Capital One Services, LLC

Viraj Chaudhary

Samuel Rapowitz

Tyler Maiman

David Septimus

Joshua S Edwards

Jenny Melendez

Daniel Miller

Vyjayanthi Vadrevu

Daniel E Miller

Jennifer Kwok

Cruz Vargas

Bryant Alan Yee

Zviad Aznaurashvili

Abdelkader M'Hamed Benkreira

Abdelkader M'hamed Benkreira

Joshua Peters

James Holt Crews, Jr

Methods, systems, and apparatuses are described herein for improving the security of personal information by preventing attempts at gleaning personal information from authentication questions. A computing device may receive a request for access to an account associated with a user. The request may comprise candidate authentication information. Based on comparing the candidate authentication information with the account data, the computing device may generate a synthetic authentication question. The synthetic authentication question may be generated as if the candidate authentication information is valid. A response to the synthetic authentication question may be received, and the request for access to the account may be denied.

Preventing unauthorized access to personal data during authentication processes

Methods, systems, and apparatuses are described herein for improving computer authentication processes through the exclusion of certain merchants that may cause confusion. Indications of a plurality of different merchants, including merchant logos may be received. The indications may be processed to identify at least one similarity between a first merchant and a second merchant. A request for access to an account associated with a user and transaction data corresponding to the account may be received. Based on the similarity between the first merchant and the second merchant, at least one transaction corresponding to the first merchant may be removed to generate processed transaction record. An authentication question may be generated and a candidate response to the authentication question may be received. Based on the candidate response, access to the account may be provided.

Account authentication excluding merchants based on merchant logos

Disclosed embodiments may include a method for generating authentication quizzes. The method can comprise receiving an authentication request associated with a user. The method can further comprise requesting a transaction history associated with the user. The transaction history can comprise a first purchase of a first product and a second purchase of a second product. The method can include selecting the first product and the second product to authenticate the user and determining a third product that the user did not purchase. The method can generate images of the first product, the second product, and the third product based on SKU data and can generate an authentication quiz comprising the images of each product and requests to confirm if the user purchased the products recently or not. Upon receiving correct responses from the user, the method can comprise transmitting instructions to the user device to authenticate the user.

Systems and methods for generating authentication quizzes

Methods, systems, and apparatuses are described herein for improving the accuracy of synthetic authentication questions by analyzing third party account data. A request for access to a first account associated with a user may be received. The first account may be managed by a first organization. A transactions database might be queried for first account data. Second account data corresponding to a second account associated with the user might be received. That second account may be managed by a second organization different from the first organization. One or more second transactions, unique to the second account, may be identified. A synthetic transaction, configured to be different from transactions in the first account and the one or more second transactions, may be generated. An authentication question may be generated based on the synthetic transaction. Access to the first account might be provided based on a response to the authentication question.

Third party data processing for improvement of authentication questions

Methods, systems, and apparatuses are described herein for improving computer authentication processes through presenting favorite merchants selection in transaction-based authentication. A computing device may receive a request for access to an account associated with a user. The computing device may train a machine learning model to determine predicted favorite merchant information, and provide one or more transactions conducted by the user as input to the trained first machine learning model. Data indicating favorite merchant information may be received from the trained first machine learning model. An authentication question may be generated and a candidate response to the authentication question may be received. Based on the candidate response, access to the account may be provided.

Favorite merchants selection in transaction based authentication

Aspects described herein may allow for authenticating a user by generating a customized set of authentication questions based on patterns that are automatically detected and extracted from user data. The user data may include transaction data collected over a period of time. By automatically detecting user patterns that correspond to user behavior over a period of time, an authentication system may be able to generate information that is recognizable to an authentic user but difficult to guess or circumvent for any other user.

Authenticating based on behavioral transactional patterns

Methods, systems, and apparatuses are described herein for improving computer authentication processes by using physical environment information. A computing device may receive video depicting a physical environment and process that video to identify one or more first objects. The computing device may receive a request for access to an account. The computing device may send a prompt for a physical environment description and receive, in response, an indication of one or more second objects. The indication of the one or more second objects may comprise video of the physical environment, a verbal description of the physical environment, and/or text describing the physical environment. The computing device may grant the user device access to the account based on comparing the one or more first objects to the one or more second objects.

Physical environment based account authentication

Aspects described herein may relate to techniques for detecting login activity to a financial account during a knowledge-based authentication process. The login activity may be related to access to an online interface for the financial account. The detection of login activity during the authentication process my indicate that the integrity of the authentication process is compromised as login access may provide an individual with transaction data that may be used to answer transaction-based authentication questions. As a result of detecting login activity, an alternative authentication process may be initiated or an authentication request related to the financial account may be denied.

Detecting separate login during action based knowledge-based authentication and disqualifying validity

Methods, systems, and apparatuses are described herein for improving computer authentication processes by generating authentication questions based on the location of a user. Transaction data indicating a plurality of transactions associated with a user account may be received. Location data indicating a plurality of locations of a user device might be received. At least a subset of the plurality of transactions may be tagged, based on the location data, with an indication that a user was present for a respective transaction. For example, a location of a merchant might be compared to a user device location indicated by the location data. A plurality of authentication questions might be generated based on the subset of the plurality of transactions. Access to the user account might be provided based on responses to the plurality of authentication questions.

User presence detection for authentication question generation

Aspects described herein may use behavioral biometric data to authenticate an individual that requests performance of an action related to a financial account. In response to the request, challenge questions relating to recent transactions conducted with the financial account may be generated. The challenge questions may be provided to the individual and may prompt the individual for audile response and/or touch input responses. Behavioral biometric data may be extracted from the responses and may be used to determine a likelihood the individual is an authorized user of the account.

Biometrics-infused dynamic knowledge-based authentication tool

Methods, systems, and apparatuses are described herein for improving the accuracy of authentication questions using transaction limitations provided by users. A request for access to an account associated with a user may be received from a user device. An account restrictions database may be queried to determine one or more transaction rules associated with the account. The one or more transaction rules may have been created by the user and indicate limitations on financial transactions that may be performed via the account. An authentication question may be generated that is associated with a violation of the one or more transaction rules. The authentication question may be provided to the user device, and a response to the authentication question may be received. Access to the account may be provided to the user device based on the response.

Generation of authentication questions based on user-created transaction limitations

Disclosed embodiments may include a method for authenticating calls for a call center where the user can authenticate before or after starting a call to a call center using an application on a user device. The system determines what level of authentication is necessary depending on the task the user wants to accomplish during the call. The system may direct the user to provide credentials, such as a username and password, for some tasks. Other tasks may require the user to verify their financial card by taking a photo of their financial card or tapping their financial card to their device and allow the device to interact with the financial card using NFC technology. Once appropriately authenticated, the system then allows the user to make a call to the call center and also sends a signal to the call center that the user has been previously authenticated.

Systems and methods for authenticating calls for a call center

Methods, systems, and apparatuses are described herein for improving computer authentication processes using vocal confidence processing. A request for access to an account may be received. An authentication question may be provided to a user. Voice data indicating one or more vocal utterances by the user in response to the authentication question may be received. The voice data may be processed, and a first confidence score that indicates a degree of confidence of the user when answering the authentication question may be determined. An overall confidence score may be modified based on the first confidence score. Based on determining that the overall confidence score satisfies a threshold, data preventing the authentication question from being used in future authentication processes may be stored. The data may be removed when a time period expires.

Authentication question improvement based on vocal confidence processing

Systems and methods of the present disclosure enable the generation and use of secure offline tokens for account activity authentication. A processor receives an activity record including activity details including an entity identifier. The processor determines a flight booking associated with the activity record when the entity identifier includes an airline, and determines flight data associated with the flight booking. The processor automatically generates an offline token associated with the user account, including account access restrictions. The account access restrictions include a token activation period that binds the offline token to a duration of the flight, and a token entity binding that binds the offline token to use with the airline for performing in-flight account activity requests. The processor automatically causes a computing device to download the offline token to enabling performing the in-flight account activity requests with the entity during the offline token activation period.

Systems utilizing secure offline limited-use tokens for temporary electronic activity authentication and methods of use thereof

Methods, systems, and apparatuses are described herein for improving the accuracy of authentication questions using e-mail processing. A request for access to an account may be received from a user device. A plurality of organizations may be identified. One or more e-mail associated with the account may be identified. The e-mails may be processed to identify one or more organizations that correspond to transactions conducted by a user. A modified plurality of organizations may be generated by removing, from the plurality of organizations, the one or more organizations. An authentication question may be generated and provided to the user device. A response to the authentication question may be received, and the user device may be provided access based on the response.

Growing community of inventors

Katy, TX, United States of America

Viraj Chaudhary