Systems and methods for authenticating a caller using biometric authentication

• US 10,172,007 B1
• Filed: 06/25/2018
• Issued: 01/01/2019
• Est. Priority Date: 12/21/2015
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Tuomikoski, David, Tijerina, Rochelle A.
• Primary Examiner(s): Nealon, William
• Application Number:
  US16/016,994
• Time in Patent Office: 190 Days
• Field of Search: 455411
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 2203/6054 Biometric subscriber identification
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/5166 in combination with interactive voice response systems or voice portals, e.g. as front-ends
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

Methods and systems described in this disclosure receive a call from a device associated with a caller and determine whether the caller is eligible for biometric authentication via the device by sending, via a communications network, an eligibility determination request to an issuer of the device. In response to the caller being eligible for biometric authentication, a request to initiate a biometric authentication process on the device is sent to an issuer of the device, where biometric credentials are received by the device and an indication of whether the biometric credentials were verified is received from the issuer of the device.

Claims

1. An authentication platform comprising:

one or more processors; and

a computer readable storage medium having instructions stored thereon, which when executed by the one or more processors cause the authentication platform to;

receive, via a first network, a call from a device associated with a caller;

determine an identity of the caller based at least in part on characteristics of the device;

determine whether the caller is qualified for authentication via a first method of authentication;

in response to the caller being qualified for the first method of authentication, collect authentication credentials via the first method of authentication;

in response to the caller being unqualified for the first method of authentication, determine whether the caller is qualified for authentication via a second method of authentication;

in response to the caller being qualified for authentication via the second method of authentication;

send, via a second network, to an issuer of the device a request to initiate a biometric authentication process on the device, wherein biometric credentials are received by the device,

receive, via the second network, from the issuer of the device an indication of whether the biometric credentials were verified, and

authenticate the caller to the call or require additional authentication credentials based on whether the biometric credentials were verified; and

in response to determining that the caller is unqualified for the first method of authentication and the second method of authentication, authenticate the caller via a third method of authentication.

2. The authentication platform of claim 1, wherein the instructions, that when executed by the one or more processors, cause the authentication platform to determine whether the caller is qualified for the first method of authentication further cause the authentication platform to determine whether a mobile application of an organization has been downloaded to the device.

3. The authentication platform of claim 2, wherein in response to the caller being qualified for authentication via the first method of authentication, the instructions, when executed by the one or more processors, cause the authentication platform to:

send a push notification to the device, wherein the push notification is linked to an authentication tab or page in a mobile application;

receive, via the mobile application, the authentication credentials; and

authenticate the caller to the call upon verification of the authentication credentials.

4. The authentication platform of claim 1, wherein in response to the caller being unqualified for authentication via the second method of authentication, the instructions, when executed by the one or more processors, cause the authentication platform to send, via the first network, a request for authentication credentials in a text message.

5. The authentication platform of claim 1, wherein the instructions, when executed by the one or more processors, further cause the authentication platform to send, via the first network, to the caller a request to provide the biometric credentials to the device.

6. The authentication platform of claim 1, wherein the biometric credentials comprise a fingerprint.

7. The authentication platform of claim 1, wherein the instructions, that when executed by the one or more processors, cause the authentication platform to determine whether the caller is qualified for authentication via the second method of authentication further cause the authentication platform to determine whether the device is enrolled in biometric authentication.

8. The authentication platform of claim 7, wherein the instructions, when executed by the one or more processors, further cause the authentication platform to send a request to the issuer of the device requesting an indication of whether the caller is enrolled in the biometric authentication.

9. The authentication platform of claim 1, wherein the instructions, when executed by the one or more processors, further causes the authentication platform to:

determine an identity of the issuer of the device by determining a carrier of the call based on characteristics of the call; and

request, from the carrier, the identity of the issuer of the device.

10. The authentication platform of claim 9, wherein the characteristics of the call include an identity of the first network and a phone number of the device.

11. An authentication platform comprising:

one or more processors; and

a computer readable storage medium having instructions stored thereon, which when executed by the one or more processors cause the authentication platform to;

receive a call from a device associated with a caller;

determine whether the caller is eligible for biometric authentication via the device by sending, via a communications network, an eligibility determination request to an issuer of the device;

in response to the caller being eligible for biometric authentication;

send, via the communications network to the issuer of the device, a request to initiate a biometric authentication process on the device, wherein biometric credentials are received by the device,

receive, via the communications network from the issuer of the device, an indication of whether the biometric credentials were verified, and

authenticate the caller to the call or require additional authentication credentials based on whether the biometric credentials were verified; and

in response to determining that the caller is ineligible for the biometric authentication, route the call to an interactive voice response system or to a representative to authenticate the caller.

12. The authentication platform of claim 11, wherein the instructions, when executed by the one or more processors, further cause the authentication platform to send, to the device, a request for authentication credentials in a text message.

13. The authentication platform of claim 11, wherein in response to the caller being eligible for the biometric authentication, the instructions, when executed by the one or more processors, cause the authentication platform to send to the caller a request to provide the biometric credentials to the device, and wherein the biometric credentials comprise a fingerprint.

14. The authentication platform of claim 11, wherein the caller is eligible for the biometric authentication in response to a biometric authentication feature being enabled on the device, the call being active, and the device being capable of transferring both voice and data during the call.

15. The authentication platform of claim 11, wherein the instructions, when executed by the one or more processors, further cause the authentication platform to:

determine an identity of the issuer of the device by determining a carrier of the call based on characteristics of the call; and

request, from the carrier, an indication of the issuer of the device.

16. The authentication platform of claim 15, wherein the characteristics of the call include a network of the call and a phone number of the device.

17. An authentication platform comprising:

one or more processors; and

a computer readable storage medium having instructions stored thereon, which when executed by the one or more processors cause the authentication platform to;

receive, via a first network, a call from a device associated with a caller;

determine an identity of the caller based at least in part on characteristics of the device;

determine whether the caller is qualified for authentication via a first method of authentication,

wherein determining whether the caller is qualified for the first method of authentication comprises determining whether a mobile application of an organization has been downloaded to the device;

in response to the caller being qualified for the first method of authentication, collect authentication credentials via the first method of authentication;

in response to the caller being unqualified for the first method of authentication, determine whether the caller is qualified for authentication via a second method of authentication; and

in response to the caller being qualified for authentication via the second method of authentication;

send, via a second network, to an issuer of the device a request to initiate a biometric authentication process on the device, wherein biometric credentials are received by the device,

receive, via the second network, from the issuer of the device an indication of whether the biometric credentials were verified, and

authenticate the caller to the call or require additional authentication credentials based on whether the biometric credentials were verified.

18. The authentication platform of claim 17, wherein the characteristics of the call include a network of the call and a phone number of the device.

19. The authentication platform of claim 17, wherein in response to the call being received via a landline network, the instructions, when executed by the one or more processors, cause the authentication platform to authenticate the caller via a third method of authentication.

20. The authentication platform of claim 17, wherein in response to the caller being unqualified for authentication via the second method of authentication, the instructions, when executed by the one or more processors, cause the authentication platform to send, via the first network, a request for authentication credentials in a text message.