Systems and methods for managing resource access permissions

Patent metadata

Field	Value
Publication number	US-2025158820-A1
Application number	US-202318506754-A
Country	US
Kind code	A1
Filing date	Nov 10, 2023
Priority date	Nov 10, 2023
Publication date	May 15, 2025
Grant date	—

Abstract

Systems and methods for managing resource access permissions for users with secured and unsecured authentication tokens. In some aspects, the system may receive, from a user, a resource access request for a system. The resource access request may include a user identifier and a first activity for the resource access request. The system may retrieve information regarding authentication tokens associated with the user usable to process the resource access request. In response to determining whether the user is associated with the secured authentication token and the unsecured authentication token, the system may process, using a machine learning model, the resource access request to determine a measure of risk to the system that is associated with executing the resource access request for the user. In response to determining that the measure of risk is below a threshold, the system may process the resource access request using the unsecured authentication token.

First claim

What is claimed is:

1 . A system for managing resource access permissions for users with secured and unsecured authentication tokens, comprising:
one or more processors; and one or more non-transitory computer-readable media storing instructions that when executed by the one or more processors cause operations comprising:
receiving, from a user, a resource access request for a system, wherein the resource access request comprises a user identifier and a first activity for the resource access request;
retrieving information regarding authentication tokens associated with the user usable to process the resource access request;
determining that the user is associated with a secured authentication token and an unsecured authentication token, wherein the unsecured authentication token is associated with higher priority resources compared to the secured authentication token, wherein the unsecured authentication token requires a measure of risk associated with the resource access request to be below a threshold risk to avoid abuse of the higher priority resources;
in response to determining the user is associated with the secured authentication token and the unsecured authentication token, processing, using a machine learning model, the resource access request to determine a measure of risk to the system that is associated with executing the resource access request for the first activity for the user; and
in response to determining that the measure of risk is below a threshold, processing the resource access request for the first activity using the unsecured authentication token.

2 . A method for managing resource access permissions for users with secured and unsecured authentication tokens, comprising:
receiving, from a first user, a resource access request for a system, wherein the resource access request comprises a user identifier and a first activity for the resource access request; retrieving information regarding authentication tokens associated with the first user usable to process the resource access request, the authentication tokens including a secured authentication token and an unsecured authentication token associated with the first user, wherein the unsecured authentication token is associated with higher priority resources compared to the secured authentication token, wherein the unsecured authentication token requires a measure of risk associated with the resource access request to be below a threshold risk to avoid abuse of the higher priority resources; processing, using a machine learning model, the resource access request to determine a measure of risk to the system that is associated with executing the resource access request for the first activity for the first user; and in response to determining that the measure of risk is below a threshold, processing the resource access request for the first activity using the unsecured authentication token.

3 . The method of claim 2 , further comprising:
receiving, from a second user, a second resource access request for the system, wherein the second resource access request comprises a second user identifier and a second activity for the second resource access request; retrieving information regarding authentication tokens associated with the second user usable to process the second resource access request; determining that the second user is only associated with a second secured authentication token, wherein a risk associated with activities executed with the second secured authentication token is accommodated by the second user; and processing the second resource access request for the second activity using the second secured authentication token.

4 . The method of claim 2 , wherein processing, using a machine learning model, the resource access request to determine a measure of risk further comprises:
receiving, from a database, a resource access history corresponding to the first user; and based on processing the resource access history using the machine learning model, determining the measure of risk associated with executing the resource access request for the first activity for the first user.

5 . The method of claim 2 , wherein processing, using a machine learning model, the resource access request to determine a measure of risk further comprises:
determining an amount associated with the first activity for the resource access request; transmitting a request to a database for a plurality of resource access records for the amount associated with the first activity for the resource access request; and processing the plurality of resource access records using the machine learning model to determine the measure of risk associated with executing the resource access request for the first activity for the first user.

6 . The method of claim 2 , further comprising:
receiving, from the first user, a second resource access request for a system, wherein the second resource access request comprises the user identifier and a second activity for the second resource access request; determining an updated measure of risk to the system that is associated with executing the second resource access request for the first user; and in response to determining that the measure of risk is not below the threshold, processing the second resource access request for the second activity using the secured authentication token.

7 . The method of claim 6 , further comprising:
determining an amount limit corresponding to the secured authentication token associated with the first user; and updating the amount limit after processing the resource access request for the first activity using the secured authentication token.

8 . The method of claim 2 , wherein processing, using the machine learning model, the resource access request to determine the measure of risk to the system that is associated with executing the resource access request for the first activity for the first user further comprises:
transmitting a request to determine an available amount of resources corresponding to the first user; and in response to determining the available amount of resources corresponding to the first user is less than an amount associated with the first activity, determining the measure of risk is higher than the threshold.

9 . The method of claim 2 , wherein processing, using the machine learning model, the resource access request to determine the measure of risk to the system that is associated with executing the resource access request for the first activity for the first user further comprises:
transmitting a request to determine an available amount of resources corresponding to the first user; and in response to determining the available amount of resources corresponding to the first user is more than an amount associated with the first activity, determining the measure of risk is lower than the threshold.

10 . The method of claim 2 , further comprising:
receiving, from a user device associated with the first user, a pre-access request, wherein the pre-access request comprises a user identifier and an activity for the pre-access request; processing, using a machine learning model, the pre-access request to determine a measure of risk to the system that is associated with executing a resource access request for the activity for the first user; and generating a notification to the user device, wherein the notification comprises whether the system processes the resource access request with the unsecured authentication token or the secured authentication token for the activity.

11 . The method of claim 2 , wherein processing, using the machine learning model, the resource access request to determine a measure of risk fu

Assignees

• Capital One Services Llc

Inventors

• Douglas Lawrence
• Rule Jeffrey
• Macomber Jackson

Classifications

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title