Method and system for enhanced security using location-based wireless authentication

• US 7,221,949 B2
• Filed: 02/28/2005
• Issued: 05/22/2007
• Est. Priority Date: 02/28/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Clough, Ian
• Primary Examiner(s): Feild; Joseph
• Assistant Examiner(s): Nguyen; Huy D
• Application Number:
  US11/066,466
• Publication Number:
  US 20060194592A1
• Time in Patent Office: 813 Days
• Field of Search: 455/456.1, 455/456.2, 455/456.3, 455/456.5, 455/436, 455/410, 455/411
• US Class Current: 455/456.3
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 8/10 between location register and external networks

Abstract

A method and system for enhancing security using location-based wireless authentication for a mobile device, the method comprising the steps of: sending from the mobile device to a base station a message, the message having a unique identifier associated with the mobile device; appending, at the base station, a location identifier to said message; sending the message to a recipient; and authenticating the message at the recipient, said authenticating step confirming that the location identifier appended at the base station corresponds with an expected location for the message.

Claims

1. A system for enhanced security for a transaction using location-based wireless authentication comprising:

a mobile device, the mobile device having a unique identifier associated therewith and capable of sending a transaction message with the unique identifier appended thereto, the transaction message being a request to complete a financial transaction and including a merchant identifier;

a base station, the base station capable of receiving the transaction message from the mobile device and having;

a location detection system to locate the mobile device, the base station forwarding the transaction message through a data network; and

means to append a location identifier to said transaction message; and

a recipient, the recipient receiving the transaction message through the data network and having means to authenticate the transaction, the means to authenticate the transaction including a checking means to check whether the location identifier corresponds with an expected location for the transaction, wherein said means to authenticate the transaction is adapted to confirm the location identifier corresponds with a location of said merchant identifier.

2. The system of claim 1, wherein the location detection system is an enhanced 911 system.

3. The system of claim 1, wherein the transaction message includes an identifier to indicate the expected location.

4. The system of claim 1, wherein the transaction message includes a password.

5. The system of claim 1, wherein the recipient is a financial services provider.

6. The system of claim 5, wherein the financial services provider includes means to provide payment to a merchant at the location of said mobile device.

7. The system of claim 6, wherein the transaction message includes a merchant identifier and a transaction amount.

8. The system of claim 6, further comprising a point of sale terminal connected to the financial services provider, wherein the message is a location verification message.

9. The system of claim 1, wherein the message is encrypted.

10. A method for enhancing security of a transaction using location-based wireless authentication for a mobile device comprising the steps of:

sending from the mobile device to a base station a transaction message, the transaction message being a request to complete a financial transaction and including a merchant identifier, the transaction message further having a unique identifier associated with the mobile device;

appending, at the base station, a location identifier to said transaction message;

sending the transaction message to a recipient; and

authenticating the transaction message at the recipient, said authenticating step confirming that the location identifier appended at the base station corresponds with an expected location for the transaction, wherein said authenticating step confirms the location identifier corresponds with a location of said merchant identifier.

11. The method of claim 10, wherein the location identifier is an enhanced 911 location identifier.

12. The method of claim 10, wherein the transaction message includes a password for use by said authenticating step.

13. The method of claim 10, wherein the transaction message is encrypted.

14. The method of claim 10, wherein if said authenticating step confirms that the location identifier corresponds with the location of the merchant identifier, the method further comprises the step of forwarding the message to a financial service provider to complete the transaction.

15. The method of claim 10, wherein the mobile device prompts a user to input the merchant identifier.

16. The method of claim 10, further comprising the step of using a point of sale terminal connected to a point of sale processing location to perform a financial transaction, wherein the authenticating step verifies the point of sale terminal is located within an expected proximity to the mobile device.