Location-based mobile device authentication

Patent metadata

Field	Value
Publication number	US-2021058383-A1
Application number	US-202016998030-A
Country	US
Kind code	A1
Filing date	Aug 20, 2020
Priority date	Aug 21, 2019
Publication date	Feb 25, 2021
Grant date	—

Abstract

A computer server is disclosed that may include a processing unit and a computer-readable memory that may store computer-executable instructions that are executable by the processing unit to cause the computer server to perform various operations. The computer server may receive location data from a mobile client device and may compare the location data to predefined secure location definitions, which may be trusted or private locations. The computer server may receive a request from the mobile client device to access network resources or services, and the computer server may determine, using a result of comparing the location data and the one or more predefined secure location definitions, an authentication process for providing the mobile client device with access to the network resources or services. The computer server may execute the authentication process and may provide the mobile client device with access to the network resources or services.

First claim

What is claimed is:

1 . A computer server comprising:
a processing unit including one or more processors; a computer-readable memory storing thereon computer-executable instructions that are executable by the processing unit to cause the computer server to:
receive location data from a mobile client device;
compare the location data to one or more predefined secure location definitions associated with the mobile client device, wherein the one or more predefined secure location definitions comprise locations that are private or trusted for the mobile client device;
receive a request from the mobile client device to access one or more network resources or services provided by the computer server;
in response to the request from the mobile client device:
determine, using a result of comparing the location data and the one or more predefined secure location definitions associated with the mobile client device, an authentication process from among a plurality of authentication processes for providing the mobile client device with access to the network resources or services;
execute the authentication process for providing the mobile client device with access to the network resources or services; and
in response to successfully authenticating the mobile client device, provide the mobile client device with access to the network resources or services.

2 . The computer server of claim 1 , wherein the location data comprises a set of geographic coordinates of the mobile client device, and wherein the instructions are executable by the processing unit to cause the computer server to compare the location data to the one or more predefined secure location definitions by comparing the set of geographic coordinates of the mobile client device to a set of boundaries of a predefined geofence associated with the mobile client device.

3 . The computer server of claim 1 , wherein the location data from the mobile client device comprises an identifier of a wireless access point to which the mobile client device is connected, and wherein the instructions are executable by the processing unit to cause the computer server to compare the location data to the one or more predefined secure location definitions by comparing the identifier of the wireless access point to a predefined list of secure wireless access points associated with the mobile client device.

4 . The computer server of claim 1 , wherein the instructions that are executable by the processing unit to cause the computer server to execute the authentication process comprise instructions that are executable to:
allow, based on matching the location data to at least one predefined location definitions associated with the mobile client device, the mobile client device to access requested network resources or services and avoid additional authentication processes for the mobile client device.

5 . The computer server of claim 1 , wherein the instructions that are executable by the processing unit to cause the computer server to execute the authentication process comprise instructions that are executable to:
execute, based on not matching the location data to at least one predefined location definitions associated with the mobile client device, an additional authentication process, and successfully authenticate the mobile client device, prior to providing access to requested network resources or services.

6 . The computer server of claim 1 , wherein the computer-executable instructions are executable to cause the computer server to:
determine a first time associated with the location data received from the mobile client device; determine a second time associated with the request from the mobile client device; compare a difference between the second time and the first time to a location recency threshold, wherein the location recency threshold is a duration of time; and in response to the computer server determining the difference between the second time and the first time is greater than the location recency threshold, request new location data from the mobile client device.

7 . The computer server of claim 1 , wherein the computer server is configured to receive the request from the mobile client device to access one or more network resources or services provided by receiving the request from a mobile application installed on the mobile client device.

8 . The computer server of claim 1 , wherein the computer server is configured to provide recommendations or suggestions to a user of the mobile client device that certain locations be designated as predefined secure locations, and wherein the computer server is configured to receive one or more predefined secure location definitions from a user of the mobile client device.

9 . A method comprising:
receiving location data from a mobile client device; comparing the location data to one or more predefined secure location definitions associated with the mobile client device, wherein the one or more predefined secure location definitions comprise locations that are private or trusted for the mobile client device; receiving a request from the mobile client device to access one or more network resources or services provided by a computer server; in response to receiving the request from the mobile client device:
selecting, using a result of comparing the location data and the one or more predefined secure location definitions associated with the mobile client device, an authentication process from among a plurality of authentication processes for providing the mobile client device with access to the network resources or services;
executing the authentication process for providing the mobile client device with access to the network resources or services; and
providing, in response to successfully authenticating the mobile client device, the mobile client device with access to the network resources or services.

10 . The method of claim 9 , wherein the location data received from the mobile client device comprises a set of geographic coordinates of the mobile client device, the method further comprising:
comparing the location data to the one or more predefined secure location definitions by comparing the set of geographic coordinates of the mobile client device to a set of boundaries of a predefined geofence associated with the mobile client device.

11 . The method of claim 9 , wherein the location data from the mobile client device comprises an identifier of a wireless access point to which the mobile client device is connected, the method further comprising:
comparing the location data to the one or more predefined secure location definitions by comparing the identifier of the wireless access point to a predefined list of secure wireless access points associated with the mobile client device.

12 . The method of claim 9 , further comprising:
allowing, based on matching the location data to at least one predefined location definitions associated with the mobile client device, the mobile client device to access requested network resources or services and avoid additional authentication processes for the mobile client device.

13 . The method of claim 9 , further comprising:
executing, based on not matching the location data to at least one predefined location definitions associated with the mobile client device, an additional authentication process, and successfully authenticating the mobile client device, prior to providing access to requested network resources or services.

14 . The method of claim 9 , further comprising:
determining a first time associated with the location data received from the mobile c

Assignees

• Truist Bank

Inventors

• Colon Reinaldo Gamaliel Rivera
• Calamaco Jr Everardo
• Cestari Michaela Rose

Classifications

• H04W12/73

  Access point logical identity · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/61

  Time-dependent · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W4/029

  Location-based management or tracking services · CPC title