IP Library Granted Patent US 10,693,880
Granted Patent B2
US 10,693,880 · App. 15/822,460 · Granted Jun 23, 2020

Multi-stage authentication of an electronic communication

Inventors: Manu Kurian (Dallas, TX); Joseph Castinado (Denver, CO)
Assignee: Bank of America Corporation
H04L63/101H04L51/12H04L63/08H04L63/0838H04L63/0853H04L63/0861H04L63/12H04L63/145G06F21/566H04M3/42068
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,693,880
App. No.
15/822,460
Granted
Jun 23, 2020
Kind
B2
Abstract

Systems, methods and apparatus for authenticating and verifying an electronic communication are provided. Systems, apparatus and methods determine which emails pose a threat and which are benign. Systems, apparatus and methods filter malicious emails from non-malicious emails. Systems, apparatus and methods prevent receipt of bulk unsolicited and/or otherwise undesirable communications. Systems, apparatus and methods authenticate an identity of a sender of an electronic communication. Systems, methods and apparatus may involve biometric authentication.

Claims (53)

1. A method for authenticating electronic communications, the method comprising:

generating a whitelist database in association with at least one account of at least one recipient, the whitelist database including at least one identifying reference to a whitelist correspondent, the generating of the whitelist database including:

receiving from the whitelist correspondent registration data comprising:

identification of a first penalty;

an authorization to impose the first penalty; and

identifying information; and

in response to the receiving the registration data, cataloging into the whitelist database, and in association with the identifying reference, identification data associated with:

a whitelist correspondent device associated with the whitelist correspondent; and

a whitelist correspondent address associated with the whitelist correspondent;

generating a blacklist database in association with the account, the blacklist database including at least one blacklist correspondent address, the generating of the blacklist database including:

identifying a property of the blacklist correspondent address, the property indicating that a communication originating from the blacklist correspondent address is unsolicited and malicious; and

in response to the identifying, cataloging identification data associated with the blacklist correspondent address into the blacklist database;

receiving an electronic communication submitted by a sender for delivery to the recipient;

analyzing the content of the electronic communication for presence of identification data;

upon determination that the electronic communication includes a minimum threshold of the identification data cataloged in the whitelist database, delivering the communication to the recipient;

upon determination that the communication includes the identification data cataloged in the blacklist database, blocking delivery of the communication; and

upon determination that the communication lacks the identification data cataloged in the blacklist database, and further lacks the minimum threshold:

prompting the sender to submit supplementary data, the supplementary data comprising:

identification of a second penalty;

an authorization to impose the second penalty; and

additional identifying information; and

delivering the communication to the recipient only after:

receipt of the second penality; and

determining correspondence of the additional identifying information to the identification data associated with a whitelist correspondent;

wherein the second penalty is selected from a plural itv of second penalties based at least in part on frequency of electronic communications from the sender to the recipient.

2. The method of claim 1 further comprising generating a pin for use by the whitelist sender in an electronic communication for sending to the recipient.

3. The method of claim 1 further comprising:

generating a blocked communication log;

in response to the blocking, creating an entry in the log, the entry including data corresponding to the communication;

submitting the log to at least one of:

the recipient; and

an entity responsible for reviewing and calibrating the authenticating.

4. A method for authenticating electronic communications, the method comprising:

associating a correspondent address with a first set of identity verification data;

presenting a sender with a request for a username;

presenting the sender with a request for a second set of identity verification data;

upon determination of a pre-established association between the username and the second set of identity verification data, presenting the sender with access to an electronic communication account, the access including features for composing the communication, the electronic communication account configured to collect one or more personal behavioral signatures from the sender at a plurality of distributed time points during composition of the electronic communication;

upon initiation of an attempt by the sender to transmit the communication to the recipient, presenting the sender with a request for the first set of identity verification data; and

upon presentation by the sender of the first set of identity verification data and confirmation of the collected personal behavioral signatures, transmitting the communication to the recipient.

5. The method of claim 4 wherein;

the first set of identity verification data and the second set of identity verification data comprise:

a password;

a personal identification number;

biometric information; and

geographic information; and

the personal behavioral identifiers collected from the sender during composition comprise:

eye movement trajectory data;

keystroke dynamics; and

mouse use characteristics.

6. The method of claim 1 , wherein the identifying information comprises one or morer personal bahavioral signatures associated with the whitelist correspondent.

7. The method of claim 1 , wherein a sender device comprises a data reader configured to collect identifying information from the sender at a plurality of distributed time points during composition of the electronic communication.

8. The method of claim 1 , wherein the electronic communication comprises one or more embedded personal behavioral signatures associated with the sender and gathered during composition of the electronic communication.

9. The method of claim 1 , wherein the electronic communication comprises one or more embedded device features associated with a sender device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 27, 2017
From: KURIAN, MANU; CASTINADO, JOSEPH
To: BANK OF AMERICA CORPORATION
Reel/Frame 044223/0012 →
Continuity (1)
Related Publication 20190166128A1 · May 30, 2019