System and method for dual remote authentication of digital assisted shopping agents and customers using proximity-based mobile device interactions, enterprise security, and biometrics

An information security system for dual, simultaneous, single-session, proximity-based, secure authentication of a Digital Assisted Shopping (DAS) representative using an enterprise mobile device and a customer using a non-enterprise mobile device in an unsecured remote location, the system comprising:

• a non-transitory computer-readable medium storing instructions that, when executed by one or more processors of the enterprise mobile device and the non-enterprise mobile device, cause the enterprise mobile device and the non-enterprise mobile device to implement:
• a mobile banking application installed on the non-enterprise mobile device of the customer, the mobile banking application including embedded security microservices for biometric identity verification;
• an enterprise application installed on the enterprise mobile device of the DAS representative, the enterprise application including biometric identity verification capabilities;
• a Bluetooth proximity detection module configured to detect the proximity of the non-enterprise mobile device and the enterprise mobile device when within a predefined Bluetooth proximity range;
• a push notification module configured to send a push notification from the enterprise mobile device to the non-enterprise mobile device to initiate a digital assisted shopping session;
• a secure local handshake module configured to establish a secure local handshake between the mobile banking application on the non-enterprise mobile device and the enterprise application on the enterprise mobile device by exchanging encryption keys and performing mutual authentication;
• a local wireless encrypted communication module configured to establish a local wireless encrypted communication channel between the mobile banking application and the enterprise application using the encryption keys;
• a Customer Relationship Management (CRM) integration module configured to retrieve a customer profile and existing financial accounts, products, and services from a CRM system to the enterprise application;
• an artificial intelligence (AI) and machine learning (ML) module configured to analyze the customer profile, transaction history, and financial goals to identify suitable financial accounts, products, and services for the customer;
• a secure screen sharing module configured to securely share a screen from the enterprise application to the mobile banking application to provide information regarding available financial accounts, products, and services;
• an enhanced verification module configured to perform enhanced verifications if the financial accounts, products, and services require additional security;
• a secure cloud communication module configured to facilitate communication over a secure cloud connection between the enterprise application and a central banking system to facilitate enrollment in the financial accounts, the products, and the services;
• a geolocation monitoring module configured to continuously monitor the geolocation of both the enterprise mobile device and the non-enterprise mobile device to confirm proximity and verify that the DAS representative and the customer are not in a prohibited or dangerous location;
• a background biometric verification module configured to perform periodic background biometric verification of both the customer and the DAS representative during the session without disturbing them;
• and
• a session termination module configured to terminate the session if any security breaches, failed verifications, or prohibited locations are detected during the session.

An information security method for secure authentication and communication between a Digital Assisted Shopping (DAS) representative using an enterprise mobile device and a customer using a non-enterprise mobile device, the method comprising the steps of:

• performing biometric identity verification on the non-enterprise mobile device of the customer, wherein the biometric identity verification includes capturing biometric data using the mobile banking application and comparing the captured biometric data to pre-stored biometric data for the customer;
• performing biometric identity verification on the enterprise mobile device of the DAS representative, wherein the biometric identity verification includes capturing biometric data using an enterprise application and comparing the captured biometric data to pre-stored biometric data for the DAS representative;
• automatically detecting proximity of the non-enterprise mobile device and the enterprise mobile device using Bluetooth Low Energy (BLE) technology, wherein proximity is detected when the devices are within a predefined proximity range;
• initiating a secure session between the non-enterprise mobile device and the enterprise mobile device upon detecting the proximity, wherein the initiation includes sending a push notification from the enterprise mobile device to the non-enterprise mobile device to initiate a digital assisted shopping session and receiving an acknowledgment of the push notification from the non-enterprise mobile device;
• establishing a secure communication channel between the non-enterprise mobile device and the enterprise mobile device, wherein the secure communication channel is established by performing a secure local handshake that includes exchanging encryption keys using asymmetric encryption, generating a shared session key using a Diffie-Hellman key exchange protocol, and performing mutual authentication using digital certificates or pre-shared keys;
• exchanging data related to customer profiles, financial accounts, products, and services between the non-enterprise mobile device and the enterprise mobile device through the secure communication channel, wherein the data exchange includes retrieving customer profiles and financial account information from a Customer Relationship Management (CRM) system to the enterprise application, sending push notifications to the mobile banking application for profile review and updates, and utilizing artificial intelligence (AI) or machine learning (ML) algorithms to analyze the customer profile, transaction history, and financial goals to identify suitable financial accounts, products, and services for the customer;
• continuously monitoring geolocation of both the enterprise mobile device and the non-enterprise mobile device to ensure proximity and safety, wherein the geolocation monitoring uses GPS, Wi-Fi, and cellular data to track locations of the devices and sends real-time alerts if the devices move out of a required proximity range or enter a prohibited area;
• performing periodic biometric re-verifications of both the customer and the DAS representative during the session, wherein the biometric re-verifications are performed in a background without user disruption and are integrated seamlessly into the mobile banking application's and enterprise application's operation;
• proposing financial accounts, products, and services to the customer through a digital assistant shopping process, wherein the process includes:
• analyzing the customer's profile, transaction history, and financial goals using AI or ML algorithms;
• generating a list of recommended financial accounts, products, and services based on the analysis;
• securely sharing the generated list with the customer via the mobile banking application;
• allowing the customer to review and select desired financial accounts, products, and services through the mobile banking application;
• providing detailed information and options for each recommended financial account, product, and service through secure screen sharing from the enterprise application to the mobile banking application;
• facilitating customer selections by enabling secure, real-time enrollment and transaction processing through the secure communication channel;
• and
• terminating the session if any security breaches or anomalies are detected, wherein session termination includes logging an event and alerting both the customer and the DAS representative of the termination and a reason for it.