Dynamic digital consent

• US 10,417,401 B2
• Filed: 07/30/2017
• Issued: 09/17/2019
• Est. Priority Date: 07/30/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Votaw, Elizabeth S., Smiddy, David J., Sidharth, Fnu, Shannon, Stephen T., Alexander, James
• Primary Examiner(s): Nipa, Wasika
• Application Number:
  US15/663,810
• Publication Number:
  US 20190034602A1
• Time in Patent Office: 779 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

Method and apparatus for a system to harden digital consents. The system uses an evaluation of geographic locations, transaction times, and device identities to control the upload of consent data. Evaluations occur using numerous techniques including MAC address evaluation, IP address evaluation, meta-data evaluation, and physical location of restricted equipment such as ATMs and kiosks. Reliability of consent data entered into the system may be enhanced by strictly evaluating geographic locations, transaction times, and/or device identities.

Claims

1. A method of improving the performance of a computer system, the method comprising the steps of:

reactivating, at a scheduled time, dormant system resources required to execute, on a remote computer system, a plurality of system applications on a default list, the default list identifying a group of default system applications, the resources comprising electricity, processing power, and auxiliary systems;

creating, and no less than a minute later terminating, an audio telecommunication linkage between a device and the remote computer system when the device is located at a first geographic location;

during the telecommunication linkage, a second geographic location is identified via audio transmission, the second geographic location different from the first geographic location;

detecting transporting of the device to the second geographic location after the termination of the telecommunication linkage;

at the second location, transmitting a signal from the device to the remote computer system, the signal comprising an identity of an item of consent data, a transaction identity, a device identity, an indicator that the device is located at the second geographic location, a time period, and the device user;

based on the second location, activating a consent scheme on the device comprising;

retrieving a first list, the first list identifying a group of system applications associated with the identified item of consent data;

deactivating active system resources of system applications absent from the first list;

reactivating dormant system resources required to activate a first collection of dormant system applications of the first list, the first collection of system applications verifying that the device is in fact at the second geographic location and that the second geographic location matches a predetermined value associated with the identified item of consent data;

reactivating dormant system resources required to activate a second collection of dormant system applications of the first list, the second collection of system applications verifying that the time period matches a predetermined value associated with the identified item of consent data;

reactivating dormant system resources required to activate a third collection of dormant system applications of the first list, the third collection of system applications verifying that the device identify matches a predetermined value associated with the identified item of consent data;

based on the second location, activating an authorization scheme comprising;

retrieving a second list, the second list identifying a group of default system applications associated with both the transaction and the identified item of consent data;

deactivating active system resources of system applications absent from the second list;

activating dormant system resources of system applications present on the second list; and

utilizing data generated by the active system applications and the signal to generate and return an approval value;

when all of the second geographic location, time period, and device identity match their respective predetermined values, the remote computer system changes the operation of the device to optimize the preparation of the identified item of consent data, the change in operation comprising;

altering the luminosity of a screen on the device, altering the size of text characters displayed on the screen of the device, and terminating communication between the device and any computer system other than the remote computer system;

creating the identified item of consent data and uploading the item of consent data from the device to the remote computer system; and

when, over the course of a 30-day period, a default application is deactivated by the authorization scheme or consent scheme more times than a non-default application is activated by the authorization scheme or consent scheme, replacing the default application with the non-default application in the default list.

2. The method of claim 1 wherein the item of consent data is one item selected from the group consisting of a digital document, an electronic signature, a scanned copy of a paper document, a scanned copy of a hand signature, a digital affirmation, a text bearing digital file, an audio recording of a conversation, a video recording of a conversation, and any combination thereof, and comprises meta-data and an SHA Hash.

3. The method of claim 1 wherein the authorization scheme is activated before the consent scheme is activated.

4. The method of claim 1 wherein the device'"'"'s identity is verified by comparing its MAC address to items selected from the group consisting of a list of approved MAC addresses, a list of disapproved MAC addresses, and any combination thereof.

5. The method of claim 1 wherein the device'"'"'s geographic location is verified by comparing its MAC address to items selected from the group consisting of a list of approved MAC addresses, a list of disapproved MAC addresses, and any combination thereof.

6. The method of claim 1 wherein the signal is transmitted from the device via a multi layered network comprising multiple MAC addresses and the geographic location verified by comparing all the involved MAC addresses to items selected from the group consisting of a list of approved MAC addresses, a list of disapproved MAC addresses, and any combination thereof.

7. The method of claim 1 wherein the device'"'"'s geographic location is verified by comparing its IP address to a geographic location associated with the IP addresses.

8. The method of claim 1 wherein the device'"'"'s geographic location is verified by analyzing meta-data embedded within the signal or embedded within the item of consent data.

9. The method of claim 1 wherein the device is logged onto the remote computer system via an ISP server over the internet and the geographic location is verified by identifying MAC addresses IP addresses associated with the ISP server.

10. The method of claim 1 wherein the device is logged onto the remote computer system via an integrated component of the remote computer system and the geographic location is verified by identifying a known physical location of the integrated component.

11. The method of claim 1 wherein the system applications are executed software applications selected from the group consisting of:

geography confirming software, time retrieval software, time stamping software, fingerprint recognition program, voice recognition program, iris recognition program, DNA recognition program, camera, facial recognition program, document recognition program, personal data confirmation, distributed database blockchain data confirmation, risk assessment program, behavior prediction program, bar code scanners, optical scanners, biomarker scanners, token identification scanner, magnetic scanner, card reader, heartrate reader, blood-oxygen reader, x-ray scanner, transponder reader, and any combination thereof.

12. The method of claim 11 wherein the authorization scheme comprises receiving a second signal from the device and the executed software compares data within the second signal to data on file within the remote computer system, at least one active system application generates an approval value that cannot be within the first predetermined threshold when the data within the second signal diverges from the data on file within the remote computer system by more than a predetermined amount.

13. The method of claim 1 comprising a blacklist, the blacklist comprising a list of one or more of specific geographic locations, time periods, device identities, MAC addresses, IP addresses, and meta-data that will always generate an approval value that cannot be within the predetermined threshold.

14. The method of claim 1 further comprising creating a timestamp associated with the consent data on the device, comparing the device consent data timestamp to all timestamps of all stored items of consent data within the remote computer system, and rejecting the upload of the item of consent data from the device if any timestamps of stored items of consent data within the remote computer system matches the device consent data timestamp.