Method and system for enhanced security using location-based wireless authentication

• US 20060194592A1
• Filed: 02/28/2005
• Published: 08/31/2006
• Est. Priority Date: 02/28/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Clough, Ian
• Granted Patent: US 7,221,949 B2
• Time in Patent Office: Days
• US Class Current: 455/456.3
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 8/10 between location register and external networks

Abstract

A method and system for enhancing security using location-based wireless authentication for a mobile device, the method comprising the steps of: sending from the mobile device to a base station a message, the message having a unique identifier associated with the mobile device; appending, at the base station, a location identifier to said message; sending the message to a recipient; and authenticating the message at the recipient, said authenticating step confirming that the location identifier appended at the base station corresponds with an expected location for the message.

Claims

1. A system for enhanced security using location-based wireless authentication comprising:

a) a mobile device, the mobile device having a unique identifier associated therewith and capable of sending a message with the unique identifier appended thereto,

b) a base station, the base station capable of receiving the message from the mobile device and having;

i. a location detection system to locate the mobile device, the base station forwarding the message through a data network; and

ii. means to append a location identifier to said message; and

c) a recipient, the recipient receiving the message through the data network and having means to authenticate the message, the means to authenticate the message including a checking means to check whether the location identifier corresponds with an expected location for the mobile device.

2. The system of claim 1, wherein the location detection system is an enhanced 911 system.

3. The system of claim 1, wherein the message includes an identifier to indicate the expected location.

4. The system of claim 1, wherein the message includes a password.

5. The system of claim 1, wherein the recipient is a financial services provider.

6. The system of claim 5, wherein the financial services provider includes means to provide payment to a merchant at the location of said mobile device.

7. The system of claim 6, wherein the message is a transaction request and includes a merchant identifier and a transaction amount.

8. The system of claim 6, further comprising a point of sale terminal connected to the financial services provider, wherein the message is a location verification message.

9. The system of claim 1, wherein the message is encrypted.

10. A method for enhancing security using location-based wireless authentication for a mobile device comprising the steps of:

sending from the mobile device to a base station a message, the message having a unique identifier associated with the mobile device;

appending, at the base station, a location identifier to said message;

sending the message to a recipient; and

authenticating the message at the recipient, said authenticating step confirming that the location identifier appended at the base station corresponds with an expected location for the message.

11. The method of claim 10, wherein the location identifier is an enhanced 911 location identifier.

12. The method of claim 10, wherein the message includes a password for use by said authenticating step.

13. The method of claim 10, wherein the message is encrypted.

14. The method of claim 10, wherein the message sent from the mobile device is a request to complete a financial transaction and includes a merchant identifier.

15. The method of claim 14, wherein said authenticating step confirms the location identifier corresponds with a location of said merchant identifier.

16. The method of claim 15, wherein if said authenticating step confirms that the location identifier corresponds with the location of the merchant identifier, the method further comprises the step of forwarding the message to a financial service provider to complete the transaction.

17. The method of claim 14, wherein the mobile device prompts a user to input the merchant identifier.

18. The method of claim 10, further comprising the step of using a point of sale terminal connected to a point of sale processing location to perform a financial transaction, wherein the authenticating step verifies the point of sale terminal is located within an expected proximity to the mobile device.