# US 10,482,692 B2 · Systems and methods for location-based automated authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,482,692 B2
- Document ID: US10482692B2
- Status: Granted
- Kind: B2
- Application number: 15/921,197
- Filed: 2018-03-14
- Published: 2018-07-26
- Granted: 2019-11-19
- Earliest claimed: 2017-01-23
- Assignees: Uscontracting, Inc.
- Applicants: UScontracting, Inc.
- Inventors: William Frederick Haworth; Kevin Austin Maynard; Jeffrey Brader Kidwell
- Web page: https://patentgrep.com/patent/US10482692B2

## CPC

- G06F 21/35: communicating wirelessly
- G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks}
- G07C 9/21: having a variable access code
- G07C 9/215: {the system having a variable access-code, e.g. varied as a function of time}
- G07C 9/27: with central registration
- G07C 9/28: the pass enabling tracking or indicating presence
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04W 4/02: Services making use of location information
- H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W 12/043: using a trusted network node as an anchor
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/72: Subscriber identity
- G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS
- G07B 15/063: {using wireless information transmission between the vehicle and a fixed station (identification of vehicles G08G)}
- G07C 2009/00317: {keyless data carrier having only one limited data transmission range}
- G07C 2009/00412: {the transmitted data signal being encrypted}
- G07C 2009/00769: {with data transmission performed by wireless means}
- H04L 2463/121: Timestamp
- H04W 4/48: for in-vehicle communication
- H04W 12/61: Time-dependent
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G07B: TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS

## Abstract

Systems and methods for location-based automated authentication are disclosed. A system comprises a mobile device, a sensor and a backend platform. The sensor and the backend platform are in network communication. The mobile device is operable to continuously transmit Bluetooth Low Energy (BLE) signals comprising encrypted transitory identifiers. The sensor is operable to receive a BLE signal from the mobile device when the mobile device is within a predetermined range, and communicate over a network connection the encrypted transitory identifier comprised in the BLE signal to the backend platform. The backend platform is operable to extract a unique identifier and a changing encrypted identifier from the received encrypted transitory identifier, generate a changing encrypted identifier, and validate a user identification by comparing the generated changing encrypted identifier and the extracted changing encrypted identifier.

## Claims

### Claim 1

A system for location-based automated authentication, comprising:
a user device, a sensor and a backend platform;
wherein the sensor and the backend platform are in network communication;
wherein the user device is operable to construct a Bluetooth Low Energy (BLE) signal through:
constructing a changing encrypted identifier based on a changing time interval;
combining the changing encrypted identifier with a unique identifier to form an encrypted transitory identifier;
packaging the encrypted transitory identifier into the BLE signal;
wherein the user device is operable to continuously transmit the BLE signal comprising the encrypted transitory identifier while operating in BLE advertising mode;
wherein the sensor is operable to receive the BLE signal from the user device and transmit the encrypted transitory identifier comprised in the BLE signal to the backend platform;
wherein the backend platform is operable to:
extract the changing encrypted identifier and the unique identifier from the received encrypted transitory identifier;
retrieve user identification parameters based on the unique identifier, wherein the user identification parameters include the changing time interval;
construct a second changing encrypted identifier based on the user identification parameters; and
validate a user identification by comparing the second changing encrypted identifier and the extracted changing encrypted identifier.

### Claim 2 (depends on 1)

The system of claim 1, wherein the user device is further operable to automatically adjust a transmission rate of the continuous transmission of the BLE signal based on a determined idleness of the user device.

### Claim 3 (depends on 1)

The system of claim 1, wherein a transmission rate of the BLE signal is dependent upon a Central Processing Unit (CPU) activity of the user device.

### Claim 4 (depends on 1)

The system of claim 1, wherein the user identification parameters include user names, phone numbers, work identification numbers, member identification numbers, financial account information, billing information or other personal information.

### Claim 5 (depends on 1)

The system of claim 1, wherein the user device is further operable to download and activate an application program and send the user identification parameters to the backend platform through the application program.

### Claim 6 (depends on 1)

The system of claim 1, wherein a BLE connection is never established between the user device and the sensor and a BLE connection is never established between the user device and the backend platform.

### Claim 7 (depends on 1)

The system of claim 1, wherein the user device is operable to continuously transmit the BLE signal comprising the encrypted transitory identifier between approximately seven times per second and approximately thirteen times per second.

### Claim 8 (depends on 1)

The system of claim 1, wherein the predetermined range is defined based on a signal strength threshold.

### Claim 9 (depends on 1)

The system of claim 1, wherein the user device is equipped with Bluetooth version 4.0 or a later Bluetooth version.

### Claim 10 (depends on 1)

The system of claim 1, wherein the user identification is validated when the second changing encrypted identifier and the extracted changing encrypted identifier match.

### Claim 11 (depends on 1)

The system of claim 1, wherein the user device utilizes a highest available transmission rate setting for BLE transmissions.

### Claim 12 (depends on 1)

The system of claim 1, wherein the backend platform is further operable to send a notification to the sensor regarding a validation result.

### Claim 13 (depends on 12)

The system of claim 12, wherein the user device is further operable to receive the notification from the backend platform.

### Claim 14 (depends on 1)

The system of claim 1, wherein the user device is further operable to automatically activate the BLE advertising mode upon detecting that a measured or approximated speed of the user device is above a threshold, that the user device is located within a vehicle, or that the user device is within a predetermined distance of the vehicle.

### Claim 15

A method for location-based automated authentication, comprising:
a user device constructing an encrypted transitory identifier from a changing encrypted identifier and a unique identifier, wherein the changing encrypted identifier is based on an original account timestamp, a changing time interval, and a current timestamp;
the user device packaging the encrypted transitory identifier into a Bluetooth Low Energy (BLE) signal;
the user device continuously transmitting the BLE in Bluetooth Low Energy (BLE) advertising mode;
a sensor receiving the BLE signal;
the sensor communicating the encrypted transitory identifier comprised in the BLE signal to a backend platform via network communication;
the backend platform receiving the encrypted transitory identifier;
the backend platform extracting the changing encrypted identifier and the unique identifier from the received encrypted transitory identifier;
the backend platform retrieving user identification parameters based on the unique identifier, including the original account timestamp, the changing time interval, and the current timestamp, and constructing a second changing encrypted identifier; and
the backend platform validating a user identification by comparing the second changing encrypted identifier and the extracted changing encrypted identifier.

### Claim 16 (depends on 15)

The method of claim 15, wherein a BLE connection is never established between the user device and the sensor and a BLE connection is never established between the user device and the backend platform.

### Claim 17 (depends on 15)

The method of claim 15, wherein a transmission rate of the BLE signal is dependent upon Central Processing Unit (CPU) activity of the user device.

### Claim 18

A system for location-based automated authentication, comprising:
a user device, a sensor, and a backend platform;
wherein the sensor and the backend platform are in network communication;
wherein the user device is operable to continuously transmit a Bluetooth Low Energy (BLE) signal comprising an encrypted transitory identifier via a broadcast in BLE advertising mode;
wherein the sensor is operable to receive the BLE signal from the user device and transmit the encrypted transitory identifier comprised in the BLE signal to the backend platform;
wherein the backend platform is operable to extract a unique identifier and a changing encrypted identifier from the received encrypted transitory identifier, generate a second changing encrypted identifier based on user identification parameters associated with the extracted unique identifier, and validate a user identification by comparing the generated second changing encrypted identifier and the extracted changing encrypted identifier;
wherein a BLE connection is never established between the user device and the sensor and a BLE connection is never established between the user device and the backend platform; and
wherein the user device is further operable to increase or decrease a transmission rate for continuously transmitting the BLE signal based on a determined idleness of the user device.

### Claim 19 (depends on 18)

The system of claim 18, wherein the user device transmits the BLE signal comprising the encrypted transitory identifier at a rate of between about 7 Hz and about 13 Hz.