Bank of America Corporation

Todd Inskeep

David Charles Shroyer

William Scott Treadwell

Daniel P Shnowske

Helene Urban Mele

Pavan K Chayanam

Eric William Miller

Clay D Newton

Xu He

Robert Timothy Leedy, Jr

George C Schroth

Ketil Bjugan

Scott Huie

Richard Wade Phillips

Lorettajean Cross Maguire

Jason Andrew Malo

David C King

Apparatus and methods for authorizing an exchange between a customer and a services provider. The apparatus may include an electronic processor that is configured to: (1) calculate a reference event profile; and (2) determine a difference between a prospective transaction profile and the reference event profile. The prospective transaction profile may be based on the initiation of a prospective transaction by an individual whose identity has not been verified. The reference event profile may be based on a plurality of customer events that correspond to one or many different customers. The apparatus may include an output device that is configured to output authentication test information that corresponds to the difference. The authentication test information may support a revised prospective transaction profile that is more similar to the reference event profile than is the initial prospective event profile.

Risk-based transaction authentication

Apparatus and methods for the execution of a transaction between a customer and a merchant using a virtual purchasing instrument. The apparatus and methods may involve receiving from the customer a request to pay funds or draw credit from an account based on the customer's electronic presentation of the virtual purchasing instrument to the merchant.

Virtual purchasing card transaction

A method and system for detecting fraud may redirect a user from a phishing message to an education message. The phishing message may include a phishing website that mimics a target entity. A user may be convinced to disclose sensitive information to a fraudster operating the phishing website. The phishing website may be maintained through a service provider and the target entity may request that the service provider disable the phishing website. During evaluation of the target entity's request by the service provider, a user may be directed to an education website that may be displayed until the phishing website may be permanently disabled. The education website may include information or identify a source of information that may help educate the user on fraud prevention, phishing, the target entity, the targeted industry, future prevention tips and suggestions, and other related information.

Phishing redirect for consumer education: fraud detection

A reusable authentication component may be integrated into a web page to communicate with an authentication server and authenticate a user to the web page. The reusable authentication component may implement a complex authentication process, including multiple user interfaces to receive multiple assurances of user identity and user confirmation of previously stored mutual authentication data. The authentication process may be performed by the authentication component without refreshing or redirecting the parent web page until completion of a successful user authentication, after which the parent web page may receive authentication data and refresh to provide user specific and/or secure user data on the web page.

Reusable authentication experience tool

Systems, methods, and computer program products are provided for user authentication required for conducting online financial institution transactions. The disclosed embodiments leverage the capabilities of platforms other than conventional personal computers and laptops, such as gaming consoles and wireless devices. Unique intrinsic user activities, such as controller motions or activities, built-in hardware signatures or other input data are used as the authentication mechanism, so as to provide a higher degree of security in the overall authentication process by lessening the likelihood of password replication or interception during network communication.

Motion-detecting device user authentication

Systems, methods, and computer program products are provided for a secure platform for conducting financial institution transactions. A game console platform is defined that provides for both individual customers and business customers to conduct financial transactions while ensuring higher integrity and confidentiality of the customer's transactions. Additionally, the platform provides for greater user-interface functionality and a heightened user experience.

Secure platforms for financial transaction applications

A one-time password (OTP) generator in combination with a conventional credit/debit card comprising a card having a magnetic bar stripe, raised imprint card numbers and name, expiration date and four digit code as are known in the art is provided. Full smart card functionality may also be provided. The card also includes a microprocessor and software, dedicated chip or a memory chip for generating the OTP. A visual and/or audio display is provided on the card to output the OTP to the user. The end user inputs the OTP to access the secured system. The credit/debit card functionality may be used apart from the OTP generator functionality.

One-time password credit/debit card

Systems, methods, and computer program products are provided for user authentication required for conducting online financial institution transactions. The disclosed embodiments leverage the capabilities of platforms other than conventional personal computers and laptops, such as gaming consoles and wireless devices. Unique intrinsic user activities, such as controller motions or activities, built-in hardware signatures or other input data associated with a gaming console are used as the authentication mechanism, so as to provide a higher degree of security in the overall authentication process by lessening the likelihood of password replication or interception during network communication.

Growing community of inventors

Charlotte, NC, United States of America

Todd Inskeep