# US 11,907,352 B2 · Biometric override for incorrect failed authorization

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,907,352 B2
- Document ID: US11907352B2
- Status: Granted
- Kind: B2
- Application number: 18/178,619
- Filed: 2023-03-06
- Published: 2023-06-29
- Granted: 2024-02-20
- Earliest claimed: 2020-12-16
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Aditya Pai; Brice Elder; Julie Murakami; Allison Fenichel
- Web page: https://patentgrep.com/patent/US11907352B2

## CPC

- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 20/425: {using two different networks, one for transaction and one for security confirmation}
- H04L 67/55: Push-based network services
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

In some implementations, an authorization device generate a decision to reject an authorization request that includes a credential associated with a user based on one or more inconsistencies between entity information provided in the authorization request and authorized entity information associated with the credential. The authorization device may transmit, to a biometric-enabled device associated with the user, a message that causes the biometric-enabled device to display a prompt indicating the one or more inconsistencies between the entity information provided in the authorization request and the authorized entity information associated with the credential. In some implementations, the prompt may further enable the user to provide a biometric input to authorize the entity information provided in the authorization request. The authorization device may grant the authorization request based on receiving information indicating that the user provided the biometric input to authorize the entity information provided in the authorization request.

## Claims

### Claim 1

A method, comprising:
rejecting, by a device, a first request including a credential based on entity information, provided with the first request, having inconsistencies with respect to authorized entity information associated with the credential;
receiving, by the device and from another device, a biometric input associated with a user, associated with the first request, to authorize the entity information;
updating, by the device, the authorized entity information based on the entity information based on receiving the biometric input to authorize the entity information;
receiving, by the device, a second request that includes the entity information; and
authorizing, by the device, the second request based on updating the authorized entity information to include the entity information.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
transmitting a message prompting the user to provide the biometric input to authorize the entity information,
wherein the message includes information indicating one or more differences between the entity information and the authorized entity information.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
determining a recommendation associated with whether the user should approve or disapprove the entity information.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
authorizing the first request based on receiving the biometric input.

### Claim 5 (depends on 1)

The method of claim 1, wherein updating the authorized entity information comprises: replacing the authorized entity information with the entity information.

### Claim 6 (depends on 1)

The method of claim 1, wherein updating the authorized entity information includes:
maintaining a previous binding between the authorized entity information and the credential, and
binding a new credential to the entity information.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
updating global information associated with a merchant associated with the authorized entity information based on the biometric override.

### Claim 8

A system, comprising:
one or more memories; and
one or more processors, coupled to the one or more memories, configured to:
reject a first request including a credential based on entity information, provided with the first request, having inconsistencies with respect to authorized entity information associated with the credential;
receive, from another device, a biometric input associated with a user, associated with the first request, to authorize the entity information;
update the authorized entity information based on the entity information based on receiving the biometric input to authorize the entity information;
receive a second request that includes the entity information; and
authorize the second request based on updating the authorized entity information to include the entity information.

### Claim 9 (depends on 8)

The system of claim 8, wherein the one or more processors are further configured to:
Transmit a message prompting the user to provide the biometric input to authorize the entity information,
wherein the message includes information indicating one or more differences between the entity information and the authorized entity information.

### Claim 10 (depends on 8)

The system of claim 8, wherein the one or more processors are further configured to:
determine a recommendation associated with whether the user should approve or disapprove the entity information.

### Claim 11 (depends on 8)

The system of claim 8, wherein the one or more processors are further configured to:
authorize the first request based on receiving the biometric input.

### Claim 12 (depends on 8)

The system of claim 8, wherein the one or more processors, to update the authorized entity information, are configured to replace the authorized entity information with the entity information.

### Claim 13 (depends on 8)

The system of claim 8, wherein the one or more processors, to update the authorized entity information, are configured to:
maintain a previous binding between the authorized entity information and the credential, and
bind a new credential to the entity information.

### Claim 14 (depends on 8)

The system of claim 8, wherein the one or more processors are further configured to:
update global information associated with a merchant associated with the authorized entity information based on the biometric override.

### Claim 15

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a system, cause the system to:
reject a first request including a credential based on entity information, provided with the first request, having inconsistencies with respect to authorized entity information associated with the credential;
receive, from another device, a biometric input associated with a user, associated with the first request, to authorize the entity information;
update the authorized entity information based on the entity information based on receiving the biometric input to authorize the entity information;
receive a second request that includes the entity information; and
authorize the second request based on updating the authorized entity information to include the entity information.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the system to:
transmit a message prompting the user to provide the biometric input to authorize the entity information,
wherein the message includes information indicating one or more differences between the entity information and the authorized entity information.

### Claim 17 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the system to:
determine a recommendation associated with whether the user should approve or disapprove the entity information.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions further cause the system to:
authorize the first request based on receiving the biometric input.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, that cause the system to update the authorized entity information, cause the system to replace the authorized entity information with the entity information.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, that cause the system to update the authorized entity information, cause the system to:
maintain a previous binding between the authorized entity information and the credential, and
bind a new credential to the entity information.