Location-based authentication of transactions conducted using mobile devices
AssigneePayfone, Inc.
InventorsRodger R. Desai, Eric Woodward
Life of this patent
Estimating the term…
Abstract
A transaction authentication system authenticates a transaction by determining whether a mobile device and POS device involved in the transaction are at the same location. A POS registry stores location data for POS devices. A PAN registry stores mobile device IDs corresponding to account numbers. A mobile device ID can be provided from the PAN registry in response to receiving an account number from a POS device. The mobile device ID can then be used to retrieve location information from a home location register maintained by a mobile service provider. The retrieved location data for a POS device and the retrieved location data for a mobile device are compared.
Claims22
A method for authenticating a transaction conducted at a point of sale (POS) device by a customer, the method comprising:
- at a POS registry in a transaction authentication system, storing, in association with a POS ID corresponding to each of one or more POS devices, POS location data pertaining to the location of the corresponding POS device;
- at a PAN registry in the transaction authentication system, storing, in association with an account ID corresponding to each of one or more accounts, a mobile device ID identifying a mobile device of the customer;
- receiving, at the transaction authentication system, transaction data for a transaction conducted against a specified account at a specified POS device by the customer using the mobile device, the transaction data comprising a POS identifier for the specified POS device and an account ID for the specified account;
- with the received transaction data at the transaction authentication system, (1) accessing the POS registry for location data for the specified POS device, and (2) accessing the PAN registry to retrieve the mobile device ID associated with the mobile device of the customer;
- using the retrieved mobile device ID to determine current location data for the mobile device, by accessing real-time location information maintained by a mobile service provider that is generated within a mobile service network;
- and
- comparing the accessed location data for the specified POS device and the determined location data for the mobile device.
A system for authenticating a transaction conducted at a point of sale (POS) device by a customer having a mobile device, comprising:
- a POS registry storing POS location data in association with a POS ID corresponding to each of one or more POS devices, POS location data pertaining to the location of the corresponding POS device;
- a PAN registry storing a mobile device ID in association with each of a plurality of an account IDs, each mobile device ID used for accessing location data that is stored by a mobile service provider and that identifies locations corresponding to mobile device IDs;
- wherein, upon a transaction being conducted by the customer at the POS device, a POS device ID is received at the transaction authenticating system and used to access the POS registry to retrieve location data for a POS device corresponding to the received POS device ID, an account ID is received at the transaction authenticating system and used to access the PAN registry to retrieve a mobile device ID stored in association with the received account ID, and the retrieved mobile device ID is used to access real-time location information maintained by a mobile service provider that is generated within a mobile service network;
- and
- wherein the authentication of the transaction is evaluated based at least in part on a comparison of the retrieved location data from the POS registry and the accessed location data for the mobile device from the mobile service provider.
Dependencies are inferred from the claim text.