Bank speech authentication

• US 10,003,594 B1
• Filed: 07/17/2017
• Issued: 06/19/2018
• Est. Priority Date: 07/26/2007
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Moore, Richard E., Castillo, Hector J.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/652,087
• Time in Patent Office: 337 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Authentication mechanisms are disclosed. For example, an enterprise associated number or a social security number (SSN) can be provided to enter a first level. Then, any one of a ZIP code number, a device identifier, a date of birth, and a portion of the SSN can be provided to access applications in the first level. Lastly, a PIN can be provided to enter a second level of the enterprise. Additionally, these authentication mechanisms can be added and/or changed. In the former case, if a user used a SSN to enter the mentioned first level, then a date of birth can be used to update an authentication mechanism. Alternatively, if a user used an enterprise number to gain such access, then part of the SSN can be used for the update. If the user wants to change the authentication mechanism, the date of birth can be used for the update.

Claims

1. A system comprising:

a processor; and

a non-transitory computer-readable medium storing computer executable instructions thereon executed by the processor to;

determine, by the processor, a number of inputs required for a user to access data, wherein the number of inputs correlates to a multi-level authentication corresponding to a multi-level security level;

receive, by the processor, from an electronic client device associated with the user, a first input, wherein the first input correlates to a first level of security corresponding to a first set of user actions;

receive, by the processor, from the electronic client device, an identifier associated with the electronic client device;

authenticate, by the processor, the user for access to the first level of security using the first input; and

authenticate, by the processor, the user for access to a second level of security corresponding to a second set of user actions using the first input and when the received identifier corresponds with an identifier associated with the user stored in a database, wherein the second set of user actions is more restricted than the first set of user actions.

2. The system according to claim 1, wherein a level of security within the multi-level security levels is associated with a type of input.

3. The system according to claim 2, wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

4. The system according to claim 1, wherein the level of security is associated with a computing service executed by one or more servers of the enterprise system comprising the processor.

5. The system according to claim 4, wherein the instructions further instruct the processor to receive a request for the computing service from the device associated with the user, and wherein the number of inputs required the user to access the enterprise is based upon the computing service identified by the request.

6. The system according to claim 5, wherein the instructions further instruct the processor to generate a user interface requesting each input from the user device, for each respective input of the number of inputs required according to the computing service requested.

7. The system according to claim 1, wherein the instructions further instruct the processor to update a user profile associated with the user in the user profile database, according to the number of inputs received from the user device.

8. The system according to claim 7, wherein the processor further updates the number of inputs required to access the enterprise in the user profile according to a computing service executed by one or more servers of the enterprise, and wherein each input of the number of inputs accesses the computing service.

9. A method comprising:

determining, by a computer, a number of inputs required for a user to access data, wherein the number of inputs correlates to a multi-level authentication corresponding to a multi-level security level;

receiving, by the computer, from an electronic client device associated with the user, a first input, wherein the first input correlates to a first level of security corresponding to a first set of user actions;

receiving, by the computer, from the electronic client device, an identifier associated with the electronic client device;

authenticating, by the computer, the user for access to the first level of security using the first input; and

authenticating, by the computer, the user for access to a second level of security corresponding to a second set of user actions using the first input and when the received identifier corresponds with an identifier associated with the user stored in a database, wherein the second set of user actions is more restricted than the first set of user actions.

10. The method according to claim 9, wherein the level of security is associated with a type of input.

11. The method according to claim 10, wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

12. The method according to claim 10, wherein the level of security is associated with a computing service executed by one or more servers of the enterprise system comprising the processor.

13. The method according to claim 12, further comprising receiving, by the processor, a request for the computing service from the user device associated with the user,

wherein the number of inputs required for the user to access the enterprise is based upon the computing service identified by the request.

14. The method according to claim 13, further comprising generating, by the processor, a user interface requesting each input from the user device for each respective input of the number of inputs required according to the computing service requested.

15. The method according to claim 9, further comprising updating, by the processor, a user profile associated with the user in the user profile database according to the number of inputs received from the user device.

16. The method according to claim 15, wherein the processor updates the number of inputs required to access the enterprise in the user profile based upon a computing service executed by one or more servers of the enterprise, and wherein each input of the number of inputs accesses the computing service.

17. A system authenticating users accessing computing services hosted by an enterprise computing system, the system comprising:

a user profile database configured to store a user profile containing one or more inputs associated with a computing service executed by one or more servers of the enterprise; and

a computer comprising a processor configured to;

determine a number of inputs required for a user to access data, wherein the number of inputs correlates to a multi-level authentication corresponding to a multi-level security level;

receive from an electronic client device associated with the user, a first input, wherein the first input correlates to a first level of security corresponding to a first set of user actions;

receive from the electronic client device, an identifier associated with the electronic client device;

authenticate the user for access to the first level of security using the first input; and

authenticate the user for access to a second level of security corresponding to a second set of user actions using the first input and when the received identifier corresponds with an identifier associated with the user stored in a database, wherein the second set of user actions is more restricted than the first set of user actions.

18. The system according to claim 17, wherein the level of security is associated with a type of input, and wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

19. The system according to claim 17, wherein the processor is further configured to receive a request for the computing service from the device associated with the user, and

wherein the number of inputs required for the user to access the enterprise is based upon the computing service identified by the request.

20. The system according to claim 19, wherein the processor is further configured to generate a user interface requesting each input from the user device for each respective input of the number of inputs required according to the computing service requested.