Authenticating customers using biometrics

• US 9,635,554 B2
• Filed: 07/13/2016
• Issued: 04/25/2017
• Est. Priority Date: 02/02/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Pender, Mark A.
• Primary Examiner(s): Torres, Juan A
• Application Number:
  US15/209,063
• Publication Number:
  US 20160323745A1
• Time in Patent Office: 286 Days
• Field of Search: 726 7, 340 582
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04M 3/4936 Speech interaction details speech recognition per se G10L15/00
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Methods, systems, and computer-readable media for authenticating customers using biometrics are presented. In some embodiments, a computing platform may receive, from an interactive voice response server, an inbound call notification associated with a telephone call received from a mobile device. Subsequently, the computing platform may determine a device identifier of the mobile device and a customer identifier corresponding to a user of the mobile device. The computing platform then may load a customer authentication profile. Subsequently, the computing platform may generate a biometric authentication prompt for authenticating the user of the mobile device and may cause the biometric authentication prompt to be sent to the mobile device. Thereafter, the computing platform may receive, from the mobile device, a validation message. In response to receiving the validation message, the computing platform may generate an authentication message. Subsequently, the computing platform may send the authentication message to the interactive voice response server.

Claims

1. A system, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the system to;

receive, via the communication interface, and from an interactive voice response server, an inbound call notification associated with a telephone call received by the interactive voice response server from a mobile device;

determine a device identifier of the mobile device;

determine a user identifier corresponding to a user of the mobile device;

load an authentication profile based on the user identifier;

cause a biometric authentication prompt for authenticating the user of the mobile device to be presented by the mobile device;

receive, via the communication interface, and from the mobile device, a validation message;

in response to receiving the validation message, generate an authentication message; and

send, via the communication interface, and to the interactive voice response server, the authentication message.

2. The system of claim 1, wherein the user identifier identifies the user of the mobile device as a customer of an organization operating the system.

3. The system of claim 1, wherein the authentication profile comprises information indicating that the user of the mobile device has registered the mobile device to receive biometric authentication prompts.

4. The system of claim 1, wherein the authentication profile comprises information indicating that the mobile device stores one or more predefined biometric credentials.

5. The system of claim 1, wherein causing the biometric authentication prompt for authenticating the user of the mobile device to be presented by the mobile device comprises causing a push notification service to send a push notification to the mobile device.

6. The system of claim 1, wherein the biometric authentication prompt is configured to prompt the user of the mobile device to provide biometric input for verification by the mobile device.

7. The system of claim 1, wherein the validation message indicates that the user of the mobile device has provided valid biometric input matching one or more predefined biometric credentials stored by the mobile device.

8. The system of claim 1, wherein the authentication message establishes an authentication status of the user of the mobile device.

9. The system of claim 1, wherein the authentication message is configured to cause the interactive voice response server to provide the user of the mobile device with access to account information that is specific to the user of the mobile device.

10. The system of claim 1, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the system to:

after sending the authentication message, receive, via the communication interface, and from the interactive voice response server, a transaction request; and

process the transaction request.

11. The system of claim 6, wherein the biometric input comprises fingerprint biometric input.

12. The system of claim 10, wherein processing the transaction request comprises causing one or more systems operated by a financial institution to execute a funds transfer transaction.

13. A method, comprising:

at a computing platform comprising at least one processor, memory, and a communication interface;

receiving, by the at least one processor, via the communication interface, and from an interactive voice response server, an inbound call notification associated with a telephone call received by the interactive voice response server from a mobile device;

determining, by the at least one processor, a device identifier of the mobile device;

determining, by the at least one processor, a user identifier corresponding to a user of the mobile device;

loading, by the at least one processor, an authentication profile based on the user identifier;

causing, by the at least one processor, a biometric authentication prompt for authenticating the user of the mobile device to be presented by the mobile device;

receiving, by the at least one processor, via the communication interface, and from the mobile device, a validation message;

in response to receiving the validation message, generating, by the at least one processor, an authentication message; and

sending, by the at least one processor, via the communication interface, and to the interactive voice response server, the authentication message.

14. The method of claim 13, wherein the user identifier identifies the user of the mobile device as a customer of an organization operating the computing platform.

15. The method of claim 13, wherein the authentication profile comprises information indicating that the user of the mobile device has registered the mobile device to receive biometric authentication prompts.

16. The method of claim 13, wherein the authentication profile comprises information indicating that the mobile device stores one or more predefined biometric credentials.

17. The method of claim 13, wherein causing the biometric authentication prompt for authenticating the user of the mobile device to be presented by the mobile device comprises causing a push notification service to send a push notification to the mobile device.

18. The method of claim 13, wherein the biometric authentication prompt is configured to prompt the user of the mobile device to provide biometric input for verification by the mobile device.

19. The method of claim 18, wherein the biometric input comprises fingerprint biometric input.

20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, memory, and a communication interface, cause the computing platform to:

receive, via the communication interface, and from an interactive voice response server, an inbound call notification associated with a telephone call received by the interactive voice response server from a mobile device;

determine a device identifier of the mobile device;

determine a user identifier corresponding to a user of the mobile device;

load an authentication profile based on the user identifier;

cause a biometric authentication prompt for authenticating the user of the mobile device to be presented by the mobile device;

receive, via the communication interface, and from the mobile device, a validation message;

in response to receiving the validation message, generate an authentication message; and

send, via the communication interface, and to the interactive voice response server, the authentication message.