IP Library › Granted Patent US 12,095,762
Granted Patent B2
US 12,095,762 · App. 17/750,553 · Granted Sep 17, 2024

Systems and methods for multi-stage, biometric-based, digital authentication

Inventors: Trish Gillis (Chicago, IL); Taylor Farris (Hoboken, NJ)
Assignee: Bank of America Corporation
H04L63/0861H04L63/0838H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,095,762
App. No.
17/750,553
Granted
Sep 17, 2024
Kind
B2
Abstract

Systems and methods for multi-stage, biometric-based, digital authentication are provided. Methods include a first and a second stage of authentication. The first stage may include a user profile submitting a first request to access a first digital application, receiving one or more authenticating factors, transmitting, to a central server, the one or more authenticating factors, processing the one or more authenticating factors to authenticate the user profile to the first digital application. The second stage of authentication may include the user profile submitting a second request to access the second digital application, wherein the first and second digital applications utilize separate authentications; in response to the second request, the first digital application activating sensors that are connected to a computing device; measuring, via the sensors, a biometric parameter of a user that is associated with the user profile; the first digital application transmitting the biometric parameter to the central server for comparison with biometric information stored in the database; and in response to the comparison achieving a threshold match, the first digital application communicating to the second digital application authentication parameters to achieve authentication of the user profile for the second digital application.

Claims (61)

1. A system for multi-stage, biometric-based, digital authentication, the system comprising:

a computing device comprising a first digital application and a second digital application, wherein said first and second digital applications utilize separate authentications; and

a secure central server;

wherein: during a first stage of the authentication:

a user profile submits a first request, on the computing device, to access the first digital application;

the computing device receives, as input, one or more authenticating factors;

the computing device transmits, to the central server, the one or more authenticating factors;

the central server processes the one or more authenticating factors, said processing comprising comparing the one or more authenticating factors to a database of user profile data to achieve authentication of the user profile's identity when a threshold match is achieved between the one or more authenticating factors and a profile in the database; and

in response to achieving authentication, the central server communicates to the computing device that the user profile is authenticated to access the first digital application; and

during a second stage of the authentication:

the user profile submits a second request, on the computing device, to access the second digital application;

in response to the second request, the first digital application activates sensors that are connected to the computing device;

the computing device measures, via the sensors, a biometric parameter of a user that is associated with the user profile;

the first digital application transmits the biometric parameter to the central server for comparison with biometric information stored in the database;

in response to the comparison achieving a threshold match, the first digital application communicates to the second digital application authentication parameters to achieve authentication of the user profile for the second digital application; and,

in respond to determining the authentication parameters are not obtained, the computing device constructs missing parameters by activating sensors on the computing device and by gathering biometric data via the activated sensors, and, further to the construction of the missing parameters, the user profile submits, via a digital token, a third request targeted for the missing parameters.

2. The system of claim 1 wherein the sensors are virtual-reality (“VR”) or augmented-reality (“AR”)-based.

3. The system of claim 1 wherein the sensors comprise smart glasses, smart vehicles, smart jewelry, smart tattoos, or smart home devices.

4. The system of claim 1 wherein the biometric factor includes a fingerprint, an iris scan, a gait profile, or a head-nod profile.

5. The system of claim 1 wherein, in response to achieving authentication for the first digital application, the central server generates a digital authentication token that is stored at the computing device and facilitates access to the first digital application.

6. The system of claim 5 wherein the digital token is also used to facilitate access to the second application.

7. The system of claim 1 wherein one of the authenticating factors is a one-time password (“OTP”), wherein:

the OTP is:

generated at the central server for the user profile;

stored in the database in connection with the user profile; and

securely communicated to the user profile; and

authentication is achieved when the OTP that is inputted at the computing device matches the OTP that is stored in the database in connection with the user profile.

8. The system of claim 7 wherein:

the OTP is securely communicated to the user profile via a link in an email message or a push notification; and

the OTP is inputted at the computing device automatically in response to selection of the link.

9. The system of claim 1 wherein the first digital application is a mobile banking application.

10. The system of claim 9 wherein the second stage of the authentication is achieved even when second digital application is a payment platform or a virtual-reality environment.

11. A method for multi-stage, identity-based, digital authentication, the method comprising:

a first stage of authentication that comprises:

a user profile submitting a first request, on a computing device, to access a first digital application;

the computing device receiving, as input, one or more authenticating factors;

the computing device transmitting, to a central server, the one or more authenticating factors;

the central server processing the one or more authenticating factors, said processing comprising comparing the one or more authenticating factors to a database of user profile data to achieve authentication of the user profile's identity when a threshold match is achieved between the one or more authenticating factors and a profile in the database; and

in response to achieving authentication, the central server communicating to the computing device that the user profile is authenticated to access the first digital application; and

a second stage of authentication that comprises:

the user profile submitting a second request, on the computing device, to access the second digital application, wherein the first and second digital applications utilize separate authentications;

in response to the second request, the first digital application activating sensors that are connected to the computing device;

measuring, via the sensors, a biometric parameter of a user that is associated with the user profile;

the first digital application transmitting the biometric parameter to the central server for comparison with biometric information stored in the database;

in response to the comparison achieving a threshold match, the first digital application communicating to the second digital application authentication parameters to achieve authentication of the user profile for the second digital application; and,

in respond to determining the authentication parameters are not obtained, the computing device constructs missing parameters by activating sensors on the computing device and by gathering biometric data via the activated sensors, and, further to the construction of the missing parameters, the user profile submits, via a digital token, a third request targeted for the missing parameters.

12. The method of claim 11 wherein the sensors are virtual-reality (“VR”) or augmented-reality (“AR”)-based.

13. The method of claim 11 wherein the sensors comprise smart glasses, smart vehicles, smart jewelry, smart tattoos, or smart home devices.

14. The method of claim 11 wherein the biometric factor includes a fingerprint, an iris scan, a gait profile, or a head-nod profile.

15. The method of claim 11 further comprising, in response to achieving authentication for the first digital application, the central server generating a digital authentication token that is stored at the computing device and facilitates access to the first digital application.

16. The method of claim 15 further comprising using the digital token to also facilitate access to the second application.

17. The method of claim 11 wherein one of the authenticating factors is a one-time password (“OTP”), and the method further comprises:

generating the OTP at the central server for the user profile;

storing the OTP in the database in connection with the user profile;

securely communicating the OTP to the user profile; and

achieving authentication when the OTP that is inputted at the computing device matches the OTP that is stored in the database in connection with the user profile.

18. The method of claim 17 wherein:

the OTP is securely communicated to the user profile via a link in an email message or a push notification; and

the OTP is inputted at the computing device automatically in response to selection of the link.

19. The method of claim 11 wherein the first digital application is a mobile banking application.

20. The method of claim 19 wherein the second stage of the authentication is achieved even when second digital application is a payment platform or a virtual-reality environment.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 23, 2022
From: GILLIS, TRISH; FARRIS, TAYLOR
To: BANK OF AMERICA CORPORATION
Reel/Frame 059980/0197 →
Continuity (1)
Related Publication 20230379324A1 · Nov 23, 2023