Bank of America Corporation

David Charles Shroyer

Todd Inskeep

James M Ashfield

Pavan K Chayanam

Eric William Miller

Clay D Newton

Xu He

George C Schroth

Robert Timothy Leedy, Jr

Xianhong Zhang

Heather Roseann Dolan

Eric Charles McConnell

Kapil Pruthi

Nishant H Shah

Douglas Gerard Brown

Scott Huie

Gail R Davis

Kris Deion Tullos

Lorettajean Cross Maguire

Darrell Fitzgerald Stanfield

Jessica Lynn Brandt

Aaron Daniel Lewis

Karen Choy

Sidney A Winchester, Jr

David C King

Hisham Ibrahim Salama

Aloysius J Venit

Denise Hanna Beachley

Jason Andrew Malo

Phillip Wayne Dunne

Murali K Bolisetty

William Larry Grant, Jr

Linda Marie Dziedzic

Michael M Pennella

Duncan Converse Morrell

Justin McCord

Ronald C Mitchell, Jr

Michael Dean Bridges

Craig T Johnson

Tanuja Melkani

Debra Jean Lewis

Joseph M Hollmann

Apparatus and methods for authorizing an exchange between a customer and a services provider. The apparatus may include an electronic processor that is configured to: (1) calculate a reference event profile; and (2) determine a difference between a prospective transaction profile and the reference event profile. The prospective transaction profile may be based on the initiation of a prospective transaction by an individual whose identity has not been verified. The reference event profile may be based on a plurality of customer events that correspond to one or many different customers. The apparatus may include an output device that is configured to output authentication test information that corresponds to the difference. The authentication test information may support a revised prospective transaction profile that is more similar to the reference event profile than is the initial prospective event profile.

Risk-based transaction authentication

Apparatus and methods for the execution of a transaction between a customer and a merchant using a virtual purchasing instrument. The apparatus and methods may involve receiving from the customer a request to pay funds or draw credit from an account based on the customer's electronic presentation of the virtual purchasing instrument to the merchant.

Virtual purchasing card transaction

Embodiments of the invention relate to apparatuses and methods for identity verification. For example, in one embodiment, a financial institution has a system to generate authentication questions to be used when authenticating a customer when the customer is trying to access and/or use the customer's account. The authentication system is configured to ask one or more authentication questions each time the customer tries to access or use the account, where the authentication questions are generally out-of-wallet questions that constantly change from one authentication attempt to the next. For example, in one embodiment, the questions include behavioral, historical, and transaction based questions generated from information available about a customer's financial account. In some embodiments, the authentication engine is configured to generate authentication questions based at least partially on a risk rating associated with the authentication request and/or on the communication channel from which the request is received.

Dynamic authentication engine

A method and system for detecting fraud may redirect a user from a phishing message to an education message. The phishing message may include a phishing website that mimics a target entity. A user may be convinced to disclose sensitive information to a fraudster operating the phishing website. The phishing website may be maintained through a service provider and the target entity may request that the service provider disable the phishing website. During evaluation of the target entity's request by the service provider, a user may be directed to an education website that may be displayed until the phishing website may be permanently disabled. The education website may include information or identify a source of information that may help educate the user on fraud prevention, phishing, the target entity, the targeted industry, future prevention tips and suggestions, and other related information.

Phishing redirect for consumer education: fraud detection

A reusable authentication component may be integrated into a web page to communicate with an authentication server and authenticate a user to the web page. The reusable authentication component may implement a complex authentication process, including multiple user interfaces to receive multiple assurances of user identity and user confirmation of previously stored mutual authentication data. The authentication process may be performed by the authentication component without refreshing or redirecting the parent web page until completion of a successful user authentication, after which the parent web page may receive authentication data and refresh to provide user specific and/or secure user data on the web page.

Reusable authentication experience tool

Display screen of a communications device with a graphical user interface

Systems, methods, and software for implementing location-based authentication of both online and mobile web-based transactions. This implementation may involve verifying whether a mobile device (such as a cellular telephone) is proximate to a computer from which the transaction is being performed. Depending upon the location of the mobile device, further transactions may be approved or rejected. In further implementations, the transactions may be made from the mobile device itself. In this case, the location of the mobile device compared with one or more pre-stored locations may affect whether further transactions from the mobile device are approved or rejected.

Location based authentication of mobile device transactions

Embodiments of the invention relate to systems, methods, and computer program products for identifying devices used in connection with email and website spoofing. For example, the invention can be used to identify the device that was used to copy an image from a target website, where, after being copied, the image is used as part of a spoofed email or website. In an embodiment, a timer is embedded in an image residing on a web server that hosts a target website. The embedded timer is configured to record the time at which the image is removed from the web server and store that time in the image for later retrieval. Also, the time at which the image was removed, along with a device forensic of the device used to download the image, is stored in a database. If the image later appears as part of a spoofed email or website, the time at which the image was removed from the web server is obtained from the timer embedded in the image. Then, the database is searched for the corresponding time and device forensic, which can be used to identify the device used to copy the image from the target website.

Download detection

A system and methods for customer-managed device-based authentication are disclosed. Embodiments of the invention provide a user interface that allows a customer with an on-line account to access and manage device fingerprint information that can be used to control or regulate the customer's access. Such a system can collect user input regarding device preferences related to specified devices to be used to access or to be prohibited or restricted from accessing an account. Information regarding these devices is stored in a database. The system can then assay a device fingerprint for a device to authenticate access by the device to the account based on the device preferences. In some embodiments, input can also be collected regarding alert preferences related to alerts connected with accessing the account from specified devices.

System and methods for customer-managed device-based authentication

Embodiments of the invention are generally directed to a system and method for enrolling a user into an authentication system. In some embodiments of the invention, a user completes a first portion of the enrollment or setup process using a first computer environment, but is not permitted to complete the enrollment or setup process from the first computer environment. The system permits the user to complete the enrollment or setup process only from a second computer environment different from the first computer environment. In one embodiment, the second computer environment is any computer environment outside of the first computer environment.

Authentication engine for enrollment into a computer environment

Growing community of inventors

Matthews, NC, United States of America

David Charles Shroyer