# US 10,769,897 B1 · Securing a cardless ATM authentication through position detection

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,769,897 B1
- Document ID: US10769897B1
- Status: Granted
- Kind: B1
- Application number: 16/746,619
- Filed: 2020-01-17
- Granted: 2020-09-08
- Earliest claimed: 2020-01-17
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Mitchell Miller
- Web page: https://patentgrep.com/patent/US10769897B1

## CPC

- G07F 19/207: {Surveillance aspects at ATMs}
- G06Q 20/3224: {Transactions dependent on location of M-devices}
- G06Q 20/327: {Short range or proximity payments by means of M-devices}
- G07F 9/001: {Interfacing with vending machines using mobile or wearable devices}
- G07F 19/20: {Automatic teller machines [ATMs]}
- G07F 19/204: {Loading of a stored value token using an ATM}
- H04L 63/0838: {using one-time-passwords}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04W 12/041: Key generation or derivation
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/12: Detection or prevention of fraud
- H04W 12/63: Location-dependent; Proximity-dependent
- H04L 2463/102: applying security measure for e-commerce
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems and methods include a kiosk that performs an electronic payment transaction based on instructions received from a portable device of a user. The system further includes a transmitting device electrically coupled to the kiosk. The transmitting device is configured to transmit a first signal to the portable device at a first direction. The system further includes a receiving device electrically coupled to the kiosk. The receiving device is configured to receive a second signal from the portable device at a second direction. The transmitting device and receiving device are positioned such that the first and second direction enable determination of a position of the user, where the processor enables the electronic payment transaction to be processed only when the portable device is at a location relative to the kiosk. The location is disposed within a transmission path coextensive with both the first direction and the second direction.

## Claims

### Claim 1

A system comprising:
a kiosk, the kiosk comprising a processor, the processor configured to perform an electronic payment transaction based on instructions received from a portable device of a user;
a transmitting device electrically coupled to the kiosk, the transmitting device configured to transmit a first signal to the portable device at a first direction; and
a receiving device electrically coupled to the kiosk, the receiving device configured to receive a second signal from the portable device at a second direction, wherein the transmitting device and receiving device are positioned such that the first and second direction enable determination of a position of the user,
wherein the processor enables the electronic payment transaction to be processed only when the portable device is at a location relative to the kiosk, and
wherein the location is disposed within a transmission path coextensive with both the first direction and the second direction.

### Claim 2 (depends on 1)

The system of claim 1, wherein the transmitting device transmits the first signal based on an instruction received from the kiosk.

### Claim 3 (depends on 1)

The system of claim 1, wherein the transmitting device and receiving device are positioned to enable the kiosk, by the processor, to triangulate a position of the user.

### Claim 4 (depends on 1)

The system of claim 1, wherein the receiving device is disposed over the transmitting device in a direction extending linearly with the first direction and the second direction.

### Claim 5 (depends on 1)

The system of claim 1, wherein:
the kiosk, based on an initiation signal received from the transmitting device, generates an encryption key,
the transmitting device, based on an instruction received from the kiosk, transmits the first signal, the first signal comprising the encryption key, and
the processor, based on the second signal received from the portable device, establishes a secure binding between the kiosk and the portable device, the secure binding enabling processing of the electronic payment transaction.

### Claim 6 (depends on 5)

The system of claim 5, wherein the processor determines, based on the second signal whether the user is in proximity of the kiosk, and, when the user is in proximity of the kiosk, authorizes the electronic payment transaction.

### Claim 7 (depends on 5)

The system of claim 5, wherein the transmitting device is configured to transmit the first signal, by a directional antenna, to the portable device disposed over the directional antenna.

### Claim 8 (depends on 1)

The system of claim 1, wherein the transmitting device comprises a base member, a directional antenna electrically coupled to the kiosk, and a piezoelectric sensor electrically coupled to the kiosk.

### Claim 9

A computer-implemented method comprising:
receiving, by a portable device, an input from a user, the input including an instruction for an electronic payment transaction;
transmitting, by the portable device, a transaction request to a kiosk, the kiosk comprising one or more computing devices, the transaction request including the instruction for the electronic payment transaction;
receiving, by the portable device, an encryption key from a transmitting device of the kiosk, the encryption key received from the transmitting device at a first direction;
generating, by the portable device, a key response based on the encryption key; and
transmitting, by the portable device, the key response to a receiving device of the kiosk, the key response transmitted at a second direction,
wherein the receiving the encryption key from the first direction and the transmitting the response key at the second direction enable determination of a proximity of the user to the kiosk, and
wherein the transmitting the response key enables the kiosk to process the electronic payment transaction based on the proximity of the user to the kiosk.

### Claim 10 (depends on 9)

The method of claim 9, wherein the generating the response key comprises generating a response key to enable the kiosk to perform a two-factor authentication with information associated with the user.

### Claim 11 (depends on 9)

The method of claim 9, wherein the generating the response key comprises generating a one-time password (OTP) based on the information associated with the user.

### Claim 12 (depends on 9)

The method of claim 9, further comprising:
generating an image signal associated with the transaction request; and
transmitting the image signal scanned to a camera of the kiosk,
wherein the transmitting the image signal enables the kiosk to transmit the encryption key.

### Claim 13 (depends on 9)

The method of claim 9, wherein:
the receiving the encryption key comprises receiving the encryption key transmitted from a directional antenna of the transmitting device from the first direction,
the transmitting the response key comprises transmitting the response key in the second direction, and
the first direction and the second direction enable the kiosk to triangulate a position of the user.

### Claim 14

A computer-implemented method comprising:
receiving, by one or more computing devices, a transaction request from a user, the transaction request submitted by the user on a portable device;
receiving, from a sensor electrically coupled to the one or more computing devices, an initiation signal to indicate the proximity of the user;
generating, by the one or more computing devices, an encryption key based on the transaction request and in response to the initiation signal;
transmitting, at a first direction by a transmitting device electrically coupled to the one or more computing devices, the encryption key to the portable device;
receiving, at a second direction by a receiving device electrically coupled to the one or more computing devices, a key response from the portable device, wherein the transmitting device and receiving device are positioned such that the first and second direction enable determination of a position of the user; and
authenticating, by the one or more computing devices, the portable device based on the encryption key and the key response to establish a secure binding between the portable device and the one or more computing devices,
wherein the processor enables an electronic payment transaction to be processed only when the portable device is at a location relative to a kiosk, and wherein the location is disposed within a transmission path coextensive with both the first direction and the second direction.

### Claim 15 (depends on 14)

The method of claim 14, further comprising prestaging, by a mobile application of the portable device, the transaction request to be submitted to the one or more computing devices.

### Claim 16 (depends on 14)

The method of claim 14, further comprising scanning, by the one or more computing devices, an image signal presented by the portable device and associated with the transaction request.

### Claim 17 (depends on 16)

The method of claim 16, wherein the image signal presented by the portable device and associated with the transaction request comprises a bar code.

### Claim 18 (depends on 14)

The method of claim 14, further comprising authorizing, by the one or more computing devices, the transaction based on the authenticating the portable device, wherein the portable device is determined to be associated with the transaction request.

### Claim 19 (depends on 14)

The method of claim 14, wherein the authentication comprises on performing a two-factor authentication with information associated with the user.

### Claim 20 (depends on 19)

The method of claim 19, wherein the authentication comprises generating a one-time password (OTP) based on the information associated with the user.
