Granted Patent B1

US 12,406,038 · App. 17/486,733 · Granted Sep 2, 2025

Inventors: Gerard K. Cohen (Oakland, CA); Michelle D. Green (San Francisco, CA); Christopher P. Smith (Marvin, NC); Craig Stuart (San Francisco, CA); Kenneth L. Wright (Charlotte, NC); Michelle M. Young (Houston, TX)

Assignee: Wells Fargo Bank, N.A.

G06F21/31G06F21/6218G06Q20/3224G06Q20/3276G06F2221/2111

Abstract

Claims (51)

1. A method of authenticating a login request at a computing device, the method comprising:

receiving, by a computing device, the login request including a user identifier associated with a user;

transmitting, by the computing device, a request for location information of a user device associated with the user to indicate a first location of the user device;

causing, by the computing device, the user device to execute computer-executable code that is deployed to the user device to cause the user device to:

generate a first encoded value based on a unique identifier of the user device;

generate a second encoded value based on the first location of the user device; and

generate a location-based modifiable digital fingerprint comprising the first encoded value and the second encoded value, wherein the location-based modifiable digital fingerprint changes responsive to changes in location of the user device;

detecting, by the computing device, a change in location of the user device from the first location of the user device to a second location of the user device;

receiving, by the computing device, the location-based modifiable digital fingerprint from the user device based on the change in the location of the user device triggering the user device to change the location-based modifiable digital fingerprint;

verifying, by the computing device, the user device based on the change to the location-based modifiable digital fingerprint including a change to the second encoded value that corresponds to the second location of the user device; and

providing, by the computing device, the user access to the computing device.

2. The method of claim 1 , wherein the login request further comprises a password associated with the user identifier.

3. The method of claim 2 , further comprising verifying, by the computing device, that the user identifier and the password match a known user identifier and a known password.

4. The method of claim 1 , wherein the first location of the user device is determined based on information provided by at least one of a wireless access point or a cellular transceiver in broadcast range of the user device.

5. The method of claim 1 , wherein the first location of the user device is determined based on a code provided to the user device.

6. The method of claim 1 , further comprising, in response to determining that the second encoded value corresponds to a third location of the user device, blacklisting, by the computing device, the user device.

7. The method of claim 6 , further comprising blacklisting, by the computing device, the user device based on an IP address associated with the login request.

8. A system for authenticating a login request, the system comprising:

a computing device comprising a processing circuit configured to:

receive the login request including a user identifier associated with a user;

transmit a request for location information of a user device associated with the user to indicate a first location of the user device;

cause the user device to execute computer-executable code that is deployed to the user device to cause the user device to:

generate a first encoded value on a unique identifier of the user device;

generate a second encoded value based on the first location of the user device; and

generate a location-based modifiable digital fingerprint comprising the first encoded value and the second encoded value, wherein the location-based modifiable digital fingerprint changes responsive to a change in the location of the user device;

detect a change in the location of the user device from the first location of the user device to a second location of the user device;

receive the location-based modifiable digital fingerprint from the user device based on the change in the location of the user device triggering the user device to change the location-based modifiable digital fingerprint;

verify the user device based on the change to the location-based modifiable digital fingerprint including a change to the second encoded value that corresponds to the second location; and

provide the user access to the computing device.

9. The system of claim 8 , wherein the login request further comprises a password associated with the user identifier.

10. The system of claim 9 , wherein the processing circuit is further configured to verify that the user identifier and the password match a known user identifier and a known password.

11. The system of claim 8 , wherein the first location of the user device is determined based on information provided by at least one of a wireless access point and a cellular transceiver in broadcast range of the user device.

12. The system of claim 8 , wherein the first location of the user device is determined based on a code provided to the user device.

13. The system of claim 8 , wherein the processing circuit is configured to, in response to determining that the second encoded value corresponds to a third location of the user device, blacklist the user device.

14. The system of claim 11 , wherein the processing circuit is configured to blacklist the user device based on an IP address associated with the login request.

15. One or more non-transitory computer-readable media comprising instructions stored thereon, the instructions, when executed by a processor of a computing device, configured to cause the computing device to perform operations for authenticating a login request, the operations comprising:

receiving the login request including a user identifier associated with a user;

transmitting a request for location information of a user device associated with the user to indicate a first location of the user device;

causing the user device to execute computer-executable code that is deployed to the user device to cause the user device to:

generate a first encoded value based on a unique identifier of the user device;

generate a second encoded value based on the first location of the user device; and

generate a location-based modifiable digital fingerprint comprising the first encoded value and the second encoded value, wherein the location-based modifiable digital fingerprint changes responsive to changes in location of the user device;

detecting a change in location of the user device from the first location of the user device to a second location of the user device;

receiving the location-based modifiable digital fingerprint from the user device based on the change in the location of the user device triggering the user device to change the location-based modifiable digital fingerprint;

verifying the user device based on the change to the location-based modifiable digital fingerprint including a change to the second encoded value that corresponds to the second location of the user device; and

providing the user access to the computing device.

16. The media of claim 15 , wherein the login request further comprises a password associated with the user identifier.

17. The media of claim 16 , the operations further comprising: verifying that the user identifier and the password match a known user identifier and a known password.

18. The media of claim 15 , wherein the first location of the user device is determined based on information provided by at least one of a wireless access point and a cellular transceiver in broadcast range of the user device.

19. The media of claim 15 , wherein the first location of the user device is determined based on a code provided to the user device.

20. The media of claim 15 , the operations comprising: in response to determining that the second encoded value corresponds to a third location of the user device, blacklisting the user device.

Assignments (1)

Continuity (1)

References Cited (74)