Systems and methods for automatically performing secondary authentication of primary authentication credentials

Patent metadata

Field	Value
Publication number	US-11765162-B2
Application number	US-202217679259-A
Country	US
Kind code	B2
Filing date	Feb 24, 2022
Priority date	Jun 10, 2019
Publication date	Sep 19, 2023
Grant date	Sep 19, 2023

Abstract

The disclosed technology includes systems and methods for determining secondary authentication of a user's log-in attempts by comparing received behavioral biometric data and/or received scenario-specific data to saved behavioral biometric data and/or saved scenario-specific data, respectively. Responsive to determining that the received behavioral biometric data and/or received scenario-specific data is above a predetermined threshold of similarity with respect to the saved behavioral biometric data and/or saved scenario-specific data, respectively, the systems and methods can determine that the corresponding log-in attempt is secondarily authenticated. of a user device via behavioral biometric data. Responsive to determining that the level of similarity is not above the predetermined threshold, the systems and methods can initiate a secondary authentication method and can associate the received behavioral biometric data with a second user model.

First claim

What is claimed is:

1. A system comprising:
one or more processors; and
memory having instructions stored thereon that, when executed by the one or more processors, cause the system to:
receive first behavioral biometric data from a user device, the first behavioral biometric data being associated with an entry of primary authentication credentials on the user device to a first user account;
compare the first behavioral biometric data to a first user model, the first user model associated with (i) a first user device and (ii) a first credential entry method on the first user device, the first user model being based at least in part on first stored behavioral biometric data personalized to a user associated with the first user device;
responsive to determining that a first level of similarity between the first behavioral biometric data received and the first stored behavioral biometric data of the first user model is less than a first predetermined threshold:
initiate a secondary authentication method comprising:
receiving second behavioral biometric data, the second behavioral biometric data associated with an entry of secondary authentication credentials of the first user account; and
validating the secondary authentication method; and

responsive to determining that the first level of similarity is below a second predetermined threshold and the secondary authentication method being positively validated:
generate a second user model associated with the first user account, wherein:
the second user model is associated with (i) a second user device and (ii) a second credential entry method on the second user device,
the first user model is separate from the second user model,
the first user device is different from the second user device,
the first credential entry method is different from the second credential entry method; and

associate the first behavioral biometric data with the second user model.

2. The system of claim 1 , wherein:
the first user model and the second user model are operated in parallel; and
the instructions, when executed by the one or more processors, further cause the system to:
receive subsequent behavioral biometric data;
compare the subsequent behavioral biometric data to the first stored behavioral biometric data of the first user model and second stored behavioral biometric data of the second user model;
determine whether the subsequent behavioral biometric data is within a second level of similarity to the first user model or the second user model;
responsive to determining that the subsequent behavioral biometric data within the second level of similarity to the first user model, integrate the subsequent behavioral biometric data into the first stored behavioral biometric data of the first user model;
responsive to determining that the subsequent behavioral biometric data is within the second level of similarity to the second user model, integrate the subsequent behavioral biometric data into the second stored behavioral biometric data of the second user model; and
responsive to determining that the subsequent behavioral biometric data is not within the second level of similarity to the first user model or the second user model, create a third user model associated with the first user account using the subsequent behavioral biometric data.

3. The system of claim 1 , wherein one of the first and second credential entry methods is a manual credential entry method and the other of the first and second credential entry methods is an automatic entry method utilizing a password manager service.

4. The system of claim 1 , wherein comparing the first behavioral biometric data to the first user model comprises comparing current typing time data of the first behavioral biometric data to model time data of the first user model.

5. The system of claim 1 , wherein comparing the first behavioral biometric data to the first user model comprises comparing scenario data of the first behavioral biometric data to model scenario data of the first user model, the scenario data (i) comprising device elevation data and device orientation data and (ii) being contemporaneously detected by one or more sensors of the user device along with the entry of primary authentication credentials.

6. The system of claim 1 , wherein the instructions, when executed by the one or more processors, further cause the system to:
determine that the entry of primary authentication credentials meets a secondary authentication requirement if the first level of similarity between the first behavioral biometric data and the first stored behavioral biometric data of the first user model is greater than or equal to the first predetermined threshold.

7. The system of claim 6 , wherein the instructions, when executed by the one or more processors, further cause the system to:
receive, from the user device, the primary authentication credentials;
responsive to matching the primary authentication credentials to stored primary authentication credentials, determine that the user meets a primary authentication requirement; and
responsive to determining that the entry of primary authentication credentials meets the primary authentication requirement and the secondary authentication requirement, provide access to user-accessible system resources.

8. The system of claim 6 , wherein the instructions, when executed by the one or more processors, further cause the system to:
in response to the secondary authentication method being positively validated, determine that the entry of primary authentication credentials meets the secondary authentication requirement that the first level of similarity between the first behavioral biometric data and the first stored behavioral biometric data of the first user model is less than the first predetermined threshold.

9. The system of claim 1 , wherein:
the first behavioral biometric data comprises device identification data, and
the instructions, when executed by the one or more processors, further cause the system to, identify, based on the first behavioral biometric data, the first user device from a plurality of user devices associated with the user.

10. A non-transitory, computer-readable medium having instructions stored thereon that, when executed by one or more processors, cause a computing device to:
receive first behavioral biometric data from a user device, the first behavioral biometric data being associated with an entry of primary authentication credentials on the user device to a first user account;
compare the first behavioral biometric data to a first user model, the first user model associated with (i) a first user device and (ii) a first credential entry method on the first user device, the first user model being based at least in part on first stored behavioral biometric data personalized to a user associated with the first user device;
responsive to determining that a first level of similarity between the first behavioral biometric data received and the first stored behavioral biometric data of the first user model is less than a first predetermined threshold:
initiate a secondary authentication method comprising:
receiving second behavioral biometric data, the second behavioral biometric data associated with an entry of secondary authentication credentials of the first user account; and
validating the secondary authentication method; and

responsive to determining that the first level of similarity is below a second predetermined threshold and the secondary authentication method being positively validated:
generate a second user model associated with the first user account, wherein:
the second user model is associated with (i) a second user devi

Assignees

• Capital One Services Llc

Inventors

• Edwards Joshua
• Ji Jason
• Chatman Ljubica
• Mossoba Michael
• Rodriguez Carlos

Classifications

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04W12/10

  Integrity · CPC title