Alternate user communication routing for a onetime credential

Patent metadata

Field	Value
Publication number	US-11297053-B2
Application number	US-202016915492-A
Country	US
Kind code	B2
Filing date	Jun 29, 2020
Priority date	Jun 1, 2018
Publication date	Apr 5, 2022
Grant date	Apr 5, 2022

Abstract

The invention relates to alternate user communication routing for a one-time credential. When a user is determined to be an unauthorized user, the unauthorized user may be provided with an alternative one-time credential (e.g., one-time password, or the like) in response to the user trying to take an action (e.g., to access the organization systems in order to access information). When the unauthorized user tries to utilize the alternative one-time credential, the organization may identify the user as unauthorized and determine how to respond to the unauthorized user. In addition to the alternative one-time credential, one or more additional alternate treatments may be presented to the unauthorized user in order to identify, track, and/or prevent access by the unauthorized user.

First claim

What is claimed is:

1. A system for providing alternate treatments for interactions with unauthorized users, the system comprising:
one or more memories having computer readable code stored thereon; and
one or more processors operatively coupled to the one or more memories, wherein the one or more processors are configured to execute the computer readable code to:
receive a request from a user to access information;
receive an authentication credential from the user, wherein the authentication credential is received from one or more user computer systems;
determine when the user is an unauthorized user based on the authentication credential;
identify the information in which the unauthorized user has requested;
prevent providing the information to the unauthorized user;
provide an alternate treatment to the unauthorized user, wherein the alternate treatment comprises:
providing an indication that the information is currently unavailable to the unauthorized user on the one or more user computer systems; and
requesting contact information from the unauthorized user; and

capture unauthorized user information from the unauthorized user based on the alternate treatment.

2. The system of claim 1 , wherein the one or more processors are further configured to execute the computer readable code to:
receive a request for a one time credential, wherein the request is received from the one or more user computer systems;
transmit an alternative one time credential to the unauthorized user; and
receive the alternative one time credential from the unauthorized user.

3. The system of claim 2 , wherein the one or more processors are further configured to execute the computer readable code to:
request the contact information from the unauthorized user to receive the alternative one time credential;
receive the contact information from the unauthorized user; and
send the alternative one time credential based to the unauthorized user based on the contact information received from the unauthorized user.

4. The system of claim 2 , wherein the alternative one time credential is transmitted to the one or more user computer systems from which the authentication credential was received.

5. The system of claim 2 , wherein the alternative one time credential is transmitted to the one or more user computer systems that is different than the one or more user computer systems from which the authentication credential was received.

6. The system of claim 2 , wherein the alternative one time credential includes one or more markers, and wherein the one or more processors are further configured to execute the computer readable code to:
monitor actions of the unauthorized user based on the one or more markers associated with the alternative one time credential, wherein the one or more markers allow identification of the one or more user computer systems or one or more other unauthorized users to which the alternative one time credential is transferred by the unauthorized user.

7. The system of claim 1 , wherein the one or more processors are further configured to execute the computer readable code to:
determine one or more alternate treatments previously presented to the unauthorized user; and
identify the alternate treatment to present to the unauthorized user, wherein the alternate treatment is different from the one or more alternate treatments previously presented to the unauthorized user.

8. The system of claim 1 , wherein the alternate treatment is providing alternative information to the user, and wherein the one or more processors are further configured to execute the computer readable code to:
identify the alternative information to present to the unauthorized user that corresponds to the information requested; and
provide the alternative information to the unauthorized user as the alternate treatment.

9. The system of claim 8 , wherein the information is user information or user resource pool information, and wherein the alternative information is alternative user information or alternative user resource pool information.

10. The system of claim 8 , wherein the alternative information comprises one or more markers, and wherein the one or more processors are further configured to execute the computer readable code to:
monitor actions of the unauthorized user based on the one or more markers associated with the alternative information, wherein the one or more markers allow identification of the one or more user computer systems or one or more other unauthorized users to which the alternative information is transferred by the unauthorized user.

11. The system of claim 1 , wherein the alternate treatment comprises providing alternative information to the unauthorized user on the one or more user computer systems, wherein the one or more processors are further configured to execute the computer readable code to:
identify an interface in which the unauthorized user is interested;
identify an alternative interface to present to the unauthorized user; and
display the alternative interface to the unauthorized user.

12. The system of claim 1 , wherein the alternate treatment comprises extending a time for an interaction, wherein the one or more processors are further configured to execute the computer readable code to:
provide an icon to the unauthorized user on the one or more user computer systems indicating that the information is being accessed; and
prevent the information from being provided to the unauthorized user on the one or more user computer systems for as long as the unauthorized user maintains the interaction.

13. The system of claim 1 , wherein the alternate treatment comprises extending a time for an interaction, wherein the one or more processors are further configured to execute the computer readable code to:
place the unauthorized user on hold; and
prevent the unauthorized user on hold from being transferred to a representative for so long as the unauthorized user maintains the interaction.

14. The system of claim 1 , wherein the alternate treatment comprises transferring the unauthorized user to an alternate channel, wherein the one or more processors are further configured to execute the computer readable code to:
identify a representative to which to transfer the unauthorized user, wherein the representative is trained to respond to the unauthorized users; and
transfer the unauthorized user to the representative.

15. A computer implemented method for providing alternate treatments for interactions with unauthorized users, the method comprising:
receiving, by one or more processors, a request from a user to access information;
receiving, by the one or more processors, an authentication credential from the user, wherein the authentication credential is received from one or more user computer systems;
determining, by the one or more processors, when the user is an unauthorized user based on the authentication credential;
identifying, by the one or more processors, the information in which the unauthorized user has requested;
preventing, by the one or more processors, providing the information to the unauthorized user;
providing, by the one or more processors, an alternate treatment to the unauthorized user, wherein the alternate treatment comprises:
providing an indication that the information is currently unavailable to the unauthorized user on the one or more user computer systems; and
requesting contact information from the unauthorized user; and

capturing, by the one or more processors, unauthorized user information from the unauthorized user based on the alternate tr

Assignees

• Bank Of America

Inventors

• Satija Dharmender Kumar
• Kursun Eren
• Kim Andrew Dongho
• Sims Scott Anderson
• Widmann Craig D

Classifications

• H04L45/22

  Alternate routing · CPC title

• H04L63/0838 Primary

  using one-time-passwords · CPC title

• H04L63/1491 Primary

  using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment · CPC title

• H04L45/308

  Route determination based on user's profile, e.g. premium users · CPC title

• H04L63/102

  Entity profiles · CPC title