DEVICE VALIDATION USING DEVICE FINGERPRINT

• US 20150326574A1
• Filed: 05/09/2014
• Published: 11/12/2015
• Est. Priority Date: 05/09/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Saar, Andrew L., Carpenter, Daniel Lynn, Amaladoss, Vijayanandraj
• Granted Patent: US 9,832,193 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

Embodiments of the invention are directed to apparatuses, methods and computer program products for validating a device. An exemplary apparatus is configured to: determine a device accesses an application; determine whether the device is a trusted device based on a device fingerprint associated with the device; in response to determining the device is a trusted device, create an authenticated session; and enable performance of a transaction using the device during the authenticated session.

Claims

1. An apparatus for validating a device, the apparatus comprising:

a memory;

a processor; and

a module stored in the memory, executable by the processor, and configured to;

determine a device accesses an application;

determine whether the device is a trusted device based on a device fingerprint associated with the device;

in response to determining the device is a trusted device, create an authenticated session; and

enable performance of a transaction using the device during the authenticated session.

2. The apparatus of claim 1, wherein the device is associated with a first-level employee, and wherein the determining the device accesses the application comprises validating authentication credentials associated with the first-level employee.

3. The apparatus of claim 1, wherein determining whether the device is a trusted device comprises determining whether the device fingerprint has changed noticeably.

4. The apparatus of claim 1, wherein the authenticated session expires after a predetermined period or after a predetermined period of inactivity associated with the device.

5. The apparatus of claim 1, wherein the device comprises a mobile device.

6. The apparatus of claim 1, wherein the device comprises a tablet computing device.

7. The apparatus of claim 1, wherein the device fingerprint is associated with a device token.

8. The apparatus of claim 1, wherein the device fingerprint comprises at least one of a resolution of the device, an operating system of the device, a browser on the device, or a plug-in installed on the device.

9. The apparatus of claim 1, wherein the device fingerprint is encrypted.

10. The apparatus of claim 1, wherein the application comprises a financial institution application.

11. A method for validating a device, the method comprising:

determining, using a computing device processor, a device accesses an application;

determining, using a computing device processor, whether the device is a trusted device based on a device fingerprint associated with the device;

in response to determining the device is a trusted device, creating, using a computing device processor, an authenticated session; and

enabling, using a computing device processor, performance of a transaction using the device during the authenticated session.

12. A computer program product for validating a device, the computer program product comprising:

a non-transitory computer-readable medium comprising a set of codes for causing a computer to;

determine a device accesses an application;

determine whether the device is a trusted device based on a device fingerprint associated with the device;

in response to determining the device is a trusted device, create an authenticated session; and

enable performance of a transaction using the device during the authenticated session.