Transaction confirmation and authentication based on device sensor data

• US 10,269,017 B1
• Filed: 11/21/2017
• Issued: 04/23/2019
• Est. Priority Date: 11/21/2017
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Phillips, Jeremy, Liu, Zhe, Tran, Kurry
• Primary Examiner(s): Shaikh, Mohammad Z
• Application Number:
  US15/820,161
• Time in Patent Office: 518 Days
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A device may receive transaction data indicating that a transaction occurred. The transaction may be between a first user of a first device and a second user of a second device. The device may receive, from the first device, first sensor data indicating a first location recorded by a first sensor of the first device at a first point in time associated with the transaction; and receive, from the second device, second sensor data indicating a second location recorded by a second sensor of the second device at a second point in time associated with the transaction. Based on the transaction data, the first sensor data, and/or the second sensor data, the device may determine whether the transaction occurred and perform an action based on the determination of whether the transaction occurred.

Claims

1. A transaction server, comprising:

one or more processors to;

transmit, via a peer-to-peer application, peer-to-peer data between a first mobile device and a second mobile device to facilitate a first user of the first mobile device meeting a second user of the second mobile device to conduct a peer-to-peer transfer of a good or a currency,

the transaction server being remote to the first mobile device and the second mobile device,

the peer-to-peer application operating on the first mobile device and the second mobile device, and

the peer-to-peer transfer physically occurring between the first user of the first mobile device and the second user of the second mobile device in exchange for a credit to a user account;

receive transaction data from at least one of the first mobile device or the second mobile device via the peer-to-peer application,

the transaction data indicating that the peer-to-peer transfer of a good or a currency occurred, and

the transaction data indicating a transaction location associated with the peer-to-peer transfer;

receive, from the first mobile device and via the peer-to-peer application, first sensor data,

the first sensor data indicating;

a first location recorded by a first sensor of the first mobile device at a first point in time,

 

the first point in time being associated with the peer-to-peer transfer,

first non-geographic data recorded by a first non-geographic sensor of the first mobile device at the first point in time, and

first gait data recorded by a gait sensor of the first mobile device,

 

the first gait data indicating a gait of the first user of the first mobile device;

receive, from the second mobile device and via the peer-to-peer application, second sensor data,

the second sensor data indicating;

a second location recorded by a second sensor of the second mobile device at a second point in time,

 

the second point in time being associated with the peer-to-peer transfer,

second non-geographic data recorded by a second non-geographic sensor of the second mobile device at the second point in time, and

second gait data recorded by a gait sensor of the second mobile device,

 

the second gait data indicating a gait of the second user of the second mobile device;

determine, using a machine learning model, a confidence score for confirming whether the peer-to-peer transfer occurred based on the transaction data, the first sensor data, and the second sensor data,

the confidence score being determined based on different weights assigned to comparisons of;

the transaction location, the first location, and the second location, and

the first non-geographic data and the second non-geographic data;

confirm whether the peer-to-peer transfer occurred based on the confidence score;

receive gait authentication data associated with the first user of the first mobile device and the second user of the second mobile device;

determine whether the peer-to-peer transfer is authentic based on the gait authentication data, the first gait data, and the second gait data; and

selectively credit the user account based on whether the peer-to-peer transfer is confirmed to have occurred and whether the peer-to-peer transfer is determined to be authentic.

2. The transaction server of claim 1, where:

the first gait data includes accelerometer data that measures the gait of the first user.

3. The transaction server of claim 1, where the one or more processors, when determining whether the peer-to-peer transfer is authentic, are to:

determine whether the first gait data matches the gait authentication data.

4. The transaction server of claim 1, where:

the first gait data includes a plurality of accelerometer measurements taken over a period of time prior to occurrence of the peer-to-peer transfer.

5. The transaction server of claim 1, where the one or more processors are further to:

receive, prior to occurrence of the peer-to-peer transfer, peer-to-peer transfer initiation data indicating that the peer-to-peer transfer will take place; and

provide, to the first mobile device and based on the peer-to-peer transfer initiation data, instructions that cause the first mobile device to obtain the first sensor data.

6. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors of a transaction server, cause the one or more processors to;

transmit, via a peer-to-peer application, peer-to-peer data between a first mobile device and a second mobile device to facilitate a first user of the first mobile device meeting a second user of the second mobile device to conduct a peer-to-peer transfer of a good or a currency,

the transaction server being remote to the first mobile device and the second mobile device,

the peer-to-peer application operating on the first mobile device and the second mobile device, and

the peer-to-peer transfer physically occurring between the first user of the first mobile device and the second user of the second mobile device in exchange for a credit to a user account;

receive transaction data from at least one of the first mobile device or the second mobile device via the peer-to-peer application via the peer to peer application,

the transaction data indicating that the peer-to-peer transfer of a good or a currency occurred, and

the transaction data indicating a transaction location associated with the peer-to-peer transfer;

receive, from the first mobile device and via the peer-to-peer application, first sensor data,

the first sensor data indicating;

a first location recorded by a first sensor of the first mobile device at a first point in time,

 

the first point in time being associated with the peer-to-peer transfer,

first non-geographic data recorded by a first non-geographic sensor of the first mobile device at the first point in time, and

first gait data recorded by a gait sensor of the first mobile device,

 

the first gait data indicating a gait of the first user of the first mobile device;

receive, from the second mobile device and via the peer-to-peer application, second sensor data,

the second sensor data indicating;

a second location recorded by a second sensor of the second mobile device at a second point in time,

 

the second point in time being associated with the peer-to-peer transfer,

second non-geographic data recorded by a second non-geographic sensor of the second mobile device at the second point in time, and

second gait data recorded by a gait sensor of the second mobile device,

 

the second gait data indicating a gait of the second user of the second mobile device;

determine, using a machine learning model, a confidence score for confirming whether the peer-to-peer transfer occurred based on the transaction data, the first sensor data, and the second sensor data,

the confidence score being determined based on different weights assigned to comparisons of;

the transaction location, the first location, and the second location, and

the first non-geographic data and the second non-geographic data;

confirm whether the peer-to-peer transfer occurred based on the confidence score;

receive gait authentication data associated with the first user of the first mobile device and the second user of the second mobile device;

determine whether the peer-to-peer transfer is authentic based on the gait authentication data, the first gait data, and the second gait data; and

selectively credit the user account based on whether the peer-to-peer transfer is confirmed to have occurred and whether the peer-to-peer transfer is determined to be authentic.

7. The non-transitory computer-readable medium of claim 6, where:

the first sensor data includes first global positioning satellite (GPS) location data,

and the first point in time is associated with occurrence of the peer-to-peer transfer.

8. The non-transitory computer-readable medium of claim 6, where:

the first sensor data includes image data that includes first GPS location data,

and the first point in time is associated with the image data being generated.

9. The non-transitory computer-readable medium of claim 6, where the one or more instructions, that cause the one or more processors to determine whether the peer-to-peer transfer occurred, cause the one or more processors to:

compare the transaction location, first location, and the second location; and

determine whether the peer-to-peer transfer occurred based on a result of the comparison.

10. The non-transitory computer-readable medium of claim 6, where the one or more instructions, that cause the one or more processors to determine whether the peer-to-peer transfer occurred, cause the one or more processors to:

compare the transaction location, first location, and the second location;

compare the first point in time and the second point in time; and

determine whether the peer-to-peer transfer occurred based on a result of the comparison of the transaction location, first location, and the second location and based on a result of the comparison of the first point in time and the second point in time.

11. The non-transitory computer-readable medium of claim 6, where:

the first sensor data indicates a plurality of locations recorded by the first sensor of the first mobile device prior to occurrence of the peer-to-peer transfer,

the second sensor data indicates a plurality of locations recorded by the second sensor of the second mobile device prior to occurrence of the peer-to-peer transfer, and

where the one or more instructions, that cause the one or more processors to determine whether the peer-to-peer transfer occurred, cause the one or more processors to;

determine whether the peer-to-peer transfer occurred based on the plurality of locations indicated in the first sensor data or the plurality of locations indicated in the second sensor data.

12. The non-transitory computer-readable medium of claim 6, where:

the first gait data includes accelerometer data that measures the gait of the first user.

13. A method comprising:

transmitting, by a transaction server and via a peer-to-peer application, peer-to-peer data between a first mobile device and a second mobile device to facilitate a first user of the first mobile device meeting a second user of the second mobile device to conduct a peer-to-peer transfer of a good or a currency,

the transaction server being remote to the first mobile device and the second mobile device,

the peer-to-peer application operating on the first mobile device and the second mobile device, and

the peer-to-peer transfer physically occurring between the first user of the first mobile device and the second user of the second mobile device in exchange for a credit to a user account;

receiving, by the transaction server, and transaction data from at least one of the first mobile device or the second mobile device via the peer-to-peer application,

the transaction data indicating that the peer-to-peer transfer occurred, and

the transaction data indicating a transaction location associated with the peer-to-peer transfer;

receiving, by the transaction server, and via the peer from the first mobile device via the peer-to-peer application, first sensor data,

the first sensor data indicating;

first image data recorded by a camera of the first mobile device at a first point in time,

the first image data being associated with information indicating a first location, and

the first point in time being associated with the peer-to-peer transfer,

first non-geographic data recorded by a first non-geographic sensor of the first mobile device at the first point in time, and

first gait data recorded by a gait sensor of the first mobile device,

the first gait data indicating a gait of the first user of the first mobile device;

receiving, by the transaction server, and from the second mobile device via the peer-to-peer application, second sensor data,

the second sensor data indicating;

a second location recorded by a second sensor of the second mobile device at a second point in time,

the second point in time being associated with the peer-to-peer transfer,

second non-geographic data recorded by a second non-geographic sensor of the second mobile device,

second gait data recorded by a gait sensor of the second mobile device,

the second gait data indicating a gait of the second user of the second mobile device;

determining, by the transaction server and using a machine learning model, a confidence score for confirming whether the peer-to-peer transfer occurred based on the transaction data, the first sensor data, and the second sensor data,

the confidence score being determined based on different weights assigned to comparisons of;

the transaction data, the first location, and the second location, and

the first non-geographic data and the second non-geographic data;

confirming, by the transaction server, whether the peer-to-peer transfer occurred based on the confidence score; and

receiving, by the transaction server, gait authentication data associated with the first user of the first mobile device and the second user of the second mobile device;

determining, by the transaction server, whether the peer-to-peer transfer is authentic based on the gait authentication data, the first gait data, and the second gait data; and

performing, by the transaction server, an action based on the determination that the peer-to-peer transfer occurred and whether the peer-to-peer transfer is determined to be authentic,

the action including selectively crediting, by the transaction server, the user account based on whether the peer-to-peer transfer is confirmed to have occurred and whether the peer-to-peer transfer is determined to be authentic.

14. The method of claim 13, where:

the first image data includes image metadata indicating the first location recorded by a global positioning satellite sensor of the first mobile device.

15. The method of claim 14, where determining whether the peer-to-peer transfer occurred includes:

comparing the transaction location, the first location, and the second location; and

determining whether the peer-to-peer transfer occurred based on a result of the comparison.

16. The method of claim 15, where:

determining whether the peer-to-peer transfer is authentic includes;

obtaining first object recognition data for the first image data; and

comparing the first object recognition data and recorded object recognition data.

17. The method of claim 16, where:

the recorded object recognition data includes facial recognition data, and

the first image data includes data defining an image of a face of the first user.

18. The method of claim 13, where performing the action includes:

logging a result of the determination.

19. The method of claim 13, where performing the action includes:

notifying a third party device of a result of the determination.

20. The method of claim 13, where:

the first gait data includes accelerometer data that measures the gait of the first user.