# US 9,519,790 B2 · Evaluating customer security preferences > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,519,790 B2 - Document ID: US9519790B2 - Status: Granted - Kind: B2 - Application number: 15/015,341 - Filed: 2016-02-04 - Published: 2016-06-02 - Granted: 2016-12-13 - Earliest claimed: 2014-04-25 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Kapil Pruthi; Xianhong Zhang; Tao Huang; Raghav Shenoy; Palash K. Shil; Andy Keys; Vikram Jalota; Arul Arasu Madavadiyan - Web page: https://patentgrep.com/patent/US9519790B2 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/46: by designing passwords or checking the strength of passwords - G06F 2221/031: Protect user input by software means - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2103: Challenge-response - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Methods and systems for evaluating customer security preferences are presented. In some embodiments, a computer system may receive, from a security dashboard computing platform, a request for a security score associated with a customer. In response to receiving the request for the security score associated with the customer, the computer system may request, from a customer portal computing platform, one or more security preferences associated with the customer. Subsequently, the computer system may receive, from the customer portal computing platform, the one or more security preferences associated with the customer. The computer system then may determine, based on at least one security score definition file and based on the one or more security preferences associated with the customer, a security score for the customer. Thereafter, the computer system may provide, to the security dashboard computing platform, the determined security score for the customer. ## Claims ### Claim 1 A method, comprising: at a security score computing platform comprising at least one processor, a memory, and a communication interface: receiving, by the at least one processor via the communication interface, from an administrative computing device, one or more security parameters for evaluating customer security preferences; generating, by the at least one processor, based on the one or more security parameters for evaluating customer security preferences, at least one security score definition file; receiving, by the at least one processor via the communication interface, from a security dashboard computing platform, a request for a security score associated with a customer of a financial institution, the customer of the financial institution having a user account for accessing an online banking interface associated with the financial institution; in response to receiving the request for the security score associated with the customer of the financial institution, requesting, by the at least one processor via the communication interface, from a customer portal computing platform configured to provide the online banking interface associated with the financial institution, one or more security preferences associated with the customer of the financial institution; receiving, by the at least one processor via the communication interface, from the customer portal computing platform, the one or more security preferences associated with the customer of the financial institution; determining, by the at least one processor, based on the at least one security score definition file and based on the one or more security preferences associated with the customer of the financial institution, a security score for the customer of the financial institution; and providing, by the at least one processor via the communication interface, to the security dashboard computing platform, the determined security score for the customer of the financial institution, wherein the security dashboard computing platform is configured to generate a security dashboard user interface for the customer of the financial institution based on the determined security score for the customer of the financial institution, wherein the at least one security score definition file specifies one or more weighted criteria for evaluating customer security preferences, wherein the one or more weighted criteria comprises an indication of an amount of time elapsed since a password change event associated with the user account of the customer of the financial institution, an indication of whether a one-time passcode is required at login for the user account of the customer of the financial institution, and an indication of whether a one-time passcode is required when responding to a challenge question for the user account of the customer of the financial institution, and wherein the at least one security score definition file identifies one or more actions, and the security score computing platform is configured to perform at least one action of the one or more actions identified by the at least one security score definition file based on a state of at least one security parameter of the one or more security parameters. ### Claim 2 (depends on 1) The method of claim 1, wherein the one or more weighted criteria comprises: an indication of password strength for the user account of the customer of the financial institution; an indication of whether the user account of the customer of the financial institution is enrolled in a security alert program; and an indication of whether a customer device associated with the customer of the financial institution is loaded with a browser security plug-in. ### Claim 3 (depends on 1) The method of claim 1, comprising: receiving, by the at least one processor via the communication interface, from the administrative computing device, one or more batch processing instructions for evaluating customer security preferences for a group of customers of the financial institution; based on the one or more batch processing instructions, requesting, by the at least one processor via the communication interface, from the customer portal computing platform, one or more security preferences associated with the group of customers of the financial institution; receiving, by the at least one processor via the communication interface, from the customer portal computing platform, the one or more security preferences associated with the group of customers of the financial institution; based on the one or more batch processing instructions, determining, by the at least one processor, based on the at least one security score definition file and based on the one or more security preferences associated with the group of customers of the financial institution, at least one security score for each customer included in the group of customers of the financial institution; and storing, by the at least one processor, the at least one security score for each customer included in the group of customers of the financial institution. ### Claim 4 (depends on 3) The method of claim 3, wherein the one or more batch processing instructions include a schedule for evaluating customer security preferences for at least one customer included in the group of customers of the financial institution. ### Claim 5 (depends on 3) The method of claim 3, wherein the one or more batch processing instructions include a schedule for determining an updated customer security score for at least one customer included in the group of customers of the financial institution. ### Claim 6 (depends on 1) The method of claim 1, wherein the one or more security preferences associated with the customer of the financial institution comprises a password associated with the customer of the financial institution and one or more one-time passcode preferences associated with the customer of the financial institution. ### Claim 7 (depends on 6) The method of claim 6, wherein the one or more security preferences associated with the customer of the financial institution comprises one or more security alert preferences associated with the customer of the financial institution and one or more browser security preferences associated with the customer of the financial institution. ### Claim 8 (depends on 6) The method of claim 6, wherein the online banking interface associated with the financial institution comprises one or more user interfaces that enable the customer of the financial institution to view account balance information associated with one or more financial accounts maintained by the financial institution, transfer funds between one or more accounts, and pay one or more bills. ### Claim 9 (depends on 1) The method of claim 1, wherein the at least one action comprises providing a link to change a password associated with the user account of the customer of the financial institution. ### Claim 10 (depends on 1) The method of claim 1, wherein the at least one action comprises providing a link to change one-time passcode preferences associated with the user account of the customer of the financial institution. ### Claim 11 A computer system, comprising: at least one processor; a communication interface; and memory storing computer-readable instructions that, when executed by the at least one processor, cause the computer system to: receive, by the at least one processor via the communication interface, from an administrative computing device, one or more security parameters for evaluating customer security preferences; generate, by the at least one processor, based on the one or more security parameters for evaluating customer security preferences, at least one security score definition file; receive, by the at least one processor via the communication interface, from a security dashboard computing platform, a request for a security score associated with a customer of a financial institution, the customer of the financial institution having a user account for accessing an online banking interface associated with the financial institution; in response to receiving the request for the security score associated with the customer of the financial institution, request, by the at least one processor via the communication interface, from a customer portal computing platform configured to provide the online banking interface associated with the financial institution, one or more security preferences associated with the customer of the financial institution; receive, by the at least one processor via the communication interface, from the customer portal computing platform, the one or more security preferences associated with the customer of the financial institution; determine, by the at least one processor, based on the at least one security score definition file and based on the one or more security preferences associated with the customer of the financial institution, a security score for the customer of the financial institution; and provide, by the at least one processor via the communication interface, to the security dashboard computing platform, the determined security score for the customer of the financial institution, wherein the security dashboard computing platform is configured to generate a security dashboard user interface for the customer of the financial institution based on the determined security score for the customer of the financial institution, wherein the at least one security score definition file specifies one or more weighted criteria for evaluating customer security preferences, wherein the one or more weighted criteria comprises an indication of an amount of time elapsed since a password change event associated with the user account of the customer of the financial institution, an indication of whether a one-time passcode is required at login for the user account of the customer of the financial institution, and an indication of whether a one-time passcode is required when responding to a challenge question for the user account of the customer of the financial institution, and wherein the at least one security score definition file identifies one or more actions, and the computer system is configured to perform at least one action of the one or more actions identified by the at least one security score definition file based on a state of at least one security parameter of the one or more security parameters. ### Claim 12 (depends on 11) The computer system of claim 11, wherein the one or more weighted criteria comprises: an indication of password strength for the user account of the customer of the financial institution; an indication of whether the user account of the customer of the financial institution is enrolled in a security alert program; and an indication of whether a customer device associated with the customer of the financial institution is loaded with a browser security plug-in. ### Claim 13 (depends on 11) The computer system of claim 11, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computer system to: receive, by the at least one processor via the communication interface, from the administrative computing device, one or more batch processing instructions for evaluating customer security preferences for a group of customers of the financial institution; based on the one or more batch processing instructions, request, by the at least one processor via the communication interface, from the customer portal computing platform, one or more security preferences associated with the group of customers of the financial institution; receive, by the at least one processor via the communication interface, from the customer portal computing platform, the one or more security preferences associated with the group of customers of the financial institution; based on the one or more batch processing instructions, determine, by the at least one processor, based on the at least one security score definition file and based on the one or more security preferences associated with the group of customers of the financial institution, at least one security score for each customer included in the group of customers of the financial institution; and store, by the at least one processor, the at least one security score for each customer included in the group of customers of the financial institution. ### Claim 14 (depends on 13) The computer system of claim 13, wherein the one or more batch processing instructions include a schedule for evaluating customer security preferences for at least one customer included in the group of customers of the financial institution. ### Claim 15 (depends on 13) The computer system of claim 13, wherein the one or more batch processing instructions include a schedule for determining an updated customer security score for at least one customer included in the group of customers of the financial institution. ### Claim 16 (depends on 11) The computer system of claim 11, wherein the one or more security preferences associated with the customer of the financial institution comprises a password associated with the customer of the financial institution and one or more one-time passcode preferences associated with the customer of the financial institution. ### Claim 17 (depends on 16) The computer system of claim 16, wherein the one or more security preferences associated with the customer of the financial institution comprises one or more security alert preferences associated with the customer of the financial institution and one or more browser security preferences associated with the customer of the financial institution. ### Claim 18 (depends on 16) The computer system of claim 16, wherein the online banking interface associated with the financial institution comprises one or more user interfaces that enable the customer of the financial institution to view account balance information associated with one or more financial accounts maintained by the financial institution, transfer funds between one or more accounts, and pay one or more bills. ### Claim 19 One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a computer system having at least one processor and memory and a communication interface, cause the computer system to: receive, by the at least one processor via the communication interface, from an administrative computing device, one or more security parameters for evaluating customer security preferences; generate, by the at least one processor, based on the one or more security parameters for evaluating customer security preferences, at least one security score definition file; receive, by the at least one processor via the communication interface, from a security dashboard computing platform, a request for a security score associated with a customer of a financial institution, the customer of the financial institution having a user account for accessing an online banking interface associated with the financial institution; in response to receiving the request for the security score associated with the customer of the financial institution, request, by the at least one processor via the communication interface, from a customer portal computing platform configured to provide the online banking interface associated with the financial institution, one or more security preferences associated with the customer of the financial institution; receive, by the at least one processor via the communication interface, from the customer portal computing platform, the one or more security preferences associated with the customer of the financial institution; determine, by the at least one processor, based on the at least one security score definition file and based on the one or more security preferences associated with the customer of the financial institution, a security score for the customer of the financial institution; and provide, by the at least one processor via the communication interface, to the security dashboard computing platform, the determined security score for the customer of the financial institution, wherein the security dashboard computing platform is configured to generate a security dashboard user interface for the customer of the financial institution based on the determined security score for the customer of the financial institution, wherein the at least one security score definition file specifies one or more weighted criteria for evaluating customer security preferences, wherein the one or more weighted criteria comprises an indication of an amount of time elapsed since a password change event associated with the user account of the customer of the financial institution, an indication of whether a one-time passcode is required at login for the user account of the customer of the financial institution, and an indication of whether a one-time passcode is required when responding to a challenge question for the user account of the customer of the financial institution, and wherein the at least one security score definition file identifies one or more actions, and the computer system is configured to perform at least one action of the one or more actions identified by the at least one security score definition file based on a state of at least one security parameter of the one or more security parameters. ### Claim 20 (depends on 19) The one or more non-transitory computer-readable media of claim 19, wherein the one or more weighted criteria comprises: an indication of password strength for the user account of the customer of the financial institution; an indication of whether the user account of the customer of the financial institution is enrolled in a security alert program; and an indication of whether a customer device associated with the customer of the financial institution is loaded with a browser security plug-in.