Contactless access to service devices to facilitate secure transactions

Patent metadata

Field	Value
Publication number	US-12561690-B2
Application number	US-202318221145-A
Country	US
Kind code	B2
Filing date	Jul 12, 2023
Priority date	Jul 12, 2023
Publication date	Feb 24, 2026
Grant date	Feb 24, 2026

Abstract

A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.

First claim

What is claimed is:

1 . A system comprising:
a plurality of Internet of Things (IoT) service devices associated with a service provider; a computing environment, the computing environment configured to control the plurality of IoT service devices by:
receiving a first access request from a first mobile device, the first access request transmitted in response to a first user of the first mobile device performing a contactless authentication process with a particular IoT service device of the plurality of IoT service devices;
in response to receiving the first access request, authenticating the first mobile device by:
accessing location services of the first mobile device to determine a location of the first mobile device; and
determining that a distance between the location of the first mobile device and a location of the particular IoT service device is less than a threshold distance;
in response to authenticating the first mobile device:
identifying a user account associated with the first mobile device and with the service provider;
providing access for the first mobile device to a first selectable option corresponding to a function of the particular IoT service device, the first selectable option being provided via a software application associated with the service provider, and the function involving a secure transaction with respect to the user account;
receiving, from the first mobile device and in response to a user selection of the first selectable option, a first request for the particular IoT service device to execute the function, the first request comprising first authentication credentials associated with the first user;
determining, based on the first authentication credentials that the first request is invalid; and
in response to determining that the first request is invalid:
transmitting a notification indicating that the first request is invalid to a second mobile device, the second mobile device being an authorized device associated with the service provider;
receiving, from the second mobile device, a second access request in response to a second user of the second mobile device performing the contactless authentication process with the particular IoT service device of the plurality of IoT service devices;
in response to receiving the second access request, authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider;
in response to authenticating the second mobile device, providing access, for the second mobile device, to a second selectable option corresponding to the function of the particular IoT service device;
receiving, from the second mobile device and in response to a user selection of the second selectable option, a second request for the particular IoT service device to execute the function involving the secure transaction with respect to the user account, the second request including second authentication credentials for authorized personnel associated with the service provider;
in response to receiving the second request, authenticating the second user of the second mobile device based on the second authentication credentials; and
in response to receiving the second request to perform the function involving the secure transaction with respect to the user account and to authenticating the second mobile device and the second user, transmitting an application programming interface call to the particular IoT service device to cause the particular IoT service device to execute the function by executing the secure transaction with respect to the user account.

2 . The system of claim 1 , wherein the computing environment receives the first access request from the first mobile device in response to the first user performing the contactless authentication process by scanning a QR code associated with the particular IoT service device.

3 . The system of claim 2 , wherein the computing environment is further configured to control the plurality of IoT service devices by identifying the particular IoT service device by:
accessing a database, the database comprising a mapping that relates each IoT service device of the plurality of IoT service devices to a corresponding QR code of a plurality of QR codes; and determining, based on the mapping, that the QR code is associated with the particular IoT service device.

4 . The system of claim 1 , wherein the computing environment receives the first access request from the first mobile device in response to the first user performing the contactless authentication process via a tap gesture of the first mobile device to a NFC token associated with the particular IoT service device.

5 . The system of claim 1 , wherein the computing environment identifies the user account associated with the first mobile device and with the service provider by:
accessing a database, the database comprising a mapping that relates each mobile device of a plurality of mobile devices to a corresponding user account of a plurality of user accounts; and determining, based on the mapping, that the first mobile device is associated with the user account.

6 . A computer-implemented method comprising:
receiving a first access request from a first mobile device, the first access request transmitted in response to a first user of the first mobile device performing a contactless authentication process with a particular Internet of Things (IoT) service device of a plurality of IoT service devices, the plurality of IoT service devices associated with a service provider; in response to receiving the first access request, authenticating the first mobile device by:
accessing location services of the first mobile device to determine a location of the first mobile device;
determining that a distance between the location of the first mobile device and a location of the particular IoT service device is less than a threshold distance;
in response to authenticating the first mobile device:
identifying a user account associated with the first mobile device and with the service provider;
providing access for the first mobile device to a first selectable option corresponding to a function of the particular IoT service device, the first selectable option being provided via a software application associated with the service provider, and the function involving a secure transaction with respect to the user account;
receiving, from the first mobile device and in response to a user selection of the first selectable option, a first request for the particular IoT service device to execute the function, the first request comprising first authentication credentials associated with the first user;
determining, based on the first authentication credentials, that the first request is invalid;
in response to determining that the first request is invalid:
transmitting a notification indicating that the first request is invalid to a second mobile device, the second mobile device being an authorized device associated with the service provider;
receiving, from the second mobile device, a second access request in response to a second user of the second mobile device performing the contactless authentication process with the particular IoT service device of the plurality of IoT service devices;
in response to receiving the second access request, authenticating the second mobile device based on the second mobile device being the authorized device associated with the service provider;
in response to authenticating the second mobile device, providing access, for the second mobile device, to a second selectable option corresponding to the function of the particular IoT service device;
receiving, from the second mobile device and in response to a user selection of the second

Assignees

• Truist Bank

Inventors

• Swaminathan Sudhakar
• Gopalakrishnan Muthu
• Loesch Ryan

Classifications

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/3276

  using a pictured code, e.g. barcode or QR-code, being read by the M-device · CPC title

• G06Q20/4015

  using location information · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• H04W12/06

  Authentication · CPC title