US 12,443,689 B2
Two-factor authentication integrating dynamic QR codes
Jennifer Sanctis, Charlotte, NC (US); Taylor Farris, Hoboken, NJ (US); and Vishwas Korde, Matthews, NC (US)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Jun. 29, 2023, as Appl. No. 18/215,909.
Prior Publication US 2025/0005127 A1, Jan. 2, 2025
Int. Cl. G06F 21/36 (2013.01); G06F 21/32 (2013.01)
CPC G06F 21/36 (2013.01) [G06F 21/32 (2013.01)] 13 Claims
OG exemplary drawing
 
1. A system for pre-authenticating a user into a secure session on an entity application running on a second computing device, the pre-authenticating using a first computing device of the user as an authenticator, the first computing device and the second computing device being in electronic communication with a central server, the system comprising:
the second computing device configured to receive a request from a user to generate a dynamic QR code, the dynamic QR code for use in authenticating a user to a mobile entity application running on the second computing device, the request including a user selected time period, the user selected time period being a time the user is authenticated to access the entity application;
the first computing device configured to receive the user request from the second computing device;
the central server configured to:
receive the user request from the first computing device to generate the dynamic QR code; and
in response to a receipt of the instruction, generate the dynamic QR code, the dynamic QR code including a graphical display embedded with:
an instruction to a QR code reader to store, but not parse, the dynamic QR code in a processing queue of the QR code reader, wherein the instruction to not parse is an instruction to not extract the short URL from the dynamic QR code;
the selected time period; and
a short URL associated with the dynamic QR code, wherein the short URL instructs the central server to:
redirect a web browser of the second computing device to a first website when a time of a receipt of a selection of the dynamic QR code is during the selected time period, wherein the first website, when accessed, instructs the central server to authenticate the user to the secure session; and
redirect the web browser of the second computing device to a second website when the time of a receipt of a selection of the dynamic QR code is outside the selected time period, the second website, when accessed, instructs the central server to deny the user access to the secure session;
the first computing device being configured to receive the dynamic QR code from the central server and display the dynamic QR code on a user interface; and
the second computing device configured to:
capture, using the QR code reader, the dynamic QR code displayed on the first computing device, the dynamic QR code that, when parsed by the QR code reader, identifies the short URL;
based on the instruction in the dynamic QR code, store, but not parse, the dynamic QR code in the processing queue of the QR code reader; and
at a time of a receipt of a selection of the dynamic QR code from the processing queue, the QR code reader is configured to parse the dynamic QR code, using the QR code reader, and access the short URL.