# US 12,112,333 B2 · Contextually escalated authentication by system directed customization of user supplied image

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,112,333 B2
- Document ID: US12112333B2
- Status: Granted
- Kind: B2
- Application number: 18/481,772
- Filed: 2023-10-05
- Published: 2024-02-01
- Granted: 2024-10-08
- Earliest claimed: 2019-02-18
- Assignees: Wells Fargo Bank, N.A.
- Applicants: Wells Fargo Bank, N.A.
- Inventors: Om Sri Chaturvedi Tiprika; Srinivasa Reddy Elakoti
- Web page: https://patentgrep.com/patent/US12112333B2

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour}
- G06F 21/36: by graphic or iconic representation
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06F 2221/2133: Verifying human interaction, e.g., Captcha
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A secure authentication system, computer program recording medium and method enable secure transaction with authentication to eradicate fraud. A customer is authenticated via a customer application executed on a communication device. A customer-paced communication session is enabled between the customer application and a transaction system via a network connection. A customer continuity factor is monitored in maintaining the communication session. In response to receiving a customer request via the customer application, a level of trust in current authentication of the customer is determined based on the user continuity factor. In response to the level of trust being below a trust threshold, the customer is directed via the customer application to provide a customer request comprising a customer-supplied image having a specified contextual element. The communication session is re-authenticated to process the user input by the transaction system based on verification of the received user-supplied image.

## Claims

### Claim 1

A method for user authentication, the method comprising:
receiving, from a communication device, image data representative of a customer-supplied image, heart rate data representative of a heart rate of a customer, and movement data representative of a movement of the customer; and
in response to receiving the image data, the heart rate data, and the movement data:
making a first determination that a specified tangible thing represented in the image data matches another instance of the specified tangible thing represented in a previously received customer-supplied image,
making a second determination that the customer is mentally qualified to make a customer request by determining that the heart rate data is correlated with a heart rate associated with the movement of the customer specified by the movement data, and
executing the customer request based on the first determination and the second determination.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
accessing, from a storage device, customer profile data representative of the customer with one or more customer-specific tangible things that have previously accompanied the customer to authenticate the customer.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
receiving, from the communication device, the customer request representative of a transaction associated with a customer profile of the customer;
selecting, from customer profile data, a specified tangible thing from one or more customer-specific tangible things to be included in the image data; and
causing transmission, to the communication device, of image instruction data representative of instructions to the customer to provide the image data representative of a customer-supplied image, wherein the customer-supplied image comprises the specified tangible thing.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
causing transmission, to the communication device, of physiological instruction data representative of instructions to the communication device to provide the heart rate data and the movement data.

### Claim 5 (depends on 1)

The method of claim 1, wherein one or more of the heart rate data or the movement data is detected by one or more of the communication device or a fitness tracker device communicatively coupled to the communication device.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
making a third determination that the customer request is usual for the customer based on past interactions associated with customer profile data of the customer.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
authenticating the customer via the communication device; and
in response to authenticating the customer:
enabling a customer-paced communication session with the communication device, and
monitoring a customer continuity factor during the customer-paced communication session, wherein monitoring the customer continuity factor comprises monitoring one or more of a customer interaction with the communication device or an interruption event.

### Claim 8

An authentication system for user authentication, the authentication system comprising:
a communication module; and
a controller communicatively coupled to the communication module, the controller configured to:
receive, from a communication device, image data representative of a customer-supplied image, heart rate data representative of a heart rate of a customer, and movement data representative of a movement of the customer; and
in response to receiving the image data, the heart rate data, and the movement data:
make a first determination that a specified tangible thing represented in the image data matches another instance of the specified tangible thing represented in a previously received customer-supplied image,
make a second determination that the customer is mentally qualified to make a customer request by determining that the heart rate data is correlated with a heart rate associated with the movement of the customer specified by the movement data, and
execute the customer request based on the first determination and the second determination.

### Claim 9 (depends on 8)

The authentication system of claim 8, wherein the controller is further configured to:
access, from a storage device, customer profile data representative of the customer with one or more customer-specific tangible things that have previously accompanied the customer to authenticate the customer.

### Claim 10 (depends on 8)

The authentication system of claim 8, wherein the controller is further configured to:
receive, from the communication device, the customer request representative of a transaction associated with a customer profile of the customer;
select, from customer profile data, a specified tangible thing from one or more customer-specific tangible things to be included in the image data; and
cause transmission, to the communication device, of image instruction data representative of instructions to the customer to provide the image data representative of a customer-supplied image, wherein the customer-supplied image comprises the specified tangible thing.

### Claim 11 (depends on 8)

The authentication system of claim 8, wherein the controller is further configured to:
cause transmission, to the communication device, of physiological instruction data representative of instructions to the communication device to provide the heart rate data and the movement data.

### Claim 12 (depends on 8)

The authentication system of claim 8, wherein one or more of the heart rate data or the movement data is detected by one or more of the communication device or a fitness tracker device communicatively coupled to the communication device.

### Claim 13 (depends on 8)

The authentication system of claim 8, wherein the controller is further configured to:
make a third determination that the customer request is usual for the customer based on past interactions associated with customer profile data of the customer.

### Claim 14 (depends on 8)

The authentication system of claim 8, wherein the controller is further configured to:
authenticate the customer via the communication device; and
in response to authenticating the customer:
enable a customer-paced communication session with the communication device, and
monitor a customer continuity factor during the customer-paced communication session, wherein monitoring the customer continuity factor comprises monitoring one or more of a customer interaction with the communication device or an interruption event.

### Claim 15

A computer program product for user authentication, the computer program product comprising at least one non-transitory computer-readable storage medium comprising computer-executable instructions that, when executed, cause an apparatus to:
receive image data representative of a customer-supplied image, heart rate data representative of a heart rate of a customer, and movement data representative of a movement of the customer; and
in response to receiving the image data, the heart rate data, and the movement data:
make a first determination that a specified tangible thing represented in the image data matches another instance of the specified tangible thing represented in a previously received customer-supplied image,
make a second determination that the customer is mentally qualified to make a customer request by determining that the heart rate data is correlated with a heart rate associated with the movement of the customer specified by the movement data, and
execute the customer request based on the first determination and the second determination.

### Claim 16 (depends on 15)

The computer program product of claim 15, wherein the computer-executable instructions that, when executed, further cause the apparatus to:
access customer profile data representative of the customer with one or more customer-specific tangible things that have previously accompanied the customer to authenticate the customer.

### Claim 17 (depends on 15)

The computer program product of claim 15, wherein the computer-executable instructions that, when executed, further cause the apparatus to:
receive the customer request representative of a transaction associated with a customer profile of the customer;
select a specified tangible thing from one or more customer-specific tangible things to be included in the image data; and
cause transmission of image instruction data representative of instructions to the customer to provide the image data representative of a customer-supplied image, wherein the customer-supplied image comprises the specified tangible thing.

### Claim 18 (depends on 1)

The computer program product of claim 1, wherein the computer-executable instructions that, when executed, further cause the apparatus to:
cause transmission of physiological instruction data representative of instructions to a communication device to provide the heart rate data and the movement data.

### Claim 19 (depends on 15)

The computer program product of claim 15, wherein one or more of the heart rate data or the movement data is detected by one or more of a communication device or a fitness tracker device communicatively coupled to the communication device.

### Claim 20 (depends on 1)

The computer program product of claim 1, wherein the computer-executable instructions that, when executed, further cause the apparatus to:
make a third determination that the customer request is usual for the customer based on past interactions associated with customer profile data of the customer.