System and method for identity authentication

Patent metadata

Field	Value
Publication number	US-9961076-B2
Application number	US-201514708974-A
Country	US
Kind code	B2
Filing date	May 11, 2015
Priority date	May 11, 2015
Publication date	May 1, 2018
Grant date	May 1, 2018

Abstract

A system, comprising includes an orchestration server including a processor, the orchestration server to receive authentication factors. A rules engine connects with the orchestration server, the orchestration to send the authentication factors to the rules engine and to request a decision on authentication from the rules engine. The rules engine to send the decision on authentication to the orchestration server based on the received authentication factors and a rules set.

First claim

The invention claimed is:

1. A system, comprising:
a switch configured to receive a plurality of communications for routing to one or more contact center resources;
a processor coupled to the switch; and
a memory coupled to the processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to:
access a rule set and receive, at an orchestration server operating as part of a contact center system, a first set of authentication factors, from a source, based on the rule set;
transmit, to a rules engine from the orchestration server, the first set of authentication factors and request a first decision on authentication from the rules engine based on the first set of authentication factors and the rule set,
receive, by the orchestration server, the first decision on authentication to the orchestration server based on the received first set of authentication factors and the rules set;
update the rule set, by the orchestration server, based on the first decision on authentication to generate an updated rule set;
receive, at the orchestration server, a second set of authentication factors based on the updated rule set;
transmit, to the rules engine from the orchestration server, the second set of authentication factors and request a second decision on authentication from the rules engine based on the second set of authentication factors and the updated rule set;
determine whether or not an environment of the source is noisy;
request, in response to determining the environment of the source is not noisy, a voice biometric authentication factor;
receive, from an interactive voice response server, the voice biometric authentication factor;
receive, by the orchestration server, the second decision on authentication to the orchestration server based on the second set of authentication factors and the updated rules set; and
transmit a signal to the switch for routing a communication between a device operated by a user and a contact center resource based on the first and second decisions on authentication, wherein the first and second decisions on authentication are displayed as a score.

2. The system of claim 1 , where the authentication factors include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

3. The system of claim 1 , wherein the instructions further cause the processor to receive the authentication factors from at least one of a mobile device and an enterprise server.

4. The system of claim 1 , where the interactive voice response server initiates automated contact to obtain additional authentication factors.

5. The system of claim 1 , wherein the instructions further cause the processor to transmit an authentication signal to an agent station, where the agent station is not involved during the authentication.

6. The system of claim 1 , where authentication comprises a minimum number N of authentication factors out of M available choices being met.

7. The system of claim 1 , wherein the instructions further cause the processor to grant a limited right if the authentication is partially passed.

8. A method, comprising:
receiving, by a processor, a first authentication factor from a first source based on a rule set;
receiving, by the processor, a second authentication factor from a second source based on a rule set;
requesting, by the processor, a first decision on authentication based on the first authentication factor and the second authentication factor;
updating, by the processor, the rule set based on the first decision on authentication to generate an updated rule set;
receiving, by the processor an updated authentication factor from the first source based on the updated rule set;
determining, by the processor, whether or not an environment of the first source is noisy;
requesting, in response to determining the environment of the first source is not noisy, by the processor, a voice biometric authentication factor;
receiving, from an interactive voice response server, the voice biometric authentication factor;
receiving, by the processor and updated authentication factor from the second source based on the updated rule set;
requesting, by the processor, a second decision on authentication based on the updated authentication factors from the first and second sources;
providing, by the processor, an access right based on the first and second decisions on authentication; and
transmitting, by the processor, a signal to a switch for routing a communication between a device operated by a user and a contact center resource based on the first and second decisions on authentication and the access right, wherein the first and second decisions on authentication is displayed as a score.

9. The method of claim 8 , where the first authentication factor and the second authentication factor include at least one of a PIN, a touch identification, a voice biometric, a facial recognition, a social security number, and OAuth decision.

10. The method of claim 8 , further comprising:
determining, by the processor, whether or not an environment of the first source is outdoors; and
in response to determining the environment of the first source is not outdoors, requesting, by the processor, a facial recognition authentication factor.

11. The method of claim 8 , further comprising determining, by the processor, whether or not the first source provides fingerprint identification; and
in response to determining the first source provides fingerprint identification, requesting, by the processor, a fingerprint identification authentication factor.

12. The method of claim 8 , where an agent station is not involved during the authentication.

13. The method of claim 8 , where authentication comprises meeting a minimum number N of authentication factors out of M choices.

14. The method of claim 8 , further comprising displaying, by the processor, the decision on authentication as a score.

15. The method of claim 8 , further comprising granting, by the processor, a limited right if the authentication is partially passed.

16. A contact center system, comprising:
a switch configured to receive a plurality of communications for routing to one or more contact center resources;
a processor coupled to the switch; and
a memory coupled to the processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to:
access a rule set and receive, at an orchestration server, a first set of authentication factors, from a source, based on the rule set, wherein the first set of authentication factors comprises of a voice biometric authentication factor from an interactive voice response server;
transmit, to a rules engine from the orchestration server, the first set of authentication factors and request a first decision on authentication from the rules engine
receive, from the rules engine, the first decision on authentication, based on the received first set of authentication factors and the rules set;
update the rule set, by the orchestration server, based on the first decision on authentication to generate an updated rule set;
determine, whether or not an environment of the source from is noisy;
request, in response to determining the environment of the source is not noisy, a voice biometric authentication factor;
receive from the interactive voice response server the voice biometric authentication factor;
receive, at the orchestration server, a second set of authentication factors based on the updated rule set wherein the seco

Assignees

• Genesys Telecommunications Laboratories Inc
• Genesys Telecommunications Laboratoreis Inc

Inventors

• Stoops Daniel
• Kraeulter James
• Bell Cliff

Classifications

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/06

  Authentication · CPC title