148 results about "Multi-factor authentication" patented technology

The invention provides a method and system for preventing identity spoofing during digital authentication processes using artificial intelligence (AI)-driven pattern recognition. The system receives an input data stream from a user attempting to authenticate, which may include biometric data, device behavior data, or user interaction data. An AI-based pattern recognition model processes this data to analyze user behavior patterns and detect any anomalies that may indicate potential spoofing attempts. The system compares the processed data against a pre-established user profile to generate an authentication decision. If anomalies are detected, the system can flag the authentication for further review or trigger additional verification steps, such as multi-factor authentication (MFA) or one-time password (OTP) prompts. The system continuously learns from user interaction data and dynamically updates the user profile to improve the accuracy of identity verification.

A machine learning-based fraud detection system (100) for financial transactions, comprising the following: a data collection and preprocessing module configured to capture transaction data from financial institutions, payment gateways and bank modules, and to perform data cleansing, normalization and format conversion; a module for creating user profiles and behavioral analyses, configured to create dynamic user profiles based on historical transaction patterns, spending habits, device usage, and geographic location; an anomaly detection and risk assessment module configured to use machine learning algorithms to detect deviations from normal transaction patterns and assign a dynamic risk rating to each transaction; a fraud detection module configured to classify transactions as legitimate or fraudulent based on supervised and unsupervised learning techniques, including decision trees, support vector machines (SVMs), and deep learning models; a rule-based and hybrid fraud detection module configured to integrate predefined rule-based fraud detection mechanisms with AI-driven anomaly detection to improve fraud detection accuracy; a real-time fraud detection and warning module configured to monitor transactions in real time and generate security alerts via SMS, email or mobile app when suspicious activity is detected; a transaction verification and multi-factor authentication (MFA) module configured to implement adaptive authentication measures, including biometric verification, one-time passwords (OTP), and challenge-response authentication for high-risk transactions; a self-learning and model-updating module configured to dynamically update fraud detection models using reinforcement learning and federated learning techniques; a data encryption and security module configured to protect transaction data using encryption techniques, including AES-256 and RSA, to prevent unauthorized access and data breaches; and A dashboard and reporting module configured to provide real-time analytics, visualizations, and fraud detection reports for financial institutions to monitor, track, and mitigate fraudulent activity.

A system (100) for securing cloud-based large language models through cyber threat defense and compliance monitoring, comprising: (a) an access control and authentication module configured to authenticate users and applications using role-based access control (RBAC) and multi-factor authentication (MFA); (b) a data protection and encryption module configured to encrypt data in transit and at rest and to anonymize sensitive input / output data using cryptographic techniques; (c) a threat detection and behavior monitoring module employing machine learning algorithms to identify anomalies and detect potential cyber threats in real time;(d) a regulatory compliance monitoring module configured to continuously assess system operations against applicable regulatory frameworks and generate alerts in the event of deviations from the regulations; (e) an incident response and mitigation module configured to automatically execute predefined response actions upon detection of threats or regulatory violations; (f) a logging, auditing, and forensic analysis module configured to securely log system activities, interactions, and threat events with cryptographic integrity protection; and (g) a governance and policy management module configured to define, update, and enforce organizational AI usage and compliance policies via the cloud-based LLM infrastructure.

The invention discloses a digital identity verification method and device based on a zero-trust architecture, terminal equipment and a storage medium, and belongs to the field of network security, and the method comprises the steps: obtaining an identity verification result according to user information and multi-factor identity verification information; according to the identity verification result, generating a session token and creating a session; collecting behavior data, equipment fingerprint data and geographic position data of the user during the session in real time, and dynamically adjusting the access authority stored by the session token according to the behavior data, the equipment fingerprint data and the geographic position data; each time a request sent by a client is received, the zero-trust architecture gateway determines the current session state of the server by verifying the current session token. Therefore, through the implementation of the invention, various identity authentication technologies can be organically integrated, continuous identity authentication under a zero-trust architecture is realized, and the security of digital identity authentication is improved.

An AI-powered system (100) for multimodal data processing, dynamic authentication and secure FinTech and IoT transactions, which includes the following: a multimodal data processing module configured to process structured, semi-structured and unstructured data, including financial transactions, IoT sensor data, voice input and image-based data; an AI-powered dynamic authentication module configured to provide behavioral biometrics, context analysis, and multi-factor authentication (MFA) for continuous user and device verification; an anomaly detection module integrated with machine learning models and configured to provide real-time fraud detection by analyzing transaction patterns, user behavior, and device interactions; a secure encryption module configured to use homomorphic encryption and secure multi-party computations to protect sensitive financial and IoT data; and a blockchain-based transaction validation module configured to create an immutable, tamper-proof ledger to ensure data integrity and transaction transparency.

The invention relates to the technical field of building design, and discloses an Internet-based building design dynamic process management system, which comprises a multi-factor identity verification module, a distributed data storage module, a process dynamic optimization engine, a behavior evaluation and intervention module and an intelligent audit tracking system. According to the building design dynamic process management system based on the Internet, through cooperative work of the process dynamic optimization engine and the behavior evaluation and intervention module, the problem that task optimization of a traditional process management system depends on a preset rule is solved; the flow dynamic optimization engine dynamically adjusts the task priority and resource allocation by using an improved ant colony algorithm based on the real-time task progress and the executor behavior data; meanwhile, the behavior evaluation and intervention module quantitatively evaluates the behavior of the executor according to a weighted scoring model, triggers an automatic intervention process when necessary, and can quickly adapt to sudden changes, so that the resource allocation efficiency is improved, and human errors are reduced.

One or more processors receive a request for a secure digital asset and execute a validation protocol defined for validating the request. The validation protocol may define conditions for fulfilling the request that include one or more conditions related to information about an identified user requesting the request or information indicative of a routing-aspect of the request. The one or more processors attempt to validate the request based on assessment of the conditions specified in the validation protocol. If validation is unsuccessful, the one or more processors instruct the user to undertake one or more multi-factor authentication actions, which may include choices from a plurality of possible multi-factor authentication options and / or certain required multi-factor authentication options, defined by the protocol. The one or more processors validate and fulfil the request responsive to confirming successful undertaking of the one or more multi-factor authentication actions by the user.

For multifactor authentication, a transaction device can receive encrypted data from a contactless card within a communication range of a short-range communication antenna, communicate the encrypted data to an authenticating device, solicit a user PIN in response to authentication of the encrypted data by the authenticating device, receive an input PIN, communicate the input PIN to a separate device storing a record PIN for the contactless card, and authorize a transaction initiated in connection with the contactless card in response to matching of the input PIN with the record PIN by the separate device. The input PIN can be received from the contactless card itself or a user interface, and the separate device can include the authenticating device or the contactless card itself. In different embodiments, the input PIN or the record PIN can include an EMV PIN stored in an EMV applet on the contactless card.

The invention discloses an enterprise production safety operation and maintenance operation listing and locking intelligent management system. The system is composed of a management platform, a mobile terminal, an intelligent lock set and an evidence storage module. The management platform is responsible for creating an isolation job task, tracking the state and removing the right after timeout; the mobile terminal sequentially implements face, fingerprint and voiceprint multi-factor identity verification, and generates a locking or unlocking instruction after completing geo-fence verification; the intelligent lock group comprises a Bluetooth lock, a fingerprint lock and a mechanical lock, and is used for executing unlocking and locking operations and collecting operation logs and on-site images; and the evidence storage module performs hash abstract on the event data during task creation, lock operation and exception repair and asynchronously writes the event data into the block chain. Intelligent monitoring and management of three risk factors of users, equipment and operation environment in the whole process of production operation and maintenance operation are realized, and the method is suitable for safety management and control of high-risk production operation places, so that the safety, compliance and management efficiency of production and maintenance operation are remarkably improved.

One or more processors receive a request for a secure digital asset and execute a validation protocol defined for validating the request. The validation protocol may define conditions for fulfilling the request that include one or more conditions related to information about an identified user requesting the request or information indicative of a routing-aspect of the request. The one or more processors attempt to validate the request based on assessment of the conditions specified in the validation protocol. If validation is unsuccessful, the one or more processors instruct the user to undertake one or more multi-factor authentication actions, which may include choices from a plurality of possible multi-factor authentication options and / or certain required multi-factor authentication options, defined by the protocol. The one or more processors validate and fulfil the request responsive to confirming successful undertaking of the one or more multi-factor authentication actions by the user.

The invention discloses a financial data security regulation and control management method and system, and relates to the technical field of commercial financial management, and the method comprises the following steps: 1, data encryption regulation and control: employing an encryption protocol to carry out encryption transmission, and carrying out encryption storage; step 2, access permission regulation and control: distributing corresponding access permissions; step 3, backup and recovery regulation and control: making a backup, and performing a data recovery test; 4, authenticating the identity of the regulator, wherein a multi-factor identity authentication and digital certificate authentication mode is adopted; 5, approval optimization regulation and control: refining the approval authority, and introducing an approval risk assessment mechanism and an abnormity early warning mechanism; and step 6, monitoring and auditing regulation and control: monitoring access and operation of data, and regularly performing internal and external auditing. According to the method, transmission encryption and storage encryption are utilized, man-in-the-middle attack is effectively prevented, permissions are allocated according to responsibilities, unauthorized operation is avoided, the internal abuse risk is reduced, and the security of financial data regulation and control management is improved.

A system can include a server having a processor configured to receive, from a first computing device, first data associated with at least one historical data attack. The processor can encode the first data into at least one fixed-size representation. The processor can generate at least one anonymized vector representation based on the at least one fixed-size representation. The processor can receive, from a second computing device, second data associated with a potential attacker. The processor can encode the second data into at least one additional fixed-size representation. The processor can generate a second anonymized vector representation based on the at least one additional fixed-size representation. The processor can generate a confidence measure of the potential attacker as an attacker based on a comparison between the at least one anonymized vector representation and the second anonymized vector representation.

The invention relates to the technical field of multi-brand marketing, in particular to a multi-brand marketing sharing system and method, and the system comprises a safety protection authorization unit, an edge calculation point processing unit, a point account book intelligent contract unit, and a unified interaction unit. According to the invention, the security protection authorization unit guarantees the security of the system and divides permissions through multi-factor identity verification and dynamic risk assessment, the edge calculation point processing unit processes point data in real time by using caching and prefetching technologies, and the point account book intelligent contract unit records point operation based on an alliance block chain. Multi-brand point general exchange is realized through an intelligent contract, the unified interaction unit provides an operation and management interface for consumers and brand parties, the problems that a point system is not universal and the processing efficiency is low in multi-brand marketing are solved, multi-brand point unified management and free exchange are realized, and the consumer experience and the brand collaborative marketing capability are improved.

In one embodiment, a method may implement a multi-layer cybersecurity model for a multi-layer distributed computer system which comprises a sensitive data resource, such as a computing environment with an operational technology (OT) layer with multiple zones, an information technology (IT) layer, a DMZ, and a cloud layer. The method can assess a policy based on a zero-trust model for the sensitive data resource. The method can receive one or more requests, at any layer of a multi-layer distributed computing system, to access the sensitive data resource and acquire identity information for a user account specified in the first request. The method can perform a multi-layer multi-factor authentication of the user account using the identity information and the multi-layer cybersecurity model. In response to authenticating the identity information, the method can acquire sensitive access data corresponding to the identity information. The method can determine a sensitive resource access value using the sensitive access data and the zero trust model. In response to determining the sensitive resource access value is above a predetermined threshold, the method can authenticate the user account.

Security is improved by adding a security heartbeat for and endpoint as a factor in a multi-factor authentication system. The security heartbeat may be used directly as an authentication factor, e.g., where the heartbeat provides a reliable and verifiable indication of identity, or the security heartbeat may be used as a gating input for some other verification method, e.g., where a text message with a temporary security code can only be transmitted to a user when the user's endpoint is providing a secure heartbeat.

Multifactor user authentication leveraging secure tokenization, such as a Non-Fungible Token (NFT) and multiple passkeys (e.g., bifurcated passkey). One or more authentication NFTs are generated that use some form of a user's authentication credentials as the seed input for the NFT encryption / hash algorithm(s). In addition, passkeys are distributed to and / or made accessible to multiple passkey holders. In response to an event that requests multifactor authentication of the user, a plurality passkeys are requested, received and verified. Each of the passkeys being requested and received from, or at the directive of, one of the multiple passkey holders. In response to verifying the plurality of passkeys, at least one of the authentication NFTs is accessed and the cryptographic hash algorithm(s) is implemented to decrypt the authentication NFT(s) and identify the one or more user credentials. In response, the user is authenticated based at least on the user credentials that formed the basis for the authentication NFT(s).

An enrollment system uses a camera to scan an identification document to generate an image. A name of an organization is extracted from the image. The enrollment system obtains one or more Internet domain names associated with the organization. Using a graphical user interface, a prompt is displayed seeking input of an e-mail address of a user of the enrollment system. The input of the e-mail address is received via the graphical user interface. The enrollment system determines that the e-mail address is associated with the one or more Internet domain names. An e-mail is sent to the e-mail address of the user. The enrollment system determines that the user has clicked on a hyperlink in the e-mail using a mobile device that is different from the enrollment system. The enrollment system performs functions to enroll the mobile device in a service plan operated by a mobile network operator.

A method may include receiving, by a multifactor authentication (MFA) service instantiated on a computing system, a token generated by a cloud services provider and associated with a user device. The MFA service may be instantiated within a tenancy of the cloud services provider. The method may include determining, by the computing system, an authorized cloud service instantiated within the tenancy. The method may include receiving, by the computing system, a request to access the authorized cloud service by the user device, where the request may include a multi-factor authentication request. The method may include generating, by the MFA service instantiated on the computing system, a one-time pad (OTP). The method may include providing, by the MFA service instantiated on the computing system, the OTP to the user device such that the user device accesses the authorized cloud service.

The invention provides systems, methods, and computer-readable media for multi-factor authentication (MFA) using device and carrier validation. A user device generates an attested blob containing cryptographic keys and a Universal Integrated Circuit Card (UICC)-originated International Mobile Subscriber Identity (IMSI), which is transmitted to a cloud-based MFA service. The service validates the attested blob, coordinates with an Original Equipment Manufacturer (OEM) service, and executes an Extensible Authentication Protocol-Authentication and Key Agreement (EAP-AKA) process with the carrier network to establish mutual trust. Authentication data, including a validated phone number independent of the device's stored number, is securely stored in a cloud wallet. The invention enhances security by mitigating risks such as spoofing, replay attacks, and SIM swapping, providing a novel authentication framework compatible with modern networks.

A user is assigned an initial risk score during a session with a messaging platform. During the session, the user attempts an operation with an external service. One or more additional authentication factors are requested from the user to dynamically lower the initial risk score. The lowered risk score is processed with the external service to perform the operation on behalf of the user during the session.

A system for contextual and risk-based multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computation graph module configured to receive network traffic data from the multi-dimensional time series data server, determine a network traffic baseline from the network traffic data, and determine a verification score needed before granting access based at least in part by the network traffic baseline. A plurality of verification methods build up a user's verification score to required level to gain access.

Methods, systems, and devices for facilitating firearms safety are provided. A multi-factor authentication is performed to verify an identity of a user trying to access a secure firearm. Presence of a user contact with the secure firearm is detected, the secure firearm being in a locked state. Upon detecting the presence of the user contact with the firearm, the user is prompted to enter a passcode via a keypad on the secure firearm. Also, a biometric attribute of the user is obtained by a biometric sensor on the secure firearm. It is determined, if the user is an authorized user based on the passcode entered by the user and the biometric attribute of the user. In response to determining that the user is the authorized user, the secure firearm is unlocked.

According to an embodiment, a system comprises one or more processors and one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations. The operations comprise determining that an endpoint device has requested to discover a location of a protected resource that is protected by a gateway, determining whether the endpoint device has provided a token that is valid, and permitting the endpoint device to discover the location of the protected resource based on determining that the endpoint device has provided the token that is valid. The token indicates that the endpoint device successfully completed a first multi-factor authentication procedure in connection with accessing an authentication enforcement resource.

A dynamic transaction card comprising an outer surface, a sensor, and a display disposed on the outer surface is disclosed. The dynamic transaction card can include an antenna and a microcontroller controlling a dynamic transaction card application. The dynamic transaction card can also include a secure payment chip having a plurality of contact points and storing a passive tag associated with a user. The passive tag can include a unique identifier and one or more log-in credentials for the user. When making a purchase, the user can be authenticated via a connection between the dynamic transaction card and a user device. The unique identifier can be used as an authentication token and the one or more log-in credentials can be verified against log-in credentials associated with the user.

A system for securely storing personal information and memories of a user, such as through a software application, is disclosed. In particular, the system may utilize the application to transition the personal information and memories from cloud storage to cold storage and / or to an air-gapped data storage system. The personal information and memories of the user may be secured by the system using blockchain technology, multi-factor authentication, and / or other security technologies. The system may ensure that the information is highly secured until the user has passed and a next of kin of the user and / or other intended recipient of the user's information successfully authenticates with the system, such as by presenting a valid death certificate and / or acceptable credential. If the intended recipient of the data successfully provides a valid death certificate and / or credential, the intended recipient may be provided with access to the data associated with the user.

A method of providing credentials to enable a second party to verify an identity of a first party. The first party is associated with a first public key which is registered with a third party. One or more first credentials are provided to the second party. A request transaction is obtained, which comprises a) an input comprising a signature generated based on a respective private key of the third party, and b) an output locked to a second public key of the first party. The second public key is based on the first public key. A confirmation transaction is generated. The confirmation transaction comprises an input that references the output of the request transaction, and a signature generated based on a private key corresponding to the second public key of the first party. The confirmation transaction is transmitted to nodes of a blockchain network for inclusion in a blockchain.

A method of multi-factor authentication, the method comprising computer executed steps, the steps comprising: from a computer of a cloud service, receiving data identifying a user logged-in to the cloud service after being successfully authenticated using a first authentication factor, communicating with a client device of the logged-in user, for receiving a second authentication factor from the logged-in user, determining whether the second authentication factor received from the logged-in user is valid, based on a result of the determining, determining a first user-permission policy for the logged-in user, and communicating the determined first user-permission policy to the computer of the cloud service, for the cloud service to base a restriction of usage of the cloud service by the logged-in user on.

Techniques are described for accessing an account on a public device. In some implementations, an audio message is received from a portable computing device, requesting to establish an account access session between the portable computing device and the public device. A first communication based on the audio message is sent from the public device to a backend server. The backend server analyzes the first communication to determine whether the portable computing device is authorized to establish the account access session. A second communication is received from the backend server, indicating that the portable computing device is authorized. In response, the account access session is established between the portable computing device and the public device, wherein the account access session is employed by an application executing on the portable computing device to access account information associated with an account of a user of the portable computing device.

The present invention provides an multi-stage end to end integrated inventory and multi-factor authentication based logistics management method to ensure secure and reliable operations such as intact delivery of products from the original equipment manufacturers in the market and to eliminate counterfeiting issues and to revolutionize the authentication and tracking processes within the logistics landscape, enhancing customer trust and brand loyalty comprise steps of, a) serialization of a product label (1), b) authentication of said product label (1); and c) data updation.

According to one aspect, a method includes receiving, by a head-mounted display device, an authentication code associated with multi-factor authentication; receiving image data from an image camera on the head-mounted display device; detecting, by the head-mounted display device, that the image data includes an interface for receiving the authentication code; and displaying, by the head-mounted display device, the authentication code in a location corresponding to the interface.