Authentication and interaction tracking system and method

• US 9,246,899 B1
• Filed: 03/25/2014
• Issued: 01/26/2016
• Est. Priority Date: 03/03/2008
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Pletz, Tracy M., Durney, Stephen, Webb, Timothy A.
• Primary Examiner(s): Ho, Dao
• Application Number:
  US14/224,400
• Time in Patent Office: 672 Days
• Field of Search: 726/4, 726/28
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A central authentication and interaction tracking system authenticates an entity making a request related to a financial account. The system facilitates authentication of an entity engaging in an interaction based on a record of interactions initiated by the entity. The system includes an application interface receiving interaction requests over a network, the requests originating from multiple entities and including authentication factors. The system further includes a computer processor and computer memory capable of building, from each interaction request, an entity print record for each of the multiple entities, wherein each entity print record includes the authentication factors. The system further facilitates deriving, from the entity print record, an entity print, comparing received authentication factors for a requested interaction with the entity print, and making an authentication determination based on the comparison.

Claims

1. A method for facilitating authentication of an entity engaging in an interaction with a financial institution, the authentication based on a record of interactions initiated by the entity, the method comprising:

receiving interaction requests over a network at a central authentication and interaction tracking system, the central authentication and interaction tracking system including at least one computer memory and at least one computer processor, the interaction requests originating from multiple entities and including a plurality of authentication factors;

executing instructions stored in the computer memory using the computer processor to perform steps including;

building, from each interaction request, an entity print record for each of the multiple entities, wherein each entity print record includes the authentication factors from each initiated interaction request, the authentication factors including a location of the interaction request, a device identifier, and personal identifiers;

deriving, from the entity print record, an entity print and storing the entity print in at least one computer memory;

building, from each interaction request, an interaction signature for each interaction and classifying each interaction signature as a valid interaction signature or a fraudulent interaction signature;

comparing the received authentication factors for a requested interaction with the entity print and comparing the interaction signature for a received interaction request with the classified interaction signatures, wherein the comparisons yield a level of risk for each transaction; and

making an authentication determination based on a level of risk resulting from the comparisons.

2. The method of claim 1, wherein deriving an entity print comprises deriving a level of confidence that the entity is authentic and a determining an entity risk level for the entity.

3. The method of claim 1, wherein the entity print for each entity is stored as a measure of proximity to multiple existing entity prints.

4. The method of claim 1, wherein the device identifier includes an IP address.

5. The method of claim 1, wherein the personal identifier includes at least one of an RSID and a biometric indicator.

6. The method of claim of claim 1, further comprising comparing each interaction request to existing fraudulent interaction signatures to determine if the transaction request represents a fraudulent interaction.

7. The method of claim 1, further comprising building the entity print record and modifying the entity print upon receiving each transaction request from the entity.

8. A central authentication and interaction tracking system for facilitating authentication of an entity engaging in an interaction with a financial institution, the authentication based on a record of interactions initiated by the entity, the system comprising:

an application interface receiving interaction requests over a network, the interaction requests originating from multiple entities and including a plurality of authentication factors, the central authentication and interaction tracking system including;

at least one computer memory storing information from the interaction requests and instructions for processing the information; and

at least one computer processor accessing the computer memory and executing the instructions stored in the computer memory using the computer processor to perform steps including;

building, from each interaction request, an entity print record for each of the multiple entities, wherein each entity print record includes the authentication factors from each initiated interaction request, the authentication factors including a location of the interaction request, a device identifier, and personal identifiers;

deriving, from the entity print record, an entity print and storing the entity print in at least one computer memory;

building, from each interaction request, an interaction signature for each interaction and classifying each interaction signature as a valid interaction signature or a fraudulent interaction signature;

comparing the received authentication factors for a requested interaction with the entity print and comparing the interaction signature for a received interaction request with the classified interaction signatures, wherein the comparisons yield a level of risk for each transaction; and

making an authentication determination based on a level of risk resulting from the comparisons.

9. The system of claim 8, wherein deriving an entity print comprises deriving a level of confidence that the entity is authentic and determining an entity risk level for the entity.

10. The system of claim 8, wherein the entity print for each entity is stored as a measure of proximity to multiple existing entity prints.

11. The system of claim 8, wherein the device identifier includes an IP address.

12. The system of claim 8, wherein the personal identifier includes at least one of an RSID and a biometric indicator.

13. The system of claim 8, further comprising comparing each interaction request to existing fraudulent interaction signatures to determine if the transaction request represents a fraudulent interaction.

14. The system of claim 8, further comprising building the entity print record and modifying the entity print upon receiving each transaction request from the entity.

15. The system of claim 8, further comprising comparing, using triangulation, the received authentication factors with both the entity print and a unique standardized reference entity print.