Securing a cardless ATM authentication through position detection

Patent metadata

Field	Value
Publication number	US-11217070-B2
Application number	US-202016910961-A
Country	US
Kind code	B2
Filing date	Jun 24, 2020
Priority date	Jan 17, 2020
Publication date	Jan 4, 2022
Grant date	Jan 4, 2022

Abstract

Systems and methods include a kiosk that performs an electronic payment transaction based on instructions received from a portable device of a user. The system further includes a transmitting device electrically coupled to the kiosk. The transmitting device is configured to transmit a first signal to the portable device at a first direction. The system further includes a receiving device electrically coupled to the kiosk. The receiving device is configured to receive a second signal from the portable device at a second direction. The transmitting device and receiving device are positioned such that the first and second direction enable determination of a position of the user, where the processor enables the electronic payment transaction to be processed only when the portable device is at a location relative to the kiosk. The location is disposed within a transmission path coextensive with both the first direction and the second direction.

First claim

What is claimed is:

1. A system comprising:
a kiosk comprising a processor configured to perform an electronic payment transaction based on instructions received from a portable device of a user;
a transmitting device communicatively coupled to the kiosk, the transmitting device configured to transmit, in a first direction, a first signal to the portable device; and
a receiving device communicatively coupled to the kiosk, the receiving device configured to receive a second signal transmitted from the portable device in a second direction, wherein the transmitting device and receiving device are positioned to enable the kiosk, by the processor, to triangulate a position of the portable device,
wherein the processor enables the electronic payment transaction to be processed only when the portable device is disposed at a position coextensive with both the first direction and the second direction.

2. The system of claim 1 , wherein the transmitting device transmits the first signal based on an instruction received from the kiosk.

3. The system of claim 1 , wherein the receiving device is disposed over the transmitting device in a direction extending linearly with the first direction and the second direction.

4. The system of claim 1 , wherein the transmitting dice comprises a base member, a directional antenna electrically coupled to the kiosk, and a sensor electrically coupled to the kiosk and configured to detect a presence of the user.

5. The system of claim 1 , wherein:
the kiosk, based on an initiation signal received from the transmitting device, generates an encryption key,
the transmitting device, based on an instruction received from the kiosk, transmits the first signal, the first signal comprising the encryption key, and
the processor, based on the second signal received from the portable device, establishes a secure binding between the kiosk and the portable device, the secure binding enabling processing of the electronic payment transaction.

6. The system of claim 5 , wherein the processor determines, based on the receiving the second signal whether the user is in proximity of the kiosk, and, when the user is in proximity of the kiosk, authorizes the electronic payment transaction.

7. The system of claim 5 , wherein the transmitting device is configured to transmit the first signal, by a directional antenna, to the portable device disposed over the directional antenna.

8. A computer-implemented method comprising:
transmitting an instruction for an electronic payment transaction to a kiosk, the kiosk comprising one or more computing devices;
receiving, by a portable device, a first signal from a first direction from a transmitting device communicatively coupled to the kiosk; and
transmitting, by the portable device, a second signal to a receiving device communicatively coupled to the kiosk, the second signal transmitted in a second direction, wherein the transmitting device and receiving device are positioned to enable the kiosk, by the processor, to triangulate a position of the portable device,
wherein the processor enables the electronic payment transaction to be processed only when the portable device is disposed at a position coextensive with both the first direction and the second direction.

9. The computer-implemented method of claim 8 , further comprising generating, after receiving the first signal by the portable device, the second signal comprising a response key to enable the kiosk to perform a two-factor authentication of the portable device.

10. The computer-implemented method of claim 8 , further comprising generating, after receiving the first signal by the portable device, the second signal comprising a response key comprising a one-time password (OTP) based on information associated with a user.

11. The computer-implemented method of claim 8 , further comprising:
generating an image signal associated with the instruction; and
transmitting the image signal scanned to a camera of the kiosk,
wherein the transmitting the image signal enables the kiosk to transmit the first signal comprising an encryption key.

12. The computer-implemented method of claim 8 , wherein:
the receiving the first signal comprises receiving an encryption key transmitted from a directional antenna of the transmitting device from the first direction,
the transmitting the second signal comprises transmitting a response key in the second direction, and
the first direction and the second direction enable the kiosk to triangulate a position of a user.

13. A computer-implemented method comprising:
receiving, by one or more computing devices, a transaction request from a user, the transaction request submitted by the user on a portable device;
receiving, from a sensor electrically coupled to the one or more computing devices, an initiation signal to indicate a proximity of the user;
generating, by the one or more computing devices, an encryption key based on the transaction request and in response to the initiation signal;
transmitting, in a first direction by a transmitting device electrically coupled to the one or more computing devices, the encryption key to the portable device;
receiving, at a second direction by a receiving device electrically coupled to the one or more computing devices, a key response from the portable device, wherein the transmitting device and receiving device are positioned to enable triangulation of a position of the portable device; and
authenticating, by the one or more computing devices, the portable device based on the encryption key and the key response to establish a secure binding between the portable device and the one or more computing devices,
wherein the processor enables an electronic payment transaction to be processed only when the portable device is disposed within a transmission path coextensive with both the first direction and the second direction.

14. The computer-implemented method of claim 13 , further comprising prestaging, by a mobile application of the portable device, the transaction request to be submitted to the one or more computing devices.

15. The computer-implemented method of claim 13 , further comprising scanning, by the one or more computing devices, an image signal presented by the portable device and associated with the transaction request.

16. The computer-implemented method of claim 15 , wherein the image signal presented by the portable device and associated with the transaction request comprises a bar code.

17. The computer-implemented method of claim 13 , further comprising authorizing, by the one or more computing devices, the transaction request based on the authenticating of the portable device, wherein the portable device is determined to be associated with the transaction request.

18. The computer-implemented method of claim 13 , wherein the authentication comprises performing a two-factor authentication with information associated with the user.

19. The computer-implemented method of claim 18 , wherein the authentication comprises generating a one-time password (OTP) based on the information associated with the user.

Assignees

• Capital One Services Llc

Inventors

• Miller Mitchell

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• G06Q20/3224

  Transactions dependent on location of M-devices · CPC title

• H04W12/041

  Key generation or derivation · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• G07F19/204

  Loading of a stored value token using an ATM · CPC title