# US 10,373,246 B1 · Method and apparatus of providing enhanced authentication and security for financial institution transactions > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,373,246 B1 - Document ID: US10373246B1 - Status: Granted - Kind: B1 - Application number: 13/312,019 - Filed: 2011-12-06 - Granted: 2019-08-06 - Earliest claimed: 2011-12-06 - Assignees: West Corporation - Applicants: Jason H. Groenjes; Michael P. Brown; Gerald M. Price - Inventors: Jason H. Groenjes; Michael P. Brown; Gerald M. Price - Web page: https://patentgrep.com/patent/US10373246B1 ## CPC - G06Q 40/00: Finance; Insurance; Tax strategies; Processing of corporate or income taxes - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Example embodiments of the present invention may include a method and apparatus configured to authenticate a user transaction (e.g., point-of-sale, ATM transactions, etc.). One example method may include receiving user authentication information during the user transaction and confirming the user authentication information is correct. The method may also include determining a current user location by a location associated with the user's mobile device, and comparing the current user location to a known location of an entity associated with the user transaction. The method may also include authenticating the transaction if the current user location is within a predetermined distance of the known location of the entity associated with the user transaction. ## Claims ### Claim 1 A method of authenticating a user transaction, the method comprising: receiving, via an authenticating computing device, first user authentication information of a first type from a user during the user transaction; receiving, via a receiver of an authenticating computing device, and from a mobile device of the user, second user authentication information, of a second type different than the first type, during the user transaction; confirming, via a processor, the second user authentication information is correct; performing at least one of triangulation and global positioning via communication with a base station communicating with the mobile device to determine a current location of the mobile device; comparing the location of the mobile device to a known location of an entity associated with the user transaction; identifying a plurality of location positions of the mobile device prior to the user transaction; logging the plurality of location positions of the mobile device by periodically updating location information of the mobile device in a location database over a predetermined amount of time prior to the user transaction; comparing the plurality of location positions of the mobile device to the known location of the entity associated with the user transaction; performing, via the authenticating computing device, a first authentication of the user transaction based on the first user authentication information; and performing, via the authenticating computing device, a second authentication of the user transaction based on the second user authentication information, wherein the second user authentication information includes information identifying a current location of the mobile device with respect to at least one of the plurality of location positions, wherein, in response to the first authentication being successful and the second authentication indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely controlling a first level of access granted to the user for the user transaction, and in response to the first authentication being successful and the second authentication not indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely controlling a second level of access, less than the first level of access, is granted to the user for the user transaction. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the current user mobile device location is performed via GPS. ### Claim 3 (depends on 1) The method of claim 1, wherein determining the current user mobile device location is performed via triangulation. ### Claim 4 (depends on 1) The method of claim 1, wherein determining the current user mobile device location is performed after the user authentication information is received. ### Claim 5 (depends on 1) The method of claim 1, wherein determining the current user mobile device location is performed prior to the user authentication information being received. ### Claim 6 (depends on 1) The method of claim 1, further comprising: authenticating the user transaction if at least one of the plurality of location positions was identified within the predetermined amount of time, and if the user authentication information is correct. ### Claim 7 (depends on 1) The method of claim 1, wherein if the current user mobile device location is not within a predetermined distance of the known location of the entity associated with the user transaction, then disabling predefined functions specified by a user application operating on the mobile device. ### Claim 8 An apparatus configured to authenticate a user transaction, the apparatus comprising: a receiver configured to receive, during a user transaction, both first user authentication information of a first type from a user, and second user authentication information, of a second type different than the first type, from a mobile device associated with the user; and a processor configured to: confirm the second user authentication information is correct, perform at least one of triangulation and global positioning via communication with a base station communicating with the mobile device to determine a current location of the mobile device, compare the location of the mobile device to a known location of an entity associated with the user transaction, identify a plurality of location positions of the mobile device prior to the user transaction, log the plurality of location positions of the mobile device by periodically updating location information of the mobile device in a location database over a predetermined amount of time prior to the user transaction, compare the plurality of location positions of the mobile device to the known location of the entity associated with the user transaction, perform a first authentication of the user transaction based on the first user authentication information; and perform a second authentication of the user transaction based on the second user authentication information, wherein the second user authentication information includes information identifying a current location of the mobile device with respect to at least one of the plurality of location positions, wherein, in response to the first authentication being successful and the second authentication indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely control a first level of access granted to the user for the user transaction, and in response to the first authentication being successful and the second authentication not indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely control a second level of access, less than the first level of access, is granted to the user for the user transaction. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein the current user mobile device location is determined via GPS. ### Claim 10 (depends on 8) The apparatus of claim 8, wherein the current user mobile device location is determined via triangulation. ### Claim 11 (depends on 8) The apparatus of claim 8, wherein the current user mobile device location is determined after the user authentication information is received. ### Claim 12 (depends on 8) The apparatus of claim 8, wherein the current user mobile device location is determined prior to the user authentication information being received. ### Claim 13 (depends on 8) The apparatus of claim 8, wherein the processor is further configured to identify if at least one of the plurality of location positions was identified within the predetermined amount of time, and if the user authentication information is correct. ### Claim 14 (depends on 8) The apparatus of claim 8, wherein if the current user mobile device location is not within a predetermined distance of the known location of the entity associated with the user transaction, then the processor is further configured to disable predefined functions specified by a user application operating on the user's mobile device. ### Claim 15 A non-transitory computer readable storage medium configured to store instructions that when executed by a processor cause the processor to perform authenticating a user transaction, the processor being further configured to perform: receiving first user authentication information of a first type from a user during the user transaction; receiving second user authentication, of a second type different than the first type, during the user transaction; confirming the second user authentication information is correct; performing at least one of triangulation and global positioning via communication with a base station communicating with the mobile device to determine a current location of the mobile device; comparing the location of the mobile device to a known location of an entity associated with the user transaction; identifying a plurality of location positions of the mobile device prior to the user transaction; logging the plurality of location positions of the mobile device by periodically updating location information of the mobile device in a location database over a predetermined amount of time prior to the user transaction; comparing the plurality of location positions of the mobile device to the known location of the entity associated with the user transaction; performing, via the authenticating computing device, a first authentication of the user transaction based on the first user authentication information; and performing, via the authenticating computing device, a second authentication of the user transaction based on the second user authentication information, wherein the second user authentication information includes information identifying a current location of the mobile device with respect to at least one of the plurality of location positions, wherein, in response to the first authentication being successful and the second authentication indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely controlling a first level of access granted to the user for the user transaction, and in response to the first authentication being successful and the second authentication not indicating that the at least one of the plurality of location positions of mobile device are within a predetermined distance of the known location of the entity associated with the user transaction, then remotely controlling a second level of access, less than the first level of access, is granted to the user for the user transaction. ### Claim 16 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein determining the current user mobile device location is performed via GPS. ### Claim 17 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein determining the current user mobile device location is performed via triangulation. ### Claim 18 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein determining the current user mobile device location is performed after the user authentication information is received. ### Claim 19 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein determining the current user mobile device location is performed prior to the user authentication information being received. ### Claim 20 (depends on 15) The non-transitory computer readable storage medium of claim 15, wherein the processor is further configured to perform: authenticating the user transaction if at least one of the plurality of location positions was identified within the predetermined amount of time, and if the user authentication information is correct.