	US 12,267,431 B2
	Application of interaction modeling for lambda triggering of authorization
Peter Eric Sutherland, Matthews, NC (US); Laurence Henry Lipsmeyer, Chapel Hill, NC (US); and Nelson Joseph Erb, Charlotte, NC (US)
Assigned to TRUIST BANK, Charlotte, NC (US)
Filed by Truist Bank, Charlotte, NC (US)
Filed on May 11, 2022, as Appl. No. 17/662,941.
Prior Publication US 2023/0370271 A1, Nov. 16, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/32 (2006.01); G10L 15/22 (2006.01); H04L 9/40 (2022.01)

CPC H04L 9/3228 (2013.01) [G10L 15/22 (2013.01); H04L 63/105 (2013.01); G10L 2015/221 (2013.01); G10L 2015/223 (2013.01)]

17 Claims

1. A conversational interface system for step-up authentication using spoken passphrases, the system comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

a memory device storing executable code that, when executed, causes the processor to:

receive a conversational request from a user for an action, and based thereon derive an intent by comparing, using a conversational interface, the intent to a collection of intents stored by an interaction model, the deriving determining the intent requires step-up authentication;

based on the determination, initiate a step-up authentication process that includes responding to the user using conversational artificial intelligence (AI) with a warning that an additional authentication step is required, the additional authentication step including an interaction with a virtual private cloud;

wherein a passphrase service of a datacenter transmits, over a communication channel separate from the conversational interface and to the user, a secret passphrase generated using a spoken passphrase dictionary;

receive a spoken submission from the user in response to the warning and based thereon determine a spoken intent of the spoken submission is to initiate an interaction with the virtual private cloud;

generate an authorization intent using an interaction model;

transmit the authorization intent and the spoken submission to the virtual private cloud (VPC), wherein the authorization intent and spoken submission is transmitted to the datacenter using one or more application programming interfaces (APIs) for validation of the spoken passphrase;

wherein the passphrase service of the datacenter confirms validity of the received spoken submission by comparing the spoken submission to the passphrase; and in response to confirmation of the spoken submission, authenticates the user, thereby authorizing the requested action; and

receive a confirmation of validation of the passphrase and that the action is being or will be performed.