US 12,235,981 B2
Determining the relative risk for using an originating IP address as an identifying factor
Jeffrey Jason Griffin, Garner, NC (US)
Assigned to Truist Bank, Charlotte, NC (US)
Filed by Truist Bank, Charlotte, NC (US)
Filed on Apr. 6, 2022, as Appl. No. 17/714,417.
Application 17/714,417 is a continuation of application No. 16/562,646, filed on Sep. 6, 2019, granted, now 11,347,879.
Claims priority of provisional application 62/728,227, filed on Sep. 7, 2018.
Prior Publication US 2022/0229927 A1, Jul. 21, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/31 (2013.01); G06F 21/45 (2013.01); G06F 21/62 (2013.01); H04L 9/40 (2022.01); G06F 21/71 (2013.01)
CPC G06F 21/6218 (2013.01) [H04L 63/0876 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A system comprising:
a processing device; and
a memory device including instructions executable by the processing device for causing the processing device to:
increment a value associated with a first IP address in response to a request by a user from the first IP address to access an entity, wherein the value is incremented in response to the request independently of first authentication information supplied by the user with the request;
decrement the value associated with the first IP address in response to a subsequent request by the user from a second IP address to access the entity, wherein the second IP address is different from the first IP address, wherein the value is decremented in response to the subsequent request independently of second authentication information supplied by the user with the subsequent request;
use the value associated with the first IP address to select an authentication level for the user, wherein the authentication level is selected from among a plurality of authentication levels of increasing difficulty, wherein higher authentical levels of the plurality of authentication levels involve more rigorous authentication procedures than lower authentication levels of the plurality of authentication levels;
compare user identifying information associated with the first IP address with a recorded set of user identifying information, the user identifying information being different from the first IP address and the first authentication information, the user identifying information including browser settings, wherein the recorded set of user identifying information is associated with a stored IP address, and wherein the stored IP address is associated with a previous authentication of the user;
determine whether the user identifying information associated with the first IP address matches the recorded set of user identifying information associated with the stored IP address;
in response to determining that the user identifying information associated with the first IP address matches the recorded set of user identifying information associated with the stored IP address, increment the value associated with the first IP address; and
in response to determining that the user identifying information associated with the first IP address does not match the recorded set of user identifying information associated with the stored IP address, store the user identifying information and decrement the value associated with the first IP address.