Wells Fargo Bank, N.a.

Andrew G Foote

Nikolai Stroke

Duc M Trinh

Harmit Singh Dhanoa

Ilya Ozerets

Shanti Tandukar

Mariam Alexanian

David C Hatch

Vincent Petruzzi

Disclosed are example methods, systems, and devices that allow for the generation and provisioning of digital credentials, which may demonstrate that a trusted entity has validated individual identity attributes, or sets of attributes, of a user. Digital credentials may also demonstrate one or more extrapolations resulting from deductions or inductions from validated identity attributes. A receiver device may indicate which identity attributes or extrapolations are sought by displaying a QR or other code and/or via a transmission using NFC or other wireless communication, and a user device may access corresponding digital attributes in an ID wallet to be provisioned via code or transmission. Digital credentials may restrict uses and usability of identity attributes. Cryptographic keys and/or distributed ledger records may allow recipients to verify authenticity of digital credentials. The same identity attribute may be proven by showing validation by multiple selectable trusted entities.

Self-sovereign identification via digital credentials for identity attributes

An illustrative method for authenticating a user is disclosed. A security threshold is received from a third party. Environmental conditions associated with a device are assessed to determine a suitable subset of a plurality of biometric authentication modalities for authenticating the user and an unsuitable subset not available for authenticating the user. The plurality of biometric authentication modalities are displayed, where the suitable subset is selectable by the user and the unsuitable subset are not selectable by the user. A selection of a biometric authentication modality from the suitable subset is received, and user authentication data for the selected biometric authentication modality is received. The user authentication data is compared with previously-determined biometric data, an authentication score is determined based on the comparison, the authentication core is compared to a security threshold, and the user is authenticated in response to determining the authentication score satisfies the security threshold.

Authentication as a service

In accordance with at least some aspects of the present disclosure, an illustrative method for authenticating a user is disclosed. A plurality of biometric modalities are displayed for authenticating the user. A selection of one or more of the biometric authentication modalities may be received. User authentication data may be received for each of the one or more selected authentication modalities. The user authentication data may be compared with previously-determined biometric data. An authentication score may be determined based on the comparison of the user authentication data with the previously-determined biometric data. A determination may be made whether to authenticate the user based on the authentication score.

Self-sovereign identification via digital credentials for selected identity attributes

Access controls for transferring funds from a customer to a designated recipient using a transaction machine and a one-time account and/or an authentication process that does not involve the use of a transaction card are disclosed. An example method (and system) can include storing identification data associated with a one-time account or transfer for the designated recipient of the one-time account; receiving authentication data from the transaction machine; determining that the user corresponds to the designated recipient using the received authentication data and the stored identification data; and executing the selected transaction after the determination.

Growing community of inventors

San Francisco, CA, United States of America

Andrew G Foote