User authentication based on self-selected preferences

• US 9,213,814 B2
• Filed: 02/07/2014
• Issued: 12/15/2015
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Johansen, Joseph Neil, Hanson, Carrie Anne, Burrell, Charles Jason, Votaw, Elizabeth S.
• Primary Examiner(s): Truong, Thanhnga B
• Assistant Examiner(s): Naghdali, Khalil
• Application Number:
  US14/175,688
• Publication Number:
  US 20150227730A1
• Time in Patent Office: 676 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Embodiments of the invention are directed to a system, method, and a computer program product for a user authentication based on self-selected preferences. The system typically including a memory, a processor, and a module configured to receive a request to execute a user action from a user associated with an application, wherein the user action requires validation of one or more authentication credentials; access a user-selected preference indicating a level of authentication associated with a user-selected preference as desired by the user; determine authentication types from a plurality of authentication types associated with the level of authentication and the user-selected preference; request one or more authentication credentials corresponding to the determined one or more authentication types; receive one or more authentication credentials from the user; validate the one or more authentication credentials and in response to the successful validation of the one or more authentication credentials, execute the user action.

Claims

1. A system for user authentication based on self-selected preferences, the system comprising:

at least one processor;

at least one memory;

a module stored in memory executable by the at least one processor, and configured to execute computer-readable code to cause the at least one processor to;

receive a request to execute a user action from a user associated with an application, wherein the user action requires validation of one or more authentication credentials;

access a user-selected preference indicating a level of authentication associated with a user-selected preference as desired and customized by the user wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determine one or more authentication types from a plurality of authentication types associated with the level of authentication and the user-selected preference, wherein the one or more authentication types comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

determine that at least one of the user-selected preferences are satisfied by the user;

request one or more authentication credentials corresponding to the determined one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, execute the user action, wherein executing the user action further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user-selected preferences.

2. The system of claim 1, wherein receiving hard authentication comprises enabling the user with full access to the application.

3. The system of claim 1, wherein the authentication factor associated with the multi-step verification is at least one of a username, a password, a personal identification number, or a biometric indicia.

4. The system of claim 1, wherein receiving soft authentication comprises enabling the user with partial access to the application, wherein partial access comprises access to one or more specific features of the application.

5. The system of claim 4, wherein the user-selected preference comprises a user selection of the one or more features associated with the partial access to the application.

6. The system of claim 1, wherein the at least one authentication factor associated with the secondary verification comprises at least one of a social media authentication, an internet protocol (IP) based authentication, a fob, or a signed digital certificate.

7. The system of claim 1, wherein the zero authentication comprises restricting the user from access to the application after a predetermined number of authentication attempts to access the application.

8. The system of claim 7, wherein the module is configured to place a provisional flag on the application after exhaustion of a predetermined number of authentication attempts to access the application, wherein placing a provisional flag comprises notifying the user using a secondary means for contact.

9. The system of claim 1, wherein receiving one or more authentication credentials comprises receiving an input from the user.

10. The system of claim 1, wherein the application is associated with a financial institution.

11. The system of claim 1, wherein the user action comprises at least one of a funds transfer, viewing an account summary, a deposit, a withdrawal, or viewing a receipt.

12. A method for user authentication based on self-selected preferences, the method comprising:

receiving, using a computing device processor, a request to execute a user action from a user associated with an application, wherein the user action requires validation of one or more authentication credentials;

accessing, using a computing device processor, a user-selected preference indicating a level of authentication associated with a user-selected preference as desired and customized by the user, wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determining, using a computing device processor, one or more authentication types from a plurality of authentication types associated with the level of authentication and the user-selected preference, wherein the one or more authentication types comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

determining, using a computing device processor, that at least one of the user-selected preferences are satisfied by the user;

requesting, using a computing device processor, one or more authentication credentials corresponding to the determined one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receiving, using a computing device processor, one or more authentication credentials from the user;

validating, using a computing device processor, the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, executing, using a computing device processor, the user action, wherein executing the user action further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user-selected preferences.

13. A computer program product for user authentication based on self-selected preferences, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

receive a request to execute a user action from a user associated with an application, wherein the user action requires validation of one or more authentication credentials;

access a user-selected preference indicating a level of authentication associated with a user-selected preference as desired and customized by the user, wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determine one or more authentication types from a plurality of authentication types associated with the level of authentication and the user-selected preference, wherein the one or more authentication types comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

determine that at least one of the user-selected preferences are satisfied by the user;

request one or more authentication credentials corresponding to the determined one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, execute the user action, wherein executing the user action further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user-selected preferences.