System and method for mobile identity protection for online user authentication

Patent metadata

Field	Value
Publication number	US-9838872-B2
Application number	US-201514922727-A
Country	US
Kind code	B2
Filing date	Oct 26, 2015
Priority date	Mar 16, 2007
Publication date	Dec 5, 2017
Grant date	Dec 5, 2017

Abstract

An automated system and method for authenticating entities or individuals attempting to access a computer application, network, system or device using a wireless device is provided. The system employs one or more short-range wireless interfaces (e.g. BLUETOOTH or Wi-Fi) or long-range wireless interfaces (e.g. cellular or WiMAX)to detect the presence or location of the wireless device and it's proximity to the secure system to be accessed. The wireless device incorporates a unique identifier and secure authentication key information associated with the user of the wireless device. An authentication result is generated and may be used for a variety of applications. The application may process the result and determine the degree of access for which the entity or individual is allowed.

First claim

What is claimed is:

1. A method for detecting fraud using a wireless device of an entity, the method comprising:
obtaining, by an authentication application, data regarding an application access event from a data network, the application access event being an attempt to access an application by the entity, and wherein the application access event is automatically invoked when the wireless device of the entity is proximate to a mobile access point associated with the application;
obtaining, by the authentication application, a unique identifier representing the entity;
obtaining, by the authentication application, a location of the application access event from the mobile access point;
obtaining, by the authentication application, a location of the wireless device;
generating, by the authentication application, an authentication result based on at least the location of the application access event and a time that the location of the application access event was obtained, and the location of the wireless device; and
allowing or not allowing the entity to access the application based upon the authentication result.

2. The method of claim 1 , wherein the unique identifier is a mobile directory number.

3. The method of claim 1 , wherein the data regarding the application access event comprises an application ID representing the application.

4. The method of claim 1 , wherein the mobile access point is a personal computer.

5. The method of claim 1 , wherein the authentication result is used to deny access to the application.

6. An apparatus comprising:
a processor; and
a computer readable medium, the computer readable medium comprising code, executable by the processor, to implement a method comprising:
obtaining data regarding an application access event from a data network, the application access event being an attempt to access an application by an entity, and wherein the application access event is automatically invoked when a wireless device of the entity is proximate to a mobile access point associated with the application;
obtaining a unique identifier representing the entity;
obtaining a location of the application access event from the mobile access point;
obtaining a location of the wireless device;
generating an authentication result based on at least the location of the application access event and a time that the location of the application access event was obtained, and the location of the wireless device; and
allowing or not allowing the entity to access the application based upon the authentication result.

7. The apparatus of claim 6 , wherein the unique identifier is a mobile directory number.

8. The apparatus of claim 6 , wherein the data regarding the application access event comprises an application ID representing the application.

9. The apparatus of claim 6 , wherein the mobile access point is a base station.

10. The apparatus of claim 6 , wherein the authentication result is used to deny access to the application.

11. A method of authenticating an entity using a wireless device associated with the entity and configured to generate a wireless signal, the method comprising the steps of:
detecting the wireless device entering into proximity of an electronic device configured to provide the entity, upon authentication of the entity, access to use of an application requiring secure access;
obtaining from the wireless signal a unique identifier associated with the wireless device;
obtaining a location of the wireless device based on the unique identifier;
obtaining data regarding a location of the electronic device;
generating an authentication result authenticating the entity based on at least the unique identifier associated with the wireless device, the location of the wireless device, and data regarding the location of the electronic device; and
enabling the entity to use the application requiring secure access.

12. The method of claim 11 , wherein the authentication result is generated by at least comparing the location of the electronic device and the location of the wireless device.

13. The method of claim 11 , wherein the unique identifier is a mobile directory number.

14. The method of claim 11 , wherein the data regarding the location of the electronic device comprises an IP address of the electronic device.

15. The method of claim 11 , wherein the electronic device is a base station.

16. The method of claim 11 , wherein the application is on the electronic device.

17. The method of claim 11 , wherein the wireless device is a mobile phone.

18. The method of claim 11 , wherein the application is present on the electronic device.

19. The method of claim 11 , wherein communication with the wireless device is encrypted.

Assignees

• Visa Int Service Ass

Inventors

• Dennis Charles L
• Snyder Randall A
• Buhrmann Michael F
• Boyle Patrick J

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• G06Q20/108

  Remote banking, e.g. home banking · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title