Preventing unauthorized access to secure information systems using multi-push authentication techniques

Patent metadata

Field	Value
Publication number	US-10855686-B2
Application number	US-201815948245-A
Country	US
Kind code	B2
Filing date	Apr 9, 2018
Priority date	Apr 9, 2018
Publication date	Dec 1, 2020
Grant date	Dec 1, 2020

Abstract

Aspects of the disclosure relate to preventing unauthorized access to secured information systems using multi-push authentication techniques. A computing platform may receive an event request associated with a group of enrolled devices. The computing platform may load multi-push settings and identify one or more user devices linked to the group of enrolled devices. Then, the computing platform may generate one or more notifications for the one or more user devices, and each notification may be generated for a corresponding user device based on device-specific user account state information. After sending the one or more notifications, the computing platform may generate one or more event execution commands based on prompt response information received from the one or more user devices and may send the one or more event execution commands to an event management computer system, which may execute an event corresponding to the event request.

First claim

What is claimed is:

1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from a requesting device, an event request associated with a group of enrolled devices;
based on receiving the event request associated with the group of enrolled devices from the requesting device, load multi-push settings associated with the group of enrolled devices;
identify one or more user devices linked to the group of enrolled devices based on the multi-push settings associated with the group of enrolled devices;
generate one or more notifications for the one or more user devices linked to the group of enrolled devices, wherein each notification of the one or more notifications is generated for a corresponding user device of the one or more user devices linked to the group of enrolled devices based on device-specific user account state information maintained by the computing platform, and wherein generating the one or more notifications for the one or more user devices linked to the group of enrolled devices comprises:
generating a first notification for a first user device of the one or more user devices linked to the group of enrolled devices based on first user account state information corresponding to the first user device, wherein sending the first notification to the first user device causes the first user device to require a first set of authenticators when authenticating a user of the first user device; and
generating a second notification for a second user device of the one or more user devices linked to the group of enrolled devices based on second user account state information corresponding to the second user device, wherein sending the second notification to the second user device causes the second user device to require a second set of authenticators when authenticating a user of the second user device, wherein the second user account state information is different from the first user account state information, and wherein the second set of authenticators is different from the first set of authenticators;

send, via the communication interface, to the one or more user devices linked to the group of enrolled devices, the one or more notifications generated for the one or more user devices linked to the group of enrolled devices;
generate one or more event execution commands based on prompt response information received from the one or more user devices linked to the group of enrolled devices; and
send, via the communication interface, to an event management computer system, the one or more event execution commands generated based on the prompt response information received from the one or more user devices linked to the group of enrolled devices, wherein sending the one or more event execution commands to the event management computer system causes the event management computer system to execute an event corresponding to the event request associated with the group of enrolled devices received from the requesting device.

2. The computing platform of claim 1 , wherein sending the one or more notifications generated for the one or more user devices linked to the group of enrolled devices comprises concurrently sending the one or more notifications to the one or more user devices linked to the group of enrolled devices.

3. The computing platform of claim 1 , wherein sending the one or more notifications generated for the one or more user devices linked to the group of enrolled devices comprises sequentially sending the one or more notifications to the one or more user devices linked to the group of enrolled devices.

4. The computing platform of claim 3 , wherein sending the one or more notifications generated for the one or more user devices linked to the group of enrolled devices comprises sending the one or more notifications to the one or more user devices linked to the group of enrolled devices in a specific order based on the multi-push settings associated with the group of enrolled devices.

5. The computing platform of claim 1 , wherein generating the one or more event execution commands based on the prompt response information received from the one or more user devices linked to the group of enrolled devices comprises generating the one or more event execution commands based on a quorum of the one or more user devices linked to the group of enrolled devices approving the event request.

6. The computing platform of claim 1 , wherein generating the one or more event execution commands based on the prompt response information received from the one or more user devices linked to the group of enrolled devices comprises generating the one or more event execution commands based on all of the one or more user devices linked to the group of enrolled devices approving the event request.

7. The computing platform of claim 1 , wherein sending the one or more notifications to the one or more user devices linked to the group of enrolled devices comprises sending the first notification to the first user device, and wherein sending the first notification to the first user device causes the first user device to present information associated with the first notification, authenticate the user of the first user device, present a first prompt corresponding to the event request, and send first prompt response information to the computing platform.

8. The computing platform of claim 7 , wherein sending the one or more notifications to the one or more user devices linked to the group of enrolled devices comprises sending the second notification to the second user device, and wherein sending the second notification to the second user device causes the second user device to present information associated with the second notification, authenticate the user of the second user device, present a second prompt corresponding to the event request, and send second prompt response information to the computing platform.

9. The computing platform of claim 8 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from the first user device, validation information associated with the user of the first user device being authenticated.

10. The computing platform of claim 9 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from the first user device, the first prompt response information; and
update event request state information based on receiving the first prompt response information from the first user device.

11. The computing platform of claim 10 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from the second user device, validation information associated with the user of the second user device being authenticated.

12. The computing platform of claim 11 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from the second user device, the second prompt response information; and
update the event request state information based on receiving the second prompt response information from

Assignees

• Bank Of America

Inventors

• Shah Hitesh

Classifications

• H04L67/55

  Push-based network services · CPC title

• H04L63/104 Primary

  Grouping of entities · CPC title

• H04L63/0838

  using one-time-passwords · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title