Capital One Services, LLC

Salman Haq

Daniel Alan Jarvis

Patrick Zearfoss

Jit Sen

Riteshkumar Hadawani

Sreedhar Vedantam

Philip John Spiegel

Amirfarrokh Iranitalab

Vitalie Manzul

Sriharsha Kallu

Disclosed embodiments may include a system for determining trusted devices. The system may receive data corresponding to a plurality of users. The system may receive, via a plurality of user devices associated with the plurality of users, a respective request to conduct a plurality of transactions. The system may generate, via an MLM and based on the data, trust scores associated with the plurality of users and the plurality of user devices, wherein each trust score indicates a probability that a user device, of the plurality of user devices, is associated with a user of the plurality of users. The system may determine whether each trust score of a plurality of trust scores exceeds a predetermined threshold. Responsive to determining a trust score of the plurality of trust scores exceeds the predetermined threshold, the system may conduct fraud prevention action(s) with respect to a corresponding user device and user.

Systems and methods for determining trusted devices

Embodiments disclosed are directed to a system that performs steps to perform enhanced device fingerprinting. The system at least at receives from an application, a plurality of device attributes identifying a client device on which the application is being used. The plurality of device attributes includes a push token provided by a push token service to the client device. The push token is uniquely paired to the client device. The system further transmits, to a device database, the plurality of device attributes for storage in a device profile. The system also transmits, to the application, a push notification based on the push token. The system receives, from the application, a deliverable status indicating whether the push notification was successfully transmitted to the client device, and transmits, to a notification database, the deliverable status for storage in a notification delivery profile. The system can use the information to authenticate a device.

Using tokens from push notification providers to enhance device fingerprinting

Aspects disclosed are directed to a system and methods that device authentication. The system at least transmits a silent push notification to an application installed on a client device. The silent push notification includes a push token provided by a push service and an embedded secret. A response to the silent push notification can be received with a further embedded secret. The embedded secret and the further embedded secret can be compared to determine if they match. If the embedded secret and the further embedded secret match, the client device can be authenticated.

Using tokens from silent push notifications during application sessions to develop device confidence

Systems and methods associated with computer-implemented online portals having secure login processing features are disclosed. In one embodiment, an exemplary method may comprise receiving a login request including processing user credentials and capturing browser print information associated with the login request, validating the login request via analyzing current login attributes and/or an attributes checksum derived from the browser print information captured during the login request and assessing the browser print information for spoofed browser attributes, redirecting an access attempt that is flagged as the potential replay attack to an enhanced security process, and allowing or denying login to customer accounts or information associated with the user credentials based on the enhanced security process.

Computer-based platforms or systems, computing devices or components and/or computing methods for technological applications involving provision of a portal for managing user accounts having a login portal configured to defend against credential replay attacks

Growing community of inventors

McLean, VA, United States of America

Salman Haq