ORGANIZATIONAL ATTRIBUTION OF USER DEVICES

• US 20150052579A1
• Filed: 08/14/2013
• Published: 02/19/2015
• Est. Priority Date: 08/14/2013
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Yu, Sounil
• Granted Patent: US 9,027,106 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A login request to access information associated with a website may be received from a user device accessing the website via a browser. A determination may be made as to whether a browser attribute of the browser, font type, or service set identifier (SSID) information is located within a database. A further determination may be made as to whether to grant access to the information associated with the website. The determination as to whether to grant access to the information associated with the website may be based at least in part on the browser attribute font type, or service set identifier (SSID) information.

Claims

1. An apparatus comprising:

at least one processor; and

a memory storing instructions that, when executed by the at least one processor, cause the apparatus to;

receive, from a user device accessing a website via a browser, a login request to access information associated with the website;

obtain at least one available font type from the user device;

determine whether the at least one available font type is located within a database; and

determine, based at least in part on the at least one available font type, whether to grant access to the information associated with the website.

2. The apparatus of claim 1 wherein the at least one available font type is associated with an organization.

3. The apparatus of claim 2 wherein the at least one available font type is obtained through the user'"'"'s browser.

4. The apparatus of claim 1 wherein the instructions, when executed by the at least one processor, cause the apparatus to store the at least one available font type and subsequently access the at least one available font type for evaluating future login attempts.

5. The apparatus of claim 4 wherein the instructions, when executed by the at least one processor, cause the apparatus to receive service set identifier (SSID) information from the user device, store the SSID information, associate the SSID information with an organization, and determine whether to grant access to the information associated with the website based at least in part on the SSID information.

6. The apparatus of claim 5 wherein the instructions, when executed by the at least one processor, cause the apparatus to associate the at least one available font type and the SSID information to partially determine whether to grant access to the information associated with the website.

7. The apparatus of claim 5 wherein the instructions, when executed by the at least one processor, cause the apparatus to create a list of trusted organizations based on the SSID information.

8. The apparatus of claim 1 wherein the instructions, when executed by the at least one processor, cause the apparatus to maintain a list of trusted organizations based on the at least one available font type.

9. A computer-implemented method of determining whether to grant a user access to information associated with a website, the computer-implemented method comprising:

receiving, by a processor and from a user device accessing a website via a browser, a login request to access information associated with the website;

requesting, from the user device accessing the website via the browser, at least one available font type and service set identifier (SSID) information stored on the user device;

identifying, within a database, one or more records comprising at least one of the at least one available font type or the SSID information; and

determining, based on the one or more records, whether to grant access to the information associated with the website.

10. The computer-implemented method of claim 9 wherein the at least one available font type is associated with an organization.

11. The computer-implemented method of claim 9 further comprising identifying additional font types via the browser.

12. The computer-implemented method of claim 9 further comprising storing the at least one available font type and subsequently accessing the at least one available font type for evaluating future login attempts.

13. The computer-implemented of claim 12 further comprising storing the SSID information, associating the SSID information with an organization, and determining whether to grant access to the information associated with the website based partially on the SSID information.

14. The computer-implemented method of claim 9 further comprising associating the at least one available font type and the SSID information to partially determine whether to grant access to the information associated with the website.

15. The computer-implemented method of claim 9 further comprising creating a list of trusted organizations based on the SSID information.

16. The computer-implemented method of claim 9 further comprising maintaining a list of trusted organizations based on the at least one available font type.

17. One or more non-transitory computer-readable media having instructions stored thereon that, when executed, cause at least one computing device to:

receive, from a user device accessing a website via a browser, a login request to access information associated with the website;

receive at least one of an available font type or service set identifier (SSID) information associated with the user device; and

determine, based at least in part on the at least one of the available font type or the SSID information, whether to request additional information from the user device prior to granting access to the information associated with the website.

18. The one or more non-transitory computer-readable media of claim 17 wherein the available font type is associated with an organization.

19. The one or more non-transitory computer-readable media of claim 17 wherein the available font type is obtained via the browser.

20. The one or more non-transitory computer-readable media of claim 17 wherein the instructions, when executed, cause the at least one computing device to store the available font type and subsequently utilize the available font type to evaluate a different login attempt.