Method and system for enhanced security using location based wireless authentication

• US 9,014,725 B2
• Filed: 04/13/2007
• Issued: 04/21/2015
• Est. Priority Date: 02/28/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Clough, Ian
• Primary Examiner(s): VIANA DI PRISCO, GERMAN
• Application Number:
  US11/735,054
• Publication Number:
  US 20070184818A1
• Time in Patent Office: 2,930 Days
• Field of Search: 455/456.1, 455/456.2, 455/456.3, 455/456.5, 455/410, 455/411
• US Class Current: 455/456.5
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/4015 using location information
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 8/10 between location register and external networks

Abstract

A method and system for enhancing security using location-based wireless authentication for a mobile device, the method comprising the steps of: sending from the mobile device to a base station a message, the message having a unique identifier associated with the mobile device; appending, at the base station, a location identifier to said message; sending the message to a recipient; and authenticating the message at the recipient, said authenticating step confirming that the location identifier appended at the base station corresponds with an expected location for the message.

Claims

1. An improved base station for use in authentication of a transaction, the base station forming part of a wireless network and communicating with a mobile device and with a network, the base station comprising:

a processor;

a communications subsystem;

wherein the processor and communications subsystem cooperate to;

receive a transaction message from the mobile device, the transaction message being a request to complete a financial transaction between a user of the mobile device and a merchant, the transaction message including;

a merchant identifier identifying the merchant; and

an International Mobile Equipment Identifier (IMEI) number, the IMEI number being inserted by a transport layer at the mobile device;

append to the transaction message a location identifier, the location identifier indicating a location of the mobile device;

forward the transaction message with the location identifier to a recipient device, system or apparatus,

wherein the authentication uses the location identifier to ensure the transaction is valid.

2. The base station of claim 1, wherein the location identifier identifies a location of the base station.

3. The base station of claim 1, wherein the location identifier is determined based on enhanced 911.

4. A method of transaction authentication comprising the steps of:

sending, from a mobile device, a transaction message to a recipient, the transaction message being a request to complete a financial transaction between a user of the mobile device and a merchant, the transaction message including;

a merchant identifier identifying the merchant, and

an International Mobile Equipment Identifier (IMEI) number, the IMEI number being inserted by a transport layer at the mobile device;

appending, at a base station, a location identifier to the transaction message, the location identifier indicating a location of the mobile device;

wherein said location identifier can be used by said recipient to authenticate that the transaction is occurring in an expected location.

5. The method of claim 4, wherein said transaction is a commercial purchase.

6. The method of claim 4 wherein the location identifier identifies the location of a mobile device.

7. The method of claim 4 wherein the location identifier identifies the location of a base station.

8. The method of claim 4, wherein the transaction message includes a personal identification number.