Bank of America Corporation

Wenhui Meng

Andrew T Keys

Elizabeth Votaw

Xianhong Zhang

Yair Frankel

Kapil Pruthi

Ashish Arora

Apeksh M Dave

Kalyan V Pasumarthi

Harigopal K Ponnapalli

Kenneth C Aguiar

Aspects of the disclosure relate to providing information security and preventing unauthorized access to secured resources by implementing token-based authentication techniques. A computing platform may receive, from a client computing device, a request to authenticate a user to a user account associated with a client portal provided by a client portal server. In response to receiving the request to authenticate, the computing platform may generate a validation token for the user account. Subsequently, the computing platform may validate the request to authenticate based on the validation token generated for the user account. In response to validating the request to authenticate, the computing platform may generate and send one or more commands directing the client portal server to provide at least one client portal interface to the client computing device. In some instances, receiving the request to authenticate may include receiving a time-based one-time passcode generated by the client computing device.

Preventing unauthorized access to secured information systems using authentication tokens

Systems and methods for authenticating a user's identity at an ATM are provided. One method may include capturing at least a portion of user's facial information using a facial recognition camera. The method may also include receiving information using an additional biometric scanner. The method may further include using one or more device handlers to receive information related to the captured portion of the user's facial information from the facial recognition camera and to receive information related to the additional biometric scanner. The one or more device handlers may also be used for determining one or more routing destinations for said information related to the captured portion of the user's facial information, for said information and for said information received from the additional biometric scanner. The method may also include transmitting the information received by the facial recognition camera and the information received from the additional biometric scanner for initially authorizing an ATM session, or information corresponding thereto, to said one or more routing destinations. The transmitting may further maintain the ATM session by continuing, following an initial authorization, for the duration of the ATM session, only authorization information corresponding to the information received by the facial recognition camera to the one or more routing destinations.

Dual biometric automatic teller machine ('ATM') session initialization having single in-line session maintenance

Methods, systems, and computer-readable media for selectively enabling and disabling biometric authentication are presented. In some embodiments, a computing platform may receive, from a device monitoring and management computer system, a device state indicator message comprising device state information associated with a mobile computing device. Subsequently, the computing platform may set a biometric authentication flag for the mobile computing device based on the device state indicator message received from the device monitoring and management computer system. Then, the computing platform may generate an authentication functionality message for the mobile computing device based on the biometric authentication flag set for the mobile computing device, and the authentication functionality message may be configured to selectively enable or disable one or more biometric authentication functions provided by the mobile computing device. Thereafter, the computing platform may send, to the mobile computing device, the authentication functionality message generated for the mobile computing device.

Selectively enabling and disabling biometric authentication based on mobile device state information

Methods, systems, and computer-readable media for providing access to account information using authentication tokens are presented. In some embodiments, a customer of a financial institution may visit an account information aggregator site and request to add an account maintained by the financial institution to a collection of accounts for which the aggregator collects account information on behalf of the customer. Rather than providing their username, password, or other bank login credentials to the aggregator, the customer may be redirected to a page provided by the financial institution where the customer can enter the customer's credentials and authenticate with the financial institution. After authenticating the customer, the financial institution may generate a token and provide the token to the aggregator. Subsequently, the aggregator may use the token to obtain read-only access to financial account information for one or more financial accounts that are maintained by the financial institution for the customer.

Providing access to account information using authentication tokens

Methods, systems, and computer-readable media for providing access to account information using authentication tokens are presented. In some embodiments, a customer of a financial institution may visit an account information aggregator site and request to add an account maintained by the financial institution to a collection of accounts for which the aggregator may collect account information on behalf of the customer. Rather than providing their username, password, and/or other bank login credentials to the aggregator, the customer may be redirected to a page provided by the financial institution where the customer can enter their credentials and authenticate with the financial institution. After authenticating the customer, the financial institution may generate a token and provide the token to the aggregator. Subsequently, the aggregator may use the token to obtain read-only access to financial account information for one or more financial accounts that are maintained by the financial institution for the customer.

Growing community of inventors

Bothell, WA, United States of America

Wenhui Meng