# US 10,313,358 B2 · Systems and methods for proximity identity verification > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,358 B2 - Document ID: US10313358B2 - Status: Granted - Kind: B2 - Application number: 15/666,318 - Filed: 2017-08-01 - Published: 2018-02-08 - Granted: 2019-06-04 - Earliest claimed: 2016-08-02 - Assignees: Capital One Services, LLC - Applicants: Capital One Services, LLC - Inventors: Drew Jacobs; Hannes Jouhikainen - Web page: https://patentgrep.com/patent/US10313358B2 ## CPC - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - G06Q 10/40: Business processes related to social networking or social networking services - G06Q 10/48: using social graphs - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 67/52: specially adapted for the location of the user terminal - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04W 4/02: Services making use of location information - H04W 4/029: Location-based management or tracking services - H04W 4/21: for social networking applications - H04W 12/06: Authentication - H04W 12/63: Location-dependent; Proximity-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods are provided for authenticating a user of a computing device. An example system includes a memory storing instructions, and a processor configured to execute the instructions to receive an authentication request from a user of a computing device, determine a context of the authentication request, determine a physical location of the user, and perform, based on the context of the authentication request and the physical location of the user, an associate proximity detection. The associate proximity detection includes steps to identify an associate based on at least one of the context of the authentication request or the physical location of the user, determine a physical location of the identified known associate, and determine a proximity of the user to the identified known associate. The authentication request may be approved when the determined proximity is within a threshold. ## Claims ### Claim 1 A system for authenticating a user of a computing device, the system comprising: one or more memory devices storing instructions; and one or more processors configured to execute the instructions to: receive an authentication request from a user of a computing device; determine an indicator of relative risk associated with the authentication request; determine a context of the authentication request based on a most recent user action or a history of user activity; determine physical location information of the user; perform, based on the indicator of relative risk, the context of the authentication request, and the physical location information of the user, an associate proximity detection, the associate proximity detection including steps to: identify a known associate based at least in part on the context of the authentication request and the physical location information of the user; determine physical location information of the identified known associate based on a wireless communication between the user's computing device and a device associated with the identified known associate; determine a proximity of the user to the identified known associate, based on a comparison of the physical location information of the user and the physical location of the identified known associate; and provide a result signal indicating whether the determined proximity is within a threshold parameter; and approve the authentication request based on the result signal. ### Claim 2 (depends on 1) The system of claim 1, wherein receiving an authentication request comprises receiving, via an application executed on the computing device, an action request including the authentication request. ### Claim 3 (depends on 1) The system of claim 1, wherein receiving an authentication request comprises receiving a user request to access information stored on the computing device, the user request including the authentication request. ### Claim 4 (depends on 1) The system of claim 1, wherein the identified known associate is an associate predesignated by the user. ### Claim 5 (depends on 1) The system of claim 1, wherein identifying the known associate comprises identifying a known associate from a social network of the user. ### Claim 6 (depends on 5) The system of claim 5, wherein identifying the known associate comprises identifying the known associate from among a plurality of associates listed in the social network, based on a predetermined relationship with the context of the authentication request. ### Claim 7 (depends on 6) The system of claim 6, wherein the context of the authentication request comprises a geographic location. ### Claim 8 (depends on 1) The system of claim 1, wherein determining the physical location information of the user comprises receiving information from a global positioning system component of the computing device. ### Claim 9 (depends on 1) The system of claim 1, wherein determining the physical location information of the user comprises determining network access information of at least one of an Internet access point or a cellular communication signal. ### Claim 10 (depends on 1) The system of claim 1, wherein determining the physical location information of the user comprises analyzing social network activity of the user. ### Claim 11 (depends on 1) The system of claim 1, wherein determining the physical location information of the identified known associate comprises analyzing social network activity of the identified known associate. ### Claim 12 (depends on 1) The system of claim 1, wherein the relative risk is determined based on a sensitivity of an action by the user or an extent to which the user action deviates from known or expected user behaviors. ### Claim 13 A computing device operated by a user, the device comprising: one or more memory devices storing instructions; and one or more processors configured to execute the instructions to: identify an action requested by a user of the computing device; determine an indicator of relative risk associated with the action; determine a context of the action, based at least on a most recent user action or a history of user activity and on a physical location of the computing device; perform, based on the indicator of relative risk and the context of the action, an associate proximity detection, the associate proximity detection including steps to: identify a known associate based at least in part on the context of the action and the physical location of the computing device; determine a physical location of the identified known associate based on a wireless communication between the user's computing device and a device associated with the identified known associate; and determine a proximity of the user to the identified known associate, based on a comparison of the physical location of the computing device and the physical location of the identified known associate; and approve the action when the determined proximity is within a threshold predetermined for the associate proximity detection. ### Claim 14 (depends on 13) The computing device of claim 13, wherein the action requested by the user of the computing device is an action to access information stored on the computing device. ### Claim 15 (depends on 13) The computing device of claim 13, wherein the one or more processors are configured to determine the physical location of the identified known associate based on a wireless communication between the computing device and a device associated with the identified known associate. ### Claim 16 (depends on 13) The computing device of claim 13, wherein the identified known associate is an associate predesignated by the user. ### Claim 17 A computer-implemented method for authenticating a user of a computing device, the method comprising: receiving an authentication request from a user of a computing device; determining an indicator of relative risk associated with the authentication request; determining a context of the authentication request based on a most recent user action or a history of user activity; determining a physical location of the user; determining, based on the indicator of relative risk, the context of the authentication request, and the physical location of the user, an associate proximity detection, the associate proximity detection including steps to: identify a known associate based at least in part on the context of the authentication request and the physical location of the user; determine a physical location of the identified known associate based on a wireless communication between the user's computing device and a device associated with the identified known associate; and determine a proximity of the user to the identified known associate, based on a comparison of the physical location of the computing device and the physical location of the identified known associate; and approving the authentication request when the determined proximity is within a threshold predetermined for the associate proximity detection. ### Claim 18 (depends on 17) The computer-implemented method of claim 17, wherein receiving an authentication request comprises at least one of receiving, via an application executed on the computing device, an action request including the authentication request, or receiving a user request to access information stored on the computing device, the user request including the authentication request. ### Claim 19 (depends on 17) The computer-implemented method of claim 17, wherein identifying the known associate comprises at least one of identifying an associate predesignated by the user, identifying a known associate from a social network of the user, and identifying the known associated from among several known associates in the social network of the user, based on a predetermined relationship with the context of the authentication request. ### Claim 20 (depends on 17) The computer-implemented method of claim 17, wherein determining the physical location of the user comprises analyzing social network activity of the user. ### Claim 21 (depends on 17) The computer-implemented method of claim 17, wherein determining the physical location of the identified known associate comprises analyzing social network activity of the known associate.