System and Method for Mobile Identity Protection for Online User Authentication

Patent metadata

Field	Value
Publication number	US-2016227405-A1
Application number	US-201514922727-A
Country	US
Kind code	A1
Filing date	Oct 26, 2015
Priority date	Mar 16, 2007
Publication date	Aug 4, 2016
Grant date	—

Abstract

An automated system and method for authenticating entities or individuals attempting to access a computer application, network, system or device using a wireless device is provided. The system employs one or more short-range wireless interfaces (e.g. BLUETOOTH or Wi-Fi) or long-range wireless interfaces (e.g. cellular or WiMAX) detect the presence or location of the wireless device and it's proximity to the secure system to be accessed. The wireless device incorporates a unique identifier and secure authentication key information associated with the user of the wireless device. An authentication result is generated and may be used for a variety of applications. The application may process the result and determine the degree of access for which the entity or individual is allowed.

First claim

1 .- 32 . (canceled)

33 . A method for detecting fraud based on an entity's wireless device, comprising:
detecting the wireless device entering into proximity of a mobile access point after an application access event to access an application is invoked; obtaining data regarding the application access event from a data network; obtaining a unique identifier representing the entity; obtaining a location of the application access event; and generating an authentication result based on one or more of the application access event data, and the location of the application access event and a time that the location of the application access event was obtained.

34 . The method of claim 33 , wherein the unique identifier is a mobile directory number.

35 . The method of claim 33 , wherein the data regarding the application access event comprises an application ID representing an application requiring secure access.

36 . The method of claim 33 , wherein the mobile access point is a personal computer.

37 . The method of claim 33 , wherein the generated authentication result is used to deny access to a computer application or device associated with the mobile access point.

38 . An apparatus comprising:
a processor; and a computer readable medium, the computer readable medium comprising code, executable by the processor, to implement a method comprising: detecting the wireless device entering into proximity of a mobile access point after an application access event is invoked; obtaining data regarding the application access event from a data network; obtaining a unique identifier representing the entity; obtaining a location of the application access event; and generating an authentication result based on one or more of the application access event data, and the location of the application access event and a time that the location of the application access event was obtained.

39 . The apparatus of claim 38 , wherein the unique identifier is a mobile directory number.

40 . The apparatus of claim 38 , wherein the data regarding the application access event comprises an application ID representing an application requiring secure access.

41 . The apparatus of claim 38 , wherein the mobile access point is a base station.

42 . The apparatus of claim 38 , wherein the generated authentication result is used to deny access to a computer application or device associated with the mobile access point.

43 . A method of authenticating an entity based on a wireless device associated with the entity and configured to generate a wireless signal, the method comprising the steps of:
detecting the wireless device entering into proximity of an electronic device configured to provide the entity, upon authentication of the entity, access to use of an application requiring secure access; obtaining from the wireless signal a unique identifier associated with the wireless device; obtaining authentication information based on the unique identifier; generating an authentication result authenticating the entity based on one or more of the unique identifier associated with the wireless device or authentication information based on the unique identifier; and enabling the authenticated entity to use the application requiring secure access.

44 . The method of claim 43 , wherein a database is employed associating the unique identifier with authentication information.

45 . The method of claim 43 , wherein the unique identifier is a mobile directory number.

46 . The method of claim 43 , wherein the data regarding the application access event comprises an application ID representing an application requiring secure access.

47 . The method of claim 43 , wherein the mobile access point is a base station.

48 . The method of claim 43 , wherein the generated authentication result is used to allow access to a computer application or device running the application.

49 . The method of claim 43 , wherein the generated authentication result is used to deny access to a computer application or device.

50 . The method of claim 43 , wherein authentication information is securely stored in the wireless device.

51 . The method of claim 43 , wherein communication with the wireless device is encrypted.

Assignees

• Visa Int Service Ass

Inventors

• Dennis Charles L
• Snyder Randall A
• Buhrmann Michael F
• Boyle Patrick J

Classifications

• H04W12/08

  Access security · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title