User authentication based on other applications

Patent metadata

Field	Value
Publication number	US-2016173484-A1
Application number	US-201615047786-A
Country	US
Kind code	A1
Filing date	Feb 19, 2016
Priority date	Feb 7, 2014
Publication date	Jun 16, 2016
Grant date	—

Abstract

The present invention includes a system for authenticating a second action based on a first action, wherein the system is configured to: receive a first request to execute a first action associated with a first application; determine that execution of the first action requires user authentication; request one or more authentication credentials from the user; receive a first authentication credential associated with the first action; validate the first authentication credential, thereby resulting in a successful validation of the received first authentication credential; in response to the successful validation, execute the first action; receive a second request to execute a second action associated with a second application; determine that execution of the second action requires user authentication; use the successful validation of the first authentication credential to validate a second authentication credential so that the second action may be executed.

First claim

What is claimed is:

1 . A computer program product for authenticating a user, the computer program product comprising a non-transitory computer-readable medium comprising code causing a computer to:
receive a first request to execute a first action associated with a first application; determine that execution of the first action requires user authentication; request one or more authentication credentials from the user; receive a first authentication credential associated with the first action, wherein the first authentication credential is associated with a zero authentication, a soft authentication, or a hard authentication, wherein receiving the hard authentication comprises enabling the user to execute all actions associated with the first application, wherein receiving the soft authentication comprises enabling the user to execute to at least one action associated with the first application, wherein receiving zero authentication comprises denying the user access to at least one action associated with the first application; validate the first authentication credential, thereby resulting in a successful validation of the received first authentication credential; in response to the successful validation, execute the first action; receive a second request to execute a second action associated with a second application, wherein the second request is associated with the execution of the first action; determine that execution of the second action requires user authentication; determine a digital footprint of the user based on at least the first action executed by the user, wherein the digital footprint of the user comprises one or more previous actions executed by the user, wherein the one or more actions executed by the user comprises the execution of the first action, wherein the digital footprint is used as a second authentication credential required to access the second application; and validate the digital footprint indicating that the first action executed by the user is successfully authenticated; in response to the successful validation of the digital footprint, execute the second action.

2 . The computer program product of claim 1 , wherein the first application is associated with at least one of a third party, a social media network, a website, and an overarching operating system.

3 . The computer program product of claim 1 , wherein at least one of the one or more authentication credentials, the first authentication credential, and the second authentication credential comprises at least one of a user authentication, a username, a password, a passcode, a personal identification number (PIN), a secret question, a received input, and a biometric indicia.

4 . The computer program product of claim 1 , wherein the code is further configured to cause said processor to receive the first authentication credential comprises receiving input from a user.

5 . The computer program product of claim 1 , wherein the second application is associated with a financial institution.

6 . The computer program product of claim 1 , wherein the code for validating at least one of the first authentication credential and the second authentication credential is further configured to cause the processor to: compare at least one of the first authentication credential and the second authentication credential to a plurality of authentication credentials in a database, wherein the plurality of authentication credentials are associated with positive validation; and determine a match between at least one of the first authentication credential and the second authentication credential and at least one authentication credential in the plurality of authentication credentials in the database.

7 . The computer program product of claim 1 , wherein the code for validating at least one of the first authentication credential and the second authentication credential is further configured to cause the processor to: compare at least one of the first authentication credential and the second authentication credential to a plurality of authentication credentials in a database, wherein the plurality of authentication credentials are associated with positive validation; and determine there is no match between at least one of the first authentication credential and the second authentication credential and at least one authentication credential in the plurality of authentication credentials in the database.

8 . The computer program product of claim 7 , wherein the code causing the processor to determine there is no match between at least one of the first authentication credential and the second authentication credential and at least one authentication credential in the plurality of authentication credentials in the database is further configured to cause the processor to restrict execution of the second action.

9 . The computer program product of claim 7 , wherein the code causing the processor to determine there is no match between at least one of the first authentication credential and the second authentication credential and at least one authentication credential in the plurality of authentication credentials in the database comprises prompting a user for input of at least one additional authentication credential.

10 . The computer program product of claim 1 , wherein the second action comprises at least one of a funds transfer, viewing an account summary, a deposit, a withdrawal, and viewing a receipt.

11 . The computer program product of claim 10 , wherein executing the second action requires validation of the second authentication credential.

12 . The computer program product of claim 1 , wherein the second application is associated with the first application whereby the second application is accessible using the first application.

13 . The computer program product of claim 1 , wherein the code for causing the processor to receive zero authentication associated with at least one of the first authentication credential and the second authentication credential comprises: code for causing the processor to count a number of failed validation attempts associated with at least one of the first authentication credential and the second authentication credential; compare the number of failed validation attempts to a predetermined threshold value associated with positive validation; determining that the number of failed validation attempts is greater than the predetermined threshold value associated with positive validation; and initiate the presentation of an interface that prompts the user to input at least one additional authentication credential.

14 . A method for authenticating a user, the method comprising:
receiving a first request to execute a first action associated with a first application; determining that execution of the first action requires user authentication; requesting one or more authentication credentials from the user; receiving a first authentication credential associated with the first action, wherein the first authentication credential is associated with a zero authentication, a soft authentication, or a hard authentication, wherein receiving the hard authentication comprises enabling the user to execute all actions associated with the first application, wherein receiving the soft authentication comprises enabling the user to execute to at least one action associated with the first application, wherein receiving zero authentication comprises denying the user access to at least one action associated with the first application; validating the first authentication credential, thereby resulting in a successful validation of the received first

Assignees

• Bank Of America

Inventors

• Grigg David M
• Bertanzetti Peter John
• Burrell Charles Jason
• Hanson Carrie Anne
• Johansen Joseph Neil
• Toth Michael E
• Votaw Elizabeth S

Classifications

• G06F21/31

  User authentication · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title