Patent ID: 11935545
Assignee: TRUIST BANK
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 19:
20. A back-end server system for step-up authentication for conversational interfaces using spoken passphrases, the system comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
a memory device storing executable code that, when executed, causes the processor to:
receive, by the server system, a conversational request through the conversational interface for an action which the conversational interface determines, via a machine learning (ML) model and based on a derived intent for the action by the user, requires step-up authorization, wherein the conversational request is received from a virtual private cloud that utilizes an entity lambda trigger to interact with an entity interaction model utilized by the conversational interface and that utilizes APIs to interact with the server system, wherein the derived intent is compared, by the conversational interface, to a collection of intents stored to the entity interaction model, wherein the entity interaction model triggers the step-up authorization to initiate interaction with the virtual private cloud in response to the derived intent and enables the derived intent and a search phrase to be passed from the entity interaction model to a cloud provider of the virtual private cloud;
respond, via the conversational interface, to the user through conversational artificial intelligence (AI) warning the user that an additional step is required;
access a spoken passphrase dictionary of words stored to a passphrase database of the server system;
generate the secret passphrase by randomly selecting a plurality of words from the spoken passphrase dictionary;
transmit, over a dedicated communication channel to the user and different than the conversational interface, a secret passphrase generated using a spoken passphrase dictionary;
receive, by the conversational interface, a spoken submission from the user in response to the warning;
confirm validity of the received spoken submission by comparing the spoken submission to the passphrase; and
in response to confirmation of the spoken submission, authorize the requested action.