Apparatuses, methods, and computer program products for proactive offline authentication

Patent metadata

Field	Value
Publication number	US-12579233-B2
Application number	US-202418595055-A
Country	US
Kind code	B2
Filing date	Mar 4, 2024
Priority date	Aug 17, 2021
Publication date	Mar 17, 2026
Grant date	Mar 17, 2026

Abstract

A method, apparatus, and computer program product for proactive offline authentication are provided. An example method includes determining a current offline condition of a computing device at a first time and determining a prior online condition of the computing device at a second time that is earlier than the first time at which the computing device generated second authentication credentials based upon one or more user attributes obtained from a digital identity construct database associated with a first user at the second time. The method further includes obtaining, at the first time, first authentication credentials associated with the first user and determining a discrepancy between the first and the second authentication credentials. In response to the determined discrepancy, the method includes generating an authentication token based upon the second authentication credentials for authenticating a first user device of the first user with the computing device.

First claim

What is claimed is:

1 . A computer-implemented method for proactive offline authentication, the computer-implemented method comprising:
detecting, by an identity server, a forthcoming request for authentication for a first user device; subsequent to detecting the forthcoming request, determining, by the identity server, a periodic offline condition of a computing device at a first time, wherein the periodic offline condition is determined based upon a minimum number of transmission failures; modifying, by the identity server, an authentication mechanism of the computing device to generate, by the identity server, at the first time, first authentication credentials associated with a first user, wherein the first authentication credentials are based upon one or more static user attributes obtained from a digital identity construct database; authenticating, by the identity server, the first user device based upon the first authentication credentials; and in an instance in which the identity server determines an online condition of the computing device at a second time, wherein the second time is later in time than the first time:
modifying, by the identity server, the authentication mechanism of the computing device to generate, by the identity server, at the second time, the first authentication credentials associated with the first user, wherein the first authentication credentials are based upon the one or more static user attributes and one or more dynamic attributes obtained from the digital identity construct database.

2 . The computer-implemented method according to claim 1 , wherein detecting the forthcoming request further comprises receiving, by the identity server, a user input indicative of the forthcoming request.

3 . The computer-implemented method according to claim 1 , wherein detecting the forthcoming request further comprises:
obtaining, by the identity server, one or more user parameters associated with the first user; and detecting, by the identity server, the forthcoming request based upon the one or more user parameters.

4 . The computer-implemented method according to claim 1 , further comprising transmitting, by the identity server, an authentication token to the first user device.

5 . The computer-implemented method according to claim 1 , wherein determining the periodic offline condition of the computing device further comprises:
generating, by the identity server, a transmission to the computing device comprising one or more user attributes from the digital identity construct database; attempting, by the identity server, to transmit the transmission to the computing device; and determining, by the identity server, the periodic offline condition in an instance in which a transmission failure is determined.

6 . The computer-implemented method according to claim 1 , wherein the computing device is associated with an access location, wherein the computer-implemented method further comprises:
causing access to be provided to the access location for the first user device based upon an authentication token.

7 . The computer-implemented method according to claim 1 further comprising, determining, by the identity server, the periodic offline condition of the computing device based on the minimum number of transmission failures during a period of time.

8 . An identity server for proactive offline authentication comprising at least one processor and at least one memory, the at least one memory having computer program instructions stored thereon that, when executed by the at least one processor, configure the identity server to:
detect a forthcoming request for authentication for a first user device; subsequent to detecting the forthcoming request, determine a periodic offline condition of a computing device at a first time, wherein the periodic offline condition is determined based upon a minimum number of transmission failures; modify an authentication mechanism of the computing device to generate at the first time, first authentication credentials associated with a first user, wherein the first authentication credentials are based upon one or more static user attributes obtained from a digital identity construct database; authenticate the first user device based upon the first authentication credentials; and in an instance in which an online condition of the computing device is determined at a second time, wherein the second time is later in time than the first time:
modify the authentication mechanism of the computing device to generate at the second time, the first authentication credentials associated with the first user, wherein the first authentication credentials are based upon the one or more static user attributes and one or more dynamic attributes obtained from the digital identity construct database.

9 . The identity server according to claim 8 , wherein the computer program instructions, when executed by the at least one processor, configure the identity server to detect the forthcoming request by receiving a user input indicative of the forthcoming request.

10 . The identity server according to claim 8 , wherein the computer program instructions, when executed by the at least one processor, configure the identity server to detect the forthcoming request by configuring the identity server to:
obtain one or more user parameters associated with the first user; and detect the forthcoming request based upon the one or more user parameters.

11 . The identity server according to claim 8 , wherein the computer program instructions, when executed by the at least one processor, configure the identity server to transmit an authentication token to the first user device.

12 . The identity server according to claim 8 , wherein the computer program instructions, when executed by the at least one processor, configure the identity server to determine the periodic offline condition of the computing device by configuring the identity server to:
generate a transmission to the computing device comprising one or more user attributes from the digital identity construct database; attempt to transmit the transmission to the computing device; and determine the periodic offline condition in an instance in which a transmission failure is determined.

13 . The identity server according to claim 8 , wherein the computing device is associated with an access location, wherein the computer program instructions, when executed by the at least one processor, configure the identity server to:
cause access to be provided to the access location for the first user device based upon an authentication token.

14 . The identity server according to claim 8 , wherein the computer program instructions, when executed by the at least one processor, configure the identity server to:
determine the periodic offline condition of the computing device based on the minimum number of transmission failures during a period of time.

15 . A computer program product for proactive offline authentication comprising at least one non-transitory computer-readable storage medium having computer program instructions thereon that, when executed by at least one processor, configures an identity server to:
detect a forthcoming request for authentication for a first user device; subsequent to detecting the forthcoming request, determine a periodic offline condition of a computing device at a first time, wherein the periodic offline condition is determined based upon a minimum number of transmission failures; modify an authentication mechanism of the computing device to generate, by the identity serv

Assignees

• Wells Fargo Bank Na

Inventors

• Bordow Peter
• Stapleton Jeff J
• Yarlagadda Ramesh

Classifications

• G06F21/316 Primary

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title