IP Library › Granted Patent US 12,511,698
Granted Patent B2
US 12,511,698 · App. 18/335,625 · Granted Dec 30, 2025

Systems and methods of access control and system integration

Inventors: Rodney Kenneth Drury (Havelock North, NZ); Matthew John Vickers (Wellington, NZ)
Assignee: Xero Limited
G06Q40/128G06Q20/027G06Q20/10G06Q20/108G06Q20/227G06Q20/40G06Q20/4037G06Q40/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,511,698
App. No.
18/335,625
Granted
Dec 30, 2025
Kind
B2
Abstract

Automated provisioning, according to one example embodiment, enables a mutual customer to establish an intelligent and automated connection between an accounting software system and their financial institution. For example, this might be achieved by allowing a financial institution customer to make feeds from their bank accounts available to the accounting software system within financial internet software (e.g., hosted and operated by the customer's financial institution). Once a customer selects the bank account(s) they want to share with the accounting software system, they are passed along to the accounting software system to link the selected bank account with an account they have set up in the accounting software system.

Claims (63)

1 . A method comprising, at a data center of an accounting system:

receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;

authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;

receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;

receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server,

using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;

providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;

receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution; and

at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.

2 . The method of claim 1 ,

wherein a user application of the accounting system provides, to the user account of the accounting system, a user interface for enabling, for one or more financial accounts previously registered to the user account of the accounting system, the accounting system to register to receive the secure bank feed.

3 . The method of claim 1 ,

wherein the up to date records for the financial account are transmitted from the bank server and loaded into the user account of the accounting system on a schedule.

4 . The method of claim 1 , further comprising

at the accounting system, processing the banking records received via the bank feed to create or suggest corresponding entries in a single-ledger accounting system maintained by the accounting system in association with the user account.

5 . The method according to claim 1 , further comprising

at the accounting system, allowing the user to activate one or more accounting system services for the one or more financial accounts registered to the user account.

6 . The method according to claim 5 , wherein

the one or more accounting services include one or more from among: the bank feed of banking records for the financial account; and a third party payment service to make payments from the financial account.

7 . The method according to claim 5 , further comprising

authenticating the user with the financial institution to allow the user to activate the one or more accounting system services for the one or more financial accounts.

8 . The method according to claim 1 , wherein

the bank feed is composed of bank feed data regarding financial transactions to and from the financial account at the financial institution.

9 . A data center of an accounting system comprising:

a memory; and

a processor coupled to the memory and configured to perform operations comprising:

receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;

authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;

receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;

receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server;

using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;

providing, from a web server of the data center of the accounting system, a user interface to a client device of the user of the accounting system;

receiving via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution; and

at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.

10 . The accounting system of claim 9 , wherein the processor is further configured to perform operations comprising:

providing a user application including a user interface for enabling, for the user account of the accounting system, the accounting system to register to receive the secure bank feed.

11 . The accounting system of claim 9 , wherein the processor is further configured to perform operations comprising:

receiving up to date records for the financial account from the bank server and loading the received up to date records into the user account of the accounting system on a schedule.

12 . The accounting system of claim 9 , wherein the processor is further configured to perform operations comprising:

processing the banking records received via the bank feed to create or suggest corresponding entries in a single-ledger accounting system maintained by the accounting system in association with the user account.

13 . The accounting system of claim 9 , wherein the processor is further configured to perform operations comprising:

allowing the user to activate one or more accounting system services for the one or more financial accounts registered to the user account.

14 . The accounting system of claim 13 , wherein

the one or more accounting services include one or more from among: the bank feed of banking records for the financial account; and a third party payment service to make payments from the financial account.

15 . The accounting system of claim 13 , wherein the processor is further configured to perform operations comprising:

authenticating the user with the financial institution to allow the user to activate the one or more accounting system services for the one or more financial accounts.

16 . The accounting system of claim 9 , wherein

the bank feed is composed of bank feed data regarding financial transactions to and from the financial account at the financial institution.

17 . A non-transitory machine-readable storage medium storing instructions thereon which, when executed by one or more processors of a data center of an accounting system, cause the accounting system to perform operations comprising:

receiving, from a user of the accounting system, financial account credentials registered to a financial account at a financial institution, the financial institution storing banking records for the financial account at a bank server;

authenticating the user with the financial institution by using the financial account credentials to send an encrypted request to the bank server to register to receive, at the data center, banking records for the financial account via a secure bank feed;

receiving, from the bank server, a randomly generated symmetric key encrypted with a public RSA key of the accounting system, the randomly generated symmetric key being a minimum of 256 bits, and the public RSA key of the accounting system being a minimum of 2048 bits;

receiving, from the bank server, the banking records for the financial account via the secure bank feed, via which secure bank feed up to date banking records for the financial account are transmitted in encrypted form from the bank server,

using a private RSA key of the accounting system to decrypt the symmetric key, the private RSA key being a minimum of 2048 bits;

providing, from a web server of the accounting system, a user interface to a client device of the user of the accounting system;

receiving, via the user interface, biometric data from the user of the accounting system, and using the biometric data to authenticate an identity of a user of the accounting system as being the same as the user authenticated with the financial institution; and

at the accounting system, using the decrypted symmetric key to decrypt the received banking records, and loading the decrypted banking records into a user account of the accounting system associated with the authenticated user.

18 . The non-transitory machine-readable storage medium of claim 17 , wherein the operations further comprise:

providing a user application including a user interface for enabling, for the user account of the accounting system, the accounting system to register to receive the secure bank feed.

19 . The non-transitory machine-readable storage medium of claim 17 , wherein the operations further comprise:

receiving up to date records for the financial account from the bank server and loading the received up to date records into the user account of the accounting system on a schedule.

20 . The non-transitory machine-readable storage medium of claim 17 , wherein the operations further comprise:

processing the banking records received via the bank feed to create or suggest corresponding entries in a single-ledger accounting system maintained by the accounting system in association with the user account.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 15, 2023
From: DRURY, RODNEY KENNETH; VICKERS, MATTHEW JOHN
To: XERO LIMITED
Reel/Frame 063965/0698 →
Continuity (6)
Continuation 17306023 · May 3, 2021
Continuation 16204394 · Nov 29, 2018
Continuation 14832357 · Aug 21, 2015
Continuation 14494476 · Sep 23, 2014
Provisional Application 61881314 · Sep 23, 2013
Related Publication 20230325940A1 · Oct 12, 2023
References Cited (109)
US 5978780A · Watson · 1999 [cited by applicant]
US 6038551A · Barlow et al. · 2000 [cited by applicant]
US 7120597B1 · Knudtzon et al. · 2006 [cited by applicant]
US 8121913B2 · Bracken et al. · 2012 [cited by applicant]
US 8442881B2 · Patel · 2013 [cited by applicant]
US 8473377B2 · Smith et al. · 2013 [cited by applicant]
US 8560447B1 · Hinghole et al. · 2013 [cited by applicant]
US 8706627B2 · Shore · 2014 [cited by applicant]
US 8756131B1 · Pariante et al. · 2014 [cited by applicant]
US 9117208B2 · Drury et al. · 2015 [cited by applicant]
US 10181162B2 · Drury et al. · 2019 [cited by applicant]
US 10915875B1 · Jawharker · 2021 [cited by applicant]
US 11030706B2 · Drury et al. · 2021 [cited by applicant]
US 11783433B2 · Drury et al. · 2023 [cited by applicant]
US 12236493B2 · Drury et al. · 2025 [cited by applicant]
US 20020032625A1 · Brown · 2002 [cited by applicant]
US 20030105688A1 · Brown et al. · 2003 [cited by applicant]
US 20030149662A1 · Shore · 2003 [cited by applicant]
US 20050125321A1 · Gerstner et al. · 2005 [cited by applicant]
US 20060206427A1 · Love et al. · 2006 [cited by applicant]
US 20080255970A1 · Ferguson · 2008 [cited by applicant]
US 20080313066A1 · Sholtis et al. · 2008 [cited by applicant]
US 20100106615A1 · Chadwick et al. · 2010 [cited by applicant]
US 20100125513A1 · Chung et al. · 2010 [cited by applicant]
US 20100274687A1 · Ghosh et al. · 2010 [cited by applicant]
US 20130232042A1 · Simpson et al. · 2013 [cited by applicant]
US 20150088707A1 · Drury et al. · 2015 [cited by applicant]
US 20150379646A1 · Drury et al. · 2015 [cited by applicant]
US 20190096005A1 · Drury et al. · 2019 [cited by applicant]
US 20210256625A1 · Drury et al. · 2021 [cited by applicant]
US 20230325941A1 · Drury et al. · 2023 [cited by applicant]
US 20230385953A1 · Drury et al. · 2023 [cited by applicant]
CA 2925483C · 2018 [cited by applicant]
CN 103136663A · 2013 [cited by applicant]
CN 103177388A · 2013 [cited by applicant]
CN 105849760A · 2016 [cited by applicant]
WO WO2013136051A1 · 2013 [cited by applicant]
WO WO2015042605A1 · 2015 [cited by applicant]
“U.S. Appl. No. 14/494,476, Examiner Interview Summary mailed Mar. 23, 2015”, 3 pgs. [cited by applicant]
“U.S. Appl. No. 14/494,476, Final Office Action mailed Apr. 8, 2015”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 14/494,476, Non Final Office Action mailed Dec. 23, 2014”, 10 pgs. [cited by applicant]
“U.S. Appl. No. 14/494,476, Notice of Allowance mailed Jul. 10, 2015”, 16 pgs. [cited by applicant]
“U.S. Appl. No. 14/494,476, Response filed Mar. 23, 2015 to Non-Final Office Action Received Dec. 23, 2014”, 11 pgs. [cited by applicant]
“U.S. Appl. No. 14/494,476, Response filed Jun. 10, 2015 to Final Office Action mailed Apr. 8, 2015”, 10 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Examiner Interview Summary mailed Aug. 6, 2018”, 3 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Final Office Action mailed Jun. 8, 2018”, 11 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Non Final Office Action mailed Dec. 11, 2017”, 13 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Notice of Allowance mailed Aug. 29, 2018”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Preliminary Amendment filed Aug. 28, 2015”, 8 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Response filed Mar. 14, 2018 to Non Final Office Action mailed Dec. 11, 2017”, 13 pgs. [cited by applicant]
“U.S. Appl. No. 14/832,357, Response filed Aug. 8, 2018 to Final Office Action mailed Jun. 8, 2018”, 14 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Examiner Interview Summary mailed Dec. 18, 2019”, 3 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Final Office Action mailed Mar. 9, 2020”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Final Office Action mailed Jun. 5, 2019”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Non Final Office Action mailed Jan. 14, 2019”, 10 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Non Final Office Action mailed Sep. 30, 2019”, 13 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Notice of Allowance mailed Feb. 2, 2021”, 10 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Notice of Allowance mailed Nov. 5, 2020”, 11 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Pre-Appeal Brief filed Sep. 1, 2020”, 5 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Response filed Jan. 29, 2020 to Non Final Office Action mailed Sep. 30, 2019”, 11 pgs. [cited by applicant]
“U.S. Appl. No. 16/204,394, Response to Non Final Office Action mailed Jan. 14, 2019 filed Apr. 12, 2019”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 17/306,023, Non Final Office Action mailed Feb. 27, 2023”, 7 pgs. [cited by applicant]
“U.S. Appl. No. 17/306,023, Notice of Allowance mailed Jun. 1, 2023”, 9 pgs. [cited by applicant]
“U.S. Appl. No. 17/306,023, Response filed May 1, 2023 to Non Final Office Action malled Feb. 27, 2023”, 9 pgs. [cited by applicant]
“Australian Application Serial No. 2014324112, Voluntary Amendment filed Jun. 7, 2018”, 12 pgs. [cited by applicant]
“Australian Application Serial No. 2015100409, Subsequent Examiners Report mailed Sep. 14, 2015”, 5 pgs. [cited by applicant]
“Australian Application Serial No. 2015100410, Subsequent Examiners Report mailed Sep. 16, 2015”, 5 pgs. [cited by applicant]
“Australian Application Serial No. 2015100411, Subsequent Examiners Report mailed Jun. 24, 2015”, 7 pgs. [cited by applicant]
“Australian Application Serial No. 2015100411, Subsequent Examiners Report mailed Sep. 16, 2015”, 5 pgs. [cited by applicant]
“Canadian Application Serial No. 2,925,483, Office Action mailed Jun. 20, 2017”, 4 pgs. [cited by applicant]
“Canadian Application Serial No. 2,925,483, Response Filed Dec. 20, 2017 to Office Action mailed Jun. 20, 2017”, 21 pgs. [cited by applicant]
“Chinese Application No. 201480058275.9, First Office Action issued Mar. 21, 2019”, (w/ English Translation), (Mar. 21, 2019). 15 pgs. [cited by applicant]
“Chinese Application No. 201480058275.9, Notification to Grant Patent Right for Invention mailed Mar. 6, 2020”, (Mar. 6, 2020), 3 pgs. [cited by applicant]
“Chinese Application No. 201480058275.9, Response filed Aug. 1, 2019”, (w/ Concise Statement of Relevance), (Aug. 1, 2019), 5 pgs. [cited by applicant]
“Chinese Application No. 201480058275.9, Response mailed Nov. 5, 2019”, (w/ Concise Statement of Relevance), (Nov. 5, 2019), 5 pgs. [cited by applicant]
“Chinese Application No. 201480058275.9, Second Office Action mailed Sep. 25, 2019”, (w/ English Translation), (Sep. 25, 2019), 7 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Communication Pursuant to Article 94(3) EPC mailed Oct. 18, 2017”, 4 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Extended European Search Report mailed Feb. 10, 2017”, 10 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Response filed Apr. 19, 2018 to Communication Pursuant to Article 94(3) EPC mailed Oct. 18, 2017”, 47 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Response Filed Aug. 29, 2017 to Extended European Search Report mailed Feb. 10, 2017”, 23 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Response filed Dec. 1, 2016 to Communication pursuant to Rules 161(1) and 162 EPC mailed May 27, 2016”, 19 pgs. [cited by applicant]
“European Application Serial No. 14846077.7, Summons to Attend Oral Proceedings mailed May 9, 2018”, 12 pgs. [cited by applicant]
“International Application Serial No. PCT/US2014/057055, International Preliminary Report on Patentability mailed Apr. 7, 2016”, 8 pgs. [cited by applicant]
“International Application Serial No. PCT/US2014/057055, International Search Report mailed Nov. 13, 2014”, 4 pgs. [cited by applicant]
“International Application Serial No. PCT/US2014/057055, Written Opinion mailed Nov. 13, 2014”, 7 pgs. [cited by applicant]
“Malaysian Application Serial No. PI 2016000514, Office Action mailed Apr. 27, 2016”, 4 pgs. [cited by applicant]
“Oracle Fusion Accounting Hub”, Oracle Data Sheets, [Online]. Retrieved from the Internet: <URL: http://www.oracle.com/us/products/applications/fusion/financials/fusion-acc-hub-ds-1558297.pdf>, (Accessed: Jan. 13, 2015)… [cited by applicant]
“Oracle Fusion Accounting Hub: Integration with Oracle Financial Solutions”, An Oracle White Paper, [Online]. Retrieved from the Internet: <URL: http://www.oracle.com/us/products/applications/fusion/fusion-accounting-hu… [cited by applicant]
“Singaporean Application Serial No. 11201602154Y, Written Opinion dated Jan. 16, 2017”, 7 pgs. [cited by applicant]
Barmouta, Alexander, et al., “Gridbank: A Grid Accounting Services Architecture (GASA) for Distributed Systems Sharing and Integration”, IEEE: International Proceedings of Parallel and Distributed Processing Symposium.,… [cited by applicant]
Drury, Rodney Kenneth, “U.S. Appl. No. 14/494,476 Non-Final Office Action Received 12/23/204”, 10 pgs. [cited by applicant]
Jackson, Duane, “Bank feeds—You know they're dodgy, right?”, [Online]. Retrieved from the Internet: <URL: http://www.accountingweb.co.uk/group-thread/bank-feeds-you-know-theyre-dodgy-right>, (Feb. 28, 2012), 13 pgs. [cited by applicant]
Null, Christopher, “Choose the best bank for your tech-savvy business: 8 banks compared”, [Online]. Retrieved from the Internet: <URL: http://www.pcworld.com/article/244286/choose_the_best_bank_for_your_tech_savvy_busin… [cited by applicant]
“U.S. Appl. No. 18/335,645, Non Final Office Action mailed Apr. 29, 2024”, 16 pgs. [cited by applicant]
“U.S. Appl. No. 18/366,499, Non Final Office Action mailed Jul. 2, 2024”, 8 pgs. [cited by applicant]
U.S. Appl. No. 18/335,645, filed Jun. 15, 2023, Systems and Methods of Access Control and System Integration. [cited by applicant]
U.S. Appl. No. 18/366,499, filed Aug. 7, 2023, Systems and Methods of Access Control and System Integration. [cited by applicant]
“U.S. Appl. No. 18/335,645, Response filed Jul. 29, 2024 to Non Final Office Action mailed Apr. 29, 2024”, 13 pages. [cited by applicant]
“U.S. Appl. No. 18/335,645, Final Office Action mailed Aug. 26, 2024”, 11 pages. [cited by applicant]
“U.S. Appl. No. 18/366,499, Response filed Sep. 30, 2024 to Non Final Office Action mailed Jul. 2, 2024”, 12 pages. [cited by applicant]
“U.S. Appl. No. 18/366,499, Notice of Allowance mailed Oct. 23, 2024”, 10 pages. [cited by applicant]
“U.S. Appl. No. 18/366,499, 312 Amendment filed Nov. 21, 2014”, 3 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Response to Final Office Action mailed Aug. 26, 2024 filed Nov. 26, 2024”, 12 pgs. [cited by applicant]
“U.S. Appl. No. 18/366,499, PTO Response to Rule 312 Communication mailed Dec. 6, 2024”, 2 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Non Final Office Action mailed Dec. 30, 2024”, 9 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Response filed Mar. 27, 2025 to Non Final Office Action mailed Dec. 30, 2024”, 13 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Final Office Action mailed Apr. 10, 2025”, 10 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Notice of Allowance mailed Aug. 6, 2025”, 9 pgs. [cited by applicant]
“U.S. Appl. No. 18/335,645, Response filed Jul. 9, 2025 to Final Office Action mailed Apr. 10, 2025”, 13 pgs. [cited by applicant]