Guest Account Access Sessions With Revocable Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems require account owners to share sensitive login credentials with non-owners or guests, posing a risk of financial misuse and necessitating the guest to establish new credentials, which is inconvenient and risky.
Innovation Solution
A permissions-based account session is generated for guests without sharing credentials, allowing access through identity verification and revocable permissions, enabling controlled account access without creating new accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If account owners share sensitive login credentials with non-owners or guests, then guests can access the account to perform tasks, but the account owner is exposed to financial misuse and security risks
Solution Approach 1:
The patent segments account access into distinct permission levels and temporary sessions. Instead of providing full account access through shared credentials, the system creates granular permission sets that allow guests to perform specific tasks (e.g., view balance, transfer funds up to a limit) without exposing the entire account. This segmentation resolves the contradiction by enabling guest functionality while maintaining security through controlled access boundaries.
Solution Approach 2:
The patent introduces an intermediary authentication system that acts as a mediator between the account owner and guest. The system generates temporary access tokens and session identifiers that enable guest access without directly sharing the owner's credentials. This intermediary layer resolves the contradiction by facilitating guest access while protecting the owner's sensitive information from exposure.
2Reliability
If guests establish new separate accounts or credentials, then account security is maintained, but the process becomes inconvenient and requires additional account setup
Solution Approach 1:
The patent creates a universal access mechanism that works across multiple scenarios without requiring separate account setups. The temporary session system with generated credentials can be used for various guest access needs (family members, financial advisors, temporary users) through a single unified process. This resolves the contradiction by providing secure access that is as convenient as sharing credentials but without the security risks, eliminating the need for complex separate account creation.
3Adaptability or versatility
If full account access is granted to guests, then guests can perform all account tasks, but the risk of financial misuse increases
Solution Approach 1:
The patent applies local quality by assigning different permission levels to different guests based on their specific needs. Instead of uniform full access or uniform no access, the system allows the account owner to grant precise permissions (e.g., read-only access to certain accounts, transfer authority with limits, time-bound access). This resolves the contradiction by enabling guests to perform exactly the tasks needed while minimizing exposure to financial misuse through localized permission grants.
Solution Approach 2:
The patent introduces dynamic permission management where access rights can be modified, suspended, or revoked at any time by the account owner. Temporary sessions have defined start and end times, and permissions can be adjusted based on ongoing needs. This dynamic approach resolves the contradiction by providing versatile guest capabilities when needed while automatically reducing risk when access is no longer required, balancing adaptability with harm prevention.
Data Source
AI summary
Disclosed are methods and systems for granting a guest contact account access. For instance, a request to grant account access to a guest contact that includes guest contact information and account access permission(s) may be received from a first application executing on a first device of an account managing contact. An account session for the guest contact may be generated based on the request, and an electronic communication including a link to provide account session access may be generated and transmitted to a second device of the guest contact. A second application may be opened on the second device upon link selection, where a user interface thereof includes an identity verification prompt. Upon verification, the account session may activate to provide the guest contact account access through the second application. The guest contact's account access may then be revoked based on a determination of an account session termination event occurring.