Bank speech authentication

• US 9,111,075 B1
• Filed: 02/04/2014
• Issued: 08/18/2015
• Est. Priority Date: 07/26/2007
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Moore, Richard E., Castillo, Hector J.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US14/172,472
• Time in Patent Office: 560 Days
• Field of Search: 726/4
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Authentication mechanisms are disclosed herein that authenticate user access to enterprises. For example, either an enterprise associated number or a social security number (SSN) can be provided to the enterprise to enter a first level. Then, any one of a ZIP code number, a device calling/contacting number, a date of birth, and a portion of the SSN can be provided to access applications in the first level. Lastly, a PIN can be provided to enter a second level of the enterprise. Additionally, these authentication mechanisms can be added and/or changed. In the former case, if a user used a SSN to enter the mentioned first level of the enterprise, then a date of birth can be used to update an authentication mechanism. Alternatively, if a user used an enterprise number to gain such access, then part of the SSN can be used for the update. If the user wants to change the authentication mechanism, the date of birth can be used for the update.

Claims

1. A non-transitory computer readable medium storing thereon computer executable instructions executed to:

determine a number of inputs required for a user to access an enterprise, wherein the number of inputs required is defined by the user to set the level of security in the enterprise using a number of flags;

receive a first input from the number of inputs from the user, wherein the first input, if successful, results in the accessing of a profile data on the user;

receive, responsive to the first input, a second input from the number of inputs from the user, wherein the second input is different than the first input and is used for authenticating the user and for providing the user with access to a first level in the enterprise; and

receive, responsive to the second input, a third input from the number of inputs from the user, wherein the third input is different than the first and second inputs and is used for providing the user with access to a second level in the enterprise that is more restricted than the first level.

2. The non-transitory computer readable medium according to claim 1, wherein the first input, the second input, and/or the third input is one of (a) an enterprise number, (b) a social security number, (c) a device number, (d) a ZIP code number, (e) at least a portion of the social security number, (f) a date of birth, and (g) a personal identification number (PIN).

3. The non-transitory computer readable medium according to claim 2, further comprising instructions executed to that first check a validity of the enterprise number, and when the enterprise number is invalid, check the social security number in order to gain access to the first level in the enterprise.

4. The non-transitory computer readable medium according to claim 2, further comprising instructions executed to first check the device number, and when the device number is invalid, then check the ZIP code number in order to gain access to the first level in the enterprise.

5. The non-transitory computer readable medium according to claim 4, further comprising instructions executed to, responsive to a determination that the ZIP code is invalid,

determine if the enterprise related number was provided, if so, check the at least a portion of the social security number, and if not, check the date of birth in order to gain access to the first level in the enterprise.

6. The non-transitory computer readable medium according to claim 1, further comprising instructions executed to, responsive to a determination that a valid enterprise related number or social security number is provided, check if a PIN flag is set, then query for user input of the PIN, and upon valid input provide access to the second level.

7. The non-transitory computer readable medium according to claim 1, wherein the number of inputs required is based on a line of business that the user accesses.

8. The non-transitory computer readable medium according to claim 1, wherein the authenticating second input is dependent upon a particular device through which the user is providing the second input.

9. A system for allowing users to modify their authentication information associated with an authentication mechanism, comprising:

a number of processing resources; and

memory storing instructions thereon that are executed by the processing resources to;

receive input from a user regarding adding the authentication mechanism;

determine a number of inputs required for the authentication mechanism, wherein the number of inputs required is defined by the user to set the level of security in an enterprise using a number of flags;

receive a first input from the number of inputs when adding the authentication mechanism, triggered by a second input from the number of inputs, if the second input was previously used by the user to access a level within the enterprise;

receive at least a part of the second input when adding the authentication mechanism, triggered by a third input from the number of inputs, if the third input was previously used by the user to access a level within the enterprise; and

update information related to the authentication mechanism following user input.

10. The system according to claim 9, wherein the first input, the second input, or the third input is one of (a) a date of birth of the user (b) a social security number of the user, and (c) an enterprise number.

11. The system according to claim 9, further comprising providing a notification to the user regarding updated information.

12. The system according to claim 9, further comprising transferring the user to an enterprise representative if any input is invalid after a predetermined number of times.

13. The system according to claim 9, further comprising receiving speech as user input.

14. The system according to claim 9, wherein the authentication mechanism is a personal identification number (PIN).

15. The system according to claim 9, wherein the authentication mechanism is configured to be changed.

16. The system according to claim 9, wherein the authenticating second input is dependent upon a type of device through which the user is providing the second input.

17. The system according to claim 9, wherein the number of inputs required for the authentication mechanism is based on a service offered by the enterprise that the user accesses.