US 11,706,211 B2
Computer-based systems configured for one-time passcode (OTP) protection and methods of use thereof
Asher Smith-Rose, Arlington, VA (US); Lin Ni Lisa Cheng, New York, NY (US); Shabnam Kousha, Washington, DC (US); Tyler Maiman, Melville, NY (US); and Joshua Edwards, Philadelphia, PA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Sep. 28, 2021, as Appl. No. 17/487,266.
Prior Publication US 2023/0096899 A1, Mar. 30, 2023
Int. Cl. H04L 9/40 (2022.01); H04L 41/22 (2022.01)
CPC H04L 63/0838 (2013.01) [H04L 41/22 (2013.01); H04L 63/0846 (2013.01); H04L 63/1416 (2013.01); H04L 63/1483 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
obtaining, by one or more processors, a trained One-Time Passcode (OTP) protection machine learning model that determines at least one phone number as presenting a security risk with respect to an OTP;
receiving, by the one or more processors, from a computing device of a user, a permission indicator identifying a permission by the user to detect OTPs and calls being received by the computing device;
receiving, by the one or more processors, from the computing device, an indication of at least one OTP data item being received, the at least one OTP data item including a particular OTP and associated with an authentication process of a particular issuing entity;
processing, by the one or more processors, the at least one OTP data item to determine a time duration during which the particular OTP is valid;
utilizing, by the one or more processors, the trained OTP protection machine learning model to determine one or more phone numbers as presenting a security risk with respect to the at least one OTP data item based at least in part on the particular OTP;
instructing, by the one or more processors, the computing device to update a contact list with an indication that the one or more phone numbers present a security risk with regard to the particular OTP during the time duration of the particular OTP; and
instructing, by the one or more processors, the computing device to commence at least one security measure for an incoming call from the one or more phone numbers during the time duration, based at least in part on the updated contact list.