Location-based transaction authentication of wireless terminal

• US 7,212,806 B2
• Filed: 11/19/2004
• Issued: 05/01/2007
• Est. Priority Date: 09/12/2002
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Karaoguz, Jeyhan
• Primary Examiner(s): Nguyen; Duc M.
• Assistant Examiner(s): Phuong; Dai
• Application Number:
  US10/993,080
• Publication Number:
  US 20050071671A1
• Time in Patent Office: 893 Days
• Field of Search: 455/410, 455/411, 455/456.1, 455/456.3, 455/457, 455/456.2, 705 40- 41, 705/26, 380/258, 380/247, 713/176, 713/170, 713/161, 713/184
• US Class Current: 455/411
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface
• CPC Class Codes: H04M 2250/06 including a wireless LAN interface
• CPC Class Codes: H04M 2250/10 including a GPS signal receiver
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A wireless terminal implements location-based transaction authentication and includes a wireless interface, a user interface, a Global Positioning System (GPS) receiver, and a processing unit. The wireless terminal receives a transaction request from the user, accesses a servicing network via the wireless interface, sends a transaction initiation request to the servicing network, receives an authentication challenge from the servicing network, and determines its current location via access of the GPS receiver. The wireless terminal prepares and transmits an authentication response based upon the received location. When the authentication response is accepted by the servicing network, the processing unit is able to service the transaction between the user and the servicing network. When the authentication response is rejected the transaction is not serviced. Relative location information and further user authentication may also be used.

Claims

1. A method for operating a wireless terminal to service a transaction, the method comprising:

receiving a transaction request from a user;

accessing a servicing network;

sending a transaction initiation request to the servicing network;

receiving an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

the wireless terminal accessing a Global Positioning System (GPS) receiver of the wireless terminal to determine a current location of the wireless terminal;

preparing an authentication response based upon both the current location of the wireless terminal and prior location information that is stored on the wireless terminal that was determined during at least one prior transaction;

transmitting the authentication response to the servicing network;

when the authentication response is accepted, servicing the transaction between the user and the servicing network to complete the transaction; and

when the authentication request is rejected, notifying the user.

2. The method of claim 1, wherein the prior location information that is stored on the wirelss terminal that was determined during at least one prior transaction includes information relating to a transaction that occurred at a differing location of the wireless terminal.

3. The method of claim 1, wherein:

the servicing network is one of a cellular network, a Wireless Local Area Network (WLAN), and a Wireless Personal Area Network (WPAN); and

the authentication challenge is based upon a type of the servicing network.

4. The method of claim 1, wherein the authentication challenge includes a user input validation requirement, wherein the user input validation requirement is based upon the location transmitted in the authentication response.

5. The method of claim 4, wherein the user input validation requirement requests at least one of a password, a voice sample, and an iris scan from the user.

6. The method of claim 1, further comprising receiving a secondary authentication challenge having a user input validation requirement, wherein the user input validation requirement is based upon the location transmitted in the authentication response.

7. The method of claim 6, wherein the user input validation requirement requests at least one of a password, a voice sample, and an iris scan from the user.

8. A method for operating a wireless terminal to service a transaction, comprising:

receiving a transaction request from a user;

accessing a servicing network;

sending a transaction initiation request to the servicing network;

receiving an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

accessing a Global Positioning System (GPS) receiver of the wireless terminal to determine a current location of the wireless terminal;

determining a relative position of the wireless terminal with respect to a reference location;

preparing an authentication response based upon both the current location of the wireless terminal and the relative position of the wireless terminal with respect to the reference location;

transmitting the authentication response to the servicing network;

when the authentication response is accepted, servicing the transaction between the user and the servicing network to complete the transaction; and

when the authentication request is rejected, notifying the user.

9. The method of claim 8, wherein the reference location comprises a fixed terminal being accessed by the user via the wireless terminal.

10. A method for operating a wireless terminal to service a transaction, the method comprising:

receiving a transaction request from a user;

accessing a servicing network;

sending a transaction initiation request to the servicing network;

receiving an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

the wireless terminal accessing a Global Positioning System (GPS) receiver of the wireless terminal to determine a current location of the wireless terminal;

determining a relative position of the wireless terminal with respect to a reference location by;

preparing a user query based upon the authentication challenge;

presenting the user query to the user;

receiving a response from the user; and

determining the relative position of the wireless terminal with respect to the reference location based upon the response from the user;

preparing an authentication response based upon both the current location of the wireless terminal and the relative position of the wireless terminal with respect to the reference location;

transmitting the authentication response to the servicing network;

when the authentication response is accepted, servicing the transaction between the user and the servicing network to complete the transaction; and

when the authentication request is rejected, notifying the user.

11. A wireless terminal comprising:

a wireless interface;

a user interface;

a Global Positioning System (GPS) receiver; and

a processing unit communicatively coupled to the wireless interface, to the user interface, and to the GPS receiver, wherein the processing unit is operable to;

receive a transaction request from a user via the user interface;

access a servicing network via the wireless interface;

send a transaction initiation request to the servicing network;

receive an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

determine a current location of the wireless terminal by accessing the GPS receiver;

prepare an authentication response based upon both the current location of the wireless terminal and prior location information that is stored on the wireless terminal and that was determined during at least one prior transaction;

transmit the authentication response to the servicing network;

when the authentication response is accepted, service the transaction between the user and the servicing network to complete the transaction; and

when the authentication response is rejected, notifying the user.

12. The wireless terminal of claim 11, wherein the prior location information that is stored on the wireless terminal and that was determined during at least one prior transaction includes information relating to a transaction that occurred at a differing location of the wireless terminal.

13. The wireless terminal of claim 11, wherein:

the servicing network is one of a cellular network, a Wireless Local Area Network (WLAN), and a Wireless Personal Area Network (WPAN); and

the authentication challenge is based upon a type of the servicing network.

14. The wireless terminal of claim 11, wherein the authentication challenge includes a user input validation requirement, wherein the user input validation requirement is based upon the location transmitted in the authentication response.

15. The wireless terminal of claim 14, wherein the user input validation requirement requests at least one of a password, a voice sample, and an iris scan from the user.

16. The wireless terminal of claim 11, wherein the processing unit is further operable to receive a secondary authentication challenge having a user input validation requirement, wherein the user input validation requirement is based upon the location transmitted in the authentication response.

17. The wireless terminal of claim 16, wherein the user input validation requirement requests at least one of a password, a voice sample, and an iris scan from the user.

18. A wireless terminal comprising:

a wireless interface;

a user interface;

a Global Positioning System (GPS) receiver; and

a processing unit communicatively coupled to the wireless interface, to the user interface, and to the GPS receiver, wherein the processing unit is operable to;

receive a transaction request from a user via the user interface;

access a servicing network via the wireless interface;

send a transaction initiation request to the servicing network;

receive an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

determine a current location of the wireless terminal by accessing the GPS receiver;

determine a relative position of the wireless terminal with respect to a reference location;

prepare an authentication response based upon both the current location of the wireless terminal and the relative position of the wireless terminal with respect to a reference location in the authentication response;

transmit the authentication response to the servicing network;

when the authentication response is accepted, service the transaction between the user and the servicing network to complete the transaction; and

when the authentication response is rejected, notifying the user.

19. The wireless terminal of claim 18, wherein the reference location comprises a fixed terminal being accessed by the user via the wireless terminal.

20. A wireless terminal comprising:

a wireless interface;

a user interface;

a Global Positioning System (GPS) receiver; and

a processing unit communicatively coupled to the wireless interface, to the user interface, and to the GPS receiver, wherein the processing unit is operable to;

receive a transaction request from a user via the user interface;

access a servicing network via the wireless interface;

send a transaction initiation request to the servicing network;

receive an authentication challenge from the servicing network, the authentication challenge requesting location information from the wireless terminal;

determine a current location of the wireless terminal by accessing the GPS receiver;

determine a relative position of the wireless terminal with respect to a reference location by;

preparing a user query based upon the authentication challenge;

presenting the user query to the user;

receiving a response from the user; and

determining the relative position of the wireless terminal with respect to the reference location based upon the response from the user;

prepare an authentication response based upon both the current location of the wireless terminal and the relative position of the wireless terminal with respect to the reference location;

transmit the authentication response to the servicing network;

when the authentication response is accepted, service the transaction between the user and the servicing network to complete the transaction; and

when the authentication response is rejected, notifying the user.