Adaptive cross-channel tracking of electronic records signature modifications

Patent metadata

Field	Value
Publication number	US-11095722-B2
Application number	US-201916532896-A
Country	US
Kind code	B2
Filing date	Aug 6, 2019
Priority date	Aug 6, 2019
Publication date	Aug 17, 2021
Grant date	Aug 17, 2021

Abstract

A system for modifying electronic records for tracking use is provided. The system comprises a controller configured for transforming an electronic record, the controller comprising a memory device with computer-readable program code stored thereon, a communication device connected to a network, and a processing device, wherein the processing device is configured to execute the computer-readable program code to: receive a request from a user device to access an electronic record during an interaction session; extract a session identifier signature for the interaction session; generate, with a transformation function, one or more modifications for the electronic record based on the session identifier signature; transform the electronic record to a modified record by applying the one or more modifications to the electronic record; and provide the modified record to the user device.

First claim

What is claimed is:

1. A system for modifying electronic records for tracking use, the system comprising:
a controller comprising a memory device with computer-readable program code stored thereon, a communication device connected to a network, and a processing device, wherein the processing device is configured to execute the computer-readable program code to:
receive a request from a user device to access an electronic record during an interaction session, wherein the electronic record comprises a stored image of a check, and wherein accessing the electronic record comprises viewing the stored image of the check;
extract a session identifier signature for the interaction session;
determine a pattern of authorized access based on previous interaction sessions;
compare a current pattern of the interaction session with the pattern of authorized access;
calculate an unauthorized access score based on comparing the current pattern of the interaction session to the pattern of authorized access, wherein the unauthorized access score is a quantification of a match between the current pattern of the interaction session and the pattern of authorized access;
generate, with a transformation function, one or more modifications for the electronic record based on the session identifier signature;
generate, with the transformation function, an additional modification for the electronic record based on the unauthorized access score exceeding a predetermined threshold;
transform the electronic record to a modified record by applying the one or more modifications and the additional modification to the electronic record; and
provide the modified record to the user device.

2. The system of claim 1 , wherein the processing device is configured to execute the computer-readable program code to:
after providing the modified record to the user device, receive another record during a subsequent interaction session via a communication channel;
identify the other record as the modified record by matching modification patterns of the other record to the one or more modifications of the modified record;
extract the session identifier signature associated with the record;
determine that the session identifier signature is associated with unauthorized access; and
mark the subsequent interaction session and the session identifier signature as being associated with unauthorized access.

3. The system of claim 2 , wherein the communication channel is a first channel, and wherein the processing device is configured to execute the computer-readable program code to:
identify another interaction session in a second channel, the other interaction session comprising at least part of the session identifier signature; and
mark the other interaction session as being associated with unauthorized access based on determining that the session identifier signature is associated with unauthorized access in the first channel.

4. The system of claim 1 , wherein the session identifier signature comprises at least one of a user identification, a device identification, a session identification, an interaction identification, a connection identification, an Internet Protocol address, a cookie, a universally or globally unique identifier, a security token, a date, or a time.

5. The system of claim 1 , wherein the session identifier signature is a trackable token for tracing modifications back to one or more interaction sessions.

6. The system of claim 1 , wherein the transformation function further comprises a random modification generator for generating one or more random modifications to be applied to the electronic record.

7. The system of claim 1 , wherein the one or more modifications comprise at least one of an alteration or addition of typed or script text, images, or formatting of the electronic record.

8. The system of claim 1 , wherein the one or more modifications comprise pixel level modification and tracking on the stored image of the check.

9. A system for detecting and tracking unauthorized records, the system comprising:
a controller comprising a memory device with computer-readable program code stored thereon, a communication device connected to a network, and a processing device, wherein the processing device is configured to execute the computer-readable program code to:
receive a request from a first user device to access a first record during a first interaction, wherein the first record comprises a stored image of a check, and wherein accessing the first record comprises viewing the stored image of the check;
extract a first session identifier signature for the first interaction;
determine a pattern of authorized access based on previous interactions;
compare a current pattern of the first interaction with the pattern of authorized access;
calculate an unauthorized access score based on comparing the current pattern of the first interaction to the pattern of authorized access, wherein the unauthorized access score is a quantification of a match between the current pattern of the first interaction and the pattern of authorized access;
generate, with a transformation function, one or more record modifications for the first record based on the first session identifier signature;
generate, with the transformation function, an additional record modification for the first record based on the unauthorized access score exceeding a predetermined threshold;
transform the first record to a modified first record by applying the one or more record modifications and the additional record modification to the first record;
provide the modified first record to the first user device;
receive a second record from a second user device during a second interaction via a communication channel, the second record comprising the one or more record modifications and the additional record modification, the second record comprising the stored image of the check;
analyze the one or more record modifications and the additional record modification for known modification patterns;
determine a match of the one or more record modifications and the additional record modification to a known pattern;
extract a second session identifier signature associated with the known pattern;
determine that the second session identifier signature is associated with unauthorized access; and
mark the second interaction and the second session identifier signature as being associated with unauthorized access.

10. The system of claim 9 , wherein the communication channel is a first channel, and wherein the processing device is configured to execute the computer-readable program code to:
identify a third interaction in a second channel, the third interaction comprising at least part of the second session identifier signature; and
mark the third interaction as being associated with unauthorized access based on determining that the second session identifier signature is associated with unauthorized access in the first channel.

11. The system of claim 9 , wherein determining that the second session identifier signature is associated with unauthorized access further comprises:
comparing the second session identifier signature to one or more known unauthorized access signatures associated with the known pattern; and
calculating another unauthorized access score based on comparing the second session identifier signature to the one or more known unauthorized access signatures, wherein the other unauthorized access score is a quantification of a match between the second session identifier signature and the one or more known unauthorized access signatures.

12. The system of claim 9 , wherein the processing device is configured

Assignees

• Bank Of America

Inventors

• Kursun Eren

Classifications

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• G06F16/1827

  Management specifically adapted to NAS (management of storage area networks [SAN] G06F3/067) · CPC title

• G06N20/20

  Ensemble learning · CPC title

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L67/146 Primary

  Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title