IP Library Granted Patent US 10,505,924
Granted Patent B1
US 10,505,924 · App. 15/373,823 · Granted Dec 10, 2019

Defined zone of authentication

Inventors: Wayne Barakat (Novato, CA); Sotirios K. Barkas (San Jose, CA); Michael Chang (Millbrae, CA); Laura Marie Fontana (San Francisco, CA); Julio Jiron (San Bruno, CA); Beth S. Moss (Danville, CA); Traci Nguyen (San Francisco, CA); Paul Vittimberga (Oakland, CA)
Assignee: Wells Fargo Bank, N.A.
H04L63/083H04L63/0815H04L63/0861
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,505,924
App. No.
15/373,823
Granted
Dec 10, 2019
Kind
B1
Abstract

Embodiments of the disclosure are directed to authenticating a user at an electronic computing device. Information is received from a defined zone of an environment surrounding the user. A level of authentication is calculated for the user based on the information from the defined zone of the environment. When the level of authentication is greater than or equal to a predetermined threshold, the user is authenticated at the electronic computing device to perform a requested activity.

Claims (67)

1. A method implemented on an electronic computing device for authenticating a user at the electronic computing device, the method comprising:

receiving information from a defined zone of an environment surrounding the user;

calculating a level of authentication for the user based on the information from the defined zone of the environment; and

when the level of authentication is greater than or equal to a predetermined threshold:

authenticating the user at the electronic computing device to perform a requested activity;

maintaining an authentication of the user within the defined zone of the environment that surrounds the user;

monitoring an activity pattern of the user;

adjusting a size of the defined zone of the environment based on changes to the activity pattern of the user;

determining a level of authorization for the user at the electronic computing device, the level of authorization defining an extent to which the user can conduct transactions or access data at the electronic computing device;

determining whether one or more individuals in close proximity with the user is a security risk; and

when a determination is made that the one or more individuals in close proximity with the user is a security risk, lowering the level of authorization for the user to prevent the user from initiating a financial transaction at the electronic computing device.

2. The method of claim 1 , further comprising:

receiving updates to the information;

recalculating the level of authentication for the user based on the updates to the information; and

maintaining the authentication for the user as long as the level of authentication for the user remains greater than or equal to the predetermined threshold.

3. The method of claim 1 , further comprising:

when a determination is made that the one or more individuals in close proximity with the user is a security risk, decreasing the level of authentication for the user.

4. The method of claim 1 , further comprising receiving from the user one or more elections regarding which aspects of the information can be used by the electronic computing device to calculate the level of authentication.

5. The method of claim 1 , wherein the information includes a current context for the user.

6. The method of claim 5 , wherein the current context is determined by determining a current activity of the user and determining how the current activity fits into a pattern of behavior for the user.

7. The method of claim 1 , wherein the information includes one or more biometric parameters regarding the user.

8. The method of claim 1 , wherein the information includes information from one or more social media sites.

9. The method of claim 1 , further comprising:

identifying a first sphere of authentication surrounding the user;

identifying additional spheres of authentication surrounding one or more individuals in close proximity with the user; and

determining the level of authentication, in part, based on an effect on the additional spheres of authentication on the first sphere of authentication.

10. A method implemented on an electronic computing device for authenticating a user at the electronic computing device, the method comprising:

obtaining a geolocation of user;

obtaining first information regarding an activity pattern of the user;

obtaining second information regarding one or more individuals in close proximity with the user;

based on the geolocation, the first information and the second information, determining a level of authentication for the user that can be used to authenticate the user at the electronic computing device;

when the level of authentication is greater than or equal to a predetermined threshold:

authenticating the user at the electronic computing device; and

maintaining an authentication of the user in a zone of an environment that surrounds the user;

monitoring the activity pattern of the user;

adjusting a size of the zone of the environment based on changes to the activity pattern of the user;

determining a level of authorization for the user at the electronic computing device, the level of authorization defining an extent to which the user can conduct transactions or access data at the electronic computing device;

determining whether one or more individuals in close proximity with the user is a security risk; and

when a determination is made that the one or more individuals in close proximity with the user is a security risk, lowering the level of authorization for the user to prevent the user from initiating a financial transaction at the electronic computing device.

11. The method of claim 10 , further comprising:

obtaining one or more biometric parameters regarding the user; and

using the one or more biometric parameters in conjunction with the geolocation, the first information and the second information to determine the level of authentication for the user.

12. The method of claim 11 , wherein the level of authentication can increase or decrease based on changes in one or more of the geolocation, the biometric parameters, the first information and the second information.

13. The method of claim 11 , further comprising: using the one or more biometric parameters in conjunction with the geolocation, the first information and the second information to determine the level of authorization for the user.

14. The method of claim 13 , further comprising:

receiving updates to the second information;

determining from the updates to the second information that the one or more individuals in close proximity to the user are known to the user and are not known to be security risks; and

based on the updates to the first information, increasing the level of authorization for the user.

15. The method of claim 10 , further comprising obtaining at least part of the second information from one or more social media websites.

16. The method of claim 10 , further comprising receiving from the user one or more elections regarding which aspects of the geolocation, the first information, the second information and biometric information regarding the user can be used by the electronic computing device to calculate the level of authentication.

17. An electronic computing device comprising:

a processing unit; and

system memory, the system memory including instructions which, when executed by the processing unit, cause the electronic computing device to:

obtain a geolocation of a user;

obtain first information regarding an activity pattern of the user;

obtain second information regarding one or more biometric parameters regarding the user;

obtain third information regarding one or more individuals in close proximity with the user, the third information including whether the one or more individuals are known to the user and whether one or more of the individuals are known to be a security risk;

based on the geolocation, the first information, the second information and the third information, determine a level of authentication for the user that can be used to authenticate the user at the electronic computing device;

when the level of authentication is greater than or equal to a predetermined threshold, authenticate the user at the electronic computing device;

receive updates for one or more of the geolocation, the first information, the second information and the third information;

recalculate the level of authentication based on the updates;

maintain an authentication for the user at the electronic computing device within a zone of an environment surrounding the user, as long as the level of authentication remains greater than or equal to the predetermined threshold;

monitor the activity pattern on the user;

adjust a size of the zone of the environment surrounding the user based on changes to the activity pattern of the user;

determine a level of authorization for the user at the electronic computing device, the level of authorization defining an extent to which the user can conduct transactions or access data at the electronic computing device;

determine whether one or more individuals in close proximity with the user is a security risk; and

when a determination is made that the one or more individuals in close proximity with the user is a security risk, lower the level of authorization for the user to prevent the user from initiating a financial transaction at the electronic computing device.

Assignments (2)
STATEMENT OF CHANGE OF ADDRESS OF ASSIGNEE Recorded Jun 17, 2025
From: WELLS FARGO BANK, N.A.
To: WELLS FARGO BANK, N.A.
Reel/Frame 071658/0990 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 9, 2017
From: BARAKAT, WAYNE; BARKAS, SOTIRIOS K.; CHANG, MICHAEL; FONTANA, LAURA MARIE; JIRON, JULIO; MOSS, BETH S.; NGUYEN, TRACI; VITTIMBERGA, PAUL
To: WELLS FARGO BANK, N.A.
Reel/Frame 041531/0509 →