Systems and methods for determining knowledge-based authentication questions

Patent metadata

Field	Value
Publication number	US-2021409389-A1
Application number	US-202016915342-A
Country	US
Kind code	A1
Filing date	Jun 29, 2020
Priority date	Jun 29, 2020
Publication date	Dec 30, 2021
Grant date	—

Abstract

Systems and methods for authenticating a user may include transmitting a request for a first set of information after validation of authentication information; receiving a response comprising the first set of information; parsing the first set of information using one or more template-based algorithms by scanning one or more websites to determine publicly available information associated with a user; comparing compare one or more results of the parsing with a second set of information to yield compromised information associated with the user; eliminating one or more portions of the second set of information based on the comparison; presenting a third set of information to authenticate the user based on the elimination and by supplementing the first set of information with a fourth set of information; and presenting a fifth set of information to authenticate the user if the third set of information fails to reach a predetermined threshold number.

First claim

We claim:

1 . An authentication system comprising:
a server, the server including one or more processors configured to:
validate authentication information received from an application comprising instructions for execution on a device;
transmit, to the application, a request for a first set of information after validation of the authentication information,
receive, from the application, a response comprising the first set of information,
parse the first set of information using one or more template-based algorithms by scanning one or more websites to determine publicly available information associated with a user,
compare one or more results of the parsing with a second set of information, the comparison of the one or more results with the second set of information yielding compromised information associated with the user,
eliminate one or more portions of the second set of information based on the comparison,
present a third set of information to the application to authenticate the user based on the elimination of the one or more portions of the second set of information and by supplementing the first set of information with a fourth set of information, and
present a fifth set of information to authenticate the user if the third set of information fails to reach a predetermined threshold number.

2 . The authentication system of claim 1 , wherein the first set of information comprises social media information associated with the user.

3 . The authentication system of claim 1 , wherein the one or more processors are configured to parse the first set of information utilizing at least one selected from the group of an application programming interface and a web crawler.

4 . The authentication system of claim 1 , wherein the second set of information comprises knowledge-based authentication information.

5 . The authentication system of claim 1 , wherein the third set of information comprises a subset of the second set of information.

6 . The authentication system of claim 1 , wherein the one or more processors are configured to verify the one or more results of the parsing based on the one or more template-based algorithms for each type of website associated with the first set of information.

7 . The authentication system of claim 1 , wherein the fourth set of information comprises registration information associated with the user.

8 . The authentication system of claim 1 , wherein the fifth set of information comprises additional information supplemented to the second set of information.

9 . The authentication system of claim 1 , wherein the compromised information includes one or more matches associated with at least one selected from the group of a name, birthday, mascot, school, pet, location, automobile, entertainment preferences, and family.

10 . The authentication system of claim 1 , wherein the one or more processors are further configured to receive one or more additional responses from the application so as to authenticate the user, the one or more responses being responsive to the third set of information.

11 . A method of authenticating a user, the method comprising:
validating authentication information; requesting a social media handle after validating the authentication information; parsing a social media account associated with the social media handle using one or more template-based algorithms by scanning one or more websites to determine publicly available information associated with a user; comparing results of the parsing with a plurality of a first set of knowledge-based authentication questions, the comparison of the one or more results with the plurality of the first set of knowledge-based authentication questions yielding compromised information associated with the user, eliminating one or more questions of the knowledge-based authentication questions based on the comparison, presenting a second set of knowledge-based authentication questions, the second set of knowledge-based questions including a modified version of the first set of knowledge-based authentication questions based on the eliminated one or more questions, determining if the second set of knowledge-based authentication questions reaches a predetermined threshold number, and presenting additional knowledge-based authentication questions if the second set of knowledge-based authentication questions fails to reach the predetermined threshold number, and receiving one or more responses to the second set of knowledge-based authentication questions to authenticate the user.

12 . The method of claim 11 , further comprising comparing registration information associated with the user with the plurality of the first set of knowledge-based authentication questions.

13 . The method of claim 11 , wherein parsing the first set of information utilizes at least one selected from the group of an application programming interface and a web crawler.

14 . The method of claim 11 , wherein the scanning reveals at least one selected from the group of a familial connection, user activity with the social media account, name, birthday, mascot, school, pet, location, family, automobile, entertainment preferences, and any combination thereof.

15 . The method of claim 14 , wherein the user activity includes user engagement with the social media account including at least one selected from the group of posted messages, likes, comments, tweets, retweets, tags, and any combination thereof.

16 . The method of claim 11 , further comprising transmitting the social media handle via one or more prompts.

17 . The method of claim 11 , further comprising collecting user information prior to presenting the second set of knowledge-based authentication questions.

18 . The method of claim 11 , further comprising registering the user for an account after authenticating the user.

19 . The method of claim 11 , further comprising verifying the results of the parsing based on the one or more template-based algorithms for each type of website associated with the social media account.

20 . A computer readable non-transitory storage medium comprising computer-executable instructions that are executed on a processor and comprising the steps of:
validating authentication information, obtaining a first set of information after validating the authentication information, parsing the first set of information using one or more template-based algorithms by scanning one or more websites to determine publicly available information associated with a user, comparing one or more results of the parsing with a second set of information, the comparison of the one or more results with the second set of information yielding compromised information associated with the user, eliminating one or more portions of the second set of information based on the comparison, presenting a third set of information to the application based on the elimination of the one or more portions of the second set of information and by supplementing the first set of information with a fourth set of information, presenting a fifth set of information to authenticate the user if the third set of information fails to reach a predetermined threshold number, and receiving one or more responses to the third set of information so as to authenticate a user.

Assignees

• Capital One Services Llc

Inventors

• Benkreira Abdelkader
• Mossoba Michael
• Edwards Joshua

Classifications

• H04W12/06

  Authentication · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L63/102

  Entity profiles · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title