	US 12,333,047 B2
	Scrubbing account data accessed via links to applications or devices
Lila Fakhraie, Belmont, CA (US); Brian M. Pearce, Pleasanton, CA (US); Steven Pulido, San Francisco, CA (US); Benjamin Soccorsy, Larkspur, CA (US); James Stahley, San Francisco, CA (US); and Mojdeh Tomsich, Piedmont, CA (US)
Assigned to WELLS FARGO BANK, N.A., San Francisco, CA (US)
Filed by WELLS FARGO BANK, N.A., San Francisco, CA (US)
Filed on Jul. 29, 2024, as Appl. No. 18/787,691.
Application 18/787,691 is a continuation of application No. 17/478,108, filed on Sep. 17, 2021, granted, now 12,050,713.
Application 17/478,108 is a continuation of application No. 17/024,554, filed on Sep. 17, 2020, granted, now 11,227,064.
Application 17/024,554 is a continuation of application No. 16/653,312, filed on Oct. 15, 2019, granted, now 11,886,611.
Application 16/653,312 is a continuation in part of application No. 16/457,257, filed on Jun. 28, 2019, granted, now 12,130,937.
Application 16/457,257 is a continuation in part of application No. 16/383,388, filed on Apr. 12, 2019, granted, now 11,935,020.
Application 16/383,388 is a continuation in part of application No. 16/215,558, filed on Dec. 10, 2018, granted, now 11,409,902.
Application 16/215,558 is a continuation of application No. 16/204,831, filed on Nov. 29, 2018, granted, now 11,386,223.
Application 16/204,831 is a continuation in part of application No. 15/723,078, filed on Oct. 2, 2017, granted, now 10,992,679.
Application 15/723,078 is a continuation in part of application No. 15/629,423, filed on Jun. 21, 2017, granted, now 11,615,402.
Claims priority of provisional application 62/766,400, filed on Oct. 16, 2018.
Claims priority of provisional application 62/529,360, filed on Jul. 6, 2017.
Claims priority of provisional application 62/403,396, filed on Oct. 3, 2016.
Claims priority of provisional application 62/357,737, filed on Jul. 1, 2016.
Prior Publication US 2024/0386137 A1, Nov. 21, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 16/215 (2019.01); G06F 21/62 (2013.01); H04L 9/40 (2022.01)

CPC G06F 21/6245 (2013.01) [H04L 63/10 (2013.01); G06F 16/215 (2019.01); G06F 21/6263 (2013.01)]

19 Claims

1. A method implemented by a service provider computing system comprising one or more processors, the method comprising:

receiving, from a financial institution computing system, a security access token granting limited access to a user account (i) that is administered by the financial institution computing system for a user, (ii) that comprises account data acquired from a user device of the user, and (iii) that is linked to a client application executing on the user device and with which the service provider computing system communicates when the client application is executed on the user device of the user;

transmitting, to the financial institution computing system, using an application programming interface (API) between the service provider computing system and the financial institution computing system, an API request comprising the security access token and a request for a subset of the account data that is accessible to the service provider computing system based on the limited access granted by the security access token;

receiving, in response to the API request, from the financial institution computing system, the subset of the account data requested through the API request;

storing, in a non-volatile memory of the service provider computing system, the subset of the account data received from the financial institution computing system through the API request;

receiving, from the client application executing on the user device, a data request for the subset of the account data;

transmitting, in response to receiving the data request from the client application, the subset of the account data that is stored in the non-volatile memory to the client application executing on the user device;

receiving, from the financial institution computing system, a scrub command indicating the service provider computing system is to delete, from the non-volatile memory of the service provider computing system, the subset of the account data received through the API;

in response to receiving the scrub command, deleting, from the non-volatile memory of the service provider computing system, the subset of the account data received by the service provider computing system from the financial institution computing system using the security access token; and

transmitting, to the financial institution computing system, an indication that the subset of the account data received by the service provider computing system using the security access token has been deleted from the service provider computing system.