Wells Fargo Bank, N.a.

Traci H Nguyen

Michael H Chang

Samuel B Martin

Darrell Lee Suen

Upul D Hanwella

Nairobi N Kim

Ian Jensen

Abhijit Rao

Lila Fakhraie

Paul Vittimberga

Julio Jiron

John Andrew Chuprevich

Anthony Burton

Priyamvada Singh

Ravi K Thota

Douglas S Pelton

Kenneth L Wright

Byron G Chun

Alyce F Thornton

Edward J Landers

Muhammad Farukh Munir

Mark David Castonguay

Christopher Wayne Howser

Brian J Hanafee

Erica Ulrich

Lizmari Brignoni

Lisa Munter Clarke

Meghan E Butler

Ajay Panikkar

Harlan H Bloom

Chris Theodore Kalaboukis

Brian Michael Pearce

Miranda C Hill

Marria Rhodriquez

Laura Marie Fontana

Wayne Barakat

Jeffrey A Cornman

Beth S Moss

Bryan D Hall

Christopher Phillip Clausen

Suzanne M Fisi

Kevin R Cieslak

Daniel Sanford

Sotirios K Barkas

Bryan Kroll

Angira Goswami

Samuel Downing

Virginia Randle

Cheung Li

Cong Phan

Jana L Chilton

Darius A Miranda

Gerardo Costilla

Jannette Marie McCully

Russell Sage Hamilton

Meghan Butler

Systems and techniques for an system are described herein. In an example, an adaptive authentication system is adapted to receive a request at a first entity from a second entity for secure data of a user, where the second entity is remote from the first entity. The adaptive authentication system may be further adapted to transmit a prompt to a user device associated with the user for authentication of the user and authentication of the request. The adaptive authentication system may be further adapted to receive a response to the prompt and authenticate the user and the request based on the response. The adaptive authentication system may be further adapted to transmit the secure data of the user to the second entity.

Adaptive authentication

In an example, a computer-implemented method includes determining a set of permissions that specifies types of account data of one or more financial accounts to share with a third-party, the one or more financial accounts being associated with a user and held by a financial institution, and generating authorization data that authenticates the third-party and authorizes the third-party to access the types of account data specified by the set of permissions. The method also includes transmitting the authorization data to the third-party, receiving a request for authorization that includes the authorization data and a request for account data of the one or more financial accounts that conforms to the types of account data specified by the set of permissions, authorizing the third-party based on the authorization data, and transmitting the account data that conforms to the types of account data specified by the set of permissions.

Secure data exchange

A computer-implemented method includes: generating a GUI including a first button selectable to register identity information and a second button selectable to request identity information; receiving, in response to the first button being selected, pieces of identity information regarding a customer; receiving a preference for each piece of identity information from the customer that governs distribution of identity information to requesting parties; generating a customer-specific key; provisioning the key to an identification chip of a customer computing device; transmitting the graphical user interface to a computing device of a requesting party other than the customer; receiving, in response to the second button being selected, the key, a request for identity information, and an identity of the requesting party; identifying the customer based on the key; determining that a preference for the requested piece of identity information is met; and providing the requested piece of identity information to the requesting party.

Systems and methods for federated identity management

An example method includes receiving an encrypted biometric enrollment data and user identifier data. The encrypted biometric enrollment data includes at least one biometric enrollment sample from a user encrypted using an encryption key. The encryption key is generated based on a user secret and the user identifier is associated with the user. The user identifier is matched with a stored user secret. A decryption key is generated based on the stored user secret. The encrypted biometric enrollment data is decrypted using the decryption key. The at least one biometric enrollment sample is retrieved from the decrypted biometric enrollment data. The at least one biometric enrollment sample is processed using a biometric processing algorithm to generate a biometric reference template. A biometric reference template identifier uniquely identifying the biometric reference template is generated. An encryption key is generated based on the stored user secret and encrypts an enrollment confirmation message.

Systems and methods for an authorized identification system

Systems and techniques for an adaptive authentication system are described herein. In an example, an adaptive authentication system is adapted to receive a request at a first entity from a second entity for secure data of a user, where the second entity is remote from the first entity. The adaptive authentication system may be further adapted to transmit a prompt to a user device associated with the user for authentication of the user and authentication of the request. The adaptive authentication system may be further adapted to receive a response to the prompt and authenticate the user and the request based on the response. The adaptive authentication system may be further adapted to transmit the secure data of the user to the second entity.

One or more embodiments of techniques or systems for session management, security scoring, and friction management are provided herein. Sessions may be monitored for commonalities or other attributes or aspects and closed, terminated, or a freeze placed on additional sessions from being initiated. A security score may be provided which is indicative of how secure a user is with respect to one or more ways the user interacts with a resource. One or more suggested actions or score improvement strategies may be suggested to facilitate improvement of a security score for a user. Friction management may be provided by having one or more additional layers of security applied to an account of a user or an entity based on suspicious behavior or other factors.

Session management

Systems, methods, and computer-readable storage media utilized for event-based authentication. One method includes recognizing an event and receiving, from a device, a withdrawal request of a user, wherein the withdrawal request includes a captured feature by the device. The method further includes determining that the user is associated with the recognized event using at least a geographic proximity between the event and the withdrawal request, wherein the geographic proximity is a given radius around a location of the event, and wherein the device is within the given radius and adjusting authentication rules based on the determination that the user is associated with the recognized event, wherein the adjustment of the authentication rules includes adjusting a matching threshold between the captured feature and a reference feature. The method further includes processing the withdrawal request for the user based on the adjusted authentication rules.

Event-based authentication

A system includes at least one hardware processor in communication with a gaming device and a memory storing instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform operations including receiving suspect gaming behavior data associated with a suspect user playing a computer game on the gaming device, comparing the suspect gaming behavior data to a user gaming behavior profile associated with another user, the user gaming behavior profile includes at least one component of behavior associated with the other user and the computer game representing a pattern of conduct of the other user, and based on the comparing, authenticating the suspect user for access to a target system as the other user.

Utilizing gaming behavior in user authentication

A computer-implemented method includes receiving, by a federated identity computing system, identity information from a customer; receiving, by the computing system, preferences for the identity information from the customer, wherein the preferences govern distribution of the identity information to requesting parties; generating, by the computing system, a key specific to the customer; and provisioning, by the computing system, the key to an identification chip associated with the customer. The computer-implemented method further includes receiving, by the computing system, the key and a request for one or more pieces of the identity information from a requesting party and providing, by the computing system, the requested one or more pieces of identity information to the requesting party based on the key and the preferences.

A method may include collecting, in a data store, a plurality of signals associated with a user and a geographic area; calculating, using at least one processor, a satisfaction score for the user with respect to the geographic area based on the plurality of signals; querying the data store to retrieve a set of entities associated with the geographic area; generating, using the at least one processor, a respective credit allocation amount for each of the set of entities based on the satisfaction score and a user-specified allocation modality; and initiating a transfer from a user account to a set of receiver accounts according to the respective generated credit allocation amounts.

Geolocation and physiological signals for transaction initiation

Growing community of inventors

San Francisco, CA, United States of America

Traci H Nguyen