US 11,750,595 B2
Multi-computer processing system for dynamically evaluating and controlling authenticated credentials
Stuart David Ford, Slapton (GB); Ricardo Varanda, Reading (GB); Andrew Paul Montgomery, London (GB); and Sanjay Bhanu, Camberley (GB)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Feb. 9, 2021, as Appl. No. 17/171,225.
Prior Publication US 2022/0255917 A1, Aug. 11, 2022
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/083 (2013.01) [H04L 63/0869 (2013.01); H04L 63/101 (2013.01); H04L 63/102 (2013.01); H04L 63/107 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
a memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive a request to access data via a website, the request being made via a web browser and including user credentials associated with a user requesting to access the data;
determine whether the web browser includes an embedded browser extension for credential evaluation;
responsive to determining that the web browser does not include the embedded browser extension for credential evaluation, disable the web browser; and
responsive to determining that the web browser does include the embedded browser extension for credential evaluation:
receive, via the browser extension embedded in the web browser, an instruction to initiate credential evaluation functions;
initiate the credential evaluation functions based on the instruction;
generate an event record associated with request to access data, the event record including a uniform resource locator (URL) of the website and the user credentials;
store the generated event record;
analyze the event record to identify a designation of the website, wherein the designation of the website is one of: business or personal;
analyze the event record to identify a designation of the credentials of the user requesting to access the data, wherein the designation of the credentials is one of: business or personal;
compare the designation of the website to the designation of the credentials to determine whether a match exists;
responsive to determining that the designation of the website matches the designation of credentials, provide the requested access to data;
responsive to determining that the designation of the website does not match the designation of the credentials:
identify one or more mitigating actions; and
execute the one or more mitigating actions.