Preventing unauthorized access to secured information systems using tokenized authentication techniques

• US 10,148,646 B2
• Filed: 07/20/2016
• Issued: 12/04/2018
• Est. Priority Date: 07/20/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Votaw, Elizabeth S., Keys, Andrew T., Arora, Ashish
• Primary Examiner(s): Turchen, James R
• Application Number:
  US15/214,874
• Publication Number:
  US 20180026959A1
• Time in Patent Office: 867 Days
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A computing platform may receive, from a social messaging server, a request to authenticate a user to a user account associated with a client portal. In response to receiving the request, the computing platform may send, to the social messaging server, an authentication token request message. Thereafter, the computing platform may receive, from the social messaging server, an authentication token. The computing platform may validate the authentication token received from the social messaging server. Based on validating the authentication token received from the social messaging server, the computing platform may generate a validation message directing a client support server to provide the user with access to the user account. Subsequently, the computing platform may send the validation message to the client support server, which may cause the client support server to initiate a client support session with the user via the social messaging service provided by the social messaging server.

Claims

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to;

receive, via the communication interface, and from a social messaging server, a request to authenticate a first user to a first user account associated with a client portal provided by a client portal server,

wherein the social messaging server generates the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server based on receiving chat input from a first client computing device associated with the first user in response to a message sent by the social messaging server, via a social messaging service provided by the social messaging server, to the first client computing device associated with the first user, based on a notification sent to the social messaging server by the client portal server, and

wherein the social messaging server is operated by a social networking service different from an organization operating the client portal server;

based on receiving the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server, send, via the communication interface, and to the social messaging server, a first authentication token request message;

receive, via the communication interface, and from the social messaging server, a first authentication token;

validate the first authentication token received from the social messaging server;

based on validating the first authentication token received from the social messaging server, generate a first validation message directing a client support server to provide the first user with access to the first user account; and

send, via the communication interface, and to the client support server, the first validation message directing the client support server to provide the first user with access to the first user account.

2. The computing platform of claim 1, wherein the first authentication token received from the social messaging server comprises information indicating that the first user is authenticated to a first social messaging service account associated with the social messaging service provided by the social messaging server.

3. The computing platform of claim 2, wherein the first validation message directing the client support server to provide the first user with access to the first user account comprises information indicating that the first user has been authenticated to the first user account based on the first authentication token received from the social messaging server.

4. The computing platform of claim 3, wherein the first validation message directing the client support server to provide the first user with access to the first user account comprises information directing the client support server to initiate a first client support session with the first user via the social messaging service provided by the social messaging server.

5. The computing platform of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

receive, via the communication interface, and from the social messaging server, a request to authenticate a second user to a second user account associated with the client portal provided by the client portal server;

based on receiving the request to authenticate the second user to the second user account associated with the client portal provided by the client portal server, send, via the communication interface, and to the social messaging server, a second authentication token request message;

receive, via the communication interface, and from the social messaging server, a second authentication token;

validate the second authentication token received from the social messaging server;

based on validating the second authentication token received from the social messaging server, generate a second validation message directing the client support server to provide the second user with access to the second user account; and

send, via the communication interface, and to the client support server, the second validation message directing the client support server to provide the second user with access to the second user account.

6. The computing platform of claim 5, wherein the second authentication token received from the social messaging server comprises information indicating that the second user is authenticated to a second social messaging service account associated with the social messaging service provided by the social messaging server.

7. The computing platform of claim 6, wherein the social messaging server generates the request to authenticate the second user to the second user account associated with the client portal provided by the client portal server based on receiving chat input from a second client computing device associated with the second user.

8. The computing platform of claim 6, wherein the second validation message directing the client support server to provide the second user with access to the second user account comprises information indicating that the second user has been authenticated to the second user account based on the second authentication token received from the social messaging server.

9. The computing platform of claim 8, wherein the second validation message directing the client support server to provide the second user with access to the second user account comprises information directing the client support server to initiate a second client support session with the second user via the social messaging service provided by the social messaging server.

10. A method, comprising:

at a computing platform comprising at least one processor, memory, and a communication interface;

receiving, by the at least one processor, via the communication interface, and from a social messaging server, a request to authenticate a first user to a first user account associated with a client portal provided by a client portal server,

wherein the social messaging server generates the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server based on receiving chat input from a first client computing device associated with the first user in response to a message sent by the social messaging server, via a social messaging service provided by the social messaging server, to the first client computing device associated with the first user, based on a notification sent to the social messaging server by the client portal server, and

wherein the social messaging server is operated by a social networking service different from an organization operating the client portal server;

based on receiving the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server, sending, by the at least one processor, via the communication interface, and to the social messaging server, a first authentication token request message;

receiving, by the at least one processor, via the communication interface, and from the social messaging server, a first authentication token;

validating, by the at least one processor, the first authentication token received from the social messaging server;

based on validating the first authentication token received from the social messaging server, generating, by the at least one processor, a first validation message directing a client support server to provide the first user with access to the first user account; and

sending, by the at least one processor, via the communication interface, and to the client support server, the first validation message directing the client support server to provide the first user with access to the first user account.

11. The method of claim 10, wherein the first authentication token received from the social messaging server comprises information indicating that the first user is authenticated to a first social messaging service account associated with the social messaging service provided by the social messaging server.

12. The method of claim 11, wherein the first validation message directing the client support server to provide the first user with access to the first user account comprises information indicating that the first user has been authenticated to the first user account based on the first authentication token received from the social messaging server.

13. The method of claim 12, wherein the first validation message directing the client support server to provide the first user with access to the first user account comprises information directing the client support server to initiate a first client support session with the first user via the social messaging service provided by the social messaging server.

14. The method of claim 13, comprising:

receiving, by the at least one processor, via the communication interface, and from the social messaging server, a request to authenticate a second user to a second user account associated with the client portal provided by the client portal server;

based on receiving the request to authenticate the second user to the second user account associated with the client portal provided by the client portal server, sending, by the at least one processor, via the communication interface, and to the social messaging server, a second authentication token request message;

receiving, by the at least one processor, via the communication interface, and from the social messaging server, a second authentication token;

validating, by the at least one processor, the second authentication token received from the social messaging server;

based on validating the second authentication token received from the social messaging server, generating, by the at least one processor, a second validation message directing the client support server to provide the second user with access to the second user account; and

sending, by the at least one processor, via the communication interface, and to the client support server, the second validation message directing the client support server to provide the second user with access to the second user account.

15. The method of claim 14, wherein the second authentication token received from the social messaging server comprises information indicating that the second user is authenticated to a second social messaging service account associated with the social messaging service provided by the social messaging server.

16. The method of claim 15, wherein the social messaging server generates the request to authenticate the second user to the second user account associated with the client portal provided by the client portal server based on receiving chat input from a second client computing device associated with the second user.

17. The method of claim 15, wherein the second validation message directing the client support server to provide the second user with access to the second user account comprises information indicating that the second user has been authenticated to the second user account based on the second authentication token received from the social messaging server.

18. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

receive, via the communication interface, and from a social messaging server, a request to authenticate a first user to a first user account associated with a client portal provided by a client portal server,

wherein the social messaging server generates the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server based on receiving chat input from a first client computing device associated with the first user in response to a message sent by the social messaging server, via a social messaging service provided by the social messaging server, to the first client computing device associated with the first user, based on a notification sent to the social messaging server by the client portal server, and

wherein the social messaging server is operated by a social networking service different from an organization operating the client portal server;

based on receiving the request to authenticate the first user to the first user account associated with the client portal provided by the client portal server, send, via the communication interface, and to the social messaging server, a first authentication token request message;

receive, via the communication interface, and from the social messaging server, a first authentication token;

validate the first authentication token received from the social messaging server;

based on validating the first authentication token received from the social messaging server, generate a first validation message directing a client support server to provide the first user with access to the first user account; and

send, via the communication interface, and to the client support server, the first validation message directing the client support server to provide the first user with access to the first user account.