Method and system for location-based resource access

Patent metadata

Field	Value
Publication number	US-12015964-B2
Application number	US-202117524622-A
Country	US
Kind code	B2
Filing date	Nov 11, 2021
Priority date	Sep 26, 2017
Publication date	Jun 18, 2024
Grant date	Jun 18, 2024

Abstract

A method is disclosed. The method includes establishing, by a first device, a wireless connection to a second device; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the received location data; generating, by the first device, an altered value based on the received location data and the determined distance; and transmitting, by the first device and to the second device, the altered value and an account identifier associated with a user of the first device.

First claim

What is claimed is:

1. A method, comprising:
establishing, by a first device, a wireless connection to a second device, wherein the first device is a client device and the second device is an access device at a location of a merchant;
transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device;
receiving, by the first device and from the second device, the location data indicative of the location of the second device;
determining, by the first device, a distance between the first device and the second device based at least in part on the location data received from the second device that is indicative of the location of the second device;
determining, by the first device, a risk score based on the determined distance;
generating, by the first device, an encrypted value based on the received location data, the determined distance, and the determined risk score;
transmitting, by the first device and to the second device, the encrypted value that is a payment token associated with a user of the first device, wherein the second device transmits the encrypted value and the payment token received from the first device to a server computer, wherein the server computer decrypts the encrypted value received from the second device to obtain the location data, the distance data and the risk score, and wherein the server computer sends a notification to the access device to allow the client device to access a resource after analyzing the decrypted value; and
receiving, by the first device from the second device, a notification to access the resource.

2. The method of claim 1 , wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection.

3. The method of claim 1 , wherein the first device is a portable device.

4. The method of claim 3 , wherein the portable device is a mobile phone and the access device is a point of sale (POS) device.

5. The method of claim 1 , wherein the method further comprises, in response to establishing the wireless connection to the second device, receiving, by the first device and from the second device, an unpredictable number, and wherein the generated encrypted value is further based on the unpredictable number.

6. The method of claim 1 , wherein the location data comprises latitude and longitude data.

7. The method of claim 1 , wherein the encrypted value is a hashed value.

8. The method of claim 1 , wherein the distance is a straight line distance.

9. The method according to claim 1 , wherein the located data is encrypted using a public key, and wherein the server computer analyzes the encrypted value by decrypting the encrypted value using a private key corresponding to the public key.

10. The method according to claim 1 , wherein the second device transmits access device characteristics to the server computer, wherein the access device characteristics include a communication range associated with the access device, and wherein the analyzing, by the server computer, the decrypted value includes determining the communication range associated with the access device.

11. The method according to claim 1 , wherein the payment token is primary account number (PAN).

12. A first device, the first device comprising:
a processor; and
a non-transitory computer readable medium, the non-transitory computer readable medium comprising computer executable code for executing a method, the method comprising:
establishing a wireless connection to a second device, wherein the first device is a client device and the second device is an access device at a location of a merchant;
transmitting a request, to the second device, for location data indicative of a location of the second device;
receiving, from the second device, the location data indicative of the location of the second device;
determining a distance between the first device and the second device based at least in part on the location data received from the second device that is indicative of the location of the second device;
determining a risk score based on the determined distance;
generating an encrypted value based on the received location data, the determined distance, and the determined risk score;
transmitting, to the second device, the encrypted value that is a payment token associated with a user of the first device, wherein the second device transmits the encrypted value and the payment token received from the first device to a server computer, wherein the server computer decrypts the encrypted value received from the second device to obtain the location data, the distance data, and the risk score, and wherein the server computer sends a notification to the access device to allow the client device to access a resource after analyzing the decrypted value; and
receiving, by the first device from the second device, a notification to access the resource.

13. The first device of claim 12 , wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection.

14. The first device of claim 12 , wherein the method further comprises, in response to establishing the wireless connection to the second device, receiving, by the first device and from the second device, an unpredictable number, and wherein the generated encrypted value is further based on the unpredictable number.

15. The first device of claim 12 , wherein the encrypted value is a hashed value.

16. A method, comprising:
receiving, by a server computer and from a first device, an encrypted value and a payment token associated with a user of a second device;
wherein the encrypted value is generated by the second device based on location data received from the first device, a determined distance between the first device and the second device based at least in part on the location data received from the first device, and a risk score determined based on the determined distance,
wherein the second device is a client device and the first device is an access device at a location of a merchant;
decrypting, by the server computer, the encrypted value received from the first device to obtain the location data, the distance data, and the risk score;
allowing, by the server computer, access to a resource after decrypting the encrypted value after determining that the location data, the distance data and the risk score are in a predetermined range; and
sending, by the server computer, a notification to the access device to allow the client device to access the resource.

17. The method of claim 16 , wherein the encrypted value is a hashed value.

Assignees

• Visa Int Service Ass

Inventors

• Bellenger Thomas

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W4/025

  using location based information parameters · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W76/14

  Direct-mode setup · CPC title

• H04W12/67

  Risk-dependent, e.g. selecting a security level depending on risk profiles · CPC title