US 12,093,945 B2
Multi-factor user authentication
Ra Uf Ridzuan Bin Ma Arof, Singapore (SG); Harish Tammaji Kulkarni, Singapore (SG); Kumudini Choyal, Tung Chung (HK); Nhat Minh Nguyen, Singapore (SG); and Surendran Surendran, Singapore (SG)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Dec. 17, 2021, as Appl. No. 17/554,348.
Prior Publication US 2023/0196349 A1, Jun. 22, 2023
Int. Cl. G06Q 20/38 (2012.01); G06Q 20/40 (2012.01)
CPC G06Q 20/385 (2013.01) [G06Q 20/382 (2013.01); G06Q 20/4016 (2013.01); G06Q 20/407 (2013.01)] 10 Claims
OG exemplary drawing
 
1. An apparatus comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
receive an authentication request for a user, wherein the authentication request comprises a user identifier associated with the user;
determine, based on the user identifier, a user device associated with the user;
send, to the user device, a one-time passcode (OTP);
send, to the user device, a character mapping, associated with the user, for a dynamic digital keypad interface that maps user input characters to encoded characters, wherein:
the dynamic digital keypad interface corresponds to a graphical user interface (GUI) comprising a plurality of buttons arranged in a grid,
each button, of the plurality of buttons, represents a corresponding user input character,
each button, of the plurality of buttons, is associated with a corresponding encoded character based on:
the character mapping associated with the user, and
a row and a column, in the grid, associated with the user input character, and
the character mapping is periodically refreshed;
after sending the OTP, receive an authentication code, wherein the authentication code is generated based on user input via the dynamic digital keypad interface;
generate, based on the OTP and the character mapping associated with the user, a validation code; and
based on comparing the validation code and the authentication code, send an authorization response indicating whether the authentication request is approved or declined.