Bank of America Corporation

Douglas Gerard Brown

Peter K Buchhop

Ketil Bjugan

James M Ashfield

David Charles Shroyer

Joseph A Giordano

Marc Lance Warshawsky

Christopher R Griggs

Hitesh Bajaj

Shaun J Abraham

Margaret A Huggins

Jade M Vo-Dinh

Systems, methods, and computer program products are provided for authenticating and efficiently re-authenticating a user with a financial institution in order to gain access to account information using a web-enabled device. The web-enabled device stores user profiles associated with the user including authentication information provided by the user during primary authentication. The device retrieves the authentication information upon secondary authentication, that is, validation of the user's identity, which in some embodiments, includes local validation of a personal identification number ('PIN') and/or a remote control passcode ('RCP'). As such, the web-enabled device re-authenticates the user without requiring authentication communication with a financial institution server, and thereafter, the user interacts with an application running on the web-enabled device to retrieve desired account information from the financial institution server.

Systems and methods for authenticating a user for accessing account information using a web-enabled device

Techniques for supporting a mobile financial service that enables a customers to enroll the customer's mobile phone number and register accounts are disclosed. A persistent authentication request is received from a customer, and the customer is authenticated based on authentication information provided by the customer. The customer enters a device identification of the communication device so that the device identification is registered and linked to the customer's profile. When the customer requests non-actionable information (e.g., account balance and transaction history information) by calling a customer service center with a registered communication device, the calling identification is provided to the customer service center by the incoming call. The customer service determines whether the calling identification corresponds to a registered number. If so, the customer service center provides the requested non-actionable information to the communication device without further authentication.

Persistent authentication

Systems, methods, and software for implementing location-based authentication of both online and mobile web-based transactions. This implementation may involve verifying whether a mobile device (such as a cellular telephone) is proximate to a computer from which the transaction is being performed. Depending upon the location of the mobile device, further transactions may be approved or rejected. In further implementations, the transactions may be made from the mobile device itself. In this case, the location of the mobile device compared with one or more pre-stored locations may affect whether further transactions from the mobile device are approved or rejected.

Location based authentication of mobile device transactions

A system and method for controlling a monetary account with one or more sub-accounts is described. A monetary account with an entity is established and an account user associated with the monetary account is identified. A sub-account with the entity is established, where the sub-account is associated with the monetary account and includes monetary funds transferred from the monetary account. At least one sub-account user associated with the sub-account is identified, where the at least one sub-account user is different from the account user. One or more controls, placed by the account user, are established on at least one of the sub-account and the at least one sub-account user. The at least one sub-account user is restricted from accessing monetary funds in the monetary account and the account user is permitted to access the sub-account.

Sub-account mechanism

Systems and methods are disclosed for identifying circumstances where end-to-end security is not available to a mobile banking customer. The user may be alerted/warned or restricted from accessing some banking services through his/her WAP-enabled mobile device if the server (e.g., bank server) determines that end-to-end security is not available. In some instances, the bank server may access a computer data file containing a list of known end-to-end secure devices and gateways to verify the integrity of the data communication. The server may verify the integrity of the data communication using loose matching.

Mobile banking

Systems and methods are disclosed for identifying circumstances where end-to-end security is not available to a mobile banking customer. The user may be alerted/warned or restricted from accessing some banking services through his/her WAP-enabled mobile device if the bank server determines that end-to-end security is not available. In some instances, the bank server may access a computer data file containing a list of known end-to-end secure devices and gateways to verify the integrity of the data communication. The server may verify the integrity of the data communication using loose matching.

Growing community of inventors

Waxhaw, NC, United States of America

Douglas Gerard Brown