 ( Year: 20… [cited by applicant]
Authentication and Access to Financial Institution Services and System, Aug. 11, 2021, Federal Financial Institution Examination Council. (Year: 2021). [cited by applicant]
Bonneau, Joseph and Soren Preibusch. “The Password Thicket: Technical and Market Failures in Human Authentication on the Web.” The Ninth Workshop on the Economics of Information Security. Weis. 2010. (Year: 2010). [cited by applicant]
Byambajav, Dolgorsuren; “Secure NFC enabled mobile phone payments using elliptic curve cryptography”; California State University, Aug. 2011. (Year: 2011). [cited by applicant]
Multibiometric Techniques and standards Activities, Rick Lazarick (Year: 2005. [cited by applicant]
Subhashree Samal and Swarna Prabha Jena, “Research on the Development of a New Shop Application Using Android,” Mar. 2014, International Journal of Advance Computer Research, vol. 4, No. 1 Issue Mar. 14, 2014, pp. 236-2… [cited by applicant]
Using Haptic Interfaces for User Verification in Virtual Environments Orozco (Year: 2008). [cited by applicant]
V. Toubiana, V. Verdot, G. Burnside and E. Joubert, “R2M: A Reputation Model for Mashups,” 2010 7th IEEE Consumer Communications and Networking Conference, 2010, pp. 1-6, doi: 10.1109/CCNC.2010.5421609. (Year: 2010). [cited by applicant]
Wells Fargo Bank NA Granted Patent for Identity Verification Services with Identity Score Through External Entities Via Application Programming Interface Global IP News. Banking Patent News [New Delhi] Apr. 14, 2020. (Y… [cited by applicant]
Wells Fargo Bank NA Granted Patent for Identity Verification Services with Identity Score Through External Entities Via Application Programming Interface, Apr. 14, 2020, Global IP News. Banking Patent News, New Delhi. (… [cited by applicant]
Zachariadis, M., et al. The API economy and digital transformation in financial services: The case of open banking. SWIFT Institute Working Paper No. 2016-001. Jun. 15, 2017. (Year: 2017). [cited by applicant]
Other USPTO Comm. with Refs. on US Dtd Nov. 28, 2023. [cited by applicant]
Faravelon, A et al., “Privacy conscious web apps composition,” 2014 IEEE Eighth International Conference on Research Challenges in Information Science (RCIS), Marrakech, Morocco, 2014, pp. 1-12, doi: 10.1109/RCIS.2014.6… [cited by applicant]
Subhashree Samal/Swarna Prabha Jena, Research on the Development of a New Shop Application Using Android, Mar. 2012, Internal Journal of Advanced Computer Research, vol. 4, No. 1 Issue 14 Mar. 2014, pp. 236-241 (Year: 2… [cited by applicant]