Granted Patent B1

US 12,299,111 · App. 17/893,095 · Granted May 13, 2025

Inventors: Adam Evans Vancini (Concord, CA); Christopher Phillip Clausen (Novato, CA); Darrell L. Suen (San Ramon, CA)

Assignee: Wells Fargo Bank, N.A.

G06F21/45G06F21/335G06F2221/2113G06F2221/2117

Abstract

Claims (35)

1. A device, comprising:

a processor coupled to a memory that stores instructions that, when executed by the processor, cause the processor to:

provide access to at least one of a product or a service provided by an institution via a digital channel;

provide initiation information to an authorizer via the digital channel, wherein the initiation information is configured to identify a user of the device;

receive an enrollment token, the enrollment token including identifying information that identifies the device and defining a level of authorization specific to the digital channel utilized by the device and also based on the initiation information;

provide the enrollment token to an institution computing system associated with the institution; and

selectively control access to the product or the service by the device based on the level of authorization defined by the enrollment token.

2. The device of claim 1 , wherein the level of authorization defines a level of authentication of the user of the device, and wherein the enrollment token binds the user to the device via identifying information included in the enrollment token being placed on the device.

3. The device of claim 2 , wherein binding the user to the device includes receiving a cookie on the device, wherein the cookie includes at least a portion of the identifying information.

4. The device of claim 1 , wherein the level of authorization is one of a plurality of predefined authorization levels.

5. The device of claim 1 , wherein the digital channel is provided via an automated teller machine.

6. The device of claim 1 , wherein the service includes at least one of opening an account or processing a transaction.

7. The device of claim 1 , wherein the enrollment token is embedded in a code configured to be displayed on a display of the device.

8. A system, comprising:

a processor coupled to a memory that stores instructions that, when executed by the processor, cause the processor to:

provide initiation information to an authorizer via a channel used to access at least one of a product or a service, wherein the initiation information is configured to identify a user of a device;

determine an authorization level for the user of the device that is based on the initiation information and also specific to the channel used to access the at least one of the product or the service by the device;

provide the determined authorization level to the authorizer; and

selectively control access to the at least one of the product or the service based on a level of authorization defined by an enrollment token received from the authorizer and stored on the device, the enrollment token defining the level of authorization based on the determined authorization level and including identifying information that identifies the device.

9. The system of claim 8 , wherein the enrollment token binds the user and the device via identifying information included in the enrollment token that is placed on the device.

10. The system of claim 8 , wherein the instructions further cause the processor to determine that the authorization level is lower than that associated with the channel based on the initiation information.

11. The system of claim 8 , wherein the instructions further cause the processor to determine an updated authorization level based on a change in a class of authentication associated with a different channel.

12. The system of claim 8 , wherein the channel is one of an automated teller machine or an automated telephone operator.

13. The system of claim 8 , wherein the authorization level is one of a plurality of predefined authorization levels.

14. The system of claim 8 , wherein the at least one of the product or the service is at least one of opening a new account or a processing of a transaction.

15. A method, comprising:

providing, by a user computing device, initiation information to an authorizer via a channel, wherein the initiation information is configured to identify a user of the user computing device;

determining, by the user computing device, an authorization level for the user of the user computing device based on the initiation information and that is also specific to the channel used to access at least one of a product or a service;

providing, by the user computing device, the determined authorization level to the authorizer; and

selectively controlling, by the user computing device, access to the at least one of the product or the service based on a level of authorization defined by an enrollment token received from the authorizer and stored on the user computing device, the enrollment token including identifying information that identifies the user computing device and defines the level of authorization based on the determined authorization level.

16. The method of claim 15 , wherein the level of authorization defines a level of authentication of the user of the user computing device, and wherein the enrollment token binds the user to the user computing device via identifying information included in the enrollment token being placed on the user computing device.

17. The method of claim 15 , wherein the authorizer is a first authorizer and the method further includes:

providing, by the user computing device, updated initiation information to a second authorizer;

receiving, by the user computing device, an updated enrollment token defining an updated level of authorization based on the updated initiation information; and

replacing, by the user computing device, the enrollment token with the updated enrollment token in response to determining the updated level of authorization is higher than the level of authorization defined by the enrollment token.

Assignments (1)

Continuity (3)

References Cited (102)