Providing remote access to service devices to facilitate secure transactions

Patent metadata

Field	Value
Publication number	US-12483545-B2
Application number	US-202318331985-A
Country	US
Kind code	B2
Filing date	Jun 9, 2023
Priority date	Jun 9, 2023
Publication date	Nov 25, 2025
Grant date	Nov 25, 2025

Abstract

A system can be provided that can enable remote access to IoT service devices to facilitate secure transactions. For example, the system can include a IoT service device positioned in a location associated with a service provider. The system can also include a computing environment, which may receive, from a mobile device, a request to perform a function of the IoT service device. The request can include authentication credentials for a user account. Further, the computing environment can authenticate a user of the mobile device based on the authentication credentials. The computing environment may also authenticate the mobile device based on a distance between a location of the mobile device and the location associated with the service provider being less than a threshold distance. Additionally, the computing environment may transmit an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the function.

First claim

What is claimed is:

1 . A system comprising:
an Internet of Things (IoT) service device comprising hardware and positioned in a location associated with a service provider; and a computing environment, the computing environment configured to control the IoT service device by:
receiving, from a first mobile device, a first request to perform at least one function of the IoT service device, the first request including first authentication credentials for a user account associated with the service provider;
authenticating a first user of the first mobile device based on the first authentication credentials;
authenticating the first mobile device based on a distance between a location of the first mobile device and the location associated with the service provider being less than a threshold distance;
receiving, from a second mobile device, a second request to perform the at least one function, the second mobile device being an authorized device associated with the service provider, and the second request including second authentication credentials for authorized personnel associated with the service provider;
authenticating a second user of the second mobile device based on the second authentication credentials;
authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider; and
in response to authenticating the first user and the first mobile device and to authenticating the second user and the second mobile device, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the at least one function, wherein the at least one function involves a secure transaction between the IoT service device and the user account.

2 . The system of claim 1 , wherein the computing environment further controls the IoT service device by:
detecting an issue with the first request; and transmitting to the second mobile device a notification indicating the issue with the first request.

3 . The system of claim 1 , further comprising:
a near-field communication (NFC) token associated with the IoT service device.

4 . The system of claim 3 , wherein the computing environment receives, from the first mobile device, the first request by detecting a first tap gesture between the first mobile device and the NFC token, and wherein the computing environment receives, from the second mobile device, the second request by detecting a second tap gesture between the second mobile device and the NFC token.

5 . The system of claim 4 , wherein computing environment authenticates the first mobile device by determining, based on the first tap gesture, that the distance is less than the threshold distance.

6 . The system of claim 1 , wherein the computing environment further authenticates the first mobile device by:
generating a database, the database comprising a plurality of registered devices and a plurality of user accounts, wherein each registered device of the plurality of registered devices is associated with a user account of the plurality of user accounts; updating the database to establish the first mobile device as a registered mobile device associated with the user account; and accessing the database to verify that the first request was received from the registered mobile device associated with the user account.

7 . A computer-implemented method comprising:
receiving, from a first mobile device, a first request to perform at least one function of an Internet of Things (IoT) service device, the IoT service device positioned in a location associated with a service provider, and the first request including first authentication credentials for a user account associated with the service provider; authenticating a first user of the first mobile device based on the first authentication credentials; authenticating the first mobile device based on a distance between a location of the first mobile device and the location associated with service provider being less than a threshold distance; receiving, from a second mobile device, a second request to perform the at least one function, the second mobile device being an authorized device associated with the service provider, and the second request including second authentication credentials for authorized personnel associated with the service provider; authenticating a second user of the second mobile device based on the second authentication credentials; authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider; and in response to authenticating the first user and the first mobile device and to authenticating the second user and the second mobile device, transmitting an application programming interface (API) call to the IoT service device to cause the IoT service device to perform the at least one function, wherein the at least one function involves a secure transaction between the IoT service device and the user account.

8 . The computer-implemented method of claim 7 , further comprising:
detecting an issue with the first request; and transmitting to the second mobile device a notification indicating the issue with the first request.

9 . The computer-implemented method of claim 7 , wherein authenticating the first mobile device comprises:
detecting the first mobile device via a near-field communication (NFC) token associated with the IoT service device and detecting the second mobile device via the NFC token.

10 . The computer-implemented method of claim 9 , wherein receiving, from the first mobile device, the first request further comprises detecting a first tap gesture between the first mobile device and the NFC token, and wherein receiving, from the second mobile device, the second request further comprises detecting a second tap gesture between the second mobile device and the NFC token.

11 . The computer-implemented method of claim 10 , wherein authenticating the first mobile device comprises determining, based on the first tap gesture, that distance is less than the threshold distance.

12 . The computer-implemented method of claim 7 , wherein the authenticating the first mobile device further comprises:
generating a database, the database comprising a plurality of registered devices and a plurality of user accounts, wherein each registered device of the plurality of registered devices is associated with a user account of the plurality of user accounts; updating the database to establish the first mobile device as a registered mobile device associated with the user account; and accessing the database to verify that the first request was received from the registered mobile device associated with the user account.

13 . A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:
receiving, from a first mobile device, a first request to perform at least one function of an Internet of Things (IoT) service device, the IoT service device positioned in a location associated with a service provider, and the first request including first authentication credentials for a user account associated with the service provider; authenticating a first user of the first mobile device based on the first authentication credentials; authenticating the first mobile device based on a distance between a location of the first mobile device and the location associated with service provider being less than a threshold distance; receiving, from a second mobile device, a s

Assignees

• Truist Bank

Inventors

• Gopalakrishnan Muthu
• Loesch Ryan

Classifications

• H04W12/06

  Authentication · CPC title

• H04W12/47 Primary

  using near field communication [NFC] or radio frequency identification [RFID] modules · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/08

  Access security · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title