User authentication

• US 10,685,131 B1
• Filed: 02/05/2018
• Issued: 06/16/2020
• Est. Priority Date: 02/03/2017
• Status: Active Grant

• Current Assignee: Rockloans Marketplace LLC
• Original Assignee: Rockloans Marketplace LLC
• Inventors: Lunsford, Todd, Smith, Dan, Golpe, Rodney
• Primary Examiner(s): Pham, Luu T
• Assistant Examiner(s): Malinowski, Walter J
• Application Number:
  US15/888,678
• Time in Patent Office: 862 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A method for authenticating a user identity asserted from a client device may include receiving information that asserts a user identity including a user identifier, accessing external data stores to receive data rows that are associated with the user identity, and accessing monitoring systems to receive data vectors. The monitoring systems may monitor transmissions to receiving systems, the data vectors may include numerical target values for the receiving systems, and the data vectors may be accessed using the user identifier. The method may also include determining whether the data rows can be matched to the data vectors, and based on that determination, authenticating the user identity.

Claims

1. A system for authenticating a user identity asserted from a client device, the system comprising:

one or more processors; and

one or more memory devices comprising instructions that, when executed by the one or more processors, cause the one or more processors to;

receive information through a website from the client device that asserts a user identity, wherein the information comprises a user identifier;

access, through a network interface, one or more external data stores to receive a plurality of data rows from the one or more external data stores, wherein;

the plurality of data rows are associated with the user identity and the one or more external data stores are accessed using a set of user credentials that are not accessible by the website; and

the one or more external data stores receive the plurality of data rows from one or more aggregator computer systems;

access, through the network interface, one or more monitoring systems to receive a plurality of data vectors from the one or more monitoring systems, wherein;

the one or more monitoring systems are configured to monitor transmissions received periodically over time by one or more receiving systems from the one or more aggregator computer systems;

the plurality of data vectors comprise numerical target values for the one or more receiving systems; and

the plurality of data vectors are accessed using the user identifier;

convert the plurality of data rows into a unified format readable by diverse internal systems;

determine a type for each of the plurality of data vectors, wherein the type determines a matching algorithm used to determine matches between the plurality of data rows and the plurality of data vectors;

determine whether one or more of the plurality of data rows can be matched to one or more of the plurality of data vectors by determining, according to the unified format and the type of the plurality of data vectors, whether a potential match is a one-to-many match, a one-to-one match, or a many-to-one match between the plurality of data vectors and the plurality of data rows;

require at least one additional authentication measure based on the determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors; and

authenticate the user identity based on a determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors.

2. The system of claim 1, wherein the one or more processors further add or remove a task from a task list based on the determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors.

3. The system of claim 1, wherein the website provides a portal for the client device to the one or more external data stores to log into the one or more aggregator computer systems to release the plurality of data rows.

4. The system of claim 1, wherein the one or more processors further filter data rows from the plurality of data rows where a value field does not exceed a threshold amount.

5. The system of claim 1, wherein the one or more processors further:

remove non-alphanumeric tokens from a text field of the plurality of data rows; and

remove a blacklist set of known tokens from the text field of the plurality of data rows.

6. The system of claim 1, wherein the one or more processors further:

match data rows using a fuzzy match algorithm with a result above a threshold amount.

7. The system of claim 1, wherein the one or more processors further:

calculate a confidence score for the one or more of the plurality of data rows that can be matched to the one or more of the plurality of data vectors.

8. The system of claim 1, wherein the one or more processors further:

determine a type for each of the plurality of data vectors, wherein the type determines a matching algorithm used to determine matches between the plurality of data rows and the plurality of data vectors.

9. A method for authenticating a user identity asserted from a client device, the method comprising:

receiving information through a website from the client device that asserts a user identity, wherein the information comprises a user identifier;

accessing, through a network interface, one or more external data stores to receive a plurality of data rows from the one or more external data stores, wherein;

the plurality of data rows are associated with the user identity and the one or more external data stores are accessed using a set of user credentials that are not accessible by the website; and

the one or more external data stores receive the plurality of data rows from one or more aggregator computer systems;

accessing, through the network interface, one or more monitoring systems to receive a plurality of data vectors from the one or more monitoring systems, wherein;

the one or more monitoring systems monitor transmissions received periodically over time by one or more receiving systems from the one or more aggregator computer systems;

the plurality of data vectors comprise numerical target values for the one or more receiving systems; and

the plurality of data vectors are accessed using the user identifier;

converting the plurality of data rows into a unified format readable by diverse internal systems;

determining a type for each of the plurality of data vectors, wherein the type determines a matching algorithm used to determine matches between the plurality of data rows and the plurality of data vectors;

determining, by one or more processors, whether one or more of the plurality of data rows can be matched to one or more of the plurality of data vectors by determining, according to the unified format and the type of the plurality of data vectors, whether a potential match is a one-to-many match, a one-to-one match, or a many-to-one match between the plurality of data vectors and the plurality of data rows;

requiring at least one additional authentication measure based on the determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors; and

authenticating, by the one or more processors, the user identity based on a determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors.

10. The method of claim 9, further comprising adding or removing a task from a task list based on the determination that the one or more of the plurality of data rows can be matched to the one or more of the plurality of data vectors.

11. The method of claim 9, wherein the website provides a portal for the client device to the one or more external data stores to log into the one or more aggregator computer systems to release the plurality of data rows.

12. The method of claim 9, further comprising filtering data rows from the plurality of data rows where a value field does not exceed a threshold amount.

13. The method of claim 9, further comprising:

removing non-alphanumeric tokens from a text field of the plurality of data rows; and

removing a blacklist set of known tokens from the text field of the plurality of data rows.

14. The method of claim 9, further comprising:

matching data rows using a fuzzy match algorithm with a result above a threshold amount.

15. The method of claim 9, further comprising:

calculating a confidence score for the one or more of the plurality of data rows that can be matched to the one or more of the plurality of data vectors.

16. The method of claim 9, further comprising:

determining a type for each of the plurality of data vectors, wherein the type determines a matching algorithm used to determine matches between the plurality of data rows and the plurality of data vectors.