SORTING MOBILE BANKING FUNCTIONS INTO AUTHENTICATION BUCKETS

• US 20150227724A1
• Filed: 02/07/2014
• Published: 08/13/2015
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Johansen, Joseph Neil, Toth, Michael E., Qaim-Maqami, Hood, Hanson, Carrie Anne, Votaw, Elizabeth S., Carpenter, Daniel Lynn
• Granted Patent: US 9,305,149 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

Embodiments are directed to systems, methods and computer program products for sorting mobile banking functions into authentication buckets. Embodiments determine, for each of a plurality of mobile banking functions, a corresponding authentication buckets, where each authentication bucket corresponds with a level of authentication. Some embodiments receive a request, from a user, to access a function; access the plurality of authentication buckets to determine which of the authentication buckets corresponds with the requested function; determine the level of authentication associated with the determined authentication bucket; determine which authentication types are associated with the level of authentication; request authentication credentials corresponding to the authentication types; receive authentication credentials from the user; validate the authentication credentials, thereby resulting in a successful validation of the authentication credentials; and, in response to the successful validation of the authentication credentials, enable access to the function requested by the user.

Claims

1. An apparatus for sorting mobile banking functions into authentication buckets, the apparatus comprising:

a memory;

a processor; and

a module stored in the memory, executable by the processor, and configured to;

determine, for each of a plurality of mobile banking functions, a corresponding one of a plurality of authentication buckets;

wherein each of the plurality of authentication buckets corresponds with one of a plurality of levels of authentication, which together comprise a continuum of authentication.

2. The apparatus of claim 1, wherein the module is further to:

receive a request, from a user, to access one of the plurality of functions;

access the plurality of authentication buckets to determine which of the authentication buckets corresponds with the requested function;

determine the level of authentication associated with the determined authentication bucket;

determine which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the determined authentication bucket;

request one or more authentication credentials corresponding to the determined one or more authentication types;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, enable access to the function requested by the user.

3. The apparatus of claim 1, wherein the module is further configured to:

initiate presentation of a user interface illustrating at least one of the plurality of authentication buckets and at least one of the functions corresponding to the at least one authentication bucket.

4. The apparatus of claim 1, wherein the module is further configured to:

receive user input selecting one of the plurality of authentication buckets for one of the plurality of functions.

5. The apparatus of claim 1, wherein the module is further configured to:

initiate presentation of a user interface illustrating a set of available buckets for one of the plurality of functions based at least in part on predetermined thresholds of authentication corresponding to the function.

6. The apparatus of claim 3, wherein the module is further configured to:

initiate presentation of a predetermined recommended authentication bucket for the at least one of the functions, the predetermined recommended authentication bucket being different from the at least one authentication bucket corresponding to the at least one of the functions.

7. The apparatus of claim 3, wherein the module is further configured to:

initiate presentation of a representation of a percentage of a plurality of customers of a financial institution administering the mobile banking functions that have selected each of a plurality of available authentication buckets for one of the plurality of functions.

8. A method for sorting mobile banking functions into authentication buckets, the method comprising:

determining, for each of a plurality of mobile banking functions, a corresponding one of a plurality of authentication buckets;

wherein each of the plurality of authentication buckets corresponds with one of a plurality of levels of authentication, which together comprise a continuum of authentication.

9. The method of claim 8, further comprising:

receiving a request, from a user, to access one of the plurality of functions;

accessing the plurality of authentication buckets to determine which of the authentication buckets corresponds with the requested function;

determining the level of authentication associated with the determined authentication bucket;

determining which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the determined authentication bucket;

requesting one or more authentication credentials corresponding to the determined one or more authentication types;

receiving one or more authentication credentials from the user;

validating the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, enabling access to the function requested by the user.

10. The method of claim 8, further comprising:

initiating presentation of a user interface illustrating at least one of the plurality of authentication buckets and at least one of the functions corresponding to the at least one authentication bucket.

11. The method of claim 8, further comprising:

receiving user input selecting one of the plurality of authentication buckets for one of the plurality of functions.

12. The method of claim 8, further comprising:

initiating presentation of a user interface illustrating a set of available buckets for one of the plurality of functions based at least in part on predetermined thresholds of authentication corresponding to the function.

13. The method of claim 10, further comprising:

initiating presentation of a predetermined recommended authentication bucket for the at least one of the functions, the predetermined recommended authentication bucket being different from the at least one authentication bucket corresponding to the at least one of the functions.

14. The method of claim 10, further comprising:

initiating presentation of a representation of a percentage of a plurality of customers of a financial institution administering the mobile banking functions that have selected each of a plurality of available authentication buckets for one of the plurality of functions.

15. A computer program product for sorting mobile banking functions into authentication buckets, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

determine, for each of a plurality of mobile banking functions, a corresponding one of a plurality of authentication buckets;

wherein each of the plurality of authentication buckets corresponds with one of a plurality of levels of authentication, which together comprise a continuum of authentication.

16. The computer program product of claim 15, wherein the code further causes the first apparatus to:

receive a request, from a user, to access one of the plurality of functions;

access the plurality of authentication buckets to determine which of the authentication buckets corresponds with the requested function;

determine the level of authentication associated with the determined authentication bucket;

determine which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the determined authentication bucket;

request one or more authentication credentials corresponding to the determined one or more authentication types;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, enable access to the function requested by the user.

17. The computer program product of claim 15, wherein the code further causes the first apparatus to:

initiate presentation of a user interface illustrating at least one of the plurality of authentication buckets and at least one of the functions corresponding to the at least one authentication bucket.

18. The computer program product of claim 15, wherein the code further causes the first apparatus to:

receive user input selecting one of the plurality of authentication buckets for one of the plurality of functions.

19. The computer program product of claim 15, wherein the code further causes the first apparatus to:

initiate presentation of a user interface illustrating a set of available buckets for one of the plurality of functions based at least in part on predetermined thresholds of authentication corresponding to the function.

20. The computer program product of claim 17, wherein the code further causes the first apparatus to:

initiate presentation of a predetermined recommended authentication bucket for the at least one of the functions, the predetermined recommended authentication bucket being different from the at least one authentication bucket corresponding to the at least one of the functions.