US 11,601,418 B2Granted

System for increasing authentication complexity for access to online systems

AssigneeBank of America Corporation

InventorBrandon Sloane

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system is provided for increasing authentication complexity for access to online systems. In particular, the system may use a hidden or obscured method for creating and enforcing a multi-factor authentication scheme. In this regard, the system may introduce authentication logic to a particular application in the network environment such that one or more “invalid” login credentials are generated by a local agent using a pre-shared key and/or algorithm. A back-end authentication system may be calculate its own set of “invalid” login credentials based on the same pre-shared key and/or algorithm, then subsequently compare the calculated incorrect credentials with the incorrect login credentials received from the local agent. If a match is detected, the system may permit a valid set of authentication credentials to be provided to authorize access to the target application and/or online system.

Claims20

Dependent claims

A system for increasing authentication complexity for access to online systems, the system comprising a backend authentication system device comprising:

a first memory device with first computer-readable program code stored thereon;
a first communication device;
and
a first processing device operatively coupled to the first memory device and the first communication device,
wherein the system further comprises a user computing device comprising:
a second memory device with second computer-readable program code stored thereon;
a second communication device;
and
a second processing device operatively coupled to the second memory device and the second communication device,
wherein the first processing device of the backend authentication system device is configured to execute the first computer-readable program code to:
detect a sequence of authentication requests from a user, wherein the sequence of authentication requests comprises a series of login attempts, wherein each login attempt is associated with a set of authentication credentials within one or more sets of authentication credentials associated with a user application, the one or more sets of authentication credentials comprising one or more sets of invalid authentication credentials and a set of valid authentication credentials;
based on the one or more authentication requests, generate one or more randomized strings associated with the one or more authentication requests;
receive, through a backend authentication agent, the one or more sets of invalid authentication credentials from the user application;
generate, by the backend authentication agent using the one or more randomized strings and a pre-shared algorithm, one or more backend copies of the one or more sets of invalid authentication credentials;
and
perform authentication of the user based on the sequence of authentication requests, wherein performing authentication comprises evaluating a match between 1) the one or more sets of invalid authentication credentials with the one or more backend copies of the one or more sets of invalid authentication credentials;
and 2) the set of valid authentication credentials with an expected value for the set of valid authentication credentials,
wherein the second processing device of the user computing device is configured to execute the second computer-readable program code to:
generate, by a local authentication agent using the one or more randomized strings and the pre-shared algorithm, the one or more sets of invalid authentication credentials;
input the one or more sets of invalid authentication credentials to the user application.

17 more elements

A computer program product for increasing authentication complexity for access to online systems, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising executable code portions for:

detecting a sequence of authentication requests from a user, wherein the sequence of authentication requests comprises a series of login attempts, wherein each login attempt is associated with a set of authentication credentials within one or more sets of authentication credentials associated with a user application, the one or more sets of authentication credentials comprising one or more sets of invalid authentication credentials and a set of valid authentication credentials;
based on the one or more authentication requests, generating one or more randomized strings associated with the one or more authentication requests;
generating, by a local authentication agent using the one or more randomized strings and a pre-shared algorithm, one or more sets of invalid authentication credentials;
inputting the one or more sets of invalid authentication credentials to the user application;
receiving, through a backend authentication agent, the one or more sets of invalid authentication credentials from the user application;
generating, by the backend authentication agent using the one or more randomized strings and the pre-shared algorithm, one or more backend copies of the one or more sets of invalid authentication credentials;
and
performing authentication of the user based on the sequence of authentication requests, wherein performing authentication comprises evaluating a match between 1) the one or more sets of invalid authentication credentials with the one or more backend copies of the one or more sets of invalid authentication credentials;
and 2) the set of valid authentication credentials with an expected value for the set of valid authentication credentials.

6 more elements

A computer-implemented method for increasing authentication complexity for access to online systems, wherein the computer-implemented method comprises:

detecting a sequence of authentication requests from a user, wherein the sequence of authentication requests comprises a series of login attempts, wherein each login attempt is associated with a set of authentication credentials within one or more sets of authentication credentials associated with a user application, the one or more sets of authentication credentials comprising one or more sets of invalid authentication credentials and a set of valid authentication credentials;
based on the one or more authentication requests, generating one or more randomized strings associated with the one or more authentication requests;
generating, by a local authentication agent using the one or more randomized strings and a pre-shared algorithm, one or more sets of invalid authentication credentials;
inputting the one or more sets of invalid authentication credentials to the user application;
receiving, through a backend authentication agent, the one or more sets of invalid authentication credentials from the user application;
generating, by the backend authentication agent using the one or more randomized strings and the pre-shared algorithm, one or more backend copies of the one or more sets of invalid authentication credentials;
and
performing authentication of the user based on the sequence of authentication requests, wherein performing authentication comprises evaluating a match between 1) the one or more sets of invalid authentication credentials with the one or more backend copies of the one or more sets of invalid authentication credentials;
and 2) the set of valid authentication credentials with an expected value for the set of valid authentication credentials.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/070,457Filed 14 Oct 2020
Published: US 2022/0116380 A114 Apr 2022
Granted: 7 Mar 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/083
For authentication of entities: using passwords
H04L 63/0884
For authentication of entities: by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity…
H04L 63/105
For controlling access to devices or network resources: multiple levels of security
H04L 69/22
Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass:…