Systems and methods for online user activity verification and authentication for enhanced network security

Patent metadata

Field	Value
Publication number	US-12568368-B2
Application number	US-202318335368-A
Country	US
Kind code	B2
Filing date	Jun 15, 2023
Priority date	Jun 15, 2023
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Systems and methods of the present disclosure enable improved network security by authenticating the identity of the user initiating the network activities. A network operations center of a wireless communication network system may implement an authentication service to monitor for network activities initiated via communications through a router of the wireless communication network system. The router may identify communications to be authenticated and provide the communication and/or associated data to the authentication service. The authentication service may analyze the data based on usage and performance data associated with the router(s) as well as user profile data associated with the user to verify that the user is the sender of the communication, thus authenticating the identity of the user. The authentication may then be communicated to third-party entities associated with the network activity to enable such third-party entities to confirm or deny the network activity.

First claim

What is claimed is:

1 . A method comprising:
receiving, by at least one processor of a wireless communication network system, a network activity communication purporting to be initiated by an entity with an external entity, the network activity communication being communicated via a wireless communication router of the wireless communication network system; determining, by the at least one processor, an authentication indicator based at least in part on a measure of similarity between network activity communication data of the network activity communication and entity data associated with the entity so as to authenticate the entity initiator of the network activity communication, wherein the authentication indicator comprises a risk score indicating a degree of risk of the entity not being authentic, wherein the risk score is a numerical value on a predetermined scale; and communicating, by the at least one processor, the authentication indicator to the external entity so as to authenticate an identity of the entity associated with the network activity communication.

2 . The method of claim 1 , wherein the entity data comprises device ID associated with entity device, and the network activity communication data comprises a source device ID.

3 . The method of claim 1 , wherein the similarity comprises whether the network activity communication data is an exact match to the entity data.

4 . The method of claim 1 , wherein:
the entity data comprises entity data attributes comprising at least one of:
an entity IP address,
an entity name,
an entity physical address,
an entity zip code,
an entity Media Access Control (MAC) address, or
an entity Universal unique identifier (UUID); and
the network activity communication data comprises network activity communication data attributes comprising at least one of: a network activity communication IP address,
a network activity communication name,
a network activity communication physical address,
a network activity communication zip code,
a network activity communication Media Access Control (MAC) address, or
a network activity communication Universal unique identifier (UUID); and

the similarity comprises a similarity measure indicative of a degree of a match between the network activity communication data attributes and the entity data attributes.

5 . The method of claim 1 , wherein the authentication indicator comprises a binary risk label indicating the network activity communication as authenticated or not authenticated.

6 . The method of claim 1 , further comprising:
determining, by the at least one processor, that the network activity communication is associated with an authentication service based at least in part on a universal resource locator (URL) of the network activity communication;
wherein the authentication service is further configured to:
queue the entity authentication indicator in a message queue associated with the external entity; and
communicate the entity authentication indicator to an external server of the external entity in response to a query associated with the network activity communication from the external server to the authentication service.

7 . The method of claim 1 , further comprising:
transmitting, by the wireless communication router, the network activity communication to an external server of the external entity.

8 . A method comprising:
receiving, by at least one processor of a wireless communication network system, via at least one graphical entity interface, at least one entity selection defining network activity communication data of a network activity communication to an external server of an entity, the network activity communication being configured to initiate a network activity with the external server; determining, by the at least one processor, that the entity is an external entity based at least in part on the network activity communication data and a trigger address list specifying a plurality of network addresses of a plurality of enrolled entities; determining, by the at least one processor, an authentication indicator based at least in part on a measure of similarity between network activity communication data of the network activity communication and entity data associated with the entity so as to authenticate the entity initiator of the network activity communication, wherein the authentication indicator comprises a risk score indicating a degree of risk of the entity not being authentic, wherein the risk score is a numerical value on a predetermined scale; and communicating, by the at least one processor, the authentication indicator to the external entity so as to authenticate an identity of the entity associated with the network activity communication.

9 . The method of claim 8 , wherein the entity data comprises device ID associated with the entity device, and the network activity communication data comprises a source device ID.

10 . The method of claim 8 , wherein the similarity comprises whether the network activity communication data is an exact match to the entity data.

11 . The method of claim 8 , wherein:
the entity data comprises entity data attributes comprising at least one of:
an entity IP address,
an entity name,
an entity physical address,
an entity zip code,
an entity Media Access Control (MAC) address, or
an entity Universal unique identifier (UUID); and
the network activity communication data comprises network activity communication data attributes comprising at least one of:
a network activity communication IP address,
a network activity communication name,
a network activity communication physical address,
a network activity communication zip code,
a network activity communication Media Access Control (MAC) address, or
a network activity communication Universal unique identifier (UUID); and
the similarity comprises a similarity measure indicative of a degree of a match between the network activity communication data attributes and the entity data attributes.

12 . The method of claim 8 , wherein the entity authentication indicator comprises a binary risk label indicating the network activity communication as authenticated or not authenticated.

13 . The method of claim 9 , further comprising:
determining, by the at least one processor, that the network activity communication is associated with an authentication service based at least in part on a universal resource locator (URL) of the network activity communication;
wherein the authentication service is further configured to:
queue the entity authentication indicator in a message queue associated with the external entity; and
communicate the entity authentication indicator to an external server of the external entity in response to a query associated with the network activity communication from the external server to the authentication service.

14 . The method of claim 8 , further comprising:
transmitting, by the at least one processor, the network activity communication to the external server.

15 . A wireless communication network system comprising:
at least one processor in communication with at least one non-transitory computer readable medium having software instructions stored thereon, wherein the at least one processor, upon execution of the software instructions, is configured to:
receive a network activity communication purporting to be initiated by a entity with an external entity, the network activity communication being communicated via a wireless communication router of the wireless communication network system;
determine an a

Assignees

• Plume Design Inc

Inventors

• Ancha Naveen
• White Paul

Classifications

• H04W12/71

  Hardware identity · CPC title

• H04W12/06 Primary

  Authentication · CPC title