Capital One Services, LLC

Jackson Macomber

Jeffrey Rule

Lawrence H Douglas

Kevin Grant Osborn

Systems and methods for digital media-based user authentication are disclosed herein. In some aspects, the system may receive an authentication request. The system may transmit a user verification request based on the authentication request. The system may receive media recordings in response to the user verification request. The system may detect one or more features in the media recordings. The system may generate a plurality of risk metrics for the user based on generating risk metrics for the one or more features. The system may determine an authentication probability based on the plurality of risk metrics.

Systems and methods for digital media-based user authentication

Methods and systems for preventing unauthorized resource access. In some aspects, the system obtains, in real time, a first data stream between a user requesting access to resources in a user account and an agent. The system processes, using a first machine learning model, the first data stream to generate a confidence score. If the confidence score exceeds a threshold, the system generates a sandbox context configured to simulate output indicative of successful resource access. The system obtains a second data stream for the sandbox context and processes it using a second machine learning model to determine whether the communication between the agent and the user was malicious. If the communication was not malicious, the system removes the user account from the sandbox context and effects grant of resource access. Otherwise, the system reports the agent and the user account for further processing for attempts to obtain unauthorized user access.

Systems and methods for preventing unauthorized resource access

A method and related system may analyze metadata associated with a first set of transactions to determine whether to perform a second set of transactions. The method and related system may include determining a data category based on first device-provided data of a first database transaction indicating a first record associated with a second record, and may further include obtaining, based on whether the data category satisfies a first set of criteria, an identifier and an amount based on image data using a prediction model. The method may further include querying a database based on the identifier to obtain an indication that the identifier is mapped to an object category, validating the amount based on a result indicating whether the object category satisfies a second set of criteria, and causing a second transaction that changes fields of the first and second records.

Augmented data for security during record updates

Systems and methods for successively executing an operation over multiple communication networks. In some aspects, the system obtains first access information received from a physical token and generates an operation related to an aggregated virtual container. The system determines a first communication network from the first access information and transmits, via the first communication network, the operation associated with the aggregated virtual container. If the operation was not transmitted successfully via the first communication network, the system obtains second access information received from the physical token, determines a second communication network from the second access information, and transmits, via the second communication network, the operation associated with the aggregated virtual container. If the operation was transmitted successfully via the second communication network, the system generates for display a notification that the operation has been executed.

Systems and methods for successively executing an operation over multiple communication networks

Systems and methods for executing sequential suboperations over multiple communication networks. In some aspects, the system receives, via a first communication network, from an external system, an operation related to an aggregated virtual container. The system generates sequential suboperations including a first suboperation associated with a provider of the aggregated virtual container and the external system and a second suboperation associated with the user and the provider of the aggregated virtual container. If the first suboperation is executed successfully, the system transmits the second suboperation to a user system associated with the aggregated virtual container. If the second suboperation is executed successfully, the system generates a first message indicating that the operation has been executed and transmits the first message via the first communication network to the external system.

Systems and methods for executing sequential suboperations over multiple communication networks

A computing system may obtain text corresponding to a conversation between an outside caller and an agent. The computing system may obtain data associated with the conversation that may be used to determine whether the outside caller is attempting malicious activity or not. The obtained text and data may be provided to a machine learning model to generate a probability score indicative of whether the outside caller is attempting to obtain unauthorized access or attempting other malicious activity. Based on determining that the probability score satisfies a threshold, the computing system may modify a permission (e.g., an API permission) of the agent. The computing system may deny the request to perform the action and may cause display of an indication that the request was successful.

Machine learning for computer security

In a method for providing provisioning information, a central data processing system receives from a transaction data processing system, an encrypted user datum associated with a client user of the transaction data processing system; receives from at least one of a plurality of account administrator data processing systems, a response comprising a notification that a user account administrated by that account administrator data processing system is associated with the client user; receives an account administrator selection message including identification of a user-selected account administrator from an account administrator list; transmits to the account administrator data processing system associated with the user-selected account administrator, a provisioning request for client user account provisioning information; receives from the account administrator data processing system associated with the user-selected account administrator, the client user account provisioning information; and transmits to the transaction data processing system, the client user account provisioning information.

System and method for multi-account provisioning

In a method for provisioning account information of a payment card, user datum encryption information is transmitted to a transaction data processing system. A user datum encrypted using the user datum encryption information and a request to share account provisioning information is received from the transaction data processing system when the payment card is present by a user at the transaction data processing system. A user account associated with the payment card is determined and the user of the payment card is authenticated. A request for confirmation that the account provisioning information should be shared is sent to a user device associated with the user account and a confirmation response is received from the user device that includes permission to share account provisioning information. Account provisioning information is then transmitted to the transaction data processing system.

System and method for card present account provisioning

In a method for broadcasting account provisioning information, user datum encryption information is transmitted to a plurality of account processing systems. A request to share account provisioning information is received from a user device associated with an account holder. A user datum of the account holder is encrypted using the encryption information and transmitted to the account processing systems. A response is received from at least one of the account processing systems, the response including an indication that the account holder has a transaction account processed by that account processing system. A request for confirmation that the account provisioning information should be shared is sent to the user device and a confirmation response is received from the user device that includes permission to share account provisioning information. Account provisioning information is then transmitted to one or more of the account processing systems.

Growing community of inventors

Henrico, VA, United States of America

Jackson Macomber