Systems and methods for authenticating a user of a computer application, network, or device using a wireless device

• US 9,801,063 B2
• Filed: 08/29/2016
• Issued: 10/24/2017
• Est. Priority Date: 03/16/2007
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Dennis, Charles L., Snyder, Randall A., Boyle, Patrick J.
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US15/250,328
• Publication Number:
  US 20160373930A1
• Time in Patent Office: 421 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A method and system for authenticating a user includes providing an invocation element capable of being activated by a single user action, receiving an indication that the invocation element has been activated, obtaining a location of a wireless device associated with the user, determining whether the wireless device is associated with an authorized user, approving the user to use the application based on a predetermined location criterion, and producing an indication that the user has been authenticated.

Claims

1. A method comprising:

a) obtaining a location of a wireless device, the wireless device being in communication with a mobile access point via a short range wireless connection;

b) determining, using a computerized authentication system, whether the wireless device is authorized based on a previously registered association between a wireless device identifier associated with the wireless device and an application identifier associated with an application;

c) approving a user to use the application using the computerized authentication system based on a predetermined location criterion related to one or more of the obtained wireless device location or a location of the mobile access point, when the wireless device is authorized; and

d) producing an indication on one or more of the mobile access point or the wireless device that the user has been authenticated when the user was approved using the computerized authentication system,

wherein the predetermined location criterion includes determining that the wireless device is within a predetermined distance of the mobile access point.

2. The method of claim 1, wherein the short range wireless connection is a Bluetooth connection.

3. The method of claim 1, further comprising:

automatically connecting the wireless device and the mobile access point using the short range wireless connection, before step a).

4. The method of claim 1, further comprising:

querying the wireless device by the computerized authentication system before step a).

5. The method of claim 1, further comprising:

obtaining a location of the mobile access point.

6. The method of claim 5, wherein the wireless access point automatically detects a presence of the wireless device.

7. The method of claim 1, wherein the wireless device identifier is a phone number.

8. The method of claim 1, wherein the mobile device is a mobile phone.

9. The method of claim 1, wherein the wireless device is configured to communicate with the authentication system over a cellular network.

10. The method of claim 1, wherein the wireless device is configured to communicate with the authentication system over a Wi-Fi connection.

11. A computerized authentication system comprising a processor, and a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor, to implement a method comprising:

a) obtaining a location of a wireless device, the wireless device being in communication with a mobile access point via a short range wireless connection;

b) determining whether the wireless device is authorized based on a previously registered association between a wireless device identifier associated with the wireless device and an application identifier associated with an application using the computerized authentication system;

c) approving a user to use the application using the computerized authentication system based on a predetermined location criterion related to one or more of the obtained wireless device location or a location of the mobile access point, when the wireless device is authorized; and

d) producing an indication on one or more of the mobile access point or the wireless device that the user has been authenticated when the user was approved using the computerized authentication system,

wherein the predetermined location criterion includes determining that the wireless device is within a predetermined distance of the mobile access point.

12. The computerized authentication system of claim 11, wherein the short range wireless connection is a Bluetooth connection.

13. The computerized authentication system of claim 11, wherein the method further comprises:

automatically connecting the wireless device and the mobile access point using the short range wireless connection, before step a).

14. The computerized authentication system of claim 11, wherein the method further comprises:

querying the wireless device by the computerized authentication system before step a).

15. The computerized authentication system of claim 11, wherein the method further comprises:

obtaining a location of the mobile access point.

16. The computerized authentication system of claim 11, wherein the mobile access point comprises a computer comprising a processor and a memory.

17. The computerized authentication system of claim 11, wherein the mobile device is a mobile phone.

18. The computerized authentication system of claim 11, wherein the wireless device is configured to communicate with the authentication system over a cellular network.

19. The computerized authentication system of claim 11, wherein the wireless device is configured to communicate with the authentication system over a Wi-Fi connection.

20. The computerized authentication system of claim 11, wherein the computerized authentication system comprises a transaction processing module.