Multicomputer system for user data authentication and processing

• US 10,146,919 B1
• Filed: 01/26/2018
• Issued: 12/04/2018
• Est. Priority Date: 01/26/2018
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Osborne, Dennis M., Carpenter, Daniel L., Zhang, Xianhong, Toth, Michael
• Primary Examiner(s): TRAN, QUOC DUC
• Application Number:
  US15/881,268
• Time in Patent Office: 312 Days
• Field of Search: 37914205, 37914204
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04M 15/06 Recording class or number of calling , i.e. A-party or called party , i.e. B-party
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 15/63 based on the content carried by the session initiation protocol [SIP] messages
• CPC Class Codes: H04M 15/8351 before establishing a communication
• CPC Class Codes: H04M 2203/6081 Service authorization mechanisms

Abstract

Aspects of the disclosure relate to multicomputer processing and authentication of user data associated with telephone calls. A call security assessment computing platform may receive data associated with a telephone call made from a user computing device. Subsequently, the call security assessment computing platform may parse the received data to identify header information in a Session Initial Protocol (SIP) header. The platform then may analyze the header information to generate a call fingerprint for the telephone call. This call fingerprint may then be transmitted to one or more call authentication computing platforms, which return one or more call security responses that may further characterize security features of the telephone call. The call fingerprint and the call security responses may then be used to determine a call security score, which may be transmitted in a notification to a call handling system in order to adjust how the call is handled.

Claims

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to;

receive, via the communication interface, first data associated with a first telephone call made from a first user computing device;

parse the first data to identify header information in a Session Initiation Protocol (SIP) header of the first data;

analyze the header information to generate a call fingerprint for the first telephone call;

establish, via the communication interface, a plurality of connections to a plurality of call authentication computing platforms;

with the plurality of connections established, transmit the call fingerprint to at least one of the plurality of call authentication computing platforms;

with the plurality of connections established, receive at least one call security response from the at least one of the plurality of call authentication computing platforms,

wherein the at least one call security response comprises data including an identification of a first user of the first user computing device and a record of any previous calls made from the first user computing device;

based on the call fingerprint and the at least one call security response, determine a call security score for the first telephone call made by the first user computing device;

generate a first notification of the call security score to a call handling system; and

transmit, via the communication interface, the first notification to the call handling system.

2. The computing platform of claim 1, wherein at least one of the plurality of call authentication computing platforms comprises a computing device configured to determine if the first telephone call is being spoofed by evaluating a first amount of time between the first telephone call and a second telephone call, wherein the first telephone call is made with the first user computing device from a first location and the second telephone call is made with the first user computing device from a second location.

3. The computing platform of claim 2, wherein determining if the first telephone call is being spoofed further comprises:

determining a minimum amount of time for travelling between the first location and the second location; and

determining that the first telephone call is being spoofed when the first amount of time is less than the minimum amount of time.

4. The computing platform of claim 1, wherein analyzing the header information comprises:

identifying whether the first telephone call was made from a mobile phone or landline, a location from which the first telephone call was made, and a phone number from which the first telephone call was made; and

setting an initial call security level based on the identifying.

5. The computing platform of claim 1, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

identify a number and type of questions to ask the first user based on the call security score, wherein the number of questions is greater and the type of questions are more detailed as the call security score is lower; and

transmit, via the communication interface, the questions to the call handling system.

6. The computing platform of claim 5, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

based on the call security score, generate a command configured to allow the first user to access other systems when the questions are answered correctly; and

transmit, via the communication interface, the command to the call handling system.

7. The computing platform of claim 1, wherein at least one of the plurality of call authentication computing platforms comprises a machine learning system that uses predetermined rules to evaluate security features of the first telephone call.

8. The computing platform of claim 1, wherein the header information includes information related to whether the first user computing device comprises a mobile device or a landline.

9. The computing platform of claim 1, wherein the header information includes information related to whether the first user computing device was roaming when the first telephone call was made.

10. The computing platform of claim 1, wherein determining the call security score comprises comparing the call fingerprint and the at least one call security response to an expected call fingerprint and expected call security response.

11. The computing platform of claim 1, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

based on the call security score, route the first telephone call to one of a plurality of agents in communication with the call handling system.

12. The computing platform of claim 11, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

generate a warning message to be transmitted to the call handling system;

transmit, via the communication interface, the warning message to the call handling system; and

cause the call handling system to adjust how the first telephone call is handled.

13. A method, comprising:

at a computing platform comprising at least one processor, memory, and a communication interface;

receiving, via the communication interface, first data associated with a first telephone call made from a first user computing device;

parsing the first data to identify header information in a Session Initiation Protocol (SIP) header of the first data;

analyzing the header information to generate a call fingerprint for the first telephone call;

establishing, via the communication interface, a plurality of connections to a plurality of call authentication computing platforms;

with the plurality of connections established, transmitting the call fingerprint to at least one of the plurality of call authentication computing platforms;

with the plurality of connections established, receiving at least one call security response from the at least one of the plurality of call authentication computing platforms, wherein the at least one call security response comprises data including an identification of a first user of the first user computing device and a record of any previous calls made from the first user computing device;

based on the call fingerprint and the at least one call security response, determining a call security score for the first telephone call made by the first user computing device;

generating a first notification of the call security score to a call handling system; and

transmitting, via the communication interface, the first notification to the call handling system.

14. The method of claim 13, further comprising:

identifying a number and type of questions to ask the first user based on the call security score, wherein the number of questions is greater and the type of questions are more detailed as the call security score is lower; and

transmitting, via the communication interface, the questions to the call handling system.

15. The method of claim 14, further comprising:

based on the call security score, generating a command configured to allow the first user to access other systems when the questions are answered correctly; and

transmitting, via the communication interface, the command to the call handling system.

16. The method of claim 13, wherein determining the call security score comprises comparing the call fingerprint and the at least one call security response to an expected call fingerprint and expected call security response.

17. The method of claim 13, further comprising:

based on the call security score, routing the first telephone call to one of a plurality of agents in communication with the call handling system.

18. The method of claim 17, further comprising:

generating a warning message to be transmitted to the call handling system;

transmitting, via the communication interface, the warning message to the call handling system; and

causing the call handling system to adjust how the first telephone call is handled.

19. The method of claim 13, further comprising:

identifying whether the first telephone call was made from a mobile phone or landline, a location from which the first telephone call was made, and a phone number from which the first telephone call was made; and

setting an initial call security level based on the identifying.

20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

receive, via the communication interface, first data associated with a first telephone call made from a first user computing device;

parse the first data to identify header information in a Session Initiation Protocol (SIP) header of the first data;

analyze the header information to generate a call fingerprint for the first telephone call;

establish, via the communication interface, a plurality of connections to a plurality of call authentication computing platforms;

with the plurality of connections established, transmit the call fingerprint to at least one of the plurality of call authentication computing platforms;

with the plurality of connections established, receive at least one call security response from the at least one of the plurality of call authentication computing platforms, wherein the at least one call security response comprises data including an identification of a first user of the first user computing device and a record of any previous calls made from the first user computing device;

based on the call fingerprint and the at least one call security response, determine a call security score for the first telephone call made by the first user computing device;

generate a first notification of the call security score to a call handling system; and

transmit, via the communication interface, the first notification to the call handling system.