Systems and methods for location based authentication

Patent metadata

Field	Value
Publication number	US-11533318-B1
Application number	US-202017039622-A
Country	US
Kind code	B1
Filing date	Sep 30, 2020
Priority date	Sep 30, 2019
Publication date	Dec 20, 2022
Grant date	Dec 20, 2022

Abstract

Various embodiments described herein relate to a call management system that aims to provide a more efficient, secure, and dynamic technique for authenticating a user based on a location of the user. A server of the call management system receives a phone call from a user device. The server transfers the phone call to an analyst device. When the analyst device accepts the phone call, the server starts an electronic communication session between the user device and the analyst device. The server then determines a current location of the user. The server further determines a question for authentication of the user based on the current location. The server transmits the question to the analyst device. The analyst device transmits the question to the user device via the server. In response to an answer received from the user device, the server authenticates the user.

First claim

What is claimed is:

1. A method comprising:
establishing, by a server of a call center, an electronic communication session between a user device operated by a user and an analyst device, wherein the server determines a unique device identifier associated with the user device participating in the electronic communication session;
upon establishing the electronic communication session, automatically triggering, by the server, a query via a communication application running on the user device for a current location of the user device;
retrieving, by the server from a database, a user profile associated with the user device having the unique device identifier, wherein the user profile comprises a predetermined location associated with the user;
determining, by the server, whether the current location of the user device corresponds with the predetermined location within the user profile;
when the current location of the user device corresponds with the predetermined location within the user profile, transmitting, by the server, a first credentials prompt for display on the analyst device during the electronic communication session;
when the current location of the user device does not correspond with the predetermined location within the user profile, transmitting, by the server, a second credentials prompt for display on the analyst device during the electronic communication session;
authenticating, by the server, the user in response to determining that a set of purported credentials inputted in the analyst device in response to the first or the second credentials prompt match a set of credentials stored within the user profile;
identifying a first set of rules for post-authentication communication during the electronic communication session based upon the current location; and
providing an indication of the first set of rules for the electronic communication session to the analyst device.

2. The method according to claim 1 , further comprising:
generating, by the server, a first set of offers for the user when the analyst device authenticates the user by matching a first set of responses to a first set of questions presented within the first credentials prompt with at least one predetermined response within the user profile, wherein the first set of offers are associated with the predetermined location; and
transmitting, by the server, to the analyst device:
the first set of offers for communicating the first set of offers with the user device during the electronic communication session;
a first set of instructions to the analyst device for communication of the first set offers to the user device during the electronic communication session, wherein the first set of instructions are associated with the predetermined location; or
both.

3. The method according to claim 1 , comprising:
determining whether the predetermined location is a public location;
providing a non-personal prompt as the first credentials prompt when the predetermined location is a public location; and
providing a personal prompt as the first credentials prompt when the predetermined location is not a public location.

4. The method according to claim 1 , further comprising:
generating, by the server, a second set of offers when the analyst device authenticates the user by matching a second set of responses to a second set of questions presented within the second credentials prompt with at least one predetermined response within the user profile; and
transmit, by the server, to the analyst device:
the second set of offers to the analyst device for communicating the second set of offers with the user device during the electronic communication session;
a second set of instructions to the analyst device for communication of the second set offers with the user device during the electronic communication session; or
both.

5. A system comprising:
a server of a call center, comprising a computer processor and tangible, non-transitory machine-readable storage medium comprising machine-readable instructions that, when executed by the computer processor, cause the server to:
establish an electronic communication session between a user device operated by a user and an analyst device, wherein the server determines a unique device identifier associated with the user device participating in the electronic communication session;
upon establishing the electronic communication session, automatically trigger a query via a communication application running on the user device for a current location of the user device;
retrieve from a database a user profile associated with the user device having the unique device identifier, wherein the user profile comprises a predetermined location associated with the user;
determine whether the current location of the user device corresponds with the predetermined location within the user profile;
when the current location of the user device corresponds with the predetermined location within the user profile, transmit a first credentials prompt for display on the analyst device during the electronic communication session;
when the current location of the user device does not correspond with the predetermined location within the user profile, transmit a second credentials prompt for display on the analyst device during the electronic communication session;
authenticate the user in response to determining that a set of purported credentials inputted in the analyst device in response to the first or the second credentials prompt match a set of credentials stored within the user profile;
identify a first set of rules for post-authentication communication during the electronic communication session based upon the current location; and
provide an indication of the first set of rules for the electronic communication session to the analyst device.

6. The system according to claim 5 , wherein the server is further configured to:
generate a first set of offers for the user when the analyst device authenticates the user by matching a first set of responses to a first set of questions presented within the first credentials prompt with at least one predetermined response within the user profile.

7. The system according to claim 6 , wherein the first set of offers are associated with the predetermined location.

8. The system according to claim 7 , wherein the server is further configured to:
transmit the first set of offers to the analyst device for communicating the first set of offers with the user device during the electronic communication session.

9. The system according to claim 8 , wherein the server is further configured to:
transmit a first set of instructions to the analyst device for communication of the first set offers to the user device during the electronic communication session.

10. The system according to claim 9 , wherein the first set of instructions are associated with the predetermined location.

11. The system according to claim 5 , wherein the server is further configured to:
generate a second set of offers when the analyst device authenticates the user by matching a second set of responses to a second set of questions presented within the second credentials prompt with at least one predetermined response within the user profile.

12. The system according to claim 11 , wherein the server is further configured to:
transmit the second set of offers to the analyst device for communicating the second set of offers with the user device during the electronic communication session.

13. The system according to claim 12 , wherein the server is further configured to:
transmit a second set of instructions to the analyst device

Assignees

• Usaa

Inventors

• Osterkamp Bryan J
• Russell Ryan Thomas
• Mceachron Jon D
• Yarbrough Gregory B
• Dziuk Janelle Denice

Classifications

• H04L63/107 Primary

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title