Systems and methods for detected-capability-based authentication of a mobile device for performing an access operation with a local device

Patent metadata

Field	Value
Publication number	US-12356184-B2
Application number	US-202318496831-A
Country	US
Kind code	B2
Filing date	Oct 27, 2023
Priority date	Apr 8, 2014
Publication date	Jul 8, 2025
Grant date	Jul 8, 2025

Abstract

In some embodiments, based on a wireless signal of a mobile device (e.g., obtained by a local device) the mobile device and a first authentication capability of the mobile device may be detected. Based on the detection of the mobile device, the mobile device may present access initiation options on a user interface of the mobile device. Based on a selection of a first option of the access initiation options via the user interface to initiate an access request for an access operation with the local device, an authentication request may be generated, where the authentication request is associated with the first authentication capability and with a first authentication tier. For example, the authentication request may be generated based on (i) the first authentication capability being detected as an authentication capability of the mobile device and (ii) the first authentication tier corresponding to an access amount of the access request.

First claim

What is claimed is:

1. A server system comprising:
one or more processors and memory storing instructions that, when executed by the one or more processors, cause operations comprising:
in response to (i) a mobile device wirelessly transmitting a short-range wireless signal to a local device local to the mobile device and (ii) the mobile device being detected, based on the short-range wireless signal, as being within a predetermined distance of the local device, providing presentation instructions to present multiple access initiation options on a user interface of the mobile device, the access initiation options comprising a resource withdrawal or transfer, a card reset, or a call center call using the local device;
in response to a selection of a first option via the user interface to initiate an access request for an access operation with the local device, generating an authentication request associated with a biometric authentication capability based on the biometric authentication capability (i) being detected by the server system as an authentication capability of the mobile device via interaction with the mobile device and (ii) corresponding to a first authentication tier that is selected by the server system over a second authentication tier due to the first authentication tier (a) corresponding to an access amount of the access request and (b) not corresponding to a different access amount to which the second authentication tier corresponds, the second authentication tier being different from the first authentication tier;
obtaining the access amount of the access request from the mobile device via the first option on the user interface;
in response to detecting the biometric authentication capability of the mobile device based on a detection of a biometric scanner on the mobile device, generating a prompt for biometric user input to obtain, via the biometric scanner, authentication data for completing the access operation with the local device, wherein the authentication data comprises one or more of fingerprint data, retina scan data, iris scan data, heartbeat pattern data, facial recognition data, voice recognition data, or palm vein scan data;
obtaining, from the mobile device via the prompt, the authentication data for completing the access operation with the local device in connection with the authentication request;
granting, based on the authentication data, access to the local device for completing the access operation with the local device; and
transmitting, based on the authentication data, an authentication confirmation to the mobile device.

2. The server system of claim 1 , the operations further comprising:
detecting a fingerprint authentication capability of the mobile device based on a detection of a fingerprint scanner being on the mobile device,
wherein generating the authentication request comprises, in response to detecting the fingerprint authentication capability of the mobile device, generating the authentication request to include at least one prompt related to fingerprint scanning.

3. The server system of claim 1 , wherein the authentication data comprises one or more of retina scan data, iris scan data, or facial recognition data.

4. A method comprising:
executing, by one or more processors of a server system, operations comprising:
in response to (i) a mobile device wirelessly transmitting a short-range wireless signal to a local device local to the mobile device and (ii) the mobile device being detected, based on the short-range wireless signal, being within a predetermined distance of the local device, transmitting presentation instructions to the mobile device to present access initiation options on a user interface of the mobile device, the access initiation options comprising a resource withdrawal or transfer, a card reset, or a call center call using the local device;
in response to a selection of a first option of the access initiation options via the user interface to initiate an access request for an access operation with the local device, generating an authentication request associated with a biometric authentication capability and with a first authentication tier based on the biometric authentication capability (i) being detected by the server system as an authentication capability of the mobile device via interaction with the mobile device and (ii) corresponding to the first authentication tier, wherein the first authentication tier is selected by the server system for the authentication request over a second authentication tier in connection with the first authentication tier (a) corresponding to an access amount of the access request and (b) not corresponding to a different access amount to which the second authentication tier corresponds, the second authentication tier being different from the first authentication tier;
obtaining the access amount of the access request from the mobile device via the first option on the user interface;
in response to detecting the biometric authentication capability of the mobile device based on a detection of a biometric scanner on the mobile device, generating a prompt for biometric user input to obtain, via the biometric scanner authentication data for completing the access operation with the local device, wherein the authentication data comprises one or more of fingerprint data, retina scan data, iris scan data, heartbeat pattern data, facial recognition data, voice recognition data, or palm vein scan data;
obtaining, from the mobile device via the prompt, the authentication data for completing the access operation with the local device, the authentication data corresponding to the first authentication tier;
granting, based on the authentication data, access to the local device for completing the access operation with the local device; and
transmitting, based on the authentication data, an authentication confirmation to the mobile device.

5. The method of claim 4 , the operations further comprising:
detecting a fingerprint authentication capability of the mobile device based on a detection of a fingerprint scanner being on the mobile device,
wherein generating the authentication request comprises, based on detecting the fingerprint authentication capability of the mobile device, generating the authentication request to include at least one prompt related to fingerprint scanning.

6. The method of claim 4 , wherein granting access to the local device for completing the access operation with the local device comprises transmitting, based on the authentication data, dispensing instructions to the local device to dispense one or more items from within the local device to complete the access operation with the local device.

7. The method of claim 4 , wherein detecting the mobile device comprises detecting the mobile device as being within a first predetermined distance of the local device while the mobile device is not within a second predetermined distance of the local device, the method further comprising:
subsequently detecting the mobile device as being within the first and second predetermined distances of the local device; and
transmitting, based on the authentication data and the mobile device being detected as being within the first and second predetermined distances of the local device, dispensing instructions to the local device to dispense one or more items from within the local device to complete the access operation with the local device.

8. The method of claim 4 , wherein granting access to the local device comprises granting, based on the authentication data, granting access to the local device, for completing the access operation with the local device, without a user of the mobile device having to physically interact with the local device before

Assignees

• Capital One Services Llc

Inventors

• Iqbal Mohammed Zafar
• Rosengren Kevin
• Doerfler Max
• Deluca Brian
• Joshi Anurag
• Dillon James
• Hollins Richie
• Warder Jamie
• Hodges William A
• Allen Ken

Classifications

• G07F19/00

  Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines (data processing equipment for bank accounting G06Q40/02) · CPC title

• G06F21/31

  User authentication · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• G06Q20/1085

  involving automatic teller machines [ATMs] · CPC title

• G07F19/20

  Automatic teller machines [ATMs] · CPC title