User authentication

• US 10,028,081 B2
• Filed: 07/10/2014
• Issued: 07/17/2018
• Est. Priority Date: 07/10/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Scanlon, Sharon, Gill, Davindar, Bertanzetti, Pete
• Primary Examiner(s): TRAIL, ALLYSON NEEL
• Application Number:
  US14/328,012
• Publication Number:
  US 20160012412A1
• Time in Patent Office: 1,468 Days
• Field of Search: 235379, 235380, 705 7, 705 30, 705 67
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Systems, methods, apparatuses, and computer-readable media configured to determine a location of a user, identify the user and provide additional services based on the determined location and/or identity are provided. In some examples, a signal emitted from a beacon may be detected by a personal computing device of a user within a predefined proximity of the beacon. The location of the beacon, and the device detecting the signal, may be determined and the identity of the user associated with the device may be determined. Authentication information may be requested from the user. The request for authentication information may be transmitted to the personal computing device and the user may provide the authentication information via the device. If the received authentication information matches pre-stored authentication information, the user may be authenticated and/or authorized to conduct one or more transactions or types of transactions based on the determined location, identity, and authentication information.

Claims

1. A method, comprising:

receiving, by a location determination and user identification system having at least one processor, data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;

determining, by the location determination and user identification system, a location of the personal computing device based on the received data associated with the signal emitted from the location beacon, wherein the location of the personal computing device is within a predefined proximity of a location of the location beacon;

extracting, by the location determination and user identification system, a unique identifier associated with the personal computing device, the unique identifier including an international mobile station equipment identity (IMEI) of the personal computing device;

determining, by the location determination and user identification system and based on the extracted unique identifier associated with the personal computing device, an identity of a user associated with the personal computing device;

requesting, by the location determination and user identification system, authentication information of the identified user;

receiving, by the location determination and user identification system, the requested authentication information of the user;

determining, by the location determination and user identification system, whether the received authentication information of the user matches pre-stored authentication information associated with the user; and

responsive to determining that the received authentication information of the user matches the pre-stored authentication information associated with the user, authorizing the user to conduct a first plurality of transactions or types of transactions.

2. The method of claim 1, wherein authorizing the user to conduct a first plurality of transactions or types of transactions includes authorizing the user to conduct the first plurality of transactions or types of transactions without additional identification or authentication information from the user.

3. The method of claim 1, wherein requesting authentication information from the identified user includes transmitting a request for the authentication information to the personal computing device.

4. The method of claim 1, wherein receiving the requested authentication information of the user includes receiving the requested authentication information from the personal computing device.

5. The method of claim 1, wherein the requested authentication information includes at least one of:

a personal identification number (PIN) of the user, biometric data of the user, a password of the user, and a response to a predefined security question.

6. The method of claim 1, wherein authorizing the user to conduct the first plurality of transactions or types of transactions is based on the determined identity of the user associated with the personal computing device and the determined the location of the personal computing device.

7. The method of claim 1, wherein authorizing the user to conduct a first plurality of transactions or types transactions further includes identifying a second plurality of transactions or types of transactions as requiring additional identification or authentication information from the user prior to conducting a transaction or type of transaction in the second plurality of transactions or types of transactions.

8. The method of claim 1, further including transmitting, to a computing device of a banking associate, an image of the user and, responsive to determining that the authentication information matches, confirming that the user matches the image of the user.

9. The method of claim 1, further including responsive to determining that the authentication information does not match, requesting additional identification from the user prior to conducting any type of transaction.

10. The method of claim 9, wherein requesting additional identification from the user includes requesting a photo identification of the user.

11. An apparatus, comprising:

at least one processor; and

a memory storing instructions that when executed by the at least one processor cause the apparatus to;

receive data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;

determine a location of the personal computing device based on the received data associated with the signal emitted from the location beacon, wherein the location of the personal computing device is within a predefined proximity of a location of the location beacon;

extract a unique identifier associated with the personal computing device, the unique identifier including an international mobile station equipment identity (IMEI) of the personal computing device;

determine, based on the extracted unique identifier associated with the personal computing device, an identity of a user associated with the personal computing device;

request authentication information of the identified user;

receive the requested authentication information of the user;

determine whether the received authentication information of the user matches pre-stored authentication information associated with the user; and

responsive to determining that the received authentication information of the user matches the pre-stored authentication information associated with the user, authorize the user to conduct a first plurality of transactions or types of transactions.

12. The apparatus of claim 11, wherein authorizing the user to conduct a first plurality of transactions or types of transactions includes authorizing the user to conduct the first plurality of transactions or types of transactions without additional identification or authentication information from the user.

13. The apparatus of claim 11, wherein receiving the requested authentication information of the user includes receiving the requested authentication information from the personal computing device.

14. The apparatus of claim 11, wherein authorizing the user to conduct the first plurality of transactions or types of transactions is based on the determined identity of the user associated with the personal computing device and the determined the location of the personal computing device.

15. The apparatus of claim 11, wherein authorizing the user to conduct a first plurality of transactions or types transactions further includes identifying a second plurality of transactions or types of transactions as requiring additional identification or authentication information from the user prior to conducting a transaction or type of transaction in the second plurality of transactions or types of transactions.

16. The apparatus of claim 11, further including instructions that, when executed, cause the apparatus to:

responsive to determining that the authentication information does not match, request additional identification from the user prior to conducting any type of transaction.

17. One or more non-transitory computer-readable media having instructions stored thereon that when executed by one or more computers cause the one or more computers to:

receive data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;

determine a location of the personal computing device based on the received data associated with the signal emitted from the locating beacon, wherein the location of the personal computing device is within a predefined proximity of a location of the locating beacon;

extract a unique identifier associated with the personal computing device, the unique identifier including an international mobile station equipment identity (IMEI) of the personal computing device;

determine, based on the extracted unique identifier associated with the personal computing device, whether an identity of a user associated with the personal computing device can be determined;

responsive to determining that the identity of the user associated with the personal computing device cannot be determined, generating at least one offer for the user associated with the personal computing device; and

transmit the at least one offer to the personal computing device.

18. The one or more non-transitory computing readable media of claim 17, wherein the at least one offer includes at least one of:

an offer to download an application to the personal computing device and an offer to register with a system.

19. The one or more non-transitory computer-readable media of claim 17, further including instructions that, when executed, cause the one or more computers to:

responsive to determining that the identity of the user associated with the personal computing device can be determined, identify the user associated with the personal computing device;

request authentication information of the identified user;

receive the requested authentication information of the identified user;

determine whether the received authentication information of the user matches pre-stored authentication information associated with the identified user; and

responsive to determining that the received authentication information of the identified user matches the pre-stored authentication information associated with the identified user, authorize the identified user to conduct a first plurality of transactions or types of transactions.

20. The one or more non-transitory computer-readable media of claim 19, further including instructions that, when executed, cause the one or more computers to:

responsive to determining that the authentication information does not match, request additional identification from the user prior to conducting any type of transaction.