Authenticating activities of accounts

• US 10,362,027 B2
• Filed: 02/17/2017
• Issued: 07/23/2019
• Est. Priority Date: 12/29/2014
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Eramian, David Edward, Todasco, Michael Charles, Ahuja, Sumeet
• Primary Examiner(s): Ho, Dao Q
• Application Number:
  US15/436,695
• Publication Number:
  US 20170295170A1
• Time in Patent Office: 886 Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

A system, a medium, and a method involve a communication interface of a server device that receives first activity data associated with a first activity of an account and second activity data associated with a second activity of the account. A processor of the server device determines a first location of the first activity from the first activity data and a second location of the second activity from the second activity data. An authentication circuit of the server device determines a first authentication of the first activity based at least on the first activity data. The authentication circuit determines a second authentication of the second activity based on at least one of the first authentication, the first location, and the second location. A transmitter of the communication interface transmits an indication of the second authentication to a client device.

Claims

1. A system, comprising:

a non-transitory memory; and

one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising;

receiving first activity data from a first device and second activity data from a second device, wherein the first device and the second device are linked to a user;

receiving a request to authenticate the user at a second location;

identifying, in response to the request and based on the first activity data and the second activity data, a first route traveled by the first device and the second device from a first location to the second location;

matching, in response to the request, the first route with a stored historic route that includes the second location, the stored historic route being associated with a previous successful authentication of the user; and

authenticating the user based at least in part on a result of the matching and on determining that the first device and the second device are paired to each other during the first route.

2. The system of claim 1, wherein the authenticating is based on determining that the request to authenticate is for a purchase of a product related to the first device.

3. The system of claim 2, wherein the product related to the first device is fuel for the first device.

4. The system of claim 3, wherein the second location is associated with a merchant that sells fuel.

5. The system of claim 4, wherein the authenticating the user is further based on determining, from the first activity data and second activity data, that the second device has moved from a home location of the user to the first device prior to being paired with the first device.

17. The system of claim 1, wherein the first device comprises a vehicle and the second device comprises a mobile device.

18. The system of claim 1, wherein the first activity data includes GPS data indicative of a location of the first device.

19. The system of claim 1, wherein the first activity data includes BLUETOOTH data pairing the first device and the second device.

6. A non-transitory computer-readable medium having stored thereon machine-readable instructions that, in response to being executed by a system, cause the system to perform operations comprising:

receiving first activity data from a first device and second activity data from a second device, wherein the first device and the second device are linked to a user;

receiving a request to authenticate the user at a second location;

identifying, in response to the request and based on the first activity data and the second activity data, a first route traveled by the first device and the second device from a first location to the second location;

matching, in response to the request, the first route with a stored historic route that includes the second location, the stored historic route being associated with a previous successful authentication of the user; and

authenticating the user based at least in part on a result of the matching and on determining that the first device and the second device are paired to each other during the first route.

7. The non-transitory computer-readable medium of claim 6, wherein the authenticating is further based on a proximity between the first route and a home location of the user.

8. The non-transitory computer-readable medium of claim 6, wherein the matching comprises determining a percentage match between the first route and the stored historic route.

9. The non-transitory computer-readable medium of claim 6, wherein the authenticating is further based on an association between the first route and a stored historic route associated with a second user.

10. The non-transitory computer-readable medium of claim 9, wherein the second user is associated with the user through a familial relationship.

11. The non-transitory computer-readable medium of claim 9, wherein the authenticating is based on a similarity percentage between the first route and the stored historic route associated with the second user.

12. A method, comprising:

receiving first activity data from a first device and second activity data from a second device, wherein the first device and the second device are linked to a user;

receiving a request to authenticate the user at a second location;

identifying, in response to the request and based on the first activity data and the second activity data, a first route traveled by the first device and the second device from a first location to the second location;

matching, in response to the request, the first route with a stored historic route that includes the second location, the stored historic route being associated with a previous successful authentication of the user; and

authenticating the user based at least in part on a result of the matching and on determining that the first device and the second device are paired to each other during the first route.

13. The method of claim 12, wherein the authenticating is further based on a proximity between the first route and a home location of the user.

14. The method of claim 13, wherein the matching comprises determining a percentage match between the first route and the stored historic route.

15. The method of claim 14, wherein the stored historic route is associated with a second user.

16. The method of claim 15, wherein the stored historic route is recorded from activity data received from a third device associated with the second user.

20. The method of claim 12, wherein the first device comprises a vehicle and the second device comprises a mobile device.