Systems and methods for providing access to a secure device

Patent metadata

Field	Value
Publication number	US-12170673-B2
Application number	US-202318538418-A
Country	US
Kind code	B2
Filing date	Dec 13, 2023
Priority date	Jul 21, 2021
Publication date	Dec 17, 2024
Grant date	Dec 17, 2024

Abstract

A system may receive first level authentication data from a first user, authorize first level access to a secure device, and transmit a push notification including a second factor authentication key to a first user device responsive to first factor authentication data matching stored authentication data for the first user. The system may receive a wireless communication from the first user device attenuated by one or more beam attenuating materials to form a first attenuated beam profile. In response to a match of the first attenuated beam profile to a stored beam profile beyond a predetermined threshold, the system may associate the second factor authentication key as an authorized login credential for the first user. The system may receive the second factor authentication key from the first user and authorize the second factor authentication data to grant the first user second level access to the secure device.

First claim

What is claimed is:

1. A system for providing access to a secure device, the system comprising:
one or more beam attenuating materials;
one or more processors;
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive a wireless communication from a first user device associated with a first user, the wireless communication attenuated by the one or more beam attenuating materials forming a first attenuated beam profile;
compare the first attenuated beam profile to a stored beam profile;
responsive to the first attenuated beam profile matching the stored beam profile beyond a predetermined threshold, associate an authentication key as an authorized login credential for the first user;
receive authentication data comprising the authentication key from the first user; and
authorize the authentication data to grant the first user access to the secure device.

2. The system of claim 1 , wherein the wireless communication comprises a short-range radio wave wireless signal utilizing 2.4 Gigahertz (Ghz) radio frequencies.

3. The system of claim 2 , wherein receiving the authentication data further comprises receiving a second wireless communication from the first user device.

4. The system of claim 1 , wherein the one or more beam attenuating materials are configured to reduce a maximum effective range of the wireless communication to one meter.

5. The system of claim 1 , wherein the instructions are further configured to cause the system to:
transmit a push notification comprising the authentication key to the first user device in response to receiving initial authentication data from the first user that matches stored authentication data for the first user;
wherein transmitting the push notification further comprises determining a mobile phone number of the first user device responsive to receiving the initial authentication data from the first user.

6. The system of claim 5 , wherein the initial authentication data comprises one or more data types selected from (i) a manually entered security PIN associated with the first user, (ii) a swiped card associated with the first user, (iii) a username and password associated with the first user, or combinations thereof.

7. A system for providing access to a secure device, the system comprising:
one or more processors;
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive a wireless communication from a first user device associated with a first user, the wireless communication attenuated by a beam attenuating material surrounding the secure device forming a first attenuated beam profile;
compare the first attenuated beam profile to a stored beam profile;
responsive to the first attenuated beam profile matching the stored beam profile beyond a predetermined threshold, associate an authentication key as an authorized login credential for the first user;
receive authentication data comprising the authentication key from the first user; and
authorize the authentication data to grant the first user a specified level of access to the secure device.

8. The system of claim 7 , wherein the wireless communication comprises a short-range radio wave wireless signal utilizing 2.4 Gigahertz (Ghz) radio frequencies.

9. The system of claim 8 , wherein receiving the authentication data further comprises receiving a second wireless communication from the first user device.

10. The system of claim 7 , wherein the beam attenuating material is configured to reduce a maximum effective range of the wireless communication to one meter.

11. The system of claim 7 , wherein the instructions are further configured to cause the system to:
transmit a push notification comprising the authentication key to the first user device in response to receiving first factor authentication data from the first user that matches stored authentication data for the first user;
wherein transmitting the push notification further comprises determining a mobile phone number of the first user device responsive to receiving the first factor authentication data from the first user.

12. The system of claim 11 , wherein first factor authentication data comprises one or more data types selected from (i) a manually entered security PIN associated with the first user, (ii) a swiped card associated with the first user, (iii) a username and password associated with the first user, or combinations thereof.

13. The system of claim 11 , wherein the instructions are further configured to cause the system to:
authorize first level access to the secure device in response to the first factor authentication data matching stored authentication data for the first user, wherein first level access comprises authorization to check an account balance associated with the first user.

14. The system of claim 12 , wherein the specified level of access comprises second level access comprising authorization to make a withdrawal or deposit to an account associated with the first user.

15. A method for providing access to a secure device comprising:
receiving a wireless communication from a first user device associated with a first user, the wireless communication attenuated by a beam attenuating material surrounding the secure device to form a first attenuated beam profile;
comparing the first attenuated beam profile to a stored beam profile;
responsive to the first attenuated beam profile matching the stored beam profile beyond a predetermined threshold, associating an authentication key as an authorized login credential for the first user;
receiving authentication data comprising the authentication key from the first user; and
authorizing the authentication data to grant the first user a specified level of access to the secure device.

16. The method of claim 15 , wherein the wireless communication comprises a short-range radio wave wireless signal utilizing 2.4 Gigahertz (Ghz) radio frequencies.

17. The method of claim 16 , wherein receiving the authentication data further comprises receiving a second wireless communication from the first user device.

18. The method of claim 15 further comprising:
transmitting a push notification comprising the authentication key to the first user device in response to receiving first factor authentication data from the first user that matches stored authentication data for the first user;
wherein transmitting the push notification further comprises determining a mobile phone number of the first user device responsive to receiving the first factor authentication data from the first user.

19. The method of claim 18 , wherein first factor authentication data comprises one or more data types selected from (i) a manually entered security PIN associated with the first user, (ii) a swiped card associated with the first user, (iii) a username and password associated with the first user, or combinations thereof.

20. The method of claim 18 , wherein first level access comprises authorization to check an account balance associated with the first user and wherein the specified level of access comprises a second level access comprising authorization to make a withdrawal or deposit to an account associated with the first user.

Assignees

• Capital One Services Llc

Inventors

• Wurmfeld David Kelly

Classifications

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04W12/79

  Radio fingerprint · CPC title