Internal footprint repository

Patent metadata

Field	Value
Publication number	US-10313344-B2
Application number	US-201715474225-A
Country	US
Kind code	B2
Filing date	Mar 30, 2017
Priority date	Mar 30, 2017
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

Aspects of the disclosure relate to a system to monitor devices for unauthorized access of an external account. A computing platform may receive, via a communication interface, and from a first user device, metadata comprising first user device identification information and accessed account information. The computing platform may determine, based on the first user device identification information, whether the first user device is one of a plurality of internal user devices. The computing platform may identify, based on the accessed account information, an action indicating the first user device is accessing an account. The computing platform may determine, based on the action and the accessed account information, whether the action is authorized. The computing platform may receive information indicating unauthorized use of the account by the first user device. The computing platform may transmit the information indicating unauthorized use of the account by the first user device.

First claim

What is claimed is:

1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, by the at least one processor, via the communication interface, and from a first user device, metadata comprising first user device identification information and accessed account information;
generate, based on the first user device identification information, one or more commands directing an internal device verification server to determine whether the first user device is one of a plurality of internal devices;
transmit, via the communication interface and to the internal device verification server, the one or more commands to determine whether the first user device is the one of the plurality of internal devices;
receive, via the communication interface and from the internal device verification server, internal device verification information indicating the first user device is the one of the plurality of internal devices;
in response to receiving the internal device verification information, identify, based on the accessed account information, an action indicating the first user device accessed an account;
generate, based on the action and the accessed account information, one or more commands directing an external account authorization server to determine whether the action is authorized;
transmit, via the communication interface and to the external account authorization server, the one or more commands directing the external account authorization server to determine whether the action is authorized;
receive, via the communication interface and from the external account authorization server, information indicating unauthorized use of the account by the first user device;
transmit, via the communication interface and to a case management server, the information indicating unauthorized use of the account by the first user device;
receive, via the communication interface and from the case management server, updated unauthorized use information; and
update unauthorized use criteria information based on the updated unauthorized use information received from the case management server.

2. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, by the at least one processor, via the communication interface, and from an authorization device, information corresponding to the plurality of internal devices; and
transmit, via the communication interface and to the internal device verification server, the information corresponding to the plurality of internal devices and the first user device identification information.

3. The computing platform of claim 2 , wherein generating the one or more commands directing the internal device verification server to determine whether the first user device is the one of the plurality of internal devices comprises:
determining, based on a comparison of the first user device identification information with the information corresponding to the plurality of internal devices, the internal device verification information indicating the first user device is the one of the plurality of internal devices; and
transmitting the internal device verification information.

4. The computing platform of claim 3 , wherein the first user device identification information comprises mobile cookie information indicating at least one mobile cookie corresponding to the first user device.

5. The computing platform of claim 3 , wherein the first user device identification information comprises geolocation information indicating a geolocation corresponding to the first user device.

6. The computing platform of claim 3 , wherein the first user device identification information comprises time zone information indicating a time zone corresponding to the first user device.

7. The computing platform of claim 3 , wherein the first user device identification information comprises device print information indicating a device print corresponding to the first user device.

8. The computing platform of claim 3 , wherein the first user device identification information comprises virtual private network information indicating a virtual private network corresponding to the first user device.

9. The computing platform of claim 3 , wherein the first user device identification information comprises internet protocol information indicating an internet protocol corresponding to the first user device.

10. The computing platform of claim 3 , wherein the determining, based on the comparison of the first user device identification information with the information corresponding to the plurality of internal devices, the internal device verification information indicating the first user device is the one of the plurality of internal devices comprises:
identifying, based on a comparison of the first user device identification information with the information corresponding to the plurality of internal devices, the first user device as a new internal device; and
storing information indicating the first user device as a new internal device.

11. The computing platform of claim 3 , wherein the first user device identification information comprises first user identification information; and
wherein the information corresponding to the plurality of internal devices comprises information corresponding to associates of an organization.

12. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, by the at least one processor, via the communication interface, and from an authorization device, information corresponding to a plurality of external accounts; and
transmit, via the communication interface and to the external account authorization server, the information corresponding to the plurality of external accounts and the accessed account information.

13. The computing platform of claim 12 , wherein generating the one or more commands directing the external account authorization server to determine whether the action is authorized comprises:
determining, based on the account the first user device is accessing and the information corresponding to the plurality of external accounts, the information indicating unauthorized use of the account by the first user device; and
transmitting the information indicating unauthorized use of the account by the first user device.

14. The computing platform of claim 13 , wherein generating the one or more commands directing the external account authorization server to determine whether the action is authorized comprises:
determining, based on the account the first user device is accessing and the information corresponding to the plurality of external accounts, an amount of accounts accessed by the first user device over a period of time; and
wherein the determining the information indicating unauthorized use of the account by the first user device is based on the amount of accounts accessed by the first user device over the period of time.

15. The computing platform of claim 13 , wherein generating the one or more commands directing the external account authorization server to determine whether the action is authorized comprises:
determining, based on the account the first user device is accessing and the info

Assignees

• Bank Of America

Inventors

• Sims Scott A
• Stapleton Alex
• Kim Andrew
• Bell Kolt
• Scott Youshika
• Zusi Jeff
• Ryan Nicole
• Widmann Craig
• Corr Brian
• Sarran Alvino

Classifications

• H04L63/102

  Entity profiles · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/101 Primary

  Access control lists [ACL] · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/06

  Authentication · CPC title