Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media for an automated financial management system. One of the methods includes receiving data indicating a list of historic transactions of a user from a plurality of financial institutions. The method includes identifying at least one predicted unexpected expense based on providing at least some of the data to a trained machine-learning model, the trained machine-learning model trained using historic transaction data of a plurality of other users. The method includes determining a plan to account for the unexpected expense. The method also includes automatically transferring an amount based on the plan.

Abstract: A system and method of providing real time account information for financial accounts is disclosed. The system includes an event based architecture including an event stream. Financial transaction processing systems publish transaction events to the event stream. A transaction service listening to the event stream detects new transaction events. The transaction service takes action to enrich transaction data. A middleware system reconciles existing transactions and persists transaction records in long term storage. The system can detect fraudulent transactions before the transactions have been posted to the financial account. The system can also be used to provide real time notifications to customers about potential fraudulent activity.

Abstract: A system and method of providing real time account information for financial accounts is disclosed. The system includes an event based architecture including an event stream. Financial transaction processing systems publish transaction events to the event stream. A transaction service listening to the event stream detects new transaction events. The transaction service takes action to enrich transaction data. A middleware system reconciles existing transactions and persists transaction records in long term storage. The system can retrieve real time enriched transaction data to calculate account summary information, including current account balances and projected future account balances. The system can also be used to provide real time notifications to customers using enriched transaction data.

Abstract: The present embodiments relate to establishing secure data communication using an Elliptic-curve Diffie-Hellman ephemeral (ECDHE) key agreement procedure. Devices in a network environment can utilize a key agreement procedure to establish secure communication between multiple application layers in a micro service architecture. Particularly, a tunnel can be established between a mobile device and an encryption service by transmitting key information between the mobile device and the encryption service. This can allow for encryption keys to only be accurately generated by the mobile device and encryption service. Accordingly, intermediary nodes may be unable to decrypt the data, allowing for safe and secure transport of sensitive data.

Abstract: Techniques are described for managing data transfer between an enterprise system and a third-party provider system, through a batch interface of the third-party provider system. A batch of transaction data is uploaded through the batch interface for enrichment, and enrichment data is received in response. The enrichment data provides additional context regarding each of the transactions specified in the uploaded batch. The enrichment data can be sent back to the presented to user(s) through various tools. Prior to uploading, the batch can be filtered to include those records corresponding to users who have opted into a service. Filtering can also exclude records for which enrichment data has already been provided through a real-time process. Reconciliation can be performed to ensure integrity of the communicated data.

Abstract: A system and method of providing real time account information for financial accounts is disclosed. The system includes an event based architecture including an event stream. Financial transaction processing systems publish transaction events to the event stream. A transaction service listening to the event stream detects new transaction events. The transaction service takes action to enrich transaction data. A middleware system reconciles existing transactions and persists transaction records in long term storage. The system can detect fraudulent transactions before the transactions have been posted to the financial account. The system can also be used to provide real time notifications to customers about potential fraudulent activity.

Abstract: A system and method of providing real time account information for financial accounts is disclosed. The system includes an event based architecture including an event stream. Financial transaction processing systems publish transaction events to the event stream. A transaction service listening to the event stream detects new transaction events. The transaction service takes action to enrich transaction data. A middleware system reconciles existing transactions and persists transaction records in long term storage. Prior to closing financial accounts, the system can retrieve a list of all scheduled and pending transactions and request that these transactions are canceled before closing the account.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media for an automated financial management system. One of the methods includes receiving data indicating a list of historic transactions of a user from a plurality of financial institutions. The method includes identifying at least one predicted unexpected expense based on providing at least some of the data to a trained machine-learning model, the trained machine-learning model trained using historic transaction data of a plurality of other users. The method includes determining a plan to account for the unexpected expense. The method also includes automatically transferring an amount based on the plan.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Implementations of the present disclosure are directed to coordinating content between a page and a frame embedded in the page, and include providing a set of events to be registered in a service layer of a third-party system, the set of events including one or more events that can be triggered through the frame, and for which respective update messages are sent from the third-party system to a service layer of an enterprise system, receiving a first update message from the third-party system, the first update message providing data representative of a first event occurring within the frame, requesting first content from one or more data sources, the first content corresponding to the first event, and updating the page to display the first content therein, the first content corresponding to content displayed in the frame.

Abstract: Extract, transform, and load application (ETL) complexity management framework systems and methods are described herein. The present disclosure describes systems and methods that reduce the complexity in managing ETL flow and correcting errant data that is subsequently identified. One or more methods include defining an ETL job definition, defining a data asset definition, defining a data asset dependency definition, receiving an ETL flow to provide execution of one or more ETL flow steps, providing retrieval of data from a source data asset, applying a data control to the source asset data, and producing an ETL job registration, a data asset status, a latest asset available date, a data asset consumer identifier, and a target data asset based on at least one of the ETL job definition, the data asset definition, the data dependency definition, and the source asset data.

Abstract: Implementations of the present disclosure are directed to coordinating content between a page and a frame embedded in the page, and include establishing an event listener with the frame, the event listener inducing the frame to provide event messages to the page in response to occurrence of respective events within the frame, receiving a first event message from the frame, the first event message reporting occurrence of a first event, requesting first content from one or more data sources, the first content corresponding to the first event, and updating the page to display the first content therein, the first content corresponding to content displayed in the frame.

Abstract: Implementations of the present disclosure are directed to coordinating content between a page and a frame embedded in the page, and include providing a set of events to be registered in a service layer of a third-party system, the set of events including one or more events that can be triggered through the frame, and for which respective update messages are sent from the third-party system to a service layer of an enterprise system, receiving a first update message from the third-party system, the first update message providing data representative of a first event occurring within the frame, requesting first content from one or more data sources, the first content corresponding to the first event, and updating the page to display the first content therein, the first content corresponding to content displayed in the frame.