# US 10,455,419 B2 · System and method for mobile identity protection for online user authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,455,419 B2 - Document ID: US10455419B2 - Status: Granted - Kind: B2 - Application number: 15/621,186 - Filed: 2017-06-13 - Published: 2017-09-28 - Granted: 2019-10-22 - Earliest claimed: 2007-03-16 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Charles L. Dennis; Randall A. Snyder; Michael F. Buhrmann; Patrick J. Boyle - Web page: https://patentgrep.com/patent/US10455419B2 ## CPC - H04W 12/06: Authentication - G06F 21/35: communicating wirelessly - G06Q 20/108: {Remote banking, e.g. home banking} - G06Q 20/32: using wireless devices - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04W 12/08: Access security - H04W 12/12: Detection or prevention of fraud - H04W 12/126: Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 84/005: {Moving wireless networks} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An automated system and method for authenticating entities or individuals attempting to access a computer application, network, system or device using a wireless device is provided. The system employs one or more short-range wireless interfaces (e.g. BLUETOOTH or Wi-Fi) or long-range wireless interfaces (e.g. cellular or WiMAX) to detect the presence or location of the wireless device and it's proximity to the secure system to be accessed. The wireless device incorporates a unique identifier and secure authentication key information associated with the user of the wireless device. An authentication result is generated and may be used for a variety of applications. The application may process the result and determine the degree of access for which the entity or individual is allowed. ## Claims ### Claim 1 A method comprising: obtaining, by an authentication application associated with a mobile access point in response to an attempt to access an application requiring secure access, an authentication key from a wireless device, the authentication key being generated from key logic generation resources, and being associated with a wireless device identifier; obtaining, by the authentication application, a location of the wireless device; generating, by the authentication application, an authentication result based on at least the location of the wireless device, a time that the location of the wireless device was obtained, and the authentication key from the wireless device; and allowing access to the application requiring secure access based upon the authentication result. ### Claim 2 (depends on 1) The method of claim 1, wherein the mobile access point and the wireless device communicate using a short range communication mechanism comprising a Bluetooth protocol. ### Claim 3 (depends on 1) The method of claim 1, further comprising: obtaining, from the wireless device, a wireless device ID from the wireless device. ### Claim 4 (depends on 1) The method of claim 1, wherein the mobile access point is a personal computer. ### Claim 5 (depends on 1) The method of claim 1, wherein the application requiring secure access is on the mobile access point. ### Claim 6 (depends on 1) The method of claim 1, wherein the mobile access point authenticates the wireless device and wherein the application requiring secure access is in the mobile access point. ### Claim 7 (depends on 1) The method of claim 1, wherein the authentication application, which is separate from the mobile access point, authenticates the wireless device. ### Claim 8 (depends on 1) The method of claim 1, wherein the application requiring secure access is a social networking application. ### Claim 9 (depends on 1) The method of claim 1, wherein the authentication application is on an external platform accessible via the Internet, and is separate from the mobile access point. ### Claim 10 (depends on 1) The method of claim 1, wherein communications between the wireless device and the mobile access point are encrypted. ### Claim 11 A system comprising: a processor; and a non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising obtaining, by an authentication application associated with a mobile access point in response to an attempt to access an application requiring secure access, an authentication key from a wireless device, the authentication key being generated from key logic generation resources, and being associated with a wireless device identifier, obtaining, by the authentication application, a location of the wireless device, generating, by the authentication application, an authentication result based on at least the location of the wireless device, a time that the location of the wireless device was obtained, and the authentication key from the wireless device, and allowing access to the application based upon the authentication result. ### Claim 12 (depends on 11) The system of claim 11, wherein the wireless device and the mobile access point communicate via a short range communication mechanism comprising a Bluetooth protocol. ### Claim 13 (depends on 11) The system of claim 11, wherein the method further comprises: obtaining, from the wireless device, a wireless device ID from the wireless device. ### Claim 14 (depends on 11) The system of claim 11, wherein the mobile access point is a personal computer. ### Claim 15 (depends on 11) The system of claim 11, wherein application requiring secure access is on the mobile access point. ### Claim 16 (depends on 11) The system of claim 11, wherein the mobile access point authenticates the wireless device and wherein the application requiring secure access is in the mobile access point. ### Claim 17 (depends on 11) The system of claim 11, wherein the authentication application, which is separate from the mobile access point, authenticates the wireless device. ### Claim 18 (depends on 11) The system of claim 11, wherein the application requiring secure access is a social networking application. ### Claim 19 (depends on 11) The system of claim 11, wherein the authentication application is on an external platform accessible via the Internet, and is separate from the mobile access point. ### Claim 20 (depends on 11) The system of claim 11, wherein communications between the wireless device and the mobile access point are encrypted.