IP Library › Granted Patent US 12,657,267
Granted Patent B2
US 12,657,267 · App. 18/440,368 · Granted Jun 16, 2026

Game-based user behavioral fingerprint stepped-up authentication

Inventors: Matthew S. Brookshire (Cottonwood Heights, UT); Christopher Gaston Seagram (Frisco, TX); Angela M. Sicord (San Francisco, CA); Matthew N. Wheeler (Charlotte, NC)
Assignee: Wells Fargo Bank, N.A.
G06F21/316A63F13/71
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,657,267
App. No.
18/440,368
Granted
Jun 16, 2026
Kind
B2
Abstract

A method may include receiving a login request from a computing device including authentication data for a user identifier; granting access to user identifier for a host application having a current level of authentication; receiving a request from the computing device to perform an action; determining the current level of authentication is less than an action level of authentication of the action; presenting a gaming application on the computing device embedded as part of the host application; monitoring telemetry data of the computing device during gameplay of the gaming application including: user interaction data associated with gaming application, and computing device movement data; calculating a current user behavior fingerprint using the telemetry data; calculating a fingerprint similarity score between the current user behavior fingerprint and a past user behavior fingerprint; determining the fingerprint similarity score is above a threshold similarity score; and based on the second determining, authorizing the action.

Claims (66)

1 . A computer-implemented method comprising:

receiving, using a processing unit, a login request from a computing device, the login request including authentication data for a user identifier;

based on verification of the authentication data, granting access, using the processing unit, to user identifier for a host application, the access having a current level of authentication, the host application structured to include base functionality and an embedded gaming application portion;

subsequent to the verification, receiving, using the processing unit, a request from the computing device to perform an action within the host application;

first determining, using the processing unit, the current level of authentication is less than an action level of authentication of the action;

based on the first determining, presenting, using the processing unit, the gaming application on the computing device, the gaming application executed within and invoked by the host application without navigating away from the host application and specifically configured to produce interaction scenarios that solicit user interaction types mapped to user interaction types used in a user behavior fingerprint;

monitoring, using the processing unit, telemetry data of the computing device during gameplay of the gaming application, the telemetry data including: user interaction data associated with the gaming application, and computing device movement data, the user interaction data including the user interaction types;

calculating, using the processing unit, a current user behavior fingerprint using the telemetry data;

calculating, using the processing unit, a fingerprint similarity score between the current user behavior fingerprint and a past user behavior fingerprint;

second determining, using the processing unit, the fingerprint similarity score is above a threshold similarity score; and

based on the second determining, authorizing, using the processing unit, the action.

2 . The computer-implemented method of claim 1 , further comprising:

selecting the past user behavior fingerprint from a plurality of past user behavior fingerprints of the user identifier.

3 . The computer-implemented method of claim 2 , wherein the computing device is a current computing device and wherein selecting the past user behavior fingerprint from the plurality of past user behavior fingerprints of the user identifier includes:

querying a database for device characteristics of the current computing device;

querying the database for device characteristics of a past computing device of the user identifier;

calculating a device similarity score, using the processing unit, between the device characteristics of the current computing device and the device characteristics of the past computing device; and

determining the device similarity score is within a threshold range.

4 . The computer-implemented method of claim 3 , wherein the device characteristics include a touchscreen characteristic.

5 . The computer-implemented method of claim 1 , further comprising:

receiving from the computing device, using the processing unit, a selection of the gaming application from a plurality of gaming applications.

6 . The computer-implemented method of claim 1 , wherein the user interaction data includes a typing speed.

7 . The computer-implemented method of claim 1 , wherein the computing device movement data includes gyroscope sensor data.

8 . A non-transitory computer-readable medium comprising instructions, which when executed by a processing unit, configure the processing unit to perform operations comprising:

receiving a login request from a computing device, the login request including authentication data for a user identifier;

based on verification of the authentication data, granting access to user identifier for a host application, the access having a current level of authentication, the host application structured to include base functionality and an embedded gaming application portion;

subsequent to the verification, receiving a request from the computing device to perform an action within the host application;

first determining the current level of authentication is less than an action level of authentication of the action;

based on the first determining, presenting the gaming application on the computing device, the gaming application executed within and invoked by the host application without navigating away from the host application and specifically configured to produce interaction scenarios that solicit user interaction types mapped to user interaction types used in a user behavior fingerprint;

monitoring telemetry data of the computing device during gameplay of the gaming application, the telemetry data including: user interaction data associated with the gaming application, and computing device movement data, the user interaction data including the user interaction types;

calculating a current user behavior fingerprint using the telemetry data;

calculating a fingerprint similarity score between the current user behavior fingerprint and a past user behavior fingerprint;

second determining the fingerprint similarity score is above a threshold similarity score; and

based on the second determining, authorizing the action.

9 . The non-transitory computer-readable medium of claim 8 , wherein the instructions, which when executed by the processing unit, further configure the processing unit to perform operations comprising:

selecting the past user behavior fingerprint from a plurality of past user behavior fingerprints of the user identifier.

10 . The non-transitory computer-readable medium of claim 9 , wherein the computing device is a current computing device and wherein selecting the past user behavior fingerprint from the plurality of past user behavior fingerprints of the user identifier includes:

querying a database for device characteristics of the current computing device;

querying the database for device characteristics of a past computing device of the user identifier;

calculating a device similarity score between the device characteristics of the current computing device and the device characteristics of the past computing device; and

determining the device similarity score is within a threshold range.

11 . The non-transitory computer-readable medium of claim 10 , wherein the device characteristics include a touchscreen characteristic.

12 . The non-transitory computer-readable medium of claim 8 , wherein the instructions, which when executed by the processing unit, further configure the processing unit to perform operations comprising:

receiving from the computing device a selection of the gaming application from a plurality of gaming applications.

13 . The non-transitory computer-readable medium of claim 8 , wherein the user interaction data includes a typing speed.

14 . The non-transitory computer-readable medium of claim 8 , wherein the computing device movement data includes gyroscope sensor data.

15 . A system comprising:

a processing unit;

a storage device, comprising instructions, which when executed by the processing unit, configure processing unit to perform operations comprising:

receiving a login request from a computing device, the login request including authentication data for a user identifier;

based on verification of the authentication data, granting access to user identifier for a host application, the access having a current level of authentication, the host application structured to include base functionality and an embedded gaming application portion;

subsequent to the verification, receiving a request from the computing device to perform an action within the host application;

first determining the current level of authentication is less than an action level of authentication of the action;

based on the first determining, presenting the gaming application on the computing device, the gaming application executed within and invoked by the host application without navigating away from the host application and specifically configured to produce interaction scenarios that solicit user interaction types mapped to user interaction types used in a user behavior fingerprint;

monitoring telemetry data of the computing device during gameplay of the gaming application, the telemetry data including: user interaction data associated with the gaming application, and computing device movement data, the user interaction data including the user interaction types;

calculating a current user behavior fingerprint using the telemetry data;

calculating a fingerprint similarity score between the current user behavior fingerprint and a past user behavior fingerprint;

second determining the fingerprint similarity score is above a threshold similarity score; and

based on the second determining, authorizing the action.

16 . The system of claim 15 , wherein the instructions, which when executed by the processing unit, further configure the processing unit to perform operations comprising:

selecting the past user behavior fingerprint from a plurality of past user behavior fingerprints of the user identifier.

17 . The system of claim 16 , wherein the computing device is a current computing device and wherein selecting the past user behavior fingerprint from the plurality of past user behavior fingerprints of the user identifier includes:

querying a database for device characteristics of the current computing device;

querying the database for device characteristics of a past computing device of the user identifier;

calculating a device similarity score between the device characteristics of the current computing device and the device characteristics of the past computing device; and

determining the device similarity score is within a threshold range.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 2, 2024
From: BROOKSHIRE, MATTHEW S; SEAGRAM, CHRISTOPHER GASTON; SICORD, ANGELA M; WHEELER, MATTHEW N
To: WELLS FARGO BANK, N.A.
Reel/Frame 066979/0098 →
Continuity (1)
Related Publication 20250258897A1 · Aug 14, 2025
References Cited (23)
US 4805222A · Young et al. · 1989 [cited by applicant]
US 7103200B2 · Hillhouse et al. · 2006 [cited by applicant]
US 8539550B1 · Terres et al. · 2013 [cited by applicant]
US 8913028B2 · Chin · 2014 [cited by applicant]
US 9213819B2 · Grigg et al. · 2015 [cited by applicant]
US 10252170B2 · Judkins et al. · 2019 [cited by applicant]
US 10675544B2 · Stroud · 2020 [cited by applicant]
US 10864444B1 · Rao · 2020 [cited by examiner]
US 10915904B2 · Conway · 2021 [cited by applicant]
US 11383169B1 · Wakeford et al. · 2022 [cited by applicant]
US 11451532B2 · Arif Khan · 2022 [cited by examiner]
US 11580202B2 · Benkreira et al. · 2023 [cited by applicant]
US 20070236330A1 · Cho · 2007 [cited by examiner]
US 20080092245A1 · Alward et al. · 2008 [cited by applicant]
US 20100225443A1 · Bayram et al. · 2010 [cited by applicant]
US 20140096196A1 · O'Connor · 2014 [cited by examiner]
US 20170046508A1 · Shin et al. · 2017 [cited by applicant]
US 20180165432A1 · Cierna · 2018 [cited by examiner]
US 20200326823A1 · Duffield et al. · 2020 [cited by applicant]
US 20210201362A1 · Stern et al. · 2021 [cited by applicant]
US 20210312024A1 · Gupta · 2021 [cited by examiner]
US 20230097716A1 · McMullen, V · 2023 [cited by examiner]
JP 6928107 · 2021 [cited by applicant]