Granted Patent B2

US 12,373,884 · App. 18/244,807 · Granted Jul 29, 2025

Inventors: Brian M. Pearce (Pleasanton, CA); Steven Pulido (San Francisco, CA); Benjamin Soccorsy (Larkspur, CA); Mojdeh Tomsich (San Francisco, CA)

Assignee: Wells Fargo Bank, N.A.

G06Q40/02G06F21/6245H04L63/102

Abstract

Claims (75)

1. A computing system for controlling access by particular smart devices to user information, the computing system comprising:

a network interface configured to communicate data over a network; and

a processor and a memory storing instructions which, when executed by the processor, cause the processor to:

receive from a user device of a user, via the network interface, a request for access permissions corresponding to the user information;

determine that a first smart device having a first device identifier is granted access to the user information according to a first access permission definition, and a second smart device having a second device identifier is granted access to the user information according to a second access permission definition;

transmit to the user device, using the network interface, a first indicator of the first access permission definition and a second indicator of the second access permission definition for display by the user device in a data control interface configured to accept user inputs for changing the first and second access permission definitions corresponding to the first and second smart devices;

receive from the user device, via the network interface, a first user input identifying a first subset of the user information as being accessible to the first smart device, and a second user input identifying a second subset of the user information as being accessible to the second smart device, the second subset being different from the first subset;

update the first access permission definition to indicate that the first subset of the user information is accessible to the first smart device, and update the second access permission definition to indicate that the second subset of the user information is accessible to the second smart device;

receive from the first smart device, via the network interface, an information request for user information;

determine that the first access permission definition grants the first smart device access to the first subset of the user information in response to the information request; and

transmit to the first smart device, via the network interface, the first subset of the user information based on the determination.

2. The computing system of claim 1 , wherein the first smart device is a third-party device of a third-party, and wherein the second smart device is a second user device of the user.

3. The computing system of claim 1 , wherein the instructions further cause the processor to:

receive, via the network interface, a third user input corresponding with a selection to disable access to the user information with respect to an account of the user; and

update access permissions stored in association with the account to include access denial indications for the account.

4. The computing system of claim 3 , wherein the instructions further cause the processor to:

receive from the first smart device, via the network interface, a second information request for user information related to the account; and

transmit to the first smart device, via the network interface, an access denial message in response to the second information request.

5. The computing system of claim 1 , wherein the instructions further cause the processor to:

receive from the user device, via the network interface, a fourth user input corresponding with a selection entered via the data control interface to deny the second smart device access to the user information;

update the second access permission definition to include an access denial indication for information requests from the second smart device;

receive from the second smart device, via the network interface, a second information request for user information;

determine that the second access permission definition includes the access denial indication in association with the second device identifier; and

transmit to the second smart device, via the network interface, an access denial message in response to the determination.

6. The computing system of claim 1 , wherein the user information is stored at an external computing system associated with a third party, and wherein the first and second access permission definitions correspond with accessibility of the user information stored at the external computing system.

7. The computing system of claim 1 , wherein the user information comprises financial information of the user, and wherein the first and second smart devices are included in a smart device listing that includes the first device identifier and the second device identifier.

8. A method, implemented by a computing system, of controlling smart device access to user information of a user, the method comprising:

storing, by the computing system, a first access permission definition identifying a first subset of the user information that is accessible to a first smart device having a first device identifier;

transmitting, by the computing system, the first subset of the user information to the first smart device in response to a first request for user information received from the first smart device;

storing, by the computing system, a second access permission definition identifying a second subset of the user information, different from the first subset of the user information, that is accessible to a second smart device having a second device identifier;

transmitting, by the computing system, the second subset of the user information to the second smart device in response to a second request for user information received from the second smart device;

receiving, from a user device of the user by the computing system, a control request for access permissions corresponding to the user information;

determining, by the computing system, based on the first device identifier and the second device identifier, that the first smart device and the second smart device have access to the user information as defined by the first access permission definition and the second access permission definition, respectively; and

transmitting to the user device, by the computing system, a first indicator of the first access permission definition and a second indicator of the second access permission definition for display by the user device in a data control interface configured to accept user inputs for changing access permission definitions that define accessibility of the user information by particular smart devices.

9. The method of claim 8 , further comprising:

receiving, by the computing system, a first user input via the data control interface, the first user input corresponding with a first selection, entered into the data control interface, to disable access to the user information by the first smart device; and

updating, by the computing system, the first access permission definition to indicate access is disabled with respect to the second device identifier.

10. The method of claim 9 , further comprising:

receiving, from the first smart device by the computing system, a third request for user information;

determining, by the computing system, that the first access permission definition indicates access is disabled with respect to the first device identifier; and

transmitting, to the first smart device by the computing system, an access denial message in response to the third request.

11. The method of claim 10 , further comprising:

receiving, by the computing system, a second user input via the data control interface, the second user input corresponding with a second selection, entered into the data control interface, to enable access to the user information by the first smart device; and

updating, by the computing system, the first access permission definition to indicate access is enabled in association with the first device identifier.

12. The method of claim 11 , further comprising:

receiving, from the first smart device by the computing system, a fourth request for user information;

determining, by the computing system, that the first access permission definition indicates access is enabled with respect to the first device identifier; and

transmitting, to the first smart device by the computing system, the first subset of the user information.

13. The method of claim 8 , wherein the first smart device is a third-party device of a third-party, and wherein the second smart device is a second user device of the user.

14. The method of claim 8 , further comprising:

receiving, by the computing system, a third user input corresponding to a third selection to disable access by the second smart device to user information related to a user account; and

updating, by the computing system, the second access permission definition to include an access denial indication for information requests corresponding to the user account received from the second smart device.

15. The method of claim 14 , further comprising:

receiving, by the computing system from the second smart device, a fifth request for user information related to the user account;

determining, by the computing system, that the second access permission definition includes the access denial indication with respect to the user account; and

in response to the determination, transmitting, to the second smart device by the computing system, a notification indicating the fifth request is denied.

16. The method of claim 8 , further comprising:

receiving, by the computing system, a fourth user input corresponding to a fourth selection to disable access to user information associated with a user account; and

updating, by the computing system, a third access permission definition to include an access denial indication for information requests corresponding to the user account.

17. The method of claim 16 , further comprising:

receiving, by the computing system from the first smart device, a sixth request for user information in connection with the user account;

determining, by the computing system, that the access denial indication is included in the third access permission definition; and

in response to the determination, transmitting, to the first smart device by the computing system, a notification indicating the sixth request is denied due to the access denial indication.

18. The method of claim 8 , wherein the first and second access permission definitions define access to user information stored at an external computing system of a third party, and wherein the method further comprises:

receiving, by the computing system, a fifth user input corresponding with a fifth selection identifying user information to be updated; and

in response to the fifth user input, transmitting, by the computing system, one or more commands to the external computing system to update the user information stored at the external computing system.

19. The method of claim 8 , wherein the first and second access permission definitions define access to user information stored at an external computing system of a third party, and wherein the method further comprises:

receiving, by the computing system, a sixth user input corresponding with a sixth selection identifying user information to be deleted from the external computing system; and

in response to the sixth user input, transmitting, by the computing system, one or more commands to the external computing system to delete the user information stored at the external computing system and identified by the sixth user input.

20. A method, implemented by a computing system, for controlling, according to user inputs entered into a data control interface that is displayed on a user device of a user and that lists particular smart devices having device identifiers, access to user information of the user by the particular smart devices, the method comprising:

receiving from the user device, via a network interface of the computing system, a request to view a set of access permissions corresponding to the user information regarding an account of the user;

determining, by the computing system, that a first smart device having a first device identifier is granted access to the user information according to a first access permission definition, and that a second smart device having a second device identifier is granted access to the user information according to a second access permission definition;

transmitting to the user device, via the network interface by the computing system, a first indicator of the first access permission definition and a second indicator of the second access permission definition for display by the user device in the data control interface configured to accept user inputs, entered by the user into the data control interface, to change what user information is accessible to the first and second smart devices;

receiving, via the data control interface by the computing system, a first input corresponding with a first selection to grant the first smart device access to a subset of the user information, and a second input corresponding with a second selection to deny the second smart device access to the user information; and

updating, by the computing system, the first access permission definition to indicate the first smart device is granted access to the subset of the user information, and updating the second access permission definition to indicate the second smart device is denied access to the user information.

Assignments (1)

Continuity (4)

References Cited (400)