Alternate display generation based on user identification

Patent metadata

Field	Value
Publication number	US-10798126-B2
Application number	US-201815995837-A
Country	US
Kind code	B2
Filing date	Jun 1, 2018
Priority date	Jun 1, 2018
Publication date	Oct 6, 2020
Grant date	Oct 6, 2020

Abstract

The invention relates generally to an alternate display generation based on user identification of unauthorized users. When the user is identified as an unauthorized user, the organization may present an alternative interface to the unauthorized user. The organization monitors how the unauthorized user utilizes the alternative interface, such as action requests that the unauthorized user may take through the use of the alternative interface. In response to any action requests from the unauthorized user, the organization may take alternative actions in order to make it seem that the unauthorized user was successful in the action request. In this way, the organization may monitor the use of the alternative interface by the unauthorized user, and capture additional information from the unauthorized user in order to identify, track, and/or prevent access by unauthorized users in the future.

First claim

What is claimed is:

1. A system for providing alternative interfaces to unauthorized users, the system comprising:
one or more memories having computer readable code stored thereon; and
one or more processors operatively coupled to the one or more memories, wherein the one or more processors are configured to execute the computer readable code to:
receive a request from a user to access a user interface;
receive an authentication credential from the user, wherein the authentication credential is received from one or more user computer systems;
determine when the user is an unauthorized user based on the authentication credential;
identify an alternative interface, wherein the alternative interface mimics the user interface;
provide the alternative interface to the unauthorized user for display on the one or more user computer systems;
monitor use of the alternative interface by the unauthorized user; and
capture unauthorized user information from the use of the alternative interface by the unauthorized user.

2. The system of claim 1 , wherein the one or more processors are further configured to execute the computer readable code to:
receive a request from the unauthorized user to take an action within the alternative interface; and
institute an alternative action in response to the request from the unauthorized user to take the action.

3. The system of claim 2 , wherein the one or more processors are further configured to execute the computer readable code to:
update the alternative interface with the alternative action in response to the request from the unauthorized user to take the action within the alternative interface.

4. The system of claim 3 , wherein the action is a request for additional information; and wherein the one or more processors are further configured to execute the computer readable code to:
identify the additional information requested by the unauthorized user; and
determine additional alternative information to present on the alternative interface;
wherein updating the alternative interface based on the request comprises displaying the additional alternative information in the alternative interface.

5. The system of claim 3 , wherein the action is a request for additional information; and wherein the one or more processors are further configured to execute the computer readable code to:
identify the additional information requested by the unauthorized user; and
determine the additional information or additional alternative information cannot be presented in the alternative interface;
wherein updating the alternative interface based on the request comprises displaying an indication that the additional alternative information is not available on the alternative interface.

6. The system of claim 3 , wherein the action is a request to alter information within the alternative interface, and wherein the one or more processors are further configured to execute the computer readable code to:
identify the information that the unauthorized user has requested to alter; and
identify altered information for display in the alternative interface;
wherein updating the alternative interface based on the request comprises displaying the altered information in the alternative interface.

7. The system of claim 6 , wherein the altered information may comprises unauthorized user resource pool information.

8. The system of claim 7 , wherein the unauthorized user resource pool information comprises an unauthorized user resource pool to which the unauthorized user is transferring resources.

9. The system of claim 6 , wherein the altered information comprises comprises contact information for the unauthorized user.

10. The system of claim 6 , wherein the one or more processors are further configured to execute the computer readable code to:
send a notification to the unauthorized user confirming the altered information displayed in the alternative interface.

11. The system of claim 3 , wherein the action is a request to transfer resources from the alternative interface, and wherein the one or more processors are further configured to execute the computer readable code to:
receive unauthorized user resource pool information for an unauthorized user resource pool from the unauthorized user; and
receive the request to transfer the resources from an alternative resource pool from within the alternative interface to the unauthorized user resource pool;
wherein updating the alternative interface based on the request comprises displaying a pending transfer of the resources to the unauthorized user resource pool.

12. The system of claim 11 , wherein the one or more processors are further configured to execute the computer readable code to:
provide a pending transfer notification to the unauthorized user resource pool, wherein the pending transfer notification indicates to the unauthorized user that the transfer of the resources is pending, wherein the pending transfer notification will be canceled before the resources are transferred.

13. A computer implemented method for providing alternative interfaces to unauthorized users, the method comprising:
receiving, by one or more processors, a request from a user to access a user interface;
receiving, by the one or more processors, an authentication credential from the user, wherein the authentication credential is received from one or more user computer systems;
determining, by the one or more processors, when the user is an unauthorized user based on the authentication credential;
identifying, by the one or more processors, an alternative interface, wherein the alternative interface mimics the user interface;
providing, by the one or more processors, the alternative interface to the unauthorized user for display on the one or more user computer systems;
monitoring, by the one or more processors, use of the alternative interface by the unauthorized user; and
capturing, by the one or more processors, unauthorized user information from the use of the alternative interface by the unauthorized user.

14. The method of claim 13 , further comprising:
receiving, by the one or more processors, a request from the unauthorized user to take an action within the alternative interface; and
instituting, by the one or more processors, an alternative action in response to the request from the unauthorized user to take the action.

15. The method of claim 14 , further comprising:
updating, by the one or more processors, the alternative interface with the alternative action in response to the request from the unauthorized user to take the action within the alternative interface.

16. The method of claim 15 , wherein the action is a request for additional information; and wherein the method further comprises:
identifying, by the one or more processors, the additional information requested by the unauthorized user; and
determining, by the one or more processors, additional alternative information to present on the alternative interface;
wherein updating the alternative interface based on the request comprises displaying the additional alternative information in the alternative interface.

17. The method of claim 15 , wherein the action is a request for additional information; and wherein the method further comprises:
identifying, by the one or more processors, the additional information requested by the unauthorized user; and
determining, by the one or more processors, the additional information or additional alternative information cannot be presented to in the alternative interface;
wherein updati

Assignees

• Bank Of America

Inventors

• Satija Dharmender Kumar
• Kursun Eren
• Kim Andrew Dongho
• Sims Scott Anderson
• Widmann Craig D

Classifications

• G06F21/50

  Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems · CPC title

• G06F21/33

  using certificates · CPC title

• H04L2463/146

  Tracing the source of attacks · CPC title

• G06F2221/2123

  Dummy operation · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title