Back to results
US 9,754,257 B1Granted
Authentication system and method
AssigneeWells Fargo Bank, N.A.
InventorAlexander Zaharopoulos Hughes
Life of this patent
Estimating the term…
Abstract
An indication that a user wishes to conduct a bank transaction is received. An authentication path to be presented to the individual is pseudo-randomly determined. The authentication path comprises a combination of authentication challenges to be presented to the individual. A determination is made whether the user presented valid responses to the authentication challenges. The user is authenticated to conduct the bank transaction based on whether the user is determined to have presented valid responses to the authentication challenges.
Claims27
A computer-implemented method comprising:
- receiving, by a processor, an indication that a user wishes to conduct a transaction;
- determining, by the processor, that the transaction meets a predetermined parameter that characterizes a transaction type requiring a pseudo-random authentication process;
- pseudo-randomly determining an authentication path to be presented to the user, the authentication path comprising a combination of selected authentication challenges to be presented to the user, the selected authentication challenges pseudo-randomly selected from a plurality of authentication challenges comprising at least a first authentication challenge, a second authentication challenge, and a third authentication challenge, wherein the authentication path presents the selected authentication challenges in a pseudo-random order, wherein at least a first portion of the authentication path is determined prior to receiving the indication that the user wishes to conduct the transaction, wherein a second portion of the authentication path is determined after the transaction to be performed has been specified, wherein the authentication path is common to all users attempting to conduct transactions for a designated time period;
- modifying, by the processor, the authentication path when the user is in a location of another user, the authentication path being modified to present the selected authentication challenges in a second order instead of a first order, wherein the first order and the second order are different from each other;
- determining, by the processor, whether the user presented valid responses to the selected authentication challenges;
- and
- authenticating, by the processor, the user to conduct the transaction based on whether the user presented valid responses to the selected authentication challenges.
4 more elements
A computer system comprising a processor and non-transitory machine readable storage media having instructions stored therein that, when executed by the processor, cause the processor to:
- receive an indication that a user wishes to conduct a transaction;
- determine that the transaction meets a predetermined parameter that characterizes a transaction type that requires a pseudo-random authentication process;
- pseudo-randomly determine an authentication path to be presented to the user, the authentication path comprising a combination of selected authentication challenges to be presented to the user, the selected authentication challenges pseudo-randomly selected from a plurality of authentication challenges comprising at least a first authentication challenge, a second authentication challenge, and a third authentication challenge, wherein the authentication path presents the selected authentication challenges in a pseudo-random order, wherein at least a first portion of the authentication path is determined prior to receiving the indication that the user wishes to conduct a transaction, wherein a second portion of the authentication path is determined after the transaction to be performed has been specified, wherein the authentication path is common to all users attempting to conduct transactions for a designated time period;
- modifying, by the processor, the authentication path when the user is in a location of another user, the authentication path being modified to present the selected authentication challenges in a second order instead of a first order, wherein the first order and the second order are different from each other;
- determine whether the user presented valid responses to the selected authentication challenges;
- and
- authenticate the user to conduct the transaction based on whether the user presented valid responses to the selected authentication challenges.
4 more elements
Dependencies are inferred from the claim text.