Mobile device security

• US 9,723,131 B1
• Filed: 02/07/2017
• Issued: 08/01/2017
• Est. Priority Date: 03/23/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Carr, Michael, Walsh, Paul J., Ramalingam, Harsha
• Primary Examiner(s): Rampuria, Sharad
• Application Number:
  US15/426,819
• Time in Patent Office: 175 Days
• Field of Search: 455410-411, 4554561-457
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/229 Hierarchy of users of accounts
• CPC Class Codes: G06Q 20/2295 Parent-child type, e.g. where parent has control on child rights
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/0201 Market modelling; Market analysis; Collecting market data
• CPC Class Codes: G06Q 30/0205 Location or geographical consideration
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0239 Online discounts or incentives
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0255 : based on user history
• CPC Class Codes: G06Q 30/0256 : User search
• CPC Class Codes: G06Q 30/0259 : based on store location
• CPC Class Codes: G06Q 30/0261 : based on user location
• CPC Class Codes: G06Q 30/0267 : Wireless devices
• CPC Class Codes: G06Q 30/0269 : based on user profile or attribute
• CPC Class Codes: G06Q 30/0273 : Determination of fees for advertising
• CPC Class Codes: G06Q 30/0275 : Auctions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 : Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0639 : Item locations
• CPC Class Codes: G06Q 30/0641 : Shopping interfaces
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 : using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 : wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04M 1/72454 : according to context-related or environment-related conditions
• CPC Class Codes: H04M 1/724631 : by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04M 2203/6054 : Biometric subscriber identification
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/021 : Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 48/04 : based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

Techniques for providing friction-free transactions using geolocation and user identifiers are described herein. These techniques may ascertain a user'"'"'s location based on a location of a mobile device. A transaction between the user and a merchant may be completed with zero or minimal input from the user based on the geolocation of the mobile device and the user identifiers. In some implementations, a transaction initiated earlier is completed when the mobile device arrives at the merchant. Additionally, a parent-child or similar relationship may be established between multiple devices. Security on the mobile device based may be provided by biometric identification and calculation of variance from regular movement patterns. Advertisements may be sent to the mobile device based on bids from merchants near to the mobile device. Promotions may be sent to the mobile device when more than a threshold number of mobile devices are located at the same merchant.

Claims

1. A computer-implemented method comprising:

receiving, by one or more computing systems from a location sensor associated with a mobile device of a user, an indication of a geolocation of the mobile device;

determining, by at least one of the one or more computing systems and based at least in part on a user profile, one or more restrictions about receiving notifications on the mobile device;

identifying, by at least one of the one or more computing systems, a first computing device of a first entity responsible for first notifications, the first computing device identified based at least in part on the one or more restrictions and on a determination that the first computing device is located within a first threshold distance of the geolocation of the mobile device;

identifying, by at least one of the one or more computing systems, a second computing device of a second entity responsible for second notifications, the second computing device identified based at least in part on the one or more restrictions and on a determination that the second computing device is located within a second threshold distance of the geolocation of the mobile device, wherein;

the first threshold distance is set for a first category of content included in the first notifications of the first entity,

the second threshold distance is set for a second category of content included in the second notifications of the second entity,

the second threshold distance is different from the first threshold distance, and

the second category of content is different from the first category of content;

receiving, by at least one of the one or more computing systems, requests from the first computing device and the second computing device based at least in part on the geolocation of the mobile device, the requests to send notifications to the mobile device;

selecting, by at least one of the one or more computing systems, a first notification of the first entity over a second notification of the second entity to send to the mobile device based at least in part on the requests; and

sending, by at least one of the one or more computing systems, the first notification to the mobile device, the sending activating the mobile device to present the first notification.

2. The computer-implemented method of claim 1, further comprising:

authenticating, by at least one of the one or more computing systems, the user based at least in part on a handshake with the mobile device; and

authenticating, by at least one of the one or more computing systems, the first entity based at least in part on a handshake with the first entity;

wherein the notification is sent to the mobile device based at least in part on the user and the first entity being authenticated.

3. The computer-implemented method of claim 1, wherein the user profile is stored at the one or more computer systems, wherein the first notification is accessed from a notification database stored at the one or more computer systems.

4. The computer-implemented method of claim 3, wherein the user profile identifies one or more categories of content of the notifications, and wherein the first notification is selected from the notification databased based at least in part on a comparison of the first category of content included in the first notification and the one or more categories.

5. The computer-implemented method of claim 3, wherein the user profile identifies one or more trusted entities, and wherein the first notification is selected from the notification databased based at least in part on a determination that the first entity is one of the one or more trusted entities.

6. The computer-implemented method of claim 5, wherein the user profile identifies the first entity as a trusted entity based at least in part on past transactions between the mobile device of the user and the first computing device of the first entity.

7. The computer-implemented method of claim 6, wherein content of the first notification is generated and included in the first notification based at least in part on the past transactions between the mobile device and the first computing device.

8. The computer-implemented method of claim 5, wherein a trust level is assigned to the first entity and permits a transaction between the mobile device of the user and the first computing device of the first entity to be automatically conducted without any user interaction with the mobile device based at least in part on the mobile device being within a defined proximity of a location of the first computing device.

9. The computer-implemented method of claim 1, wherein at least one of first threshold distance or the second threshold distance varies based at least in part on a time of day.

10. A computing system comprising:

one or more processors; and

one or more memories coupled with the one or more processors and comprising instructions that, upon execution by at least one of the one or more processors, cause the computing system to at least;

receive, from a location sensor associated with a mobile device of a user, an indication of a geolocation of the mobile device;

identify a first entity responsible for first notifications, the first entity identified based at least in part on one or more restrictions from a user profile and on a determination that the first entity is located within a first threshold distance of the geolocation of the mobile device, the one or more restrictions associated with receiving notifications on the mobile device;

identify a second entity responsible for second notifications, the second computing entity identified based at least in part on the one or more restrictions and on a determination that the second entity is located within a second threshold distance of the geolocation of the mobile device, wherein;

the first threshold distance is set for a first category of content included in the first notifications of the first entity,

the second threshold distance is set for a second category of content included in the second notifications of the second entity,

the second threshold distance is different from the first threshold distance, and

the second category of content is different from the first category of content;

receive, based at least in part on the geolocation of the mobile device, requests of the first entity and the second entity to send notifications to the mobile device;

select a first notification of the first entity over a second notification of the second entity to send to the mobile device based at least in part on the requests; and

send the first notification to the mobile device.

11. The computing system of claim 10, wherein sending the first notification activates the mobile device to present the first notification.

12. The computing system of claim 11, wherein sending the first notification comprises instructing the mobile device to present a map that displays the notification and identifies a location of the first entity relative to the geolocation of the mobile device.

13. The computing system of claim 10, wherein the notification is associated with an expiration time, and wherein sending the first notification activates the mobile device to present the first notification prior to the expiration time and prohibits the mobile device from presenting the first notification after the expiration time.

14. The computing system of claim 10, wherein instructions further cause the computing system to at least:

determine that the mobile device have moved away from a location of the first entity by a distance; and

expire the first notification based at least on an comparison of the distance to a threshold radius, wherein expiring the first notification prohibits the mobile device from presenting the first notification.

15. The computing system of claim 10, wherein the notifications are about services of the first entity and the second entity, wherein the first category of content identifies first services of the first entity, wherein the first threshold distance depends on the first services, wherein the second category of content identifies second services of the second entity, wherein the second threshold distance depends on the second services, and wherein the second services are different from the first services.

16. One or more non-transitory computer-readable storage media comprising instructions that, upon execution by one or more processors of a computing system, cause the computing system to perform operations comprising:

receiving, from a location sensor associated with a mobile device of a user, an indication of a geolocation of the mobile device;

identifying a first entity responsible for first notifications, the first entity identified based at least in part on one or more restrictions from a user profile and on a determination that the first entity is located within a first threshold distance of the geolocation of the mobile device, the one or more restrictions associated with receiving notifications on the mobile device;

identifying a second entity responsible for second notifications, the second computing entity identified based at least in part on the one or more restrictions and on a determination that the second entity is located within a second threshold distance of the geolocation of the mobile device, wherein;

the first threshold distance is set for a first category of content included in the first notifications of the first entity,

the second threshold distance is set for a second category of content included in the second notifications of the second entity,

the second threshold distance is different from the first threshold distance, and

the second category of content is different from the first category of content;

receiving, based at least in part on the geolocation of the mobile device, requests of the first entity and the second entity to send notifications to the mobile device;

selecting a first notification of the first entity over a second notification of the second entity to send to the mobile device based at least in part on the requests; and

sending the first notification to the mobile device.

17. The one or more non-transitory computer-readable storage media of claim 16, wherein the first notification is selected over the second notification based at least in part on a first account of the first entity and a second account of the second entity.

18. The one or more non-transitory computer-readable storage media of claim 16, wherein the user profile identifies a trust level assigned to the first entity, and wherein the first notification is selected over the second notification based at least in part on the trust level assigned to the first entity.

19. The one or more non-transitory computer-readable storage media of claim 18, wherein the trust level assigned to the first entity requires a single user interaction with the mobile device to conduct a transaction between the mobile device of the user and a computing device of the first entity, wherein the computing device is located within the first threshold distance relative to the geolocation of the mobile device.

20. The one or more non-transitory computer-readable storage media of claim 18, wherein the trust level assigned to the first entity permits a transaction to be automatically conducted between the mobile device of the user and a computing device of the first entity without a user interaction with the mobile device, wherein the computing device is located within the first threshold distance relative to the geolocation of the mobile device.