Abstract: Methods and systems described in this disclosure are directed to authentication of calling parties. The authentication of calling parties applies to simultaneous voice and/or data communications with multiple parties over multiple electronic mediums including a variety of electronic devices. A user can continue to maintain a data exchange session with a representative of an entity offering the goods or services of interest to the user across more than one user device. In some embodiments, a user can invite other parties in a multi-party call involving the user and the representative. Various embodiments for multi-party and multi-device authentication mechanisms are described herein. In some embodiments, the system calculates an estimated call waiting time for a user to speak with the representative.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: The technology described herein detects a first device associated with a user that is within a detectable range of a second device. The system requests authentication information. In response to receiving the authentication information, a token generator associated with the user can generate a secure token. The secure token can be sent to the server. Once the secure token is verified, the user is granted access to one or more services.

Abstract: An authentication system may receive non-voice biometric authentication information from a user and authenticate the user via a first authentication method using the non-voice biometric authentication information. After authenticating the user via the first authentication method, the authentication system can enhance or create, based on a verbal request or a verbal command received from the user, a voice profile associated with the user. Once the profile is enhanced or created, the user is enrolled into a voice biometric authentication program.

Abstract: A computer-implemented method includes identifying behavioral characteristics of a user related to operation of a computing device prior to an online account session. The method includes comparing the behavioral characteristics to a behavioral profile previously developed based on prior behavioral characteristics of the user, and determining an appropriate mark difficulty level based on a variation between the behavioral characteristics and the behavioral profile. The method includes selecting, from a plurality of prompts stored in a prompt database, a prompt that comprises instructions to draw a mark having the appropriate mark difficulty level, where other prompts of the plurality of prompts comprise instructions to draw other marks different from the mark, and providing the prompt to the user as part of a logon process for the online account session.

Abstract: The disclosure describes a scalable, risk-based authentication system including a plurality of fraud monitoring engines configured to: analyze user data and organization data, and generate a set of risk factors based on the user data and the enterprise data; a risk aggregator in communication with the plurality of fraud monitoring engines configured to: receive the set of risk factors, and transform the set of risk factors into risk indicators; and an authentication engine configured to: receive the risk indicators from the risk aggregator, and generate an authentication plan for a requested activity based on the risk indicators and the requested activity.

Abstract: Methods and systems for receiving a detection of a physical presence of a user and, in response, initiating a start-up process on an enterprise device according to a profile associated with the user are described. Thereafter, the system receives authentication credentials at the enterprise device and the user is granted access to the enterprise device after the authentication credentials are verified.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for interconnecting devices. One of the methods includes authenticating, by a security platform, a user. The method includes generating, by the security platform, an authentication token for the user. The method includes receiving a selection of an IoT application by the user, the IoT application configured to control an IoT device. The method includes providing, by the security platform, the authentication token to the IoT application to authenticate the user with the selected application. The method also includes providing, by the selected application, control of the IoT device to the user.

Abstract: A computer-implemented method includes identifying behavioral characteristics of a user related to operation of a computing device prior to an online account session. The method includes comparing the behavioral characteristics to a behavioral profile previously developed based on prior behavioral characteristics of the user, and determining an appropriate mark difficulty level based on a variation between the behavioral characteristics and the behavioral profile. The method includes selecting, from a plurality of prompts stored in a prompt database, a prompt that comprises instructions to draw a mark having the appropriate mark difficulty level, where other prompts of the plurality of prompts comprise instructions to draw other marks different from the mark, and providing the prompt to the user as part of a logon process for the online account session.

Abstract: The technology described herein detects a first device associated with a user that is within a detectable range of a second device. The system requests authentication information. In response to receiving the authentication information, a token generator associated with the user can generate a secure token. The secure token can be sent to the server. Once the secure token is verified, the user is granted access to one or more services.

Abstract: Methods and systems for receiving a detection of a physical presence of a user and, in response, initiating a start-up process on an enterprise device according to a profile associated with the user are described. Thereafter, the system receives authentication credentials at the enterprise device and the user is granted access to the enterprise device after the authentication credentials are verified.

Abstract: Various embodiments of the technology described herein alleviate the need to specifically request enrollment information from a user to enroll the user in a voice biometric authentication program. For example, the system can receive a verbal request or a verbal command and non-voice biometric authentication information from a user. The user can be authenticated via a first authentication method using the non-voice biometric authentication information. After the user is authenticated using the first authentication method, the system enrolls the user into a voice biometric authentication program for at least one portion of the verbal request or the verbal command without requesting enrollment information.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for interconnecting devices. One of the methods includes authenticating, by a security platform, a user. The method includes generating, by the security platform, an authentication token for the user. The method includes receiving a selection of an IoT application by the user, the IoT application configured to control an IoT device. The method includes providing, by the security platform, the authentication token to the IoT application to authenticate the user with the selected application. The method also includes providing, by the selected application, control of the IoT device to the user.

Abstract: The disclosure describes a scalable, risk-based authentication system including a plurality of fraud monitoring engines configured to: analyze user data and organization data, and generate a set of risk factors based on the user data and the enterprise data; a risk aggregator in communication with the plurality of fraud monitoring engines configured to: receive the set of risk factors, and transform the set of risk factors into risk indicators; and an authentication engine configured to: receive the risk indicators from the risk aggregator, and generate an authentication plan for a requested activity based on the risk indicators and the requested activity.

Abstract: Methods and systems described in this disclosure are directed to authentication of calling parties. The authentication of calling parties applies to simultaneous voice and/or data communications with multiple parties over multiple electronic mediums including a variety of electronic devices. A user can continue to maintain a data exchange session with a representative of an entity offering the goods or services of interest to the user across more than one user device. In some embodiments, a user can invite other parties in a multi-party call involving the user and the representative. Various embodiments for multi-party and multi-device authentication mechanisms are described herein. In some embodiments, the system calculates an estimated call waiting time for a user to speak with the representative.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Techniques are described for client registration for authorizing an aggregator service to access data on behalf of an application, through self-registration of an application client identifier and issuance of authorization token(s) based on the application client identifier. Implementations provide a technique for dynamic client registration that avoids the need for manual vetting and manual generation of the client credential grant. Additionally, the implementations described herein enforce domain values around the scope and/or purpose of the client grant. This allows for support of application providers through a single point of registration that supports multi-layer and channel. This also allows for support of a scalable authorization solution for any suitable number of clients. The dynamic client registration process adds an additional layer of security through the OAuth client grant and mutual authentication.

Abstract: Methods and systems for authenticating a user are described. In some embodiments, a series of voice interactions are received from a user during a voiceline session. Each of the voice interactions in the series of voice interaction may be analyzed as each of the voice interactions are received. A confidence level in a verification of an identity of the user may be determined based on the analysis of each of the voice interactions. An access level for the user may be automatically updated based on the confidence level of the verification of the identity of the user after each of the voice interactions is received.

Abstract: A computer-implemented method includes selecting a prompt from a plurality of prompts stored in a prompt database, wherein the prompt comprises instructions to draw a mark, and wherein other prompts of the plurality of prompts comprise instructions to draw other marks different from the mark. The method also includes the steps of providing the prompt to a user as part of a logon process for an online account session, identifying behavioral characteristics of the user while the user draws the mark, comparing the behavioral characteristics to a behavioral profile previously developed based on prior behavioral characteristics of the user, and providing access to the online account session in response to determining that a variation between the behavioral characteristics and the behavioral profile is within a threshold.

Abstract: Methods and systems for receiving a detection of a physical presence of a user and, in response, initiating a start-up process on an enterprise device according to a profile associated with the user are described. Thereafter, the system receives authentication credentials at the enterprise device and the user is granted access to the enterprise device after the authentication credentials are verified.