Granted Patent B2

US 12,346,742 · App. 17/743,155 · Granted Jul 1, 2025

Inventors: Tony England (Tega Cay, SC); Steven Michael Twombly (Saco, ME); Robertson Walters Greenbacker (Charlotte, NC); Bradley Ryan Holland (Huntersville, NC); Sara A. Walsh (West Chester, PA)

Assignee: BANK OF AMERICA CORPORATION

G06F9/5072G06F9/505G06F9/5083

Abstract

Claims (85)

1. A system for intelligent type-based implementation of restrictions on resource transfers, wherein the system is structured for dynamic authentication restrictions for resource instrument use, the system comprising:

at least one non-transitory storage device; and

at least one processor coupled to the at least one non-transitory storage device, wherein the at least one processor is configured to:

continuously monitor attributes associated with incoming resource transfer requests, comprising:

analyzing attributes associated with a plurality of resource transfer requests comprising recipient information and endpoint transaction processors;

generating training data for configuring a machine learning model for dynamic authentication restrictions based on at least the attributes associated with the plurality of resource transfer requests; and

generating a resource transfer restriction pattern using the machine learning model;

request, via an authentication subsystem at the endpoint device, authentication credentials;

permit, in response to successful authentication of input authentication credentials, access to one or more protected resources;

receive, from the endpoint device, one or more inputs associated with a compromise of a resource transfer instrument;

receive, subsequently to the one or more inputs, a current resource transfer request associated with the resource transfer instrument;

based on one or more attributes associated with the resource transfer request, determine a type of resource transfer associated with the resource transfer request;

execute one or more restrictions on the resource transfer request according to the resource transfer restriction pattern.

2. The system of claim 1 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, transfer time and date, and recipient information, that the resource transfer request is associated with a recurring resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the recurring resource transfer to be executed.

3. The system of claim 1 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting that the resource transfer request is associated with an expected resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the expected resource transfer to be executed.

4. The system of claim 1 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, recipient information, and location information associated with the resource transfer request, that the resource transfer request is associated with an unauthorized resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises blocking the unauthorized resource transfer from being executed.

5. The system of claim 1 , wherein receiving the one or more inputs associated with the compromise of the resource transfer instrument from the endpoint device further comprises constructing one or more queries structured to request the one or more inputs, and extract data associated with the compromise based on the one or more inputs; wherein the resource transfer restriction pattern comprises allowing recurring resource transfers to be executed while blocking unauthorized resource transfers from being executed.

6. The system of claim 1 , wherein the at least one processor is further configured to:

transmit a notification to the endpoint device, wherein the notification comprises a prompt to confirm whether the resource transfer request is authorized;

receive a response from the endpoint device that the resource transfer request is unauthorized; and

based on the response, block the resource transfer request.

7. The system of claim 1 , wherein the at least one processor is further configured to:

block the resource transfer request from being executed;

transmit a notification to the endpoint device, wherein the notification comprises a prompt to provide additional authentication credentials.

8. A computer program product for intelligent type-based implementation of restrictions on resource transfers, wherein the computer program product is structured for dynamic authentication restrictions for resource instrument use, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:

continuously monitor attributes associated with incoming resource transfer requests, comprising:

analyzing attributes associated with a plurality of resource transfer requests comprising recipient information and endpoint transaction processors;

generating training data for configuring a machine learning model for dynamic authentication restrictions based on at least the attributes associated with the plurality of resource transfer requests; and

generating a resource transfer restriction pattern using the machine learning model;

request, via an authentication subsystem at the endpoint device, authentication credentials;

permit, in response to successful authentication of input authentication credentials, access to one or more protected resources;

receive, from the endpoint device, one or more inputs associated with a compromise of a resource transfer instrument;

receive, subsequently to the one or more inputs, a current resource transfer request associated with the resource transfer instrument;

based on one or more attributes associated with the resource transfer request, determine a type of resource transfer associated with the resource transfer request;

and

execute one or more restrictions on the resource transfer request according to the resource transfer restriction pattern.

9. The computer program product of claim 8 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, transfer time and date, and recipient information, that the resource transfer request is associated with a recurring resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the recurring resource transfer to be executed.

10. The computer program product of claim 8 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting that the resource transfer request is associated with an expected resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the expected resource transfer to be executed.

11. The computer program product of claim 8 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, recipient information, and location information associated with the resource transfer request, that the resource transfer request is associated with an unauthorized resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises blocking the unauthorized resource transfer from being executed.

12. The computer program product of claim 8 , wherein receiving the one or more inputs associated with the compromise of the resource transfer instrument from the endpoint device further comprises constructing one or more queries structured to request the one or more inputs, and extract data associated with the compromise based on the one or more inputs; wherein the resource transfer restriction pattern comprises allowing recurring resource transfers to be executed while blocking unauthorized resource transfers from being executed.

13. The computer program product of claim 8 , wherein the apparatus is further configured to:

transmit a notification to the endpoint device, wherein the notification comprises a prompt to confirm whether the resource transfer request is authorized;

receive a response from the endpoint device that the resource transfer request is unauthorized; and

based on the response, block the resource transfer request.

14. A method for intelligent type-based implementation of restrictions on resource transfers, wherein the method is structured for dynamic authentication restrictions for resource instrument use, the method comprising:

continuously monitoring attributes associated with incoming resource transfer requests, comprising:

analyzing attributes associated with a plurality of resource transfer requests comprising recipient information and endpoint transaction processors;

generating training data for configuring a machine learning model for dynamic authentication restrictions based on at least the attributes associated with the plurality of resource transfer requests; and

generating a resource transfer restriction pattern using the machine learning model;

requesting, via an authentication subsystem at the endpoint device, authentication credentials;

permitting, in response to successful authentication of input authentication credentials, access to one or more protected resources;

receiving, from the endpoint device, one or more inputs associated with a compromise of a resource transfer instrument;

receiving, subsequently to the one or more inputs, a current resource transfer request associated with the resource transfer instrument;

based on one or more attributes associated with the resource transfer request, determining a type of resource transfer associated with the resource transfer request;

and

executing one or more restrictions on the resource transfer request according to the resource transfer restriction pattern.

15. The method of claim 14 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, transfer time and date, and recipient information, that the resource transfer request is associated with a recurring resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the recurring resource transfer to be executed.

16. The method of claim 14 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting that the resource transfer request is associated with an expected resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises allowing the expected resource transfer to be executed.

17. The method of claim 14 , wherein determining the type of resource transfer associated with the resource transfer request comprises:

detecting, based on at least one of a resource transfer amount, recipient information, and location information associated with the resource transfer request, that the resource transfer request is associated with an unauthorized resource transfer; and

wherein executing the one or more restrictions on the resource transfer request according to the resource transfer restriction pattern comprises blocking the unauthorized resource transfer from being executed.

18. The method of claim 14 , wherein receiving the one or more inputs associated with the compromise of the resource transfer instrument from the endpoint device further comprises constructing one or more queries structured to request the one or more inputs, and extract data associated with the compromise based on the one or more inputs; wherein the resource transfer restriction pattern comprises allowing recurring resource transfers to be executed while blocking unauthorized resource transfers from being executed.

19. The method of claim 14 , wherein the method further comprises:

transmitting a notification to the endpoint device, wherein the notification comprises a prompt to confirm whether the resource transfer request is authorized;

receiving a response from the endpoint device that the resource transfer request is unauthorized; and

based on the response, blocking the resource transfer request.

20. The method of claim 14 , wherein the method further comprises:

blocking the resource transfer request from being executed;

transmitting a notification to the endpoint device, wherein the notification comprises a prompt to provide additional authentication credentials.

Assignments (1)

Continuity (1)

References Cited (25)