# US 11,310,281 B2 · Systems and methods for monitoring computer authentication procedures > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,310,281 B2 - Document ID: US11310281B2 - Status: Granted - Kind: B2 - Application number: 16/588,696 - Filed: 2019-09-30 - Published: 2020-01-23 - Granted: 2022-04-19 - Earliest claimed: 2015-08-27 - Assignees: Mastercard International Incorporated - Applicants: MasterCard International Incorporated - Inventors: Steve E. Hubbard; Sheryl J. Lock; Sue Ellen Moskowitz - Web page: https://patentgrep.com/patent/US11310281B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06Q 20/409: {Device specific authentication in transaction processing} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/0838: {using one-time-passwords} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method, implemented using an authentication monitoring (AM) computer device, for monitoring an execution of a digital authentication program is provided. The method includes receiving an authentication data file from an authenticating computer device executing the digital authentication program, wherein the authenticating computer device is associated with an authenticating entity, processing the authentication data file to extract at least one authentication value, testing the authentication value against at least one authentication rule associated with the digital authentication program, determining that a stored metric for the authenticating computer device fails to meet a predefined benchmark, wherein the stored metric is associated with the digital authentication program, and initiating an authentication remediation process, wherein the authentication remediation process causes an update to the digital authentication program used by the authenticating computer device. ## Claims ### Claim 1 A method for monitoring execution of a digital authentication program, the method implemented using an authentication monitoring (AM) computer device comprising a processor and a memory device, the method comprising: receiving at least one authentication data file from an authenticating computer device executing the digital authentication program, wherein the authenticating computer device is associated with an authenticating entity, wherein the authenticating computer device includes computer-executable instructions stored thereon and programmed to execute processes of the digital authentication program, wherein the authentication data file is generated during an electronic transaction performed by a cardholder using a cardholder computer device in association with a merchant computer device, and wherein the at least one authentication data file includes authentication data from a plurality of authentication procedures performed by the digital authentication program for a plurality of users; extracting at least one authentication value from the authentication data for each of the plurality of authentication procedures, wherein the at least one authentication value indicates one of a plurality of types of the corresponding authentication procedure used by the authenticating computer device; updating, for each of the types, a stored metric using the authentication data associated with the corresponding at least one authentication value, wherein the stored metric aggregates outcomes associated with the corresponding type of authentication procedure across a plurality of previous electronic transactions; determining that the stored metric for at least one of the types fails to meet a corresponding predefined benchmark for overall performance across the plurality of previous electronic transactions; in response to the determining, reducing a benefit accorded to the authenticating entity, wherein the benefit includes at least one of: access to the digital authentication program and a monetary value exchanged for use of the digital authentication program; generating one or more action recommendations for the authenticating entity, the one or more action recommendations including instructions to adjust the plurality of authentication procedures to meet the corresponding predefined benchmark; and transmitting the one or more action recommendations to the authenticating computer device. ### Claim 2 (depends on 1) The method in accordance with claim 1, wherein the authenticating entity includes at least one of an issuer and a merchant. ### Claim 3 (depends on 2) The method in accordance with claim 2, wherein the authentication value is generated by an access control server (ACS) computer device associated with the authenticating entity, and wherein the authentication value includes one or more of, a one-time-use password, a cryptographic representation of a fingerprint, a cryptographic representation of a facial feature, a cryptographic representation of a vocal recording, a predefined sequence of one or more numeric characters, and a predefined sequence of one or more alphabetical characters. ### Claim 4 (depends on 1) The method in accordance with claim 1, further comprising: receiving a test data file from the authenticating computer device; processing the test data file to extract at least one test authentication value for each of the types of authentication procedures; updating the stored metric for the authenticating computer device; determining that the stored metric fails to meet the predefined benchmark; and in response to the determining, reducing a benefit accorded to the authenticating entity. ### Claim 5 (depends on 1) The method in accordance with claim 1, wherein the at least one authentication value includes a risk-based authentication (RBA) procedure type, wherein the authentication data includes a recommendation of a level of authentication, and wherein the authentication data indicates a level of compliance with of the recommendation. ### Claim 6 (depends on 1) The method in accordance with claim 1, the method further comprising: extracting an enrollment type from the authentication data file; updating an enrollment metric corresponding to the enrollment type; determining that the enrollment metric fails to meet a predefined enrollment benchmark; and updating the stored metric based on the determined failure to meet the predefined enrollment benchmark. ### Claim 7 (depends on 1) The method in accordance with claim 1, wherein the plurality of types of authentication procedures includes disallowed types, and wherein the corresponding predefined benchmark for each disallowed type is zero usage. ### Claim 8 A system for monitoring execution of a digital authentication program, the system including an authentication monitoring (AM) computer device comprising a processor and a memory device, the AM computer device configured to: receive at least one authentication data file from an authenticating computer device executing the digital authentication program, wherein the authenticating computer device is associated with an authenticating entity, wherein the authenticating computer device includes computer-executable instructions stored thereon and programmed to execute processes of the digital authentication program, wherein the authentication data file is generated during an electronic transaction performed by a cardholder using a cardholder computer device in association with a merchant computer device, and wherein the at least one authentication data file includes authentication data from a plurality of authentication procedures performed by the digital authentication program for a plurality of users; extract at least one authentication value from the authentication data for each of the plurality of authentication procedures, wherein the at least one authentication value indicates one of a plurality of types of the corresponding authentication procedure used by the authenticating computer device; update, for each of the types, a stored metric using the authentication data associated with the corresponding at least one authentication value, wherein the stored metric aggregates outcomes associated with the corresponding type of authentication procedure across a plurality of previous electronic transactions; determine that the stored metric for at least one of the types fails to meet a corresponding predefined benchmark for overall performance across the plurality of previous electronic transactions; in response to the determining, reducing a benefit accorded to the authenticating entity, wherein the benefit includes at least one of: access to the digital authentication program and a monetary value exchanged for use of the digital authentication program; generate one or more action recommendations for the authenticating entity, the one or more action recommendations including instructions to adjust the plurality of authentication procedures to meet the corresponding predefined benchmark; and transmit the one or more action recommendations to the authenticating computer device. ### Claim 9 (depends on 8) The system in accordance with claim 8, wherein the authenticating entity includes at least one of an issuer and a merchant. ### Claim 10 (depends on 9) The system in accordance with claim 9, wherein the authentication value is generated by an access control server (ACS) computer device associated with the authenticating entity, and wherein the authentication value includes one or more of, a one-time-use password, a cryptographic representation of a fingerprint, a cryptographic representation of a facial feature, a cryptographic representation of a vocal recording, a predefined sequence of one or more numeric characters, and a predefined sequence of one or more alphabetical characters. ### Claim 11 (depends on 8) The system in accordance with claim 8, wherein the AM computer device is configured to: receive a test data file from the authenticating computer device; process the test data file to extract at least one test authentication value for each of the types of authentication procedures; update the stored metric for the authenticating computer device; determine that the stored metric fails to meet the associated predefined benchmark; and in response to the determining, reduce a benefit accorded to the authenticating entity. ### Claim 12 (depends on 11) The system in accordance with claim 11, wherein the test data file is generated by the authenticating computer device. ### Claim 13 (depends on 8) The system in accordance with claim 8, wherein the at least one authentication value includes a risk-based authentication (RBA) procedure type, wherein the authentication data includes a recommendation of a level of authentication, and wherein the authentication data indicates a level of compliance with of the recommendation. ### Claim 14 (depends on 8) The system in accordance with claim 8, wherein the AM computer device is configured to: extract an enrollment type from the authentication data file; update an enrollment metric corresponding to the enrollment type; determine that the enrollment metric fails to meet a predefined enrollment benchmark; and updating the stored metric based on the determined failure to meet the predefined enrollment benchmark. ### Claim 15 A non-transitory computer readable medium that includes computer executable instructions for monitoring an execution of a digital authentication program, wherein when executed by an authentication monitoring (AM) computer device comprising a processor and a memory device, the computer executable instructions cause the AM computer device to: receive at least one authentication data file from an authenticating computer device executing the digital authentication program, wherein the authenticating computer device is associated with an authenticating entity, wherein the authenticating computer device includes computer-executable instructions stored thereon and programmed to execute processes of the digital authentication program, wherein the authentication data file is generated during an electronic transaction performed by a cardholder using a cardholder computer device in association with a merchant computer device, and wherein the at least one authentication data file includes authentication data from a plurality of authentication procedures performed by the digital authentication program for a plurality of users; extract at least one authentication value from the authentication data for each of the plurality of authentication procedures, wherein the at least one authentication value indicates one of a plurality of types of the corresponding authentication procedure used by the authenticating computer device; update, for each of the types, a stored metric using the authentication data associated with the corresponding at least one authentication value, wherein the stored metric aggregates outcomes associated with the corresponding type of authentication procedure across a plurality of previous electronic transactions; determine that the stored metric for at least one of the types fails to meet a corresponding predefined benchmark for overall performance across the plurality of previous electronic transactions; in response to the determining, reducing a benefit accorded to the authenticating entity, wherein the benefit includes at least one of: access to the digital authentication program and a monetary value exchanged for use of the digital authentication program; generate one or more action recommendations for the authenticating entity, the one or more action recommendations including instructions to adjust the plurality of authentication procedures to meet the corresponding predefined benchmark; and transmit the one or more action recommendations to the authenticating computer device. ### Claim 16 (depends on 15) The non-transitory computer readable medium in accordance with claim 15, wherein the authentication value is generated by an access control server (ACS) computer device associated with the authenticating entity, and wherein the authentication value includes one or more of, a one-time-use password, a cryptographic representation of a fingerprint, a cryptographic representation of a facial feature, a cryptographic representation of a vocal recording, a predefined sequence of one or more numeric characters, and a predefined sequence of one or more alphabetical characters. ### Claim 17 (depends on 15) The non-transitory computer readable medium in accordance with claim 15, wherein the computer-executable instructions further cause the AM computer device to: receive a test data file from the authenticating computer device; process the test data file to extract at least one test authentication value for each of the types of authentication procedures; update the stored metric for the authenticating computer device; determine that stored metric fails to meet the predefined benchmark; and in response to the determining, reduce a benefit accorded to the authenticating entity. ### Claim 18 (depends on 17) The non-transitory computer readable medium in accordance with claim 17, wherein the test data file is generated by the authenticating computer device. ### Claim 19 (depends on 15) The non-transitory computer readable medium in accordance with claim 15, wherein the at least one authentication value includes a risk-based authentication (RBA) procedure type, wherein the authentication data includes a recommendation of a level of authentication, and wherein the authentication data indicates a level of compliance with of the recommendation. ### Claim 20 (depends on 15) The non-transitory computer readable medium in accordance with claim 15, wherein the computer-executable instructions further cause the AM computer device to: extract an enrollment type from the authentication data file; update an enrollment metric corresponding to the enrollment type; determine that the enrollment metric fails to meet a predefined enrollment benchmark; and update the stored metric based on the determined failure to meet the predefined enrollment benchmark.