Bank speech authentication

• US 10,298,566 B1
• Filed: 04/30/2018
• Issued: 05/21/2019
• Est. Priority Date: 07/26/2007
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Moore, Richard E., Castillo, Hector J.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/967,127
• Time in Patent Office: 386 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Authentication mechanisms are disclosed. For example, an enterprise associated number or a social security number (SSN) can be provided to enter a first level. Then, any one of a ZIP code number, a device identifier, a date of birth, and a portion of the SSN can be provided to access applications in the first level. Lastly, a PIN can be provided to enter a second level of the enterprise. Additionally, these authentication mechanisms can be added and/or changed. In the former case, if a user used a SSN to enter the mentioned first level, then a date of birth can be used to update an authentication mechanism. Alternatively, if a user used an enterprise number to gain such access, then part of the SSN can be used for the update. If the user wants to change the authentication mechanism, the date of birth can be used for the update.

Claims

1. A multi-level authentication system comprising:

a processor; and

a non-transitory computer-readable medium storing computer executable instructions thereon executed by the processor to;

determine a number of inputs required for a user to access data, wherein the number of inputs correlates to an authentication requirement by each level of a plurality of security levels;

receive, from an electronic device operated by the user, a first input corresponding to a first security level;

authenticate the user, using the first input, for access to the first security level corresponding to a first set of user actions;

receive, from the electronic device, a second input corresponding to a second security level;

authenticate, using the first input and the second input, the user for access to the second security level corresponding to a second set of user actions; and

upon receiving an instruction from the user, update the number of inputs required for the user to access the second security level, whereby the processor authenticates the user to access the second security level without receiving the first input.

2. The multi-level authentication system according to claim 1, wherein the second input is a unique identifier associated with the electronic device.

3. The multi-level authentication system according to claim 2, wherein the unique identifier is an IP address.

4. The multi-level authentication system according to claim 1, wherein the processor providers a pre-determined number of attempts corresponding to the first or the second input.

5. The multi-level authentication system according to claim 4, wherein the pre-determined number of attempts is determined based on a heuristic algorithm.

6. The multi-level authentication system according to claim 1, wherein the first security level and the second security level are associated with a type of input.

7. The multi-level authentication system according to claim 6, wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

8. The multi-level authentication system according to claim 1, wherein when the first or the second input is not correct, the processor connects the electronic device to a representative.

9. The multi-level authentication system according to claim 1, wherein the processor is further configured to:

notify the user the number of inputs required for the user to access the second security level has been updated.

10. The multi-level authentication system according to claim 9, wherein the notification is at least one of a text message and an email to the electronic device.

11. The multi-level authentication system according to claim 1, wherein the electronic device is a mobile phone.

20. The method according to claim 1, wherein the electronic device is a mobile phone.

12. A method comprising:

determining, by a server, a number of inputs required for a user to access data, wherein the number of inputs correlates to an authentication requirement by each level of a plurality of security levels;

receiving, by the server from an electronic device operated by the user, a first input corresponding to a first security level;

authenticating, by the server, the user, using the first input, for access to the first security level corresponding to a first set of user actions;

receiving, by the server, from the electronic device, a second input corresponding to a second security level;

authenticating, by the server, using the first input and the second input, the user for access to the second security level corresponding to a second set of user actions; and

upon receiving an instruction from the user, updating, by the serve, the number of inputs required for the user to access the second security level, whereby the server authenticates the user to access the second security level without receiving the first input.

13. The method according to claim 12, wherein the second input is a unique identifier associated with the electronic device.

14. The method according to claim 13, wherein the unique identifier is an IP address.

15. The method according to claim 12, wherein the server providers a pre-determined number of attempts corresponding to the first or the second input.

16. The method according to claim 15, wherein the pre-determined number of attempts is determined based on a heuristic algorithm.

17. The method according to claim 12, wherein the first security level and the second security level are associated with a type of input.

18. The method according to claim 12, wherein when the first or the second input is not correct, the server connects the electronic device to a representative.

19. The method according to claim 12, further comprising:

notifying, by the server, the user the number of inputs required for the user to access the second level of security has been updated.