System and method for correlating diverse location data for data security

Patent metadata

Field	Value
Publication number	US-11089482-B2
Application number	US-201716074379-A
Country	US
Kind code	B2
Filing date	Mar 31, 2017
Priority date	Mar 31, 2016
Publication date	Aug 10, 2021
Grant date	Aug 10, 2021

Abstract

A method for authentication using location correlation is disclosed. The method includes determining geographic zones and zone identifiers associated with a location of a mobile communication device. Later, transaction data is received and a zone identifier is determined from that transaction data. If the zone identifier matches one of the previously determined zone identifiers, then a match indicator is sent to an authorizing entity computer system or the transaction may be allowed to proceed.

First claim

What is claimed is:

1. A method comprising:
a) determining, by a computer, a geographic location of a mobile communication device;
b) determining, by the computer, a boundary using the geographic location of the mobile communication device, wherein the geographic location is at a center of the boundary;
c) determining, by the computer, a plurality of pre-defined geographic zones overlapping the boundary, the plurality of pre-defined geographic zones are respectively associated with a plurality of postal codes;
d) receiving, by the computer, transaction data for a transaction from an access device, and determining a postal code associated with the access device;
e) determining, by the computer, that the postal code associated with the access device matches one of the postal codes in the plurality of postal codes overlapping the boundary; and
f) in response to step e), providing a match indicator to an authorizing entity computer or authorizing the transaction to proceed.

2. The method of claim 1 , wherein the postal code associated with the access device is present in an authorization request message from the access device.

3. The method of claim 1 , wherein the boundary is a circle or polygon and the geographic location comprises a latitude value and longitude value.

4. The method of claim 1 , wherein the geographic location of the mobile communication device is a first geographic location, wherein the postal codes are a first plurality of postal codes, and wherein the boundary is a first boundary, and wherein the method further comprises:
determining, by the computer, a second geographic location of the mobile communication device;
determining, by the computer, that the second geographic location of the mobile communication device is proximate to an edge of the boundary;
determining, by the computer, a second boundary using the second geographic location; and
determining, by the computer, a second plurality of pre-defined geographic zones overlapping the second boundary, the second plurality of pre-defined geographic zones respectively associated with a second plurality of postal codes, and
wherein the first plurality of postal codes is different than the second plurality of postal codes.

5. The method of claim 4 , wherein the access device is a first access device, wherein the match indicator is a first match indicator, wherein the transaction is a first transaction, the transaction data is first transaction data, the postal code is a first postal code, and wherein the method further comprises:
receiving, by the computer, second transaction data for a second transaction and determining a second postal code associated with a second access device;
determining, by the computer, that the second postal code associated with the second access device matches one of the postal codes in the second plurality of postal codes; and
in response to the determination, providing a second match indicator to the authorizing entity computer or authorizing the second transaction to proceed.

6. The method of claim 1 , wherein the transaction is one in which the computer seeks to access data provided by the authorizing entity computer.

7. The method of claim 1 , wherein the postal code associated with the access device is in the transaction data from the access device.

8. A computer comprising:
a processor; and
a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising:
a) determining a geographic location of a mobile communication device;
b) determining a boundary using the geographic location, wherein the geographic location is at a center of the boundary;
c) determining, by the computer, a plurality of pre-defined geographic zones overlapping the boundary, the plurality of pre-defined geographic zones are respectively associated with a plurality of postal codes;
d) receiving transaction data for a transaction from an access device and determining a postal code associated with the access device;
e) determining that the postal code associated with the access device matches one of the postal codes in the plurality of postal codes; and
f) in response to step e), providing a match indicator to an authorizing entity computer system or authorizing the transaction.

9. The computer of claim 8 , wherein the postal code associated with the access device is present in an authorization request message from the access device.

10. The computer of claim 8 wherein the boundary is a circle or polygon, and the geographic location comprises a latitude value and longitude value.

11. The computer of claim 8 , wherein the boundary is a circle and the geographic location comprises a latitude value and longitude value.

12. The computer of claim 8 , wherein the method further comprises:
wherein the geographic location of the mobile communication device is a first geographic location, wherein the plurality of postal codes is a first plurality of postal codes, and wherein the boundary is a first boundary, and wherein the method further comprises:
determining a second geographic location of the mobile communication device;
determining that the second geographic location of the mobile communication device is proximate to an edge of the boundary; and
determining a second boundary using the second geographic location.

13. The computer of claim 8 , wherein the transaction is one in which the computer seeks to access data provided by the authorizing entity computer system.

14. The computer of claim 8 , wherein the mobile communication device is a mobile phone.

15. A method comprising:
transmitting, by a mobile communication device operated by a user, data representing a geographic location of the mobile communication device to a computer, the computer determining a boundary using the geographic location, wherein the geographic location is at a center of the boundary, and determining a plurality of pre-defined geographic zones overlapping the boundary, the plurality of pre-defined geographic zones respectively associated with a plurality of postal codes; and
interacting, a portable user device, with an access device in a transaction, wherein the access device generates and transmits an authorization request message comprising transaction data to the computer, the computer determining a postal code associated with the access device, and wherein the computer determines that the postal code associated with the access device matches one of the plurality of postal codes, and provides a match indicator to an authorization system, or authorizes the transaction to proceed.

16. The method of claim 15 , wherein the access device is a personal computer, and the transaction is one which can allow the user to access data.

17. The method of claim 15 , wherein the data representing the geographic location comprises a latitude and longitude of the mobile communication device.

18. The method of claim 15 , wherein the portable user device and the access device interact using a short range wireless communication protocol.

Assignees

• Visa Int Service Ass

Inventors

• Smith Eden
• Reeder Mary
• Bureau Joseph
• Liu Frederick

Classifications

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L67/52

  specially adapted for the location of the user terminal · CPC title

• G06Q20/4015

  using location information · CPC title

• H04W12/64

  using geofenced areas · CPC title