Bank of America Corporation

Lawrence Robert Labella

Amanda Jane Adams

Abdulkader Omar Barbir

Davindar S Gill

Eileen D Bridges

Craig Worstell

Rakesh Radhakrishnan

Cynthia Ann Frick

Ronald Wayne Ritchey

A system receives a request to authenticate a user and determines a first set of cell identifiers of a card matrix to associate with the user. The system receives a first factor, which comprises a first set of received cell values corresponding to the first set of cell identifiers of the card matrix. The system further determines a first set of stored cell values corresponding to the first set of cell identifiers of the card matrix and compares the first set of received cell values to the first set of stored cell values. The system also receives a second factor, which is different than the first factor. Finally, the system determines that the user is authenticated based at least in part upon the comparison of the first set of receives cell values to the first set of stored cell values.

Two-factor user authentication using card matrix

Aspects of the present disclosure are directed to methods and systems for securing mobile computing applications with distributed keys. In one aspect, a computer implemented method or computer readable media include steps electronically receiving, at a computer processor of a computing device, a first security key fragment based on a user input to the computing device; electronically receiving, at the computer processor, a second security key fragment from a network connected storage entity; and electronically concatenating, at the computer processor, the first security key fragment and the second security key fragment to generate a third security key.

Method of securing mobile applications using distributed keys

Aspects of the present disclosure pertain to system and method of securing mobile devices using virtual certificates at a computer processor. A method may include receiving a request for access to a computer network associated with a computing device to an application associated with a network connected server processor; electronically receiving, at the server processor, a first security key fragment from the computing device; the first security key fragment being paired with a verifier key fragment unknown to the computing device; generating a conditional seed key fragment at the server processor associated with the verifier key fragment; comparing a first hash parameter to a second hash parameter at the server processor; transmitting, at the server processor, a session security key for enabling network access to the application associated with the server processor.

Secure remote password

A card validation system receives a request to validate a card. The system receives a set of cell identifiers from a merchant, where the set of cell identifiers determined by the merchant. The system further receives a set of received cell values corresponding to the set of cell identifiers of a card validation matrix. The system determines a set of stored cell values corresponding to the set of cell identifiers of the card validation matrix. The system compares the set of received cell values to the set of stored cell values. Based at least in part upon the comparison, the system determines whether the card is validated.

Dynamic card validation using randomly determined cell identifiers

A card validation system comprises an interface and one or more processors. The interface receives a request to validate a card and a set of cell identifiers of a card validation matrix from a user. The set of cell identifiers are determined by the user. The interface further receives one or more received cell values corresponding to the set of cell identifiers of the card validation matrix. The one or more processors determines a set of stored cell values corresponding to the set of cell identifiers of the card validation matrix and compares the set of received cell values to the set of stored cell values. Based at least in part upon the comparison, the one or more processors determine whether the card is validated.

Dynamic card validation

A card validation system receives a request to validate a card and receives a request from a user for a set of cell identifiers. The system determines a set of cell identifiers of a card validation matrix to associate with the user and transmits the set of cell identifiers to the user. The system further receives a set of received cell values corresponding to set of cell identifiers of a card validation matrix. The system determines the set of stored cell values corresponding to the set of cell identifiers of the card validation matrix. The system compares the set of received cell values to the set of stored cell values. Based at least in part upon the comparison, the system determines whether the card is validated.

Dynamic card validation using user requested cell identifiers

A card validation system determines a first set of cell identifiers of a card validation matrix to associate with a first merchant and a user and transmits the first set of cell identifiers to a first merchant. The system receives a request to validate a card and receives, from the first merchant, a first set of received cell values corresponding to the first set of cell identifiers of a card validation matrix. The system determines a first set of stored cell values corresponding to the first set of cell identifiers of the card validation matrix. The system compares the first set of received cell values to the first set of stored cell values. Based at least in part upon the comparison, the system determines whether the card is validated.

Dynamic card validation using periodically communicated cell identifiers

A card validation system receives a request to validate a card and receives one or more received cell values corresponding to one or more cell identifiers of a card validation matrix. The system determines one or more stored cell values corresponding to the one or more cell identifiers of the card validation matrix. The system compares the received cell values to the one or more stored cell values. Based at least in part upon the comparison, the system determines whether the card is validated.

According to one embodiment, an apparatus may receive a first data token indicating a request for data associated with the resource, a subject token indicating that at least one form of authentication has been completed, and a network token indicating that at least one form of encryption has been performed. The apparatus may determine at least one token-based rule based at least in part upon the first data token, the subject token, and the network token. The apparatus may determine, based at least in part upon the at least one token-based rule, that a second data token representing the data should be generated. The apparatus may generate a message indicating the determination that the second data token should be generated and then transmit the message.

Growing community of inventors

Bellmore, NY, United States of America

Lawrence Robert Labella