Granted Patent B2

US 12,199,975 · App. 17/453,014 · Granted Jan 14, 2025

Inventor: Marcus R. Matos (Richardson, TX)

Assignee: Bank of America Corporation

H04L63/0838H04L63/1425

Abstract

Claims (72)

1. An apparatus for automating replacement of a one-time password (“OTP”) generator, the apparatus comprising:

an OTP generator assigned to a user, the OTP generator comprising:

a battery;

a display;

a form factor;

a processor; and

a non-transitory memory configured to store executable instructions that when run on the processor:

receive and analyze a sensor reading from one or more sensors;

generate, at the OTP generator, an OTP for the user; and

display the OTP; and

an authentication server, the authentication server comprising:

a communication link configured to receive the OTP from the user;

a server processor;

a server non-transitory memory configured to store at least:

an operating system; and

an authentication engine that runs on the server processor;

wherein when the sensor reading indicates one or more of the following conditions:

the battery needs to be replaced;

the OTP generator has been tampered with;

the OTP generator has been opened;

the OTP generator has been subject to malicious activity;

the OTP generator is located outside an acceptable radius from an expected location; and

the user is under duress, the OTP generator modifies the OTP to include:

a representation of a datum of information comprising the one or more conditions;

and the OTP; and

wherein the authentication engine:

receives the OTP;

analyzes the OTP to authenticate the user;

analyzes the OTP to determine if the OTP includes the datum of information; and

when the OTP includes the representation of the datum of information:

analyzes the datum of information; and

the server orders and initiates the sending of a new OTP generator to the user.

2. The apparatus of claim 1 wherein one sensor is a physical state sensor.

3. The apparatus of claim 1 wherein one sensor is a battery power level sensor.

4. The apparatus of claim 1 wherein the OTP is a QR code.

5. The apparatus of claim 1 wherein the datum of information is that the battery charge is low.

6. The apparatus of claim 1 wherein the form factor is a credit card.

7. The apparatus of claim 1 wherein the OTP is a sound.

8. A method for increasing information communicated by a one-time password (“OTP”) generator, the method comprising:

receiving, at a processor in the OTP generator, a sensor reading from one or more sensors included with the OTP generator, wherein the sensor reading indicates one or more of the following conditions:

the battery needs to be replaced;

the OTP generator has been tampered with;

the OTP generator has been opened;

the OTP generator has been subject to malicious activity;

the OTP generator is located outside an acceptable radius from an expected location; and

the user is under duress;

analyzing, at the OTP generator, the sensor reading;

determining, at the OTP generator, that the sensor reading requires one or more than one datum of information in addition to an OTP to be transmitted to an authentication engine at a server;

when the OTP generator determines that no datum of information is required to be transmitted to the authentication engine:

generating, at the OTP generator, a standard OTP; and

displaying to a user, at a display on the OTP generator, the standard OTP;

when the OTP generator determines that one or more than one datum of information is required to be transmitted to the authentication engine:

generating, at the OTP generator, an enhanced OTP including a representation of the one or more than one datum of information and an OTP; and

displaying, at the display, the enhanced OTP;

receiving, at the authentication engine, a received OTP, the received OTP being either the standard OTP or the enhanced OTP;

comparing, at the authentication engine, the received OTP to an expected OTP, wherein the expected OTP is equivalent to the standard OTP;

when the received OTP is equivalent to the expected OTP, authenticating the user; and

when the received OTP is different from the expected OTP:

determining when the received OTP includes one or more than one datum of information;

ordering and initiating the sending of a new OTP generator to the user; and

executing an operation other than authentication of the user in response to the one or more than one datum of information.

9. The method of claim 8 wherein the operation includes authenticating the user.

10. The method of claim 8 wherein the operation includes issuing an alert to an administrator.

11. The method of claim 8 wherein the enhanced OTP is the standard OTP mathematically adjusted according to a distinct formula for each of the conditions.

12. A method for proactively replacing a one-time password (“OTP”) generator, the method comprising:

receiving, at an authentication engine located at a server, an OTP from a user generated by the OTP generator;

decrypting the OTP;

when the OTP includes information indicating that the OTP generator needs to be replaced, automatically initiating the sending of a new OTP generator to the user.

13. The method of claim 12 further comprising when the OTP includes data indicating that the user is in duress, alerting an administrator.

14. The method of claim 12 further comprising when the OTP includes data indicating that the OTP generator has been tampered with, alerting a security administrator.

15. The method of claim 14 further comprising sending a signal to the OTP generator to deactivate the OTP generator.

16. The method of claim 12 wherein the information indicating that the OTP generator needs to be replaced includes information that a battery powering the OTP generator is failing.

Assignments (1)

Continuity (1)

References Cited (33)