System and method for automated analysis comparing a wireless device location with another geographic location

• US 10,776,784 B2
• Filed: 02/01/2018
• Issued: 09/15/2020
• Est. Priority Date: 03/16/2007
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Buhrmann, Michael, Dennis, Charles, Reeder, Mary, Brennan, Jeffrey
• Primary Examiner(s): Akintola, Olabode
• Application Number:
  US15/886,683
• Publication Number:
  US 20180158055A1
• Time in Patent Office: 957 Days
• Field of Search: 705 35- 44
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 9/001 Interfacing with vending machines using mobile or wearable devices
• CPC Class Codes: G07F 9/009 User recognition or proximity detection
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 64/006 with additional information processing, e.g. for direction or speed determination
• CPC Class Codes: H04W 84/005 : Moving wireless networks

Abstract

A system and method for automatically comparing obtained wireless device location information from a wireless network and comparing that location with another independent source geographic location is provided. Location information is derived from two or more sources in a multiplicity of ways and a comparison is made within a Location Comparison Engine. The Location Comparison Engine makes use of databases that assist in resolving obtained raw positioning information and converting that positioning information into one or more formats for adequate location comparison. Results of location comparison are deduced to determine if the wireless device is in some proximity to some other activity source location. Other location information used for comparison may be obtained from a multiplicity of sources, such as another network based on some activity of wireless device user, another wireless device via a wireless network, or any system capable of providing location information to the Location Comparison Engine.

Claims

1. A method of securing an online transaction, the method comprising:

obtaining, via a computing device, account data including a wireless device identifier stored on a secure element of a user'"'"'s wireless device to execute the online transaction, wherein the wireless device identifier was previously provided to a payment card issuer and is stored on the secure element of the wireless device via a secure update process that includes verification of the user'"'"'s identity;

obtaining a one-time password that is generated by the computing device and embedded with information identifying a location of the computing device, the one-time password being generated in response to verifying that the wireless device is approved for use with the computing device by comparing the wireless device identifier from the wireless device to a wireless device identifier previously stored on the computing device;

receiving, from a wireless network, information identifying a location of the wireless device;

converting the information identifying the location of the computing device embedded in the one-time password and the information identifying the location of the wireless device into a common format;

comparing the information identifying the location of the wireless device with the information identifying the location of the computing device to determine a distance between the wireless device and the computing device; and

determining whether the online transaction is valid or invalid based on the distance between the wireless device and the computing device.

2. The method of claim 1, wherein the wireless device identifier is a Mobile Directory Number.

3. The method of claim 1, wherein the online transition is determined to be valid or invalid further based on a comparison of the wireless device identifier obtained via the computing device with a wireless device identifier stored in a cardholder profile database based on previous authorized transactions.

4. The method of claim 1, wherein the one-time password is displayed on the computing device for viewing by the user.

5. The method of claim 1, wherein the one-time password is entered onto a merchant website manually by the user.

6. The method of claim 1, wherein the wireless device identifier stored on the secure element of the wireless device is provided to the computing device using a short range wireless communication.

7. The method of claim 1, wherein the location of the computing device is not derived from an IP address.

8. A method of securing an online transaction, the method comprising:

obtaining, via a computing device, account data including a wireless device identifier stored on a secure element of a user'"'"'s wireless device to execute an online transaction, wherein the wireless device identifier was previously provided to a payment card issuer and is stored on the secure element of the wireless device via a secure update process that includes verification of the user'"'"'s identity;

obtaining a one-time password that is generated by the wireless device and embedded with information identifying a location of the wireless device, the one-time password being generated in response to verifying that the wireless device is approved for use with the computing device by comparing the wireless device identifier from the wireless device to a wireless device identifier previously stored on the computing device;

receiving, from a wireless network, information identifying a network-provided location of the wireless device;

converting the information identifying the location of the wireless device embedded in the one-time password and the information identifying the network-provided location of the wireless device into a common format;

comparing the information identifying the location of the wireless device embedded in the one-time password with the information identifying the network-provided location of the wireless device to determine a distance between the location of the wireless device embedded in the one-time password and the network-provided location; and

determining whether the online transaction is valid or invalid based on the distance between the location of the wireless device embedded in the one-time password and the network-provided location.

9. The method of claim 8, wherein the wireless device identifier is a Mobile Directory Number.

10. The method of claim 8, wherein the online transition is determined to be valid or invalid further based on a comparison of the wireless device identifier obtained via the computing device with a wireless device identifier previously stored in a cardholder profile database based on previous authorized transactions.

11. The method of claim 8, wherein the one-time password is displayed on the wireless device for viewing by the user.

12. The method of claim 8, wherein the one-time password is entered onto a merchant website manually by the user.

13. The method of claim 8, wherein the wireless device identifier stored on the secure element of the wireless device is provided to the computing device using a short range wireless communication.

14. A location comparison device comprising:

a processor; and

a non-transitory computer storage medium coupled to the processor and storing a set of instructions, which when executed by the processor, causes the location comparison device to perform operations including;

obtaining, via a computing device, account data including a wireless device identifier stored on a secure element of a user'"'"'s wireless device to execute an online transaction, wherein the wireless device identifier was previously provided to a payment card issuer and is stored on the secure element of the wireless device via a secure update process that includes verification of the user'"'"'s identity;

obtaining a one-time password that is generated by the computing device and including embedded location information identifying a location of the computing device or the wireless device, the one-time password being generated in response to verifying that the wireless device is approved for use with the computing device by comparing the wireless device identifier from the wireless device to a wireless device identifier previously stored on the computing device;

receiving, from a wireless network, network-provided information identifying a location of the wireless device;

converting the embedded location information in the one-time password and the network-provided information identifying the location of the wireless device into a common format;

comparing the embedded location information with the network-provided information to determine a distance between the location embedded in the one-time password and the network-provided location; and

determining whether the online transaction is valid or invalid based on the distance between the location embedded in the one-time password and the location of the network-provided information.

15. The location comparison device of claim 14, wherein the wireless device identifier is a Mobile Directory Number.

16. The location comparison device of claim 14, wherein the online transition is determined to be valid or invalid further based on a comparison of the wireless device identifier obtained via the computing device with a wireless device identifier previously stored in a cardholder profile database based on previous authorized transactions.

17. The location comparison device of claim 14, wherein the one-time password is displayed for viewing by the user.

18. The location comparison device of claim 14, wherein the one-time password is entered onto a merchant website manually by the user.

19. The location comparison device of claim 14, wherein the wireless device identifier stored on the secure element of the wireless device is provided to the computing device using a short range wireless communication.

20. The location comparison device of claim 14, wherein the location embedded in the one-time password is derived a source other than an IP address.