Abstract: A system includes first and second subsystems. The first subsystem receives a validation number request, transmitted by a first device in response to the entry of an account number into a first field of a webpage. In response to receiving the request, the first subsystem randomly generates the validation number, stores a copy in memory, and transmits it to a second device. The second subsystem receives a transaction request that includes the validation number from the first device, and transmits the received number to the first subsystem. The first device transmitted the request in response to the second device receiving the validation number and its subsequent entry into a second field of the webpage displayed on the first device. In response to receiving the validation number, the first subsystem determines that it matches the stored copy and transmits a message to the second subsystem authorizing the transaction.

Abstract: A target device is configured to communicatively connect to a common network and a mobile device. The mobile device includes a processor operable to determine that the mobile device is not within a proximity distance threshold to the target device as indicated by a lack of connectivity with the target device through a short-range wireless protocol. The processor is further operable to determine that both the mobile device and the target device are connected to the common network at a first time period, wherein the common network is designated as a safe zone for each of the target device and the mobile device. The processor is then operable to determine that at least one of the mobile device and the target device is not connected to the common network at a second time period after the first time period. An alert is produced via the mobile device as a result.

Abstract: An authentication/authorization tool authenticates entity data received from an official third party and authorizes the distribution of the authenticated data based on an authorization token provided by a mobile device of the entity. The tool determines, based on the entity data and an entity preferences database, different portions of the entity data that are of different data types and data repositories that are authorized to receive each data type. The tool receives an authorization token from a mobile device of the entity and uses the authorization token to determine whether data distribution is authorized. Responsive to determining, based on the data authorization token, that distribution of the data is authorized, the tool automatically transmits the data portions to the entity's data repositories to update information stored therein, according to preferences of the entity.

Abstract: Aspects of the disclosure relate to automated pairing of customers and businesses. A computing platform may determine, based on historical user activity of a user, a pattern of the user activity, and may identify, based on the pattern of the user activity, an anticipated purchase activity of the user. Then, the computing platform may determine a sales offering by a vendor. Then, the computing platform may match the anticipated purchase activity with the sales offering. Then, the computing platform may retrieve user-defined preference rules associated with the anticipated purchase activity. Then, the computing platform may determine whether the preference rules apply to one or more attributes of the anticipated purchase activity. Subsequently, the computing platform may trigger, based on a determination that the preference rules apply to the one or more attributes of the anticipated purchase activity, an action associated with the anticipated purchase activity.

Abstract: Aspects of the disclosure relate to machine learning based automated management of a user account. A computing platform may determine, via a computing device and based on historical user activity of a user, a pattern of the user activity. Subsequently, the computing platform may detect a deviation from the pattern of the user activity. Then, the computing platform may identify an anticipated transaction of the user. Then, the computing platform may retrieve, from a repository of user data, one or more user-defined preference rules associated with the anticipated transaction. Then, the computing platform may determine whether the one or more preference rules apply to one or more attributes of the anticipated transaction. Subsequently, the computing platform may trigger, based on a determination that the one or more preference rules apply to the one or more attributes of the anticipated transaction, an action associated with the anticipated transaction.

Abstract: Aspects of the disclosure relate to detecting usage issues on enterprise systems and dynamically providing user assistance. In some embodiments, a computing platform may receive, from an automated teller system, user presence information indicating that a user has been detected at an automated teller machine associated with the automated teller system. Subsequently, the computing platform may identify, based on the user presence information received from the automated teller system, that the user has a need for assistance with the automated teller machine associated with the automated teller system. In response to identifying that the user has the need for assistance, the computing platform may generate and send one or more commands directing the automated teller machine associated with the automated teller system to execute one or more automated assistance actions corresponding to the need for assistance.

Abstract: This application describes apparatus and methods for using edge-computing to control resource distribution among access channels, such as a retail banking center. Edge-nodes may be configured to move a product display in response to detected or expected customer traffic flow in or near a retail location. Edge-nodes may be configured to redirect resources provided by a cloud computing environment to or away from the retail location. Based on customer traffic flow, edge-nodes may direct customers/resources to a retail location and ensure the retail location provides a predetermined quality of service.

Abstract: This application describes apparatus and methods for using edge-computing to control resource distribution among access channels, such as a retail banking center. Edge-nodes may be configured to move a product display in response to detected or expected customer traffic flow in or near a retail location. Edge-nodes may be configured to redirect resources provided by a cloud computing environment to or away from the retail location. Based on customer traffic flow, edge-nodes may direct customers/resources to a retail location and ensure the retail location provides a predetermined quality of service.

Abstract: Aspects of the disclosure relate to dynamically optimizing mobile device communication modes in a multi-network environment. A computing device may scan for at least one network connection associated with at least one device support server. Based on the scanning, the computing device may establish a first connection via a first network with a first device support server in a first communication mode. Subsequently, the computing device may exchange first data with the first device support server in the first communication mode. Then, the computing device may switch from the first communication mode to a second communication mode different from the first communication mode. Based on switching from the first communication mode to the second communication mode different from the first communication mode, the computing device may exchange second data with the first device support server in the second communication mode.

Abstract: This application describes apparatus and methods for using edge-computing to control resource distribution among access channels, such as a retail banking center. Edge-nodes may be configured to move a product display in response to detected or expected customer traffic flow in or near a retail location. Edge-nodes may be configured to redirect resources provided by a cloud computing environment to or away from the retail location. Based on customer traffic flow, edge-nodes may direct customers/resources to a retail location and ensure the retail location provides a predetermined quality of service.

Abstract: Systems for predicting features to be accessed by a user and generating a customized user interface are provided. In some examples, a computing platform may receive a request to access a system. In some examples, a content data stream may be received including data associated with the identity of the user, current date and time information, and the like. Data may be extracted from the content stream and analyzed, based on one or more machine learning datasets (generated internally or received from an external source), to predict a likely function or feature the user may access. In some examples, access to other features may be disabled. Responsive to identifying the likely feature, the system may enable access to the predicted feature and may generate a customized user interface including the predicted feature. The customized and dynamic user interface may include and place the predicted feature in a predetermined location on the user interface, in a size and/or format other than standard.

Abstract: An automated teller machine includes a camera, a memory, and a hardware processor. The camera captures video data from a user, including at least one hand movement. The processor receives the video data from the camera and splits it into a sequence of images. The processor then splits each image into a set of features and forms vectors from the features. The processor uses the vectors to determine if each image belongs to a subset of images corresponding to a motionless sign-language pattern, or to a subset of images corresponding to a moving sign-language pattern. The processor stores the words and/or phrases assigned to each identified sign-language pattern in an input phrase. The processor determines that the input phrase represents a user request and then processes the request.

Abstract: An authentication/authorization tool authenticates entity data received from an official third party and authorizes the distribution of the authenticated data based on an authorization token provided by a mobile device of the entity. The tool determines, based on the entity data and an entity preferences database, different portions of the entity data that are of different data types and data repositories that are authorized to receive each data type. The tool receives an authorization token from a mobile device of the entity and uses the authorization token to determine whether data distribution is authorized. Responsive to determining, based on the data authorization token, that distribution of the data is authorized, the tool automatically transmits the data portions to the entity's data repositories to update information stored therein, according to preferences of the entity.

Abstract: An automated teller machine includes a camera, a memory, and a hardware processor. The camera captures video data from a user, including at least one hand movement. The processor receives the video data from the camera and splits it into a sequence of images. The processor then splits each image into a set of features and forms vectors from the features. The processor uses the vectors to determine if each image belongs to a subset of images corresponding to a motionless sign-language pattern, or to a subset of images corresponding to a moving sign-language pattern. The processor stores the words and/or phrases assigned to each identified sign-language pattern in an input phrase. The processor determines that the input phrase represents a user request and then processes the request.

Abstract: A network authentication device that includes an authentication engine in signal communication with a network interface. The authentication engine is configured to receive an authentication key request from a first user device that identifies an account linked with a first user and a second user device. The authentication engine is configured to generate an authentication key and to establish a first set of authentication rules for the first user and a second set of authentication rules for the second user. The authentication engine is configured to generate a first authentication key fragment comprising a first portion of the authentication key and a second authentication key fragment comprising a second portion of the authentication key and to send the first authentication key fragment to the first user device and the second authentication key fragment to the second user device.

Abstract: A network authentication device that includes an authentication engine. The authentication engine is configured to receive an authentication key request from a user device that identifies an account. The authentication engine is configured to obtain an authentication key and to establish a first set of authentication rules for the authentication key. The authentication engine is configured to identify one or more triggering events associated with an increased threat to the account and to establish a second set of authentication rules for the authentication key. The authentication engine is configured to perform key validation for the authentication key using the first set of authentication rules and to send the authentication key to the user device. The authentication engine is configured to detect a triggering event from the one or more triggering events has occurred and perform the key validation for the authentication key using the second set of authentication rules.

Abstract: A network authentication device that includes an authentication engine in signal communication with a network interface. The authentication engine is configured to receive an authentication key request from a first user device that identifies an account linked with a first user and a second user device. The authentication engine is configured to generate an authentication key and to establish a first set of authentication rules for the first user and a second set of authentication rules for the second user. The authentication engine is configured to generate a first authentication key fragment comprising a first portion of the authentication key and a second authentication key fragment comprising a second portion of the authentication key and to send the first authentication key fragment to the first user device and the second authentication key fragment to the second user device.

Abstract: A network authentication device that includes an authentication engine. The authentication engine is configured to receive an authentication key request from a user device that identifies an account. The authentication engine is configured to obtain an authentication key and to establish a first set of authentication rules for the authentication key. The authentication engine is configured to identify one or more triggering events associated with an increased threat to the account and to establish a second set of authentication rules for the authentication key. The authentication engine is configured to perform key validation for the authentication key using the first set of authentication rules and to send the authentication key to the user device. The authentication engine is configured to detect a triggering event from the one or more triggering events has occurred and perform the key validation for the authentication key using the second set of authentication rules.

Abstract: In one embodiment, a system for managing secure communications includes an interface that may receive communication between a first endpoint and a second endpoint. A processor may identify a security certificate included in the communication and determine whether the identified security certificate has previously been stored in a certificate database. If the security certificate has not been previously stored in a certificate database, the processor may store the identified security certificate in the certificate database. The processor may also analyze parameters of the identified security certificate including a host device using the certificate, a network administrator responsible for the host device, an expiration date of the security certificate, and a certification authority issuing the security certificate.

Abstract: Systems for predicting features to be accessed by a user and generating a customized user interface are provided. In some examples, a computing platform may receive a request to access a system. In some examples, a content data stream may be received including data associated with the identity of the user, current date and time information, and the like. Data may be extracted from the content stream and analyzed, based on one or more machine learning datasets (generated internally or received from an external source), to predict a likely function or feature the user may access. In some examples, access to other features may be disabled. Responsive to identifying the likely feature, the system may enable access to the predicted feature and may generate a customized user interface including the predicted feature. The customized and dynamic user interface may include and place the predicted feature in a predetermined location on the user interface, in a size and/or format other than standard.