Self-selected user access based on specific authentication types

• US 9,286,450 B2
• Filed: 02/07/2014
• Issued: 03/15/2016
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Johansen, Joseph Neil, Hanson, Carrie Anne, Burrell, Charles Jason, Votaw, Elizabeth S.
• Primary Examiner(s): Mehedi, Morshed
• Assistant Examiner(s): Naghdali, Khalil
• Application Number:
  US14/175,672
• Publication Number:
  US 20150227729A1
• Time in Patent Office: 767 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 16/22 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Embodiments of the invention are directed to a system, method, and a computer program product self-selected user access based on specific authentication types. The system typically including a memory, a processor, and a module configured to receive from a user, a user-selected preference, wherein the user-selected preference comprises one or more authentication types desired by the user; determine a level of authentication from a plurality of levels of authentication are associated with the one or more authentication types associated with the user-selected preference; initiate the presentation of a user interface that enables the user to select one or more application functions, wherein the one or more application functions are associated with the determined level of authentication; receive from a user, a selection of one or more application functions.

Claims

1. A system for self-selected user access based on specific authentication types, the system comprising:

at least one processor;

at least one memory;

a module stored in memory executable by the at least one processor, and configured to execute computer-readable code to cause the at least one processor to;

receive from a user, a user-selected preference, wherein the user-selected preference comprises one or more authentication types desired by the user, wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determine a level of authentication from a plurality of levels of authentication are associated with the one or more authentication types associated with the user-selected preference, wherein the one or more authentication levels comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

initiate the presentation of a user interface that enables the user to select one or more application functions, wherein the one or more application functions are associated with the determined level of authentication;

receive from a user, a selection of one or more application functions, wherein receiving the selection further comprises receiving a request to execute the selected one or more application functions, wherein execution of the user action requires validation of one or more authentication credentials;

determine that at least one of the user-selected preferences are satisfied by the user;

request one or more authentication credentials corresponding to the desired one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, execute the selected one or more application functions, wherein executing the selected one or more authentication credentials further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user selected preferences.

2. The system of claim 1, wherein the one or more authentication credentials received from the user and one or more functions associated with the application permitted for user access are positively correlated.

3. The system of claim 1, wherein the user-selected preference comprises a geographic location, wherein the geographic location is a point within a geographic radius, wherein the geographic radius defines the boundary of application of the level of authentication.

4. The system of claim 1, wherein validating further comprises determining a successful match between the one or more authentication credentials received from the user and the one or more authentication credentials stored in a database, wherein the one or more authentication credentials correspond to the one or more authentication types associated with the level of authentication.

5. The system of claim 1, wherein hard authentication comprises enabling a user to access all functions associated with the application based on at least a successful validation of the one or more authentication credentials associated with the user.

6. The system of claim 1, wherein the hard authentication comprises a multi-step verification of at least two authentication types, wherein verification further comprises receiving a user input of at least two authentication credentials.

7. The system of claim 1, wherein the authentication type associated with the multi-step verification is at least one of a username, a password, a personal identification number, or a biometric indicia.

8. The system of claim 1, wherein soft authentication comprises enabling a user to access one or more functions associated with the application based on at least a successful validation of the one or more authentication credentials associated with the user.

9. The system of claim 1, wherein the soft authentication comprises a secondary verification of at least one authentication type, wherein verification further comprises receiving a user input of at least one authentication credential.

10. The system of claim 9, wherein the at least one authentication type associated with the secondary verification comprises at least one of a social media authentication, an internet protocol (IP) based authentication, a fob, or a signed digital certificate.

11. The system of claim 1, wherein the zero authentication comprises restricting the user from access to the application after a predetermined number of authentication attempts to access the application.

12. The system of claim 11, wherein the module is configured to place a provisional flag on the application after exhaustion of a predetermined number of authentication attempts to access the application, wherein placing a provisional flag comprises notifying the user using a secondary means for contact.

13. The system of claim 1, wherein the user interface enables the user to select one or more application functions associated with the determined level of authentication corresponding to the authentication type desired.

14. The system of claim 13, wherein the user interface enables the user to reset the selected one or more application functions thereby removing restrictions on access to the one or more application functions.

15. The system of claim 13, wherein the user interface enables the user to save the selected one or more application functions for use at a future date.

16. The system of claim 13, wherein the user interface enables the user to acknowledge the selection of one or more application function or cancel the selection of one or more application functions.

17. A method for self-selected user access based on specific authentication types, the method comprising:

receiving, using a computing device processor, from a user, a user-selected preference, wherein the user-selected preference comprises one or more authentication types desired by the user, wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determining, using a computing device processor, a level of authentication from a plurality of levels of authentication are associated with the one or more authentication types associated with the user-selected preference, wherein the one or more authentication levels comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

initiating, using a computing device processor, the presentation of a user interface that enables the user to select one or more application functions, wherein the one or more application functions are associated with the determined level of authentication;

receiving, using a computing device processor, from a user, a selection of one or more application functions, wherein receiving the selection further comprises receiving a request to execute the selected one or more application functions, wherein execution of the user action requires validation of one or more authentication credentials;

determining, using a computing device processor, that at least one of the user-selected preferences are satisfied by the user;

requesting, using a computing device processor, one or more authentication credentials corresponding to the desired one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receiving, using a computing device processor, one or more authentication credentials from the user;

validating, using a computing device processor, the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, executing, using a computing device processor, the selected one or more application functions, wherein executing the selected one or more authentication credentials further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user selected preferences.

18. A computer program product for self-selected user access based on specific authentication types, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

receive from a user, a user-selected preference, wherein the user-selected preference comprises one or more authentication types desired by the user, wherein the user-selected preferences are predefined by the user, wherein the user-selected preference comprises a time duration defined by a selection of a first time stamp and a second time stamp, a geographic location, and one or more features associated with the application, wherein the time duration is scheduled dynamically;

determine a level of authentication from a plurality of levels of authentication are associated with the one or more authentication types associated with the user-selected preference, wherein the one or more authentication levels comprises at least one of a hard authentication, a soft authentication, and a zero authentication, wherein the hard authentication is a multi-step verification requiring a user presentation of at least two authentication credentials, wherein the soft authentication is a secondary verification requiring a user presentation of at least one authentication credential associated with the authentication types, wherein zero authentication requires no authentication credentials;

initiate the presentation of a user interface that enables the user to select one or more application functions, wherein the one or more application functions are associated with the determined level of authentication;

receive from a user, a selection of one or more application functions, wherein receiving the selection further comprises receiving a request to execute the selected one or more application functions, wherein execution of the user action requires validation of one or more authentication credentials;

determine that at least one of the user-selected preferences are satisfied by the user;

request one or more authentication credentials corresponding to the desired one or more authentication types based on at least determining that at least one of the user-selected preferences are satisfied;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, execute the selected one or more application functions, wherein executing the selected one or more authentication credentials further comprises enabling the user to access at least a portion of the application, wherein the portion of the application is based on at least the one or more features associated with the application, wherein the one or more features are pre-selected by the user based on the user selected preferences.