Systems and methods for authentication of access based on multi-data source information

• US 10,346,620 B2
• Filed: 12/13/2017
• Issued: 07/09/2019
• Est. Priority Date: 02/06/2004
• Status: Expired due to Term

• Current Assignee: Early Warning Services, LLC (Bank of America Corp.)
• Original Assignee: Early Warning Services, LLC (Bank of America Corp.)
• Inventors: Sgambati, Glen, Perrotta, Robert, Mayo, Rich
• Primary Examiner(s): Vu, Phy Anh T
• Application Number:
  US15/840,978
• Publication Number:
  US 20180157851A1
• Time in Patent Office: 573 Days
• CPC Class Codes: G06F 16/17 Details of further file system functions
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services

Abstract

An authentication method includes receiving a single electronic file of member data elements from multiple member data sources. The method can include extracting the member data elements from the single electronic file, populating an authentication database with the member data elements, and periodically receiving an update of the member data elements. The update can be used to refresh the authentication database. The method can include receiving non-member data elements from multiple non-member data sources, and updating the authentication database with the non-member data elements. The method can further include receiving a request for authentication for one or more queried data elements corresponding to a supplied identification data element. The method can include determining an authentication response for each of the queried data elements based on the authentication database. The method can further include transmitting the authentication response for each of the queried data elements to the requesting system.

Claims

1. A method of authenticating account owners, the method comprising:

receiving, at a database server, a plurality of participant files, wherein the plurality of participant files comprising at least one participant file from each of plurality of participant data sources, wherein, the plurality of participant files from the plurality of participant data sources containing current and accurate information of the account owners;

each participant file of the plurality of participant files comprises two or more participant data elements,

each participant data element of the two or more participant data elements comprises participant data values including a participant account identifier that corresponds to one of a plurality of participant accounts maintained for one of the account owners and including participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each participant data element of the two or more participant data elements in a particular participant file from a particular participant data source corresponding to a participant account maintained by the particular participant data source;

extracting, at the database server, the participant data values from the two or more participant data elements from each of the plurality of participant files;

storing, by the database server, the participant data values extracted from the two or more participant data elements from each of the plurality of participant files in an account owner authentication database, wherein the account owner authentication database comprises a plurality of data element fields, and wherein each of the participant data values extracted corresponds to one of the plurality of data element fields;

periodically and automatically receiving, by the database server, a plurality of updated participant files, wherein the plurality of updated participants files comprising at least one updated participant file from each of the plurality of participant data sources, each updated participant file comprising at least one updated participant data element from a plurality of updated participant data elements;

in response to receiving the plurality of updated participant files, refreshing, by the database server, the account owner authentication database with the plurality of updated participant data elements;

wherein each updated participant file of the plurality of updated participant files is provided in a predetermined format to the database server on a predetermined schedule, the method further comprising;

receiving at the database server, a plurality of non-participant files, the plurality of non-participant files comprising at least one non-participant file from each of a plurality of non-participant data sources, wherein, the plurality of non-participant files from the plurality of non-participant data sources containing information that are not current and accurate about the account owners;

each non-participant file of the plurality of non-participant files comprises two or more non-participant data elements,

each of the two or more non-participant data elements comprises non-participant data values including a non-participant account identifier that corresponds to one of a plurality of non-participant accounts maintained for one of the account owners and including non-participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each of the two or more non-participant data elements in a particular non-participant file from a particular non-participant data source corresponding to a particular non-participant account maintained by the particular non-participant data source;

extracting, at the database server, the non-participant data values from the two or more non-participant data elements from each of the plurality of non-participant files;

storing, by the database server, the non-participant data values extracted from the two or more non-participant data elements from each of the plurality of non-participant files in the account owner authentication database, wherein each of the non-participant data values extracted corresponds to one of the plurality of data element fields, wherein the plurality of data element fields comprises a non-participant flag field, and wherein each non-participant data element comprises a row in a table of the account owner authentication database having an indicator in the non-participant flag field,

sporadically receiving, by the database server, at least one updated non-participant file from at least one non-participant data source, the at least one updated non-participant file comprising at least one updated non-participant data element, wherein the at least one updated non-participant data element is not provided in the predetermined format;

in response to receiving the at least one updated non-participant file, refreshing, by the database server, the account owner authentication database with the at least one updated non-participant data element;

receiving, at the database server a request for authentication of an account owner from an inquirer, the request comprising at least an account identifier and a data value;

in response to receiving the request, searching the account owner authentication database to determine whether a match is found for the account identifier and the data value received;

upon a match is found for both the account identifier and the data value, transmitting a response to the inquirer indicating a match is determined;

upon a match is not found for at least one of the account identifier and the data value, transmitting a response to the inquirer indicating a match is not determined; and

wherein the responses do not provide any account owner-specific data to the inquirer.

2. The method of authenticating account owners of claim 1, wherein the plurality of data element fields comprise an account number field, an account type field, and an account holder name field.

3. The method of authenticating account owners of claim 1, wherein each of the plurality of participant data sources is required to provide a set of participant data elements corresponding to a predefined set of data element fields for each participant account identifier.

4. The method of authenticating account owners of claim 3, wherein each of the plurality of non-participant data sources is not required to provide a set of non-participant data elements corresponding to the predefined set of data element fields for each non-participant account identifier.

5. The method of authenticating account owners of claim 1, wherein a first non-participant data source of the plurality of non-participant data sources provides non-participant data elements from a plurality of check images corresponding to a plurality of checks, wherein each check of the plurality of checks comprises non-participant data elements corresponding to non-participant account identifiers.

6. The method of authenticating account owners of claim 1, further comprising:

organizing the account owner authentication database according to the plurality of participant accounts and the plurality of non-participant accounts, wherein each of the participant accounts and non-participant accounts correspond to an account number.

7. The method of authenticating account owners of claim 6, wherein each of the plurality of participant accounts and non-participant accounts has an associated routing transit number, and wherein organizing the account owner authentication database is further according to the associated routing transit number.

8. The method of authenticating account owners of claim 1, further comprising:

when the account identifier matches with a first participant account of the plurality of participant accounts, and the data value does not match with any participant data value stored in the account owner authentication database, transmitting a notice to a corresponding participant data source that provided the first participant account which matches the account identifier, the notice indicating that an inquiry of the first participant account resulted in no match.

9. A system for authenticating account owners, the system comprising:

one or more processors; and

a memory communicatively coupled with and readable by the one or more processors and having stored therein processor-readable instructions which, when executed by the one or more processors, cause the one or more processors to;

receive a plurality of participant files, wherein the plurality of participant files comprising at least one participant file from each of a plurality of participant data sources, wherein, the plurality of participant files from the plurality of participant data sources containing current and accurate information of the account owners;

each participant file of the plurality of participant files comprises two or more participant data elements,

each participant data element of the two or more participant data elements comprises participant data values including a participant account identifier that corresponds to one of a plurality of participant accounts maintained for one of the account owners and including participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each participant data element of the two or more participant data elements in a particular participant file from a particular participant data source corresponding to a participant account maintained by the particular participant data source;

extract the participant data values from the two or more participant data elements from each of the plurality of participant files;

store the participant data values extracted from the two or more participant data elements from each of the plurality of participant files in an account owner authentication database, wherein the account owner authentication database comprises a plurality of data element fields, and wherein each of the participant data values extracted corresponds to one of the plurality of data element fields;

periodically and automatically receive a plurality of updated participant files, wherein the plurality of updated participants files comprising at least one updated participant file from each of the plurality of participant data sources, each updated participant file comprising at least one updated participant data element from a plurality of updated participant data elements;

in response to receiving the plurality of updated participant files, refresh the account owner authentication database with the plurality of updated participant data elements;

wherein each updated participant file of the plurality of updated participant files is provided in a predetermined format to a database server on a predetermined schedule, and wherein the processor-readable instructions further cause the one or more processors to;

receive a plurality of non-participant files, the plurality of non-participant files comprising at least one non-participant file from each of a plurality of non-participant data sources, wherein, the plurality of non-participant files from the plurality of non-participant data sources containing information that are not current and accurate about the account owners;

each non-participant file of the plurality of non-participant files comprises two or more non-participant data elements,

each of the two or more non-participant data elements comprises non-participant data values including a non-participant account identifier that corresponds to one of a plurality of non-participant accounts maintained for one of the account owners and including non-participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each of the two or more non-participant data elements in a particular non-participant file from a particular non-participant data source corresponding to a particular non-participant account maintained by the particular non-participant data source;

extract the non-participant data values from the two or more non-participant data elements from each of the plurality of non-participant files;

store the non-participant data values extracted from the two or more non-participant data elements from each of the plurality of non-participant files in the account owner authentication database, wherein each of the non-participant data values extracted corresponds to one of the plurality of data element fields, wherein the plurality of data element fields comprises a non-participant flag field, and wherein each non-participant data element comprises a row in a table of the account owner authentication database having an indicator in the non-participant flag field,

irregularly receive at least one updated non-participant file from at least one non-participant data source, the at least one updated non-participant file comprising at least one updated non-participant data element, wherein the at least one updated non-participant data element is not provided in the predetermined format;

in response to receiving the at least one updated non-participant file, refreshing, by the database server, the account owner authentication database with the at least one updated non-participant data element;

receive a request for authentication of an account owner from an inquirer, the request comprising at least an account identifier and a data value;

in response to receiving the request, searching the account owner authentication database to determine whether a match is found for the account identifier and the data value received;

upon a match is found for both the account identifier and the data value, transmitting a response to the inquirer indicating a match is determined;

upon a match is not found for at least one of the account identifier and the data value, transmitting a response to the inquirer indicating a match is not determined; and

wherein the responses do not provide any account owner-specific data to the inquirer.

10. The system for authenticating account owners of claim 9, wherein each of the plurality of participant data sources is required to provide a set of participant data elements corresponding to a predefined set of data element fields for each participant account identifier.

11. The system for authenticating account owners of claim 9, wherein each of the plurality of participant data sources is required to provide a set of participant data elements corresponding to a predefined set of data element fields for each participant account identifier, and wherein each of the plurality of non-participant data sources are not required to provide a set of non-participant data elements corresponding to the predefined set of data element fields for each non-participant account identifier.

12. A computer-readable memory device having stored thereon processor-readable instructions which, when executed by one or more processors, cause the one or more processors to:

receive a plurality of participant files, wherein the plurality of participant files comprising at least one participant file from each of a plurality of participant data sources, wherein, the plurality of participant files from the plurality of participant data sources containing current and accurate information of account owners;

each participant file of the plurality of participant files comprises two or more participant data elements,

each participant data element of the two or more participant data elements comprises participant data values including a participant account identifier that corresponds to one of a plurality of participant accounts maintained for one of the account owners and including participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each participant data element of the two or more participant data elements in a particular participant file from a particular participant data source corresponding to a participant account maintained by the particular participant data source;

extract the participant data values from the two or more participant data elements from each of the plurality of participant files;

store the participant data values extracted from the two or more participant data elements from each of the plurality of participant files in an account owner authentication database, wherein the account owner authentication database comprises a plurality of data element fields, and wherein each of the participant data values extracted corresponds to one of the plurality of data element fields;

periodically and automatically receive a plurality of updated participant files, wherein the plurality of updated participants files comprising at least one updated participant file from each of the plurality of participant data sources, each updated participant file comprising at least one updated participant data element from a plurality of updated participant data elements;

in response to receiving the plurality of updated participant files, refresh the account owner authentication database with the plurality of updated participant data elements;

wherein each updated participant file of the plurality of updated participant files is provided in a predetermined format to a database server on a predetermined schedule, and wherein the processor-readable instructions further cause the one or more processors to;

receive a plurality of non-participant files, the plurality of non-participant files comprising at least one non-participant file from each of a plurality of non-participant data sources, wherein, the plurality of non-participant files from the plurality of non-participant data sources containing information that are not current and accurate about the account owners;

each non-participant file of the plurality of non-participant files comprises two or more non-participant data elements,

each of the two or more non-participant data elements comprises non-participant data values including a non-participant account identifier that corresponds to one of a plurality of non-participant accounts maintained for one of the account owners and including non-participant account owner details that correspond to personally identifiable information about a corresponding account owner, and

each of the two or more non-participant data elements in a particular non-participant file from a particular non-participant data source corresponding to a particular non-participant account maintained by the particular non-participant data source;

extract the non-participant data values from the two or more non-participant data elements from each of the plurality of non-participant files;

store the non-participant data values extracted from the two or more non-participant data elements from each of the plurality of non-participant files in the account owner authentication database, wherein each of the non-participant data values extracted corresponds to one of the plurality of data element fields, wherein the plurality of data element fields comprises a non-participant flag field, and wherein each non-participant data element comprises a row in a table of the account owner authentication database having an indicator in the non-participant flag field,

irregularly receive at least one updated non-participant file from at least one non-participant data source, the at least one updated non-participant file comprising at least one updated non-participant data element, wherein the at least one updated non-participant data element is not provided in the predetermined format;

in response to receiving the at least one updated non-participant file, refreshing, by the database server, the account owner authentication database with the at least one updated non-participant data element;

receive a request for authentication of an account owner from an inquirer, the request comprising at least an account identifier and a data value;

in response to receiving the request, searching the account owner authentication database to determine whether a match is found for the account identifier and the data value received;

upon a match is found for both the account identifier and the data value, transmitting a response to the inquirer indicating a match is determined;

upon a match is not found for at least one of the account identifier and the data value, transmitting a response to the inquirer indicating a match is not determined; and

wherein the responses do not provide any account owner-specific data to the inquirer.

13. The computer-readable memory device of claim 12, wherein each of the plurality of participant data sources are required to provide a set of participant data elements corresponding to a predefined set of data element fields for each participant account identifier, and wherein each of the plurality of non-participant data sources are not required to provide a set of non-participant data elements corresponding to the predefined set of data element fields for each non-participant account identifier.