Barclays Execution Services Limited

Michael Forrest

Dickon Holt

A client system comprises processing circuitry configured to receive, from a user device, a first access request comprising a first instruction to access a protected resource; transmit a token request for an access token to be used for accessing the protected resource; and receive an access token in response to the token request, the access token having a corresponding time to expire. The client system comprises a token storage unit configured to store the access token. The processing circuitry is further configured to receive a rejection message indicating that the access token is not valid for receiving the protected resource; and store, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.

System for efficient management of invalid access tokens

A computer-implemented method for managing a secure data item that is jointly accessible by the first user and the second user. In the method a first system receives a data request comprising an instruction to transmit the secure data item to a second system. The first system identifies that the secure data item is jointly accessible by the first user and the second user, and in response transmits an authorisation request to the second user device. The authorisation request comprises a prompt for the second user to authorise the data request. The first system receives a grant message indicative of the second user granting the authorisation request and in response transmits the secure data item to the second system. The secure data item is prevented from being sent to the second system, if the grant message is not received.

System for managing jointly accessible data

A computer-implemented method for sharing user data associated with a first user. The method comprises receiving, from a second system, a first access message associated with a request for access to the user data stored at a first system. The first access message comprises a second system label indicative of an identifier of the second system. In response to receiving the first access message, the second system label is compared with a plurality of authorised entity labels and a plurality of unauthorised entity labels. In response to identifying that the second system label matches an authorised entity label and that the second system label does not match an unauthorised entity label, a grant message is transmitted indicative that the request for access is granted.

System for authorising data access

A client system comprises processing circuitry configured to receive, from an authorisation system, a first grant token for identifying the client system at the authorisation system, the first grant token having a corresponding time to expire indicative of a time at which the first grant token will not be valid for obtaining a protected resource from a resource system. The client system transmits, to the authorisation system, a refresh request for a second grant token for identifying the client system at the authorisation system, wherein the refresh request is transmitted based on the expiry time of the first grant token; and receives the second grant token at the client system, in response to the refresh request.

System for efficient management of grant tokens for identifying a client system

A client system obtains an access token for accessing a protected resource stored at a resource system. A storage resource of the system stores a plurality of grant method code portions, a plurality of authentication method code portions and a configurable database. The client system comprises processing circuitry configured to receive an access request from a user device. The access request comprises an instruction for the client system to access a protected resource and a request identifier indicative of an authorization system for authorizing access to the protected resource. The client system uses the configurable database and code portions to execute the grant and authentication methods supported by the authorization system. The client system receives the access token from the authorization sever, in response to executing the grant and authentication methods.

Growing community of inventors

Knutsford, United Kingdom

Michael Forrest