User authentication

Patent metadata

Field	Value
Publication number	US-10028081-B2
Application number	US-201414328012-A
Country	US
Kind code	B2
Filing date	Jul 10, 2014
Priority date	Jul 10, 2014
Publication date	Jul 17, 2018
Grant date	Jul 17, 2018

Abstract

Systems, methods, apparatuses, and computer-readable media configured to determine a location of a user, identify the user and provide additional services based on the determined location and/or identity are provided. In some examples, a signal emitted from a beacon may be detected by a personal computing device of a user within a predefined proximity of the beacon. The location of the beacon, and the device detecting the signal, may be determined and the identity of the user associated with the device may be determined. Authentication information may be requested from the user. The request for authentication information may be transmitted to the personal computing device and the user may provide the authentication information via the device. If the received authentication information matches pre-stored authentication information, the user may be authenticated and/or authorized to conduct one or more transactions or types of transactions based on the determined location, identity, and authentication information.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a location determination and user identification system having at least one processor, data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;
determining, by the location determination and user identification system, a location of the personal computing device based on the received data associated with the signal emitted from the location beacon, wherein the location of the personal computing device is within a predefined proximity of a location of the location beacon;
extracting, by the location determination and user identification system, a unique identifier associated with the personal computing device, the unique identifier including an international mobile station equipment identity (IMEI) of the personal computing device;
determining, by the location determination and user identification system and based on the extracted unique identifier associated with the personal computing device, an identity of a user associated with the personal computing device;
requesting, by the location determination and user identification system, authentication information of the identified user;
receiving, by the location determination and user identification system, the requested authentication information of the user;
determining, by the location determination and user identification system, whether the received authentication information of the user matches pre-stored authentication information associated with the user; and
responsive to determining that the received authentication information of the user matches the pre-stored authentication information associated with the user, authorizing the user to conduct a first plurality of transactions or types of transactions.

2. The method of claim 1 , wherein authorizing the user to conduct a first plurality of transactions or types of transactions includes authorizing the user to conduct the first plurality of transactions or types of transactions without additional identification or authentication information from the user.

3. The method of claim 1 , wherein requesting authentication information from the identified user includes transmitting a request for the authentication information to the personal computing device.

4. The method of claim 1 , wherein receiving the requested authentication information of the user includes receiving the requested authentication information from the personal computing device.

5. The method of claim 1 , wherein the requested authentication information includes at least one of: a personal identification number (PIN) of the user, biometric data of the user, a password of the user, and a response to a predefined security question.

6. The method of claim 1 , wherein authorizing the user to conduct the first plurality of transactions or types of transactions is based on the determined identity of the user associated with the personal computing device and the determined the location of the personal computing device.

7. The method of claim 1 , wherein authorizing the user to conduct a first plurality of transactions or types transactions further includes identifying a second plurality of transactions or types of transactions as requiring additional identification or authentication information from the user prior to conducting a transaction or type of transaction in the second plurality of transactions or types of transactions.

8. The method of claim 1 , further including transmitting, to a computing device of a banking associate, an image of the user and, responsive to determining that the authentication information matches, confirming that the user matches the image of the user.

9. The method of claim 1 , further including responsive to determining that the authentication information does not match, requesting additional identification from the user prior to conducting any type of transaction.

10. The method of claim 9 , wherein requesting additional identification from the user includes requesting a photo identification of the user.

11. An apparatus, comprising:
at least one processor; and
a memory storing instructions that when executed by the at least one processor cause the apparatus to:
receive data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;
determine a location of the personal computing device based on the received data associated with the signal emitted from the location beacon, wherein the location of the personal computing device is within a predefined proximity of a location of the location beacon;
extract a unique identifier associated with the personal computing device, the unique identifier including an international mobile station equipment identity (IMEI) of the personal computing device;
determine, based on the extracted unique identifier associated with the personal computing device, an identity of a user associated with the personal computing device;
request authentication information of the identified user;
receive the requested authentication information of the user;
determine whether the received authentication information of the user matches pre-stored authentication information associated with the user; and
responsive to determining that the received authentication information of the user matches the pre-stored authentication information associated with the user, authorize the user to conduct a first plurality of transactions or types of transactions.

12. The apparatus of claim 11 , wherein authorizing the user to conduct a first plurality of transactions or types of transactions includes authorizing the user to conduct the first plurality of transactions or types of transactions without additional identification or authentication information from the user.

13. The apparatus of claim 11 , wherein receiving the requested authentication information of the user includes receiving the requested authentication information from the personal computing device.

14. The apparatus of claim 11 , wherein authorizing the user to conduct the first plurality of transactions or types of transactions is based on the determined identity of the user associated with the personal computing device and the determined the location of the personal computing device.

15. The apparatus of claim 11 , wherein authorizing the user to conduct a first plurality of transactions or types transactions further includes identifying a second plurality of transactions or types of transactions as requiring additional identification or authentication information from the user prior to conducting a transaction or type of transaction in the second plurality of transactions or types of transactions.

16. The apparatus of claim 11 , further including instructions that, when executed, cause the apparatus to:
responsive to determining that the authentication information does not match, request additional identification from the user prior to conducting any type of transaction.

17. One or more non-transitory computer-readable media having instructions stored thereon that when executed by one or more computers cause the one or more computers to:
receive data associated with a signal detected by a personal computing device, the signal being emitted from a location beacon at a banking center of a financial institution;
determine a location of the personal computing device based on the received data associated with the signal emitted from the loca

Assignees

• Bank Of America

Inventors

• Scanlon Sharon
• Gill Davindar
• Bertanzetti Pete

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• H04W4/029

  Location-based management or tracking services · CPC title

• G06Q20/4012

  Verifying personal identification numbers [PIN] · CPC title

• H04W12/06 Primary

  Authentication · CPC title