Systems and methods for authenticating a user of a computer application, network, or device using a wireless device

Patent metadata

Field	Value
Publication number	US-9801063-B2
Application number	US-201615250328-A
Country	US
Kind code	B2
Filing date	Aug 29, 2016
Priority date	Mar 16, 2007
Publication date	Oct 24, 2017
Grant date	Oct 24, 2017

Abstract

A method and system for authenticating a user includes providing an invocation element capable of being activated by a single user action, receiving an indication that the invocation element has been activated, obtaining a location of a wireless device associated with the user, determining whether the wireless device is associated with an authorized user, approving the user to use the application based on a predetermined location criterion, and producing an indication that the user has been authenticated.

First claim

The embodiments of the invention in which an exclusive property or privilege is claimed are defined as follows:

1. A method comprising:
a) obtaining a location of a wireless device, the wireless device being in communication with a mobile access point via a short range wireless connection;
b) determining, using a computerized authentication system, whether the wireless device is authorized based on a previously registered association between a wireless device identifier associated with the wireless device and an application identifier associated with an application;
c) approving a user to use the application using the computerized authentication system based on a predetermined location criterion related to one or more of the obtained wireless device location or a location of the mobile access point, when the wireless device is authorized; and
d) producing an indication on one or more of the mobile access point or the wireless device that the user has been authenticated when the user was approved using the computerized authentication system,
wherein the predetermined location criterion includes determining that the wireless device is within a predetermined distance of the mobile access point.

2. The method of claim 1 , wherein the short range wireless connection is a Bluetooth connection.

3. The method of claim 1 , further comprising:
automatically connecting the wireless device and the mobile access point using the short range wireless connection, before step a).

4. The method of claim 1 , further comprising:
querying the wireless device by the computerized authentication system before step a).

5. The method of claim 1 , further comprising:
obtaining a location of the mobile access point.

6. The method of claim 5 , wherein the wireless access point automatically detects a presence of the wireless device.

7. The method of claim 1 , wherein the wireless device identifier is a phone number.

8. The method of claim 1 , wherein the mobile device is a mobile phone.

9. The method of claim 1 , wherein the wireless device is configured to communicate with the authentication system over a cellular network.

10. The method of claim 1 , wherein the wireless device is configured to communicate with the authentication system over a Wi-Fi connection.

11. A computerized authentication system comprising a processor, and a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor, to implement a method comprising:
a) obtaining a location of a wireless device, the wireless device being in communication with a mobile access point via a short range wireless connection;
b) determining whether the wireless device is authorized based on a previously registered association between a wireless device identifier associated with the wireless device and an application identifier associated with an application using the computerized authentication system;
c) approving a user to use the application using the computerized authentication system based on a predetermined location criterion related to one or more of the obtained wireless device location or a location of the mobile access point, when the wireless device is authorized; and
d) producing an indication on one or more of the mobile access point or the wireless device that the user has been authenticated when the user was approved using the computerized authentication system,
wherein the predetermined location criterion includes determining that the wireless device is within a predetermined distance of the mobile access point.

12. The computerized authentication system of claim 11 , wherein the short range wireless connection is a Bluetooth connection.

13. The computerized authentication system of claim 11 , wherein the method further comprises:
automatically connecting the wireless device and the mobile access point using the short range wireless connection, before step a).

14. The computerized authentication system of claim 11 , wherein the method further comprises:
querying the wireless device by the computerized authentication system before step a).

15. The computerized authentication system of claim 11 , wherein the method further comprises:
obtaining a location of the mobile access point.

16. The computerized authentication system of claim 11 , wherein the mobile access point comprises a computer comprising a processor and a memory.

17. The computerized authentication system of claim 11 , wherein the mobile device is a mobile phone.

18. The computerized authentication system of claim 11 , wherein the wireless device is configured to communicate with the authentication system over a cellular network.

19. The computerized authentication system of claim 11 , wherein the wireless device is configured to communicate with the authentication system over a Wi-Fi connection.

20. The computerized authentication system of claim 11 , wherein the computerized authentication system comprises a transaction processing module.

Assignees

• Visa Int Service Ass

Inventors

• Dennis Charles L
• Snyder Randall A
• Boyle Patrick J

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/08

  Access security · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W88/08

  Access point devices · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title