Processing authentication requests to secured information systems using machine-learned user-account behavior profiles

Patent metadata

Field	Value
Publication number	US-11113370-B2
Application number	US-201816210042-A
Country	US
Kind code	B2
Filing date	Dec 5, 2018
Priority date	Dec 5, 2018
Publication date	Sep 7, 2021
Grant date	Sep 7, 2021

Abstract

Aspects of the disclosure relate to processing authentication requests to secured information systems using machine-learned user-account behavior profiles. A computing platform may receive an authentication request corresponding to a request for a user of a client computing device to access one or more secured information resources associated with a user account. The computing platform may capture one or more behavioral parameters and may authenticate the user of the client computing device to the user account based on the one or more behavioral parameters and one or more authentication credentials. The computing platform then may generate and send one or more authentication commands directing an account portal computing platform to allow access to the one or more secured information resources. Subsequently, the computing platform may capture activity data associated with one or more interactions in a client portal session and may update a behavioral profile associated with the user account.

First claim

What is claimed is:

1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive, via the communication interface, from an account portal computing platform, a first authentication request corresponding to a request for a first user of a first client computing device to access one or more secured information resources associated with a first user account in a first client portal session;
based on receiving the first authentication request from the account portal computing platform, capture one or more behavioral parameters associated with the first client computing device;
authenticate the first user of the first client computing device to the first user account based on the one or more behavioral parameters associated with the first client computing device and one or more authentication credentials associated with the first authentication request;
based on authenticating the first user of the first client computing device to the first user account, generate one or more authentication commands directing the account portal computing platform to allow access to the one or more secured information resources associated with the first user account in the first client portal session;
send, via the communication interface, to the account portal computing platform, the one or more authentication commands directing the account portal computing platform to allow access to the one or more secured information resources associated with the first user account in the first client portal session;
after sending the one or more authentication commands directing the account portal computing platform to allow access to the one or more secured information resources associated with the first user account in the first client portal session, capture first activity data associated with one or more interactions in the first client portal session; and
update a first behavioral profile associated with the first user account based on the first activity data associated with the one or more interactions in the first client portal session.

2. The computing platform of claim 1 , wherein capturing the one or more behavioral parameters associated with the first client computing device comprises capturing one or more of a device identifier associated with the first client computing device, device settings information associated with the first client computing device, device location information associated with the first client computing device, or at least one network address associated with the first client computing device.

3. The computing platform of claim 1 , wherein capturing the one or more behavioral parameters associated with the first client computing device comprises capturing second activity data associated with one or more interactions by the first client computing device with one or more non-authenticated pages hosted by the account portal computing platform.

4. The computing platform of claim 1 , wherein authenticating the first user of the first client computing device to the first user account comprises validating one or more authentication credentials associated with the first authentication request.

5. The computing platform of claim 1 , wherein authenticating the first user of the first client computing device to the first user account comprises:
evaluating the one or more behavioral parameters associated with the first client computing device; and
determining that the one or more behavioral parameters associated with the first client computing device are valid based on evaluating the one or more behavioral parameters associated with the first client computing device.

6. The computing platform of claim 1 , wherein capturing the first activity data associated with the one or more interactions in the first client portal session comprises receiving information identifying one or more requests received from the first client computing device in the first client portal session, information identifying an order of the one or more requests received from the first client computing device in the first client portal session, and information identifying a timing of the one or more requests received from the first client computing device in the first client portal session.

7. The computing platform of claim 6 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
evaluate the information identifying the one or more requests received from the first client computing device in the first client portal session, the information identifying the order of the one or more requests received from the first client computing device in the first client portal session, and the information identifying the timing of the one or more requests received from the first client computing device in the first client portal session based on the first behavioral profile associated with the first user account; and
based on evaluating the information identifying the one or more requests received from the first client computing device in the first client portal session, the information identifying the order of the one or more requests received from the first client computing device in the first client portal session, and the information identifying the timing of the one or more requests received from the first client computing device in the first client portal session, continue to allow access to the one or more secured information resources associated with the first user account in the first client portal session.

8. The computing platform of claim 1 , wherein the first behavioral profile associated with the first user account comprises channel information associated with a channels dimension of the first behavioral profile, event information associated with an events dimension of the first behavioral profile, trigger information associated with a triggers dimension of the first behavioral profile, biometric information associated with a biometrics dimension of the first behavioral profile, and external information associated with an external dimension of the first behavioral profile.

9. The computing platform of claim 8 , wherein updating the first behavioral profile associated with the first user account based on the first activity data associated with the one or more interactions in the first client portal session comprises updating the channel information associated with the channels dimension of the first behavioral profile, the event information associated with the events dimension of the first behavioral profile, the trigger information associated with the triggers dimension of the first behavioral profile, the biometric information associated with the biometrics dimension of the first behavioral profile, and the external information associated with the external dimension of the first behavioral profile.

10. The computing platform of claim 8 , wherein the channel information associated with the channels dimension of the first behavioral profile comprises first channel activity information identifying actions involving the first user account across one or more internal channels and second channel activity information identifying actions involving the first user account across one or more external channels.

11. The computing platform of claim 8 , wherein the event information associated with the events dimension of the first behavioral profile identifies at least one user-specific event that is automatically executable based on at leas

Assignees

• Bank Of America

Inventors

• Toth Michael E
• Zhang Xianhong
• Shah Hitesh
• Goriparthi Srinivasa Rao

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L63/102

  Entity profiles · CPC title

• G06N20/00

  Machine learning · CPC title

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title