Method and system for location-based resource access

Patent metadata

Field	Value
Publication number	US-11202166-B2
Application number	US-201716640013-A
Country	US
Kind code	B2
Filing date	Sep 26, 2017
Priority date	Sep 26, 2017
Publication date	Dec 14, 2021
Grant date	Dec 14, 2021

Abstract

A method is disclosed. The method includes establishing, by a first device, a wireless connection to a second device; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the received location data; generating, by the first device, an altered value based on the received location data and the determined distance; and transmitting, by the first device and to the second device, the altered value and an account identifier associated with a user of the first device.

First claim

What is claimed is:

1. A method, comprising:
establishing, by a contactless card, a wireless connection to a point of sale terminal;
transmitting a request, by the contactless card and to the point of sale terminal, for location data indicative of a location of the point of sale terminal;
receiving, by the contactless card and from the point of sale terminal, the location data indicative of the location of the point of sale terminal;
determining, by the contactless card, a distance between the contactless card and the point of sale terminal based at least in part on the received location data;
generating, by the contactless card, an altered value by concatenating at least an unpredictable number, the received location data, and the determined distance to form a concatenated value, and encrypting the concatenated value to form the altered value; and
transmitting, by the contactless card and to the point of sale terminal, the altered value and an account identifier associated with a user of the contactless card, wherein the point of sale terminal transmits the altered value and the account identifier to a server computer, wherein the server computer analyzes the altered value, wherein analyzing the altered value comprises decrypting the altered value to obtain both of the received location data and the determined distance, and comparing the received location data and the determined distance with a known location of the point of sale terminal and a distance threshold, respectively, and wherein the server computer allows access to a resource using the account identifier associated with the user of the contactless card after analyzing the altered value.

2. The method of claim 1 , wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection.

3. The method of claim 1 , wherein the contactless card determines a risk score based at least in part on the determined distance, wherein the altered value is further based on the risk score, and wherein the server computer allows access to the resource based at least in part on the risk score.

4. The method of claim 1 , wherein the method further comprises, in response to establishing the wireless connection to the point of sale terminal, receiving, by the contactless card and from the point of sale terminal, the unpredictable number.

5. The method of claim 1 , wherein the altered value is a hashed value.

6. The method of claim 5 , wherein the location data comprises latitude and longitude data.

7. The method of claim 5 , wherein the distance is a straight line distance.

8. The method of claim 5 , wherein the account identifier is a primary account number.

9. The method of claim 5 , wherein the distance threshold is determined based on a type of the point of sale terminal or the contactless card.

10. A contactless card, the contactless card comprising:
a processor; and
a non-transitory computer readable medium, the non-transitory computer readable medium comprising computer executable code for executing a method, the method comprising:
establishing a wireless connection to a point of sale terminal;
transmitting a request, to the point of sale terminal, for location data indicative of a location of the point of sale terminal;
receiving, from the point of sale terminal, the location data indicative of the location of the point of sale terminal;
determining a distance between the contactless card and the point of sale terminal based at least in part on the received location data;
generating an altered value by concatenating at least an unpredictable number, the received location data, and the determined distance to form a concatenated value, and encrypting the concatenated value to form the altered value; and
transmitting, to the point of sale terminal, the altered value and an account identifier associated with a user of the contactless card, wherein the point of sale terminal transmits the altered value and the account identifier to a server computer, wherein analyzing the altered value comprises decrypting the altered value to obtain both of the received location data and the determined distance, and comparing the received location data and the determined distance with a known location of the point of sale terminal and a distance threshold, respectively, and wherein the server computer allows access to a resource using the account identifier associated with the user of the contactless card after analyzing the altered value.

11. The contactless card of claim 10 , wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection.

12. The contactless card of claim 10 , wherein in the method, the contactless card determines a risk score based at least in part on the determined distance, wherein the altered value is further based on the risk score, and wherein the server computer authorized a transaction based at least in part on the risk score.

13. The contactless card of claim 10 , wherein the method further comprises, in response to establishing the wireless connection to the point of sale terminal, receiving, by the contactless card and from the point of sale terminal, the unpredictable number.

14. The contactless card of claim 10 , wherein the altered value is a hashed value.

15. A method, comprising:
establishing, by a point of sale terminal, a wireless connection with a contactless card;
receiving, by a server computer and from the point of sale terminal, an altered value and an account identifier associated with a user of the contactless card, wherein the altered value is generated by the contactless card, by concatenating at least an unpredictable number, location data indicative of a location of the point of sale terminal, and a distance between the point of sale terminal and the contactless card determined by the contactless card to form a concatenated value, and encrypting the concatenated value to form the altered value;
analyzing, by the server computer, the altered value, wherein analyzing the altered value comprises decrypting the altered value to obtain both of the location data and the distance determined from the contactless card from the altered value, and comparing the location data and the distance determined from the contactless card with a known location of the point of sale terminal and a distance threshold, respectively; and
allowing, by the server computer, access to a resource using the account identifier associated with the user of the contactless card after analyzing the altered value.

16. The method of claim 15 , wherein the contactless card determines a risk score based at least in part on the distance determined from the contactless card, wherein the altered value is further based on the risk score, and wherein the server computer authorizes a transaction based at least in part on the risk score.

17. The method of claim 15 , wherein the altered value is a hashed value.

Assignees

• Visa Int Service Ass

Inventors

• Bellenger Thomas

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• G06Q20/3224

  Transactions dependent on location of M-devices · CPC title

• H04W12/67

  Risk-dependent, e.g. selecting a security level depending on risk profiles · CPC title

• G06Q20/3827

  Use of message hashing · CPC title

• H04W4/023 Primary

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title