Granted Patent B2

US 12,355,750 · App. 17/447,304 · Granted Jul 8, 2025

Inventor: Hitesh Shah (Seattle, WA)

Assignee: Bank of America Corporation

H04L63/0815H04L63/083H04L63/10H04L63/20H04L67/06H04L67/55

Abstract

Claims (47)

1. A method, comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

receiving, by the at least one processor, via the communication interface, from an external application host platform, a first federated login request comprising first user identification information associated with a first user account;

based on receiving the first federated login request comprising the first user identification information associated with the first user account, sending, by the at least one processor, via the communication interface, to a first client computing device linked to the first user account, a first push notification prompting a user of the first client computing device to authenticate;

authenticating, by the at least one processor, the user of the first client computing device to the first user account;

based on authenticating the user of the first client computing device to the first user account, generating, by the at least one processor, an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform;

sending, by the at least one processor, via the communication interface, to the data hub platform, the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, wherein sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform causes the data hub platform to initiate a transfer of external information associated with the user of the first client computing device and maintained on at least one external data source server from the at least one external data source server to the external application host platform; and

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, initiate a transfer of internal information associated with the user of the first client computing device to the external application host platform,

wherein a first portion of the internal information associated with the user of the first client computing device is maintained on an account portal computing platform, and

wherein a second portion of the internal information associated with the user of the first client computing device is maintained on enterprise server infrastructure.

2. The method of claim 1 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a mobile application associated with a client portal hosted by the account portal computing platform.

3. The method of claim 1 , wherein authenticating the user of the first client computing device to the first user account comprises validating one or more of a username received from the user of the first client computing device, a password received from the user of the first client computing device, a one-time passcode received from the user of the first client computing device, biometric input received from the user of the first client computing device, or security question input received from the user of the first client computing device.

4. The method of claim 1 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a client portal hosted by the account portal computing platform.

5. The method of claim 1 , further including:

prior to generating the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, sending, via the communication interface, to the first client computing device linked to the first user account, a second push notification prompting the user of the first client computing device to consent to user-specific information being shared with the external application host platform.

6. The method of claim 1 , wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the account portal computing platform, the at least one command directing the account portal computing platform to send the first portion of the internal information associated with the user of the first client computing device to the external application host platform.

7. The method of claim 1 ,

wherein initiating the transfer of the internal information associated with the user of the first client computing device to the external application host platform comprises:

generating at least one command directing the enterprise server infrastructure to send the second portion of the internal information associated with the user of the first client computing device to the external application host platform; and

sending, via the communication interface, to the enterprise server infrastructure, the at least one command directing the enterprise server infrastructure to send the second portion of the internal information associated with the user of the first client computing device to the external application host platform.

8. The method of claim 1 , wherein the internal information associated with the user of the first client computing device comprises entity verification data attesting to successful authentication of the user of the first client computing device to the first user account by the computing platform.

9. The method of claim 1 , wherein the internal information associated with the user of the first client computing device comprises registered contact information associated with the user of the first client computing device.

10. The method of claim 1 , wherein the internal information associated with the user of the first client computing device comprises account information associated with the user of the first client computing device.

11. The method of claim 1 , wherein the internal information associated with the user of the first client computing device comprises historical information associated with the user of the first client computing device.

12. The method of claim 1 , wherein the internal information associated with the user of the first client computing device comprises timing information associated with the user of the first client computing device.

13. The method of claim 1 , further including:

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, updating a subscription database to indicate that user-specific data associated with the first user account has been shared with the external application host platform.

14. The method of claim 13 , wherein updating the subscription database to indicate that the user-specific data associated with the first user account has been shared with the external application host platform causes the account portal computing platform to provide at least one subscription manager interface to the first client computing device.

15. The method of claim 14 , wherein the at least one subscription manager interface provided to the first client computing device comprises a user-selectable option to revoke access to the user-specific data associated with the first user account from the external application host platform.

16. The method of claim 1 , further including:

receiving, via the communication interface, from the external application host platform, a second federated login request comprising second user identification information associated with a second user account;

determining that the second user account is hosted by a second organization different from a first organization that hosts the first user account; and

based on determining that the second user account is hosted by the second organization different from the first organization that hosts the first user account, routing the second federated login request comprising the second user identification information associated with the second user account to an authentication server associated with the second organization via the data hub platform.

17. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

receive, via the communication interface, from an external application host platform, a first federated login request comprising first user identification information associated with a first user account;

based on receiving the first federated login request comprising the first user identification information associated with the first user account, send, via the communication interface, to a first client computing device linked to the first user account, a first push notification prompting a user of the first client computing device to authenticate;

authenticate the user of the first client computing device to the first user account;

based on authenticating the user of the first client computing device to the first user account, generate an orchestration message directing a data hub platform to initiate a validated data transfer with the external application host platform;

send, via the communication interface, to the data hub platform, the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, wherein sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform causes the data hub platform to initiate a transfer of external information associated with the user of the first client computing device and maintained on at least one external data source server from the at least one external data source server to the external application host platform; and

after sending the orchestration message directing the data hub platform to initiate the validated data transfer with the external application host platform, initiate a transfer of internal information associated with the user of the first client computing device to the external application host platform,

wherein a first portion of the internal information associated with the user of the first client computing device is maintained on an account portal computing platform, and

wherein a second portion of the internal information associated with the user of the first client computing device is maintained on enterprise server infrastructure.

18. The one or more non-transitory computer-readable media of claim 17 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a mobile application associated with a client portal hosted by the account portal computing platform.

19. The one or more non-transitory computer-readable media of claim 17 , wherein sending the first push notification prompting the user of the first client computing device to authenticate causes the first client computing device linked to the first user account to present a notification prompting the user of the first client computing device to login to a client portal hosted by the account portal computing platform.

20. The one or more non-transitory computer-readable media of claim 17 , wherein the internal information associated with the user of the first client computing device comprises entity verification data attesting to successful authentication of the user of the first client computing device to the first user account by the computing platform.

Assignments (1)

Continuity (2)

References Cited (242)