Authentication for transactions using near field communication

• US 10,332,112 B2
• Filed: 03/27/2012
• Issued: 06/25/2019
• Est. Priority Date: 03/27/2012
• Status: Active Grant

• Current Assignee: Edison Vault, LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Jones, Andrew R., Marzorati, Mauro, O'Connell, Brian M., Pearthree, Herbert D.
• Primary Examiner(s): Niquette, Robert R
• Assistant Examiner(s): Jacob, William J
• Application Number:
  US13/431,138
• Publication Number:
  US 20130262305A1
• Time in Patent Office: 2,646 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: H04B 5/72 for local intradevice communication

Abstract

In a method for authenticating a current user of a near field communication (NFC) device, a profile for an authorized user of the NFC device is established based on data received from one or more sensors of the NFC device over a first period of time. Responsive to a request for a payment transaction, a profile for the current user of the NFC device is established based on data received from the one or more sensors over a second period of time after the first period of time. The profile for the current user is compared with the profile for the authorized user. A determination is made as to whether one or more values in the profile for the current user are within a range of one or more values in the profile for the authorized user at a confidence level.

Claims

1. A method for authenticating a current user of a near field communication (NFC) device, the method comprising steps of:

one or more processors of the NFC device establishing a profile comprising values of the movements of an authorized user of the NFC device based on data received from one or more sensors of the NFC device over a first period of time when the NFC device is carried by the authorized user, wherein in the profile the values of the movements of the authorized user include at least one of walking speed of the authorized user, time periods the NFC device carried by the authorized user does not move, gaits of the authorized user, speed of direction changes of the authorized user, acceleration and deceleration rates of the authorized user, and ways the NFC device is carried by the authorized user;

responsive to a request for transaction data, the one or more processors of the NFC device establishing a profile comprising values of the movements of the current user of the NFC device based on data received from the one or more sensors of the NFC device over a second period of time when the NFC device is carried by the current user after the first period of time, wherein in the profile the values of the movements of the current user include at least one of walking speed of the current user, time periods the NFC device carried by the current user does not move, gaits of the current user, speed of direction changes of the current user, acceleration and deceleration rates of the current user, and ways the NFC device is carried by the current user;

the one or more processors of the NFC device carried by the current user comparing the values of the movements of the authorized user with the values of the movements of the current user;

the one or more processors of the NFC device carried by the current user determining whether the values of the movements of the current user are within a range of the values of the movements of the authorized user at a confidence level, wherein the confidence level is determined according to an amount of money in a transaction;

responsive to determining that the values of the movements of the current user are within range of the values of the movements of the authorized user at the confidence level, the one or more processors of the NFC device carried by the current user sending the transaction data from the NFC device to a payment transaction processing system; and

responsive to determining that the values of the movements of the current user are not within range of the values of the movements of the authorized user at the confidence level, the one or more processors of the NFC device carried by the current user requesting at least one of biometric data and manual input data as an additional authentication means from the current user of the NFC device.

2. The method of claim 1, further comprising the step of:

in response to that the one or more processors of the NFC device carried by the current user requests the additional authentication means from the current user of the NFC device, the one or more processors of the NFC device receiving the additional authentication means from the current user of the NFC device.

3. The method of claim 1, wherein the biometric data includes facial recognition data, fingerprint scan data, or retinal scan data.

4. The method of claim 1, further comprising the step of:

the one or more processors of the NFC device carried by the current user updating the confidence level over time in response to receiving additional data from the one or more sensors.

5. The method of claim 1, wherein the one or more sensors of the NFC device include a global positioning system (GPS) receiver, an accelerometer, or a gyroscope.

6. A computer program product for authenticating a current user of a near field communication (NFC) device, the computer program product comprising:

one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more tangible storage devices, the program instructions comprising;

program instructions to establish by the NFC device a profile comprising values of the movements of an authorized user of the NFC device based on data received from one or more sensors of the NFC device over a first period of time when the NFC device is carried by the authorized user, wherein in the profile the values of the movements of the authorized user include at least one of walking speed of the authorized user, time periods the NFC device carried by the authorized user does not move, gaits of the authorized user, speed of direction changes of the authorized user, acceleration and deceleration rates of the authorized user, and ways the NFC device is carried by the authorized user;

program instructions to, responsive to a request for transaction data, establish a profile comprising values of the movements of the current user of the NFC device based on data received from the one or more sensors of the NFC device over a second period of time when the NFC device is carried by the current user after the first period of time, wherein in the profile the values of the movements of the current user include at least one of walking speed of the current user, time periods the NFC device carried by the current user does not move, gaits of the current user, speed of direction changes of the current user, acceleration and deceleration rates of the current user, and ways the NFC device is carried by the current user;

program instructions to compare by the NFC device carried by the current user the values of the movements of the current user with the values of the movements of the authorized user;

program instructions to determine by the NFC device carried by the current user whether the values of the movements of the current user are within a range of the values of the movements of the authorized user at a confidence level, wherein the confidence level is determined according to an amount of money in a transaction;

program instructions, responsive to determining that the values of the movements of the current user are within range of the values of the movements of the authorized user at the confidence level, to send by the NFC device carried by the current user the transaction data from the NFC device to a payment transaction processing system; and

program instructions, responsive to determining that the values of the movements of the current user are not within range of the values of the movements of the authorized user at the confidence level, to request by the NFC device carried by the current user at least one of biometric data and manual input data as an additional authentication means from the current user of the NFC device.

7. The computer program product of claim 6, further comprising:

program instructions, stored on at least one of the one or more tangible storage devices, to receive by the NFC device carried by the current user the additional authentication means from the current user of the NFC device.

8. The computer program product of claim 6, wherein the biometric data includes facial recognition data, fingerprint scan data, or retinal scan data.

9. The computer program product of claim 6, further comprising:

program instructions, stored on at least one of the one or more tangible storage devices, to update by the NFC device carried by the current user the confidence level over time in response to receiving additional data from the one or more sensors.

11. The computer program product of claim 6, wherein the one or more sensors of the NFC device include a global positioning system (GPS) receiver, an accelerometer, or a gyroscope.

10. A near field communication (NFC) device comprising:

one or more sensors, one or more processors, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to establish by the NFC device a profile comprising values of the movements of an authorized user of the NFC device based on data received from one or more sensors of the NFC device over a first period of time when the NFC device is carried by the authorized user, wherein in the profile the values of the movements of the authorized user include at least one of walking speed of the authorized user, time periods the NFC device carried by the authorized user does not move, gaits of the authorized user, speed of direction changes of the authorized user, acceleration and deceleration rates of the authorized user, and ways the NFC device is carried by the authorized user;

program instructions to, responsive to a request for transaction data, establish a profile comprising values of the movements of the current user of the NFC device based on data received from the one or more sensors of the NFC device over a second period of time when the NFC device is carried by the current user after the first period of time, wherein in the profile the values of the movements of the current user include at least one of walking speed of the current user, time periods the NFC device carried by the current user does not move, gaits of the current user, speed of direction changes of the current user, acceleration and deceleration rates of the current user, and ways the NFC device is carried by the current user;

program instructions to compare by the NFC device carried by the current user the values of the movements of the current user with the values of the movements of the authorized user;

program instructions to determine by the NFC device carried by the current user whether the values of the movements of the current user are within a range of the values of the movements of the authorized user at a confidence level, wherein the confidence level is determined according to an amount of money in a transaction;

program instructions, responsive to determining that the values of the movements of the current user are within range of the values of the movements of the authorized user at the confidence level, to send by the NFC device carried by the current user the transaction data from the NFC device to a payment transaction processing system; and

program instructions, responsive to determining that the values of the movements of the current user are not within range of the values of the movements of the authorized user at the confidence level, to request by the NFC device carried by the current user at least one of biometric data and manual input data as an additional authentication means from the current user of the NFC device.

12. The near field communication (NFC) device of claim 10, further comprising:

program instructions to receive by the NFC device carried by the current user the additional authentication means from the current user of the NFC device.

13. The near field communication (NFC) device of claim 10, wherein the biometric data includes facial recognition data, fingerprint scan data, or retinal scan data.

14. The near field communication (NFC) device of claim 10, further comprising:

program instructions to update by the NFC device carried by the current user the confidence level over time in response to receiving additional data from the one or more sensors.

15. The near field communication (NFC) device of claim 10, wherein the one or more sensors of the NFC device include a global positioning system (GPS) receiver, an accelerometer, or a gyroscope.