Authentication protocol elevation triggering system

Patent metadata

Field	Value
Publication number	US-10437984-B2
Application number	US-201715794964-A
Country	US
Kind code	B2
Filing date	Oct 26, 2017
Priority date	Oct 26, 2017
Publication date	Oct 8, 2019
Grant date	Oct 8, 2019

Abstract

Embodiments of the invention are directed to a system, method, or computer program product for authentication protocol elevation triggering based on situational instance. In this regard, the invention provides a dynamic platform for structuring a robotic process automation (RPA) application for determining authentication requirements in real-time by converting a user device into a virtual workstation. The invention configures a robotic process automation application for interacting with a first user interface of the first device application to identify situational events in real time. Another aspect of the invention is directed to escalating, in real-time, a level of authentication required for the user to execute the user activity based on at least the situational event identified by the robotic process automation application.

First claim

What is claimed is:

1. A robotic process automation system for authentication protocol elevation triggering system, wherein the system provides a dynamic platform for structuring a robotic process automation application for determining authentication requirements in real-time by converting a user device into a virtual workstation, the system comprising:
at least one memory device;
at least one communication device connected to a distributed network, wherein the communication device is configured to establish operative communication with a plurality of networked devices;
at least one processing device;
a robotic process automation module stored in the memory comprising executable computer readable instructions that when executed by the at least one processing device are configured to cause the processing device to:
establish an first operative communication link with a first user device of the plurality of networked devices, wherein the first user device is associated with a user, wherein a first device application is stored on the first user device;
configure a first robotic process automation application for interacting with a first user interface of the first device application to identify situational events in real time, wherein configuring comprises structuring the first robotic process automation application to utilize controls of an input device of the first user device to interact with the first user interface of the first device application for converting the first user device into a virtual workstation for the first robotic process automation application;
transmit, via the first operative communication link, the first robotic process automation application to the first user device;
in response to determining at least (i) that the first user device is not being operated on by the user, and (ii) that the first user device has not been operated on by the user within a preceding predetermined time interval, transmit a first control signal, via the first operative communication link, to the first robotic process automation application, the first control signal being structured to cause the first robotic process automation application to interact with the first user interface of the first device application to identify situational events in real time by utilizing controls of the input device of the first user device;
receive, via the first operative communication link, a response signal indicating identification of an occurrence of a situational event from the first robotic process automation application;
establish a second operative communication link with a second user device of the plurality of networked devices, wherein the second user device is associated with the user;
configure a second robotic process automation application for escalating authentication requirements of a second device application stored on the second user device;
transmit, via the second operative communication link, the second robotic process automation application to the second user device;
receive, via the second operative communication link, from the second user device, a request to execute a user activity using the second device application, wherein the user activity requires validation of one or more authentication credentials;
escalate, in real-time, a level of authentication required for the user to execute the user activity using the second device application based on at least determining that the situational event identified by the first robotic process automation application is associated with an exposure event for the user;
transmit a second control signal, via the second operative communication link, to the second robotic process automation application, the second control signal being structured to cause the second robotic process automation application to present the escalated authentication requirement to the user via a user interface of the second device application stored on the second user device; and
enable the user to execute the user activity based on receiving a positive authentication response at the second device application of the second user device.

2. The system of claim 1 , wherein the situational event identified by the first robotic process automation application comprises at least one of occurrence of a natural disaster, breach of security of an entity, and a predetermined activity trend associated with the exposure event.

3. The system of claim 2 , wherein determining that the situational event identified by the first robotic process automation application is associated with the exposure event for the user comprises at least one of (i) determining that a geographical location of the user is within a predetermined distance from a location of the natural disaster, (ii) determining that the user is associated with the entity, and (iii) determining that the user is associated with the predetermined activity trend.

4. The system of claim 1 , wherein the situational event identified by the first robotic process automation application comprises a breach of security of an entity, wherein the module further comprises instructions that cause the at least one processing device to:
retrieve application information from the first user device and the second user device;
determine one or more applications associated with the first user device and/or the second user device, wherein the one or more applications comprise applications stored on the first user device and/or the second user device; and
escalate the level of authentication required for the user activity based on at least determining that at least one of the one or more applications is associated with the entity associated with a security breach.

5. The system of claim 1 , wherein the second robotic process automation application is further configured to lock a display of the second user device until the positive authentication response is received.

6. The system of claim 1 , wherein the module further comprises instructions that cause the at least one processing device to:
determine whether current user security features meet the escalated authentication requirement for the user activity;
determine one or more types of new security features that meet the escalated authentication requirement; and
enable the user to modify the current user security features based on the determined new security features.

7. The system of claim 1 , wherein configuring the first robotic process automation application for interacting with the first user interface of the first device application comprises configuring the first robotic process automation application to:
identify a first input data portion to be provided at the first user interface of the first device application for identifying situational events;
identify the input device of a plurality of input devices of the first user device that is associated with the first input data portion;
identify an input signal format associated with the input device;
transform the first input data portion into the input signal format associated with the input device; and
transmit, to the first device application, input device control signals for the first input data in the input signal format.

8. The system of claim 1 , wherein the module further comprises instructions that cause the at least one processing device to configure the second robotic process automation application to:
transmit, to the second device application, an authentication control signal configured to cause the second device application to present the escalated authentication requirement to the user via the user interface of the second device application.

9. The system of claim 1 , wherein the module further comprises instructions that cause the at least one process

Assignees

• Bank Of America

Inventors

• Votaw Elizabeth S
• Kurian Manu Jacob
• Allen Morgan Stewart

Classifications

• G06F21/552

  involving long-term monitoring or reporting · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G05B15/02

  electric · CPC title