US 12,346,426 B2
Computer authentication using knowledge of former devices
Abdelkader M'hamed Benkreira, Washington, DC (US); Joshua Edwards, Philadelphia, PA (US); and Michael Mossoba, Great Falls, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Sep. 19, 2022, as Appl. No. 17/947,667.
Prior Publication US 2024/0095327 A1, Mar. 21, 2024
Int. Cl. G06F 21/34 (2013.01); G06N 20/00 (2019.01)
CPC G06F 21/34 (2013.01) [G06N 20/00 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computing device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the computing device to:
train, using training data comprising account records from a plurality of different users, a first machine learning model to output, for a particular device, an indication of device reliability data associated with the particular device, wherein the account records are associated with a plurality of devices used by the plurality of different users to access one or more accounts in the account records;
receive, from a user device, a request for access to an account associated with a user;
receive, from one or more databases, account data corresponding to the account,
wherein the account data indicates one or more logins originated from the user;
determine, based on the account data, device history comprising a set of devices used by the user to login to the account within a predetermined period of time;
provide, as input to the trained first machine learning model, the account data;
receive, from the trained first machine learning model, data indicating device reliability for the set of devices;
determining, based on the device history, one or more false devices that the user has not used to access the account for the predetermined period of time;
generate, based on the data indicating device reliability for the set of devices, a set of modified device choices by excluding one or more devices having corresponding reliability levels below a threshold value, from the set of devices, wherein the set of modified device choices comprise the one or more false devices;
generate an authentication question comprising at least one device choice from the modified set of device choices;
generate, based on the account data and the modified set of device choices, a correct answer to the authentication question;
provide the authentication question to the user device;
receive, from the user device, a response to the authentication question;
compare the response to the authentication question to the correct answer; and
grant the user device access to the account based on the response to the authentication question matching the correct answer.