# US 10,122,733 B2 · Systems and methods for proximity identity verification

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,733 B2
- Document ID: US10122733B2
- Status: Granted
- Kind: B2
- Application number: 15/669,194
- Filed: 2017-08-04
- Published: 2018-02-08
- Granted: 2018-11-06
- Earliest claimed: 2016-08-02
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Drew Jacobs; Hannes Jouhikainen
- Web page: https://patentgrep.com/patent/US10122733B2

## CPC

- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- G06Q 10/40: Business processes related to social networking or social networking services
- G06Q 10/48: using social graphs
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 67/52: specially adapted for the location of the user terminal
- H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)}
- H04W 4/02: Services making use of location information
- H04W 4/029: Location-based management or tracking services
- H04W 4/21: for social networking applications
- H04W 12/06: Authentication
- H04W 12/63: Location-dependent; Proximity-dependent
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems and methods are provided for authenticating a user of a computing device. An example system includes a memory storing instructions, and a processor configured to execute the instructions to receive an authentication request from a user of a computing device, determine a context of the authentication request, determine a physical location of the user, and perform, based on the context of the authentication request and the physical location of the user, an associate proximity detection. The associate proximity detection includes steps to identify an associate based on at least one of the context of the authentication request or the physical location of the user, determine a physical location of the identified known associate, and determine a proximity of the user to the identified known associate. The authentication request may be approved when the determined proximity is within a threshold.

## Claims

### Claim 1

A system for authorizing a transaction, comprising:
one or more memory devices storing instructions; and
one or more processors configured to execute the instructions to:
receive a request to authorize a transaction initiated by a user;
determine that an indicator of relative risk associated with the transaction exceeds a first predetermined threshold, the relative risk being based at least in part on a current physical location of the user;
identify a known associate of the user based at least in part on the indicator of relative risk;
determine a proximity between the current physical location of the user and a current physical location of the identified known associate based on a wireless communication between a device associated with the user and a device associated with the identified known associate; and
approve the authorization request when the determined proximity is within a second predetermined threshold;
wherein identifying the known associate of the user comprises identifying the known associate from among a plurality of associates listed in a social network of the user, based on a geographical relationship between the current physical location of the identified known associate and the current physical location of the user, to increase confidence in verification of user identity.

### Claim 2 (depends on 1)

The system of claim 1, wherein receiving the authorization request comprises receiving an authorization request from an application executed on a computing device associated with the user.

### Claim 3 (depends on 1)

The system of claim 1, wherein the identified known associate is an associate predesignated by the user.

### Claim 4 (depends on 3)

The system of claim 3, wherein the identified known associated is predesignated by the user for transactions meeting a predetermined relative risk criteria.

### Claim 5 (depends on 3)

The system of claim 3, wherein the identified known associate is predesignated by the user for transactions occurring during a predetermined limited duration of time.

### Claim 6 (depends on 1)

The system of claim 1, wherein determining a proximity between the current physical location of the user and a current physical location of the identified known associate comprises determining a current physical location of a computing device associated with the user.

### Claim 7 (depends on 1)

The system of claim 1, wherein determining a proximity between the current physical location of the user and a current physical location of the identified known associate comprises determining the proximity based on a known fixed location of a computing device used by the user to initiate the transaction.

### Claim 8 (depends on 1)

The system of claim 1, wherein determining the current physical location of the user comprises analyzing activity of the user on a social network.

### Claim 9 (depends on 1)

The system of claim 1, wherein determining the current physical location of the identified known associate comprises analyzing activity of the identified known associate on a social network.

### Claim 10 (depends on 1)

The system of claim 1, wherein the processors are configured to determine the indicator of relative risk associated with the authentication request based on at least one of the current physical location of the user, a history of physical location information of the user, or a history of transactions requested by the user.

### Claim 11 (depends on 1)

The system of claim 1, wherein the processors are configured to determine the second predetermined threshold based on the current physical location of the user.

### Claim 12 (depends on 1)

The system of claim 1, wherein the processors are configured to determine the second predetermined threshold based on the identified known associate.

### Claim 13

A computing device operated by a user, the device comprising:
one or more memory devices storing instructions; and
one or more processors configured to execute the instructions to:
receive a user request to perform a transaction using the computing device;
determine that an indicator of relative risk associated with the transaction exceeds a first predetermined threshold, the relative risk being based at least in part on a current physical location of the user;
identify a known associate of the user based at least in part on the indicator of relative risk;
determine a proximity between the current physical location of the user and a current physical location of the identified known associate based on a wireless communication between the user's computing device and a device associated with the identified known associate; and
approve the transaction when the determined proximity is within a second predetermined threshold;
wherein identifying the known associate of the user comprises identifying the known associate from among a plurality of associates listed in a social network of the user, based on a geographical relationship between the current physical location of the identified known associate and the current physical location of the user, to increase confidence in verification of user identity.

### Claim 14 (depends on 13)

The computing device of claim 13, wherein the identified known associate is an associate predesignated by the user for transactions occurring during a predetermined limited duration of time.

### Claim 15 (depends on 13)

The computing device of claim 13, wherein the processors are configured to:
determine the current physical location of the user based on a known fixed location of the computing device, and
determine the second predetermined threshold based on the current physical location of the user.

### Claim 16

A computer-implemented method for authorizing a transaction, the method comprising:
receiving a request to authorize a transaction initiated by a user;
determining that an indicator of relative risk associated with the transaction exceeds a first predetermined threshold, the relative risk being based at least in part on a current physical location of the user;
identifying a known associate of the user based at least in part on the indicator of relative risk;
determining a proximity between the current physical location of the user and a current physical location of the identified known associate based on a wireless communication between a device associated with the user and a device associated with the identified known associate; and
approving the authorization request when the determined proximity is within a second predetermined threshold;
wherein identifying the known associate of the user comprises identifying the known associate from among a plurality of associates listed in a social network of the user, based on a geographical relationship between the current physical location of the identified known associate and the current physical location of the user, to increase confidence in verification of user identity.

### Claim 17 (depends on 16)

The computer-implemented method of claim 16, wherein the identified known associate is an associate predesignated by the user for transactions occurring during a predetermined limited duration of time.
