Bank speech authentication

• US 9,712,522 B1
• Filed: 08/14/2015
• Issued: 07/18/2017
• Est. Priority Date: 07/26/2007
• Status: Active Grant

• Current Assignee: United Services Automobile Association, United States Automobile Association (United Services Automobile Association)
• Original Assignee: United Services Automobile Association
• Inventors: Moore, Richard E., Castillo, Hector J.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US14/826,702
• Time in Patent Office: 704 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Authentication mechanisms are disclosed herein that authenticate user access to enterprises. For example, either an enterprise associated number or a social security number (SSN) can be provided to the enterprise to enter a first level. Then, any one of a ZIP code number, a device calling/contacting number, a date of birth, and a portion of the SSN can be provided to access applications in the first level. Lastly, a PIN can be provided to enter a second level of the enterprise. Additionally, these authentication mechanisms can be added and/or changed. In the former case, if a user used a SSN to enter the mentioned first level of the enterprise, then a date of birth can be used to update an authentication mechanism. Alternatively, if a user used an enterprise number to gain such access, then part of the SSN can be used for the update. If the user wants to change the authentication mechanism, the date of birth can be used for the update.

Claims

1. A system comprising:

a processor; and

a non-transitory computer-readable medium storing computer executable instructions thereon executed by the processor to;

determine, by the processor, a number of inputs required for a user to access an enterprise, wherein the number of inputs correlates to a plurality of flags stored in a user profile database, and wherein each input is defined by the user to access a level of security in the enterprise;

receive, by the processor, from an electronic client device associated with the user, a first input, wherein the first input is associated with the user profile, wherein the first input, if successful, results in the processor authenticating the user and providing the user with access to a first level of security in the enterprise;

receive, by the processor, from the electronic client device, at least one of an IP address and a globally unique identifier associated with the electronic client device; and

authenticate, by the processor, the user in association with the user profile database to provide access to a second level in the enterprise, wherein the second level of security is more restricted than the first level of security, wherein the processor authenticates the user based on the first input and at least one of an IP address and a globally unique identifier associated with the electronic client device matching a pre-determined IP address and globally unique identifier within a database associated with the processor.

2. The system according to claim 1, wherein the level of security is associated with a type of input.

3. The system according to claim 2, wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

4. The system according to claim 1, wherein the level of security is associated with a computing service executed by one or more servers of the enterprise system comprising the processor.

5. The system according to claim 4, wherein the instructions further instruct the processor to receive a request for the computing service from the device associated with the user, and wherein the number of inputs required for the user to access the enterprise is based upon the computing service identified by the request.

6. The system according to claim 5, wherein the instructions further instruct the processor to generate a user interface requesting each input from the user device, for each respective input of the number of inputs required according to the computing service requested.

7. The system according to claim 1, wherein the instructions further instruct the processor to update a user profile associated with the user in the user profile database, according to the number of inputs received from the user device.

8. The system according to claim 7, wherein the processor further updates the number of inputs required to access the enterprise in the user profile according to a computing service executed by one or more servers of the enterprise, and wherein each input of the number of inputs accesses the computing service.

9. A computer-implemented method for authenticating a user to access a computing service, the method comprising:

determining, by a computer, a number of inputs required for a user to access an enterprise, wherein the number of inputs correlates to a plurality of flags stored in a user profile database, and wherein each input is defined by the user to access a level of security in the enterprise;

receiving, by the computer, from an electronic client device associated with the user, a first input, wherein the first input is associated with the user profile, wherein the first input, if successful, results in the computer authenticating the user and providing the user with access to a first level of security in the enterprise;

receive, by the computer, from the electronic client device, at least one of an IP address and a globally unique identifier associated with the electronic client device; and

authenticating, by the computer, the user in association with the user profile database to provide access to a second level in the enterprise, wherein the second level of security is more restricted than the first level of security, wherein the processor authenticates the user based on the first input and at least one of an IP address and a globally unique identifier associated with the electronic client device matching a pre-determined IP address and globally unique identifier within a database associated with the computer.

10. The method according to claim 9, wherein the level of security is associated with a type of input.

11. The method according to claim 10, wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

12. The method according to claim 9, wherein the level of security is associated with a computing service executed by one or more servers of the enterprise system comprising the processor.

13. The method according to claim 12, further comprising receiving, by the processor, a request for the computing service from the user device associated with the user,

wherein the number of inputs required for the user to access the enterprise is based upon the computing service identified by the request.

14. The method according to claim 13, further comprising generating, by the processor, a user interface requesting each input from the user device for each respective input of the number of inputs required according to the computing service requested.

15. The method according to claim 9, further comprising updating, by the processor, a user profile associated with the user in the user profile database according to the number of inputs received from the user device.

16. The method according to claim 15, wherein the processor updates the number of inputs required to access the enterprise in the user profile based upon a computing service executed by one or more servers of the enterprise, and wherein each input of the number of inputs accesses the computing service.

17. A system authenticating users accessing computing services hosted by an enterprise computing system, the system comprising:

a user profile database configured to store a user profile containing one or more inputs associated with a computing service executed by one or more servers of the enterprise; and

a computer comprising a processor configured to;

determine a number of inputs required for a user to access an enterprise, wherein the number of inputs correlates to a plurality of flags stored in a user profile database, and wherein each input is defined by the user to access a level of security in the enterprise;

receive, from an electronic client device associated with the user, a first input, wherein the first input is associated with authenticating the user and for providing the user with access to a first level of security in the enterprise;

receive from the electronic client device, one or more attributes corresponding to at least one of an IP address and a globally unique identifier associated with the electronic client device; and

authenticate the user in association with the user profile database to provide access to a second level in the enterprise, wherein the second level of security is more restricted than the first level of security, wherein the processor authenticates the user based on the first input and at least one of an IP address and a globally unique identifier associated with the electronic client device matching a pre-determined IP address and globally unique identifier within a database associated with the computer.

18. The system according to claim 17, wherein the level of security is associated with a type of input, and wherein the type of input is selected from the group consisting of:

an address value associated with the user, a device identifier, a user identifier, a secret PIN associated with the user, and a date associated with the user.

19. The system according to claim 17, wherein the processor is further configured to receive a request for the computing service from the device associated with the user, and

wherein the number of inputs required for the user to access the enterprise is based upon the computing service identified by the request.

20. The system according to claim 19, wherein the processor is further configured to generate a user interface requesting each input from the user device for each respective input of the number of inputs required according to the computing service requested.