Multi-device transaction verification

Patent metadata

Field	Value
Publication number	US-11238457-B2
Application number	US-201916681692-A
Country	US
Kind code	B2
Filing date	Nov 12, 2019
Priority date	Mar 17, 2015
Publication date	Feb 1, 2022
Grant date	Feb 1, 2022

Abstract

When a user enters a resource provider location with a portable communication device, the portable communication device provides an indication to a transaction processing system that the portable communication device is currently at the resource provider location. At a later time when the user conducts a transaction with a portable transaction device, the fact that the user's portable communication device had been detected at the resource provider a short time ago is taken into account as a positive indicator that the transaction is not fraudulent. By verifying that both the portable communication device and the portable transaction device are present at the resource provider, the risk of approving a fraudulent transaction from a stolen portable transaction device can be reduced.

First claim

What is claimed is:

1. A method comprising:
receiving, by a server computer, device information and a resource provider identifier from a portable communication device of a user, wherein the resource provider identifier was received by the portable communication device from a base station at a resource provider identified by the resource provider identifier;
determining a credential or a token from the device information; and
transmitting the credential or the token, and a first biometric template to the portable communication device, wherein the portable communication device transmits the first biometric template to the base station, wherein the base station receives a second biometric template from a biometric acquisition device that generates the second biometric template after receiving a biometric from the user, wherein the first and second biometric templates are thereafter compared to determine if the user is authentic.

2. The method of claim 1 , wherein the base station provides the credential or the token to an access device after determining that the user is authentic, and wherein the method further comprises:
receiving an authorization request message comprising the credential or the token from the access device.

3. The method of claim 2 , further comprising:
transmitting, by the server computer, an authorization response message to the access device.

4. The method of claim 1 , wherein the first biometric template is derived from a photo of the user and the biometric acquisition device is a camera.

5. The method of claim 1 , wherein determining the credential or the token from the device information, comprises determining the token from the device information.

6. The method of claim 1 , wherein the resource provider identifier comprises a store ID and the device information comprises a device ID and a device fingerprint.

7. The method of claim 1 , wherein prior to the receiving device information and the resource provider identifier from the portable communication device of the user, enrolling the portable communication device.

8. The method of claim 1 , wherein comparing the first and second biometric templates to determine if the user is authentic is performed by the base station.

9. The method of claim 1 , wherein comparing the first and second biometric templates to determine if the user is authentic is performed by the server computer and wherein the method further comprises receiving the second biometric template from the base station.

10. The method of claim 1 , wherein the portable communication device is a mobile phone.

11. A server computer comprising:
a processor; and
a computer-readable medium comprising code for performing a method comprising
receiving, by the server computer, device information and a resource provider identifier from a portable communication device of a user, wherein the resource provider identifier was received by the portable communication device from a base station at a resource provider identified by the resource provider identifier,
determining a credential or a token from the device information, and
transmitting the credential or the token, and a first biometric template to the portable communication device, wherein the portable communication device transmits the first biometric template to the base station, wherein the base station receives a second biometric template from a biometric acquisition device that generates the second biometric template after receiving a biometric from the user, wherein the first and second biometric templates are thereafter compared to determine if the user is authentic.

12. The server computer of claim 11 , wherein the method further comprises:
looking up the first biometric template using the device information.

13. The server computer of claim 11 , wherein the resource provider identifier includes a store major value, a store minor value, and/or a UUID.

14. The server computer of claim 11 , wherein the first biometric template is derived from a fingerprint, voice sample, or iris scan.

15. The server computer of claim 11 , wherein the method further comprises:
receiving a capture of a consent to a transaction of the user.

16. The server computer of claim 11 , wherein the method further comprises:
validating the device information.

17. A method comprising:
detecting, by a base station, a portable communication device;
transmitting, by the base station, a resource provider identifier to the portable communication device;
receiving, by the base station from the portable communication device, a first biometric template;
receiving, by the base station, a second biometric template from a biometric acquisition device that generates the second biometric template after receiving a biometric from a user; and
comparing, by the base station, the first and second biometric templates to determine if the user is authentic.

18. The method of claim 17 , wherein the resource provider identifier is in the form of a base station identifier, wherein the base station only advertises a presence of the base station and does not receive signals from the portable communication device.

19. The method of claim 17 , wherein the base station and the portable communication device communicate using Bluetooth low energy (BLE).

20. The method of claim 17 , further comprising:
receiving, by the base station, a token from the portable communication device; and
sending, by the base station, a signal to the biometric acquisition device to capture the biometric from the user.

Assignees

• Visa Int Service Ass

Inventors

• Wagner Kim
• Sheets John F
• Nelsen Mark
• Jin Jing

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06Q20/4016 Primary

  involving fraud or risk level assessment in transaction processing · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06Q20/3224 Primary

  Transactions dependent on location of M-devices · CPC title