Processing Authentication Requests to Secured Information Systems Based on Machine-Learned User Behavior Profiles

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• receiving, by the at least one processor, via the communication interface, from an account portal computing platform, a first authentication request corresponding to a request for a first user of a first client computing device to access one or more secured information resources associated with a first user account in a first client portal session;
• based on receiving the first authentication request from the account portal computing platform, capturing, by the at least one processor, one or more parameters associated with the first client computing device;
• evaluating, by the at least one processor, the one or more parameters associated with the first client computing device using a first profile associated with the first user account to determine a first deviation score;
• based on the first deviation score, selecting, by the at least one processor, a first authentication action from a plurality of pre-defined authentication actions;
• generating, by the at least one processor, based on the first authentication action selected from the plurality of pre-defined authentication actions, one or more commands directing the account portal computing platform to allow access, conditionally allow access, or prevent access to the one or more secured information resources associated with the first user account in the first client portal session;
• and
• sending, by the at least one processor, via the communication interface, to the account portal computing platform, the one or more commands directing the account portal computing platform to allow access, conditionally allow access, or prevent access to the one or more secured information resources associated with the first user account in the first client portal session,
• wherein the method further comprises:
• prior to receiving the first authentication request from the account portal computing platform:
• capturing, by the at least one processor, first interaction data associated with the first user using the first client computing device to access the one or more secured information resources associated with the first user account;
• logging, by the at least one processor, the first interaction data in a client authentication database;
• capturing, by the at least one processor, second interaction data associated with the first user using a second client computing device to access the one or more secured information resources associated with the first user account;
• logging, by the at least one processor, the second interaction data in the client authentication database;
• building, by the at least one processor, the first profile associated with the first user account based on the first interaction data and the second interaction data;
• and
• storing, by the at least one processor, the first profile associated with the first user account in the client authentication database.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• receive, via the communication interface, from an account portal computing platform, a first authentication request corresponding to a request for a first user of a first client computing device to access one or more secured information resources associated with a first user account in a first client portal session;
• based on receiving the first authentication request from the account portal computing platform, capture one or more parameters associated with the first client computing device;
• evaluate the one or more parameters associated with the first client computing device using a first profile associated with the first user account to determine a first deviation score;
• based on the first deviation score, select a first authentication action from a plurality of pre-defined authentication actions;
• generate, based on the first authentication action selected from the plurality of pre-defined authentication actions, one or more commands directing the account portal computing platform to allow access, conditionally allow access, or prevent access to the one or more secured information resources associated with the first user account in the first client portal session;
• and
• send, via the communication interface, to the account portal computing platform, the one or more commands directing the account portal computing platform to allow access, conditionally allow access, or prevent access to the one or more secured information resources associated with the first user account in the first client portal session,
• wherein the one or more non-transitory computer-readable media store additional instructions that, when executed, cause the computing platform to:
• prior to receiving the first authentication request from the account portal computing platform:
• capture first interaction data associated with the first user using the first client computing device to access the one or more secured information resources associated with the first user account;
• log the first interaction data in a client authentication database;
• capture second interaction data associated with the first user using a second client computing device to access the one or more secured information resources associated with the first user account;
• log the second interaction data in the client authentication database;
• build the first profile associated with the first user account based on the first interaction data and the second interaction data;
• and
• store the first profile associated with the first user account in the client authentication database.