Multi-stage authentication of an electronic communication

• US 10,693,880 B2
• Filed: 11/27/2017
• Issued: 06/23/2020
• Est. Priority Date: 11/27/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kurian, Manu, Castinado, Joseph
• Primary Examiner(s): Wright, Bryan F
• Application Number:
  US15/822,460
• Publication Number:
  US 20190166128A1
• Time in Patent Office: 939 Days
• Field of Search: 726 18, 726 7
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04M 3/42068 where the identifier is used to access a profile

Abstract

Systems, methods and apparatus for authenticating and verifying an electronic communication are provided. Systems, apparatus and methods determine which emails pose a threat and which are benign. Systems, apparatus and methods filter malicious emails from non-malicious emails. Systems, apparatus and methods prevent receipt of bulk unsolicited and/or otherwise undesirable communications. Systems, apparatus and methods authenticate an identity of a sender of an electronic communication. Systems, methods and apparatus may involve biometric authentication.

Claims

1. A method for authenticating electronic communications, the method comprising:

generating a whitelist database in association with at least one account of at least one recipient, the whitelist database including at least one identifying reference to a whitelist correspondent, the generating of the whitelist database including;

receiving from the whitelist correspondent registration data comprising;

identification of a first penalty;

an authorization to impose the first penalty; and

identifying information; and

in response to the receiving the registration data, cataloging into the whitelist database, and in association with the identifying reference, identification data associated with;

a whitelist correspondent device associated with the whitelist correspondent; and

a whitelist correspondent address associated with the whitelist correspondent;

generating a blacklist database in association with the account, the blacklist database including at least one blacklist correspondent address, the generating of the blacklist database including;

identifying a property of the blacklist correspondent address, the property indicating that a communication originating from the blacklist correspondent address is unsolicited and malicious; and

in response to the identifying, cataloging identification data associated with the blacklist correspondent address into the blacklist database;

receiving an electronic communication submitted by a sender for delivery to the recipient;

analyzing the content of the electronic communication for presence of identification data;

upon determination that the electronic communication includes a minimum threshold of the identification data cataloged in the whitelist database, delivering the communication to the recipient;

upon determination that the communication includes the identification data cataloged in the blacklist database, blocking delivery of the communication; and

upon determination that the communication lacks the identification data cataloged in the blacklist database, and further lacks the minimum threshold;

prompting the sender to submit supplementary data, the supplementary data comprising;

identification of a second penalty;

an authorization to impose the second penalty; and

additional identifying information; and

delivering the communication to the recipient only after;

receipt of the second penality; and

determining correspondence of the additional identifying information to the identification data associated with a whitelist correspondent;

wherein the second penalty is selected from a plural itv of second penalties based at least in part on frequency of electronic communications from the sender to the recipient.

2. The method of claim 1 further comprising generating a pin for use by the whitelist sender in an electronic communication for sending to the recipient.

3. The method of claim 1 further comprising:

generating a blocked communication log;

in response to the blocking, creating an entry in the log, the entry including data corresponding to the communication;

submitting the log to at least one of;

the recipient; and

an entity responsible for reviewing and calibrating the authenticating.

6. The method of claim 1, wherein the identifying information comprises one or morer personal bahavioral signatures associated with the whitelist correspondent.

7. The method of claim 1, wherein a sender device comprises a data reader configured to collect identifying information from the sender at a plurality of distributed time points during composition of the electronic communication.

8. The method of claim 1, wherein the electronic communication comprises one or more embedded personal behavioral signatures associated with the sender and gathered during composition of the electronic communication.

9. The method of claim 1, wherein the electronic communication comprises one or more embedded device features associated with a sender device.

4. A method for authenticating electronic communications, the method comprising:

associating a correspondent address with a first set of identity verification data;

presenting a sender with a request for a username;

presenting the sender with a request for a second set of identity verification data;

upon determination of a pre-established association between the username and the second set of identity verification data, presenting the sender with access to an electronic communication account, the access including features for composing the communication, the electronic communication account configured to collect one or more personal behavioral signatures from the sender at a plurality of distributed time points during composition of the electronic communication;

upon initiation of an attempt by the sender to transmit the communication to the recipient, presenting the sender with a request for the first set of identity verification data; and

upon presentation by the sender of the first set of identity verification data and confirmation of the collected personal behavioral signatures, transmitting the communication to the recipient.

5. The method of claim 4 wherein;

the first set of identity verification data and the second set of identity verification data comprise;

a password;

a personal identification number;

biometric information; and

geographic information; and

the personal behavioral identifiers collected from the sender during composition comprise;

eye movement trajectory data;

keystroke dynamics; and

mouse use characteristics.