US 2019/0058700 A1Published application

Elastic authentication system

AssigneeBank of America Corporation

InventorsManu Jacob Kurian, Sorin N. Cismas, James P. Scopis, Paul Grayson Roscoe, Thomas J. Durkin

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of the invention are directed to a system, method, or computer program product for providing elastic authentication based on a continuum of elastic authentication credentials. In particular, the invention provides a secure platform for authorization of a user activity at least partly based on validation of the continuum of elastic authentication credentials comprising cumulative tiered elastic authentication tokens captured during an extended time period prior to initiation of a user activity. The invention provides a novel method for capturing multiple elastic authentication tokens, for example, arbitrarily during an extended time period preceding a user activity, and validating the cumulative elastic authentication tokens at a time during or after initiation of the user activity. Another aspect of the invention is directed to mitigating interception of authentication credentials by employing the elastic authentication tokens captured/received using multiple communication channels over various time periods preceding the user activity.

Claims24

Dependent claims

A system for providing elastic authentication based on a continuum of elastic authentication credentials, wherein the system provides a secure platform for authorization based on validation of the continuum of elastic authentication credentials comprising cumulative tiered elastic authentication tokens captured during an extended time period prior to initiation of a user activity, the system comprising:

at least one memory device;
at least one communication device connected to a distributed network;
at least one processing device operatively coupled to the at least one memory device;
and
a module stored in the at least one memory device comprising executable instructions that when executed by the at least one processing device, cause the at least one processing device to:
generate a first elastic authentication credential capture signal structured to cause a first authentication credential capture device to initiate collection of one or more elastic authentication tokens;
establish an operative communication link with the first authentication credential capture device associated with a user;
transmit, via the operative communication link, the first elastic authentication credential capture signal to the first authentication credential capture device, wherein the first elastic authentication credential capture signal is structured to cause the first authentication credential capture device to initiate capture of a first elastic authentication token of the one or more elastic authentication tokens at a first time period;
receive, from the first authentication credential capture device, the first elastic authentication token associated with the user, wherein the first elastic authentication token is captured during the first time period;
receive, from a second authentication credential capture device, a second elastic authentication token associated with the user, wherein the second elastic authentication token is captured during a second time period succeeding the first time period;
receive, a request to execute a user activity at a third time period succeeding the second time period, wherein the user activity requires authorization of the user;
construct a continuum of elastic authentication credentials, wherein the continuum of elastic authentication credentials comprises the first elastic authentication token captured during the first time period, and the second elastic authentication token captured during the second time period, wherein the first time period and the second time period precede the third time period of receiving the request to execute the user activity;
authorize the user for the user activity at the third time period based on at least the successful validation of the continuum of elastic authentication credentials captured prior to receiving the request to execute the user activity at the third time period;
and
allow the user to execute the user activity based on at least the successful authorization of the user.

12 more elements

A computer program product for providing elastic authentication based on a continuum of elastic authentication credentials, whereby the computer program product is structured to provide a secure platform for authorization based on validation of the continuum of elastic authentication credentials comprising cumulative tiered elastic authentication tokens captured during an extended time period prior to initiation of a user activity, comprising a non-transitory computer-readable storage medium having computer-executable instructions to:

generate a first elastic authentication credential capture signal structured to cause a first authentication credential capture device to initiate collection of one or more elastic authentication tokens;
establish an operative communication link with the first authentication credential capture device associated with a user;
transmit, via the operative communication link, the first elastic authentication credential capture signal to the first authentication credential capture device, wherein the first elastic authentication credential capture signal is structured to cause the first authentication credential capture device to initiate capture of a first elastic authentication token of the one or more elastic authentication tokens at a first time period;
receive, from the first authentication credential capture device, the first elastic authentication token associated with the user, wherein the first elastic authentication token is captured during the first time period;
receive, from a second authentication credential capture device, a second elastic authentication token associated with the user, wherein the second elastic authentication token is captured during a second time period succeeding the first time period;
receive, a request to execute a user activity at a third time period succeeding the second time period, wherein the user activity requires authorization of the user;
construct a continuum of elastic authentication credentials, wherein the continuum of elastic authentication credentials comprises the first elastic authentication token captured during the first time period, and the second elastic authentication token captured during the second time period, wherein the first time period and the second time period precede the third time period of receiving the request to execute the user activity;
authorize the user for the user activity at the third time period based on at least the successful validation of the continuum of elastic authentication credentials captured prior to receiving the request to execute the user activity at the third time period;
and
allow the user to execute the user activity based on at least the successful authorization of the user.

7 more elements

A computerized method for providing elastic authentication based on a continuum of elastic authentication credentials, wherein the computerized method provides a secure platform for authorization based on validation of the continuum of elastic authentication credentials comprising cumulative tiered elastic authentication tokens captured during an extended time period prior to initiation of a user activity, the computerized method comprising:

generating a first elastic authentication credential capture signal structured to cause a first authentication credential capture device to initiate collection of one or more elastic authentication tokens;
establishing an operative communication link with the first authentication credential capture device associated with a user;
transmitting, via the operative communication link, the first elastic authentication credential capture signal to the first authentication credential capture device, wherein the first elastic authentication credential capture signal is structured to cause the first authentication credential capture device to initiate capture of a first elastic authentication token of the one or more elastic authentication tokens at a first time period;
receiving, from the first authentication credential capture device, the first elastic authentication token associated with the user, wherein the first elastic authentication token is captured during the first time period;
receiving, from a second authentication credential capture device, a second elastic authentication token associated with the user, wherein the second elastic authentication token is captured during a second time period succeeding the first time period;
receiving, a request to execute a user activity at a third time period succeeding the second time period, wherein the user activity requires authorization of the user;
constructing a continuum of elastic authentication credentials, wherein the continuum of elastic authentication credentials comprises the first elastic authentication token captured during the first time period, and the second elastic authentication token captured during the second time period, wherein the first time period and the second time period precede the third time period of receiving the request to execute the user activity;
authorizing the user for the user activity at the third time period based on at least the successful validation of the continuum of elastic authentication credentials captured prior to receiving the request to execute the user activity at the third time period;
and
allowing the user to execute the user activity based on at least the successful authorization of the user.

7 more elements

Dependencies are inferred from the claim text.