# US 12,003,959 B2 · System and method for correlating diverse location data for data security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,959 B2 - Document ID: US12003959B2 - Status: Granted - Kind: B2 - Application number: 17/367,000 - Filed: 2021-07-02 - Published: 2021-10-28 - Granted: 2024-06-04 - Earliest claimed: 2016-03-31 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Eden Smith; Mary Reeder; Joseph Bureau; Frederick Liu - Web page: https://patentgrep.com/patent/US12003959B2 ## CPC - H04L 67/04: specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability - H04W 12/06: Authentication - G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/4015: {using location information} - H04L 67/52: specially adapted for the location of the user terminal - H04W 4/02: Services making use of location information - H04W 12/64: using geofenced areas - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method for authentication using location correlation is disclosed. The method includes determining geographic zones and zone identifiers associated with a location of a mobile communication device. Later, transaction data is received and a zone identifier is determined from that transaction data. If the zone identifier matches one of the previously determined zone identifiers, then a match indicator is sent to an authorizing entity computer system or the transaction may be allowed to proceed. ## Claims ### Claim 1 A method comprising: a) determining, by a computer, a geographic location of a mobile communication device; b) determining, by the computer, a boundary associated with the mobile communication device using the geographic location of the mobile communication device; c) determining, by the computer, a plurality of pre-defined geographic zones overlapping or within the boundary associated with the mobile communication device, the plurality of pre-defined geographic zones are respectively associated with a plurality of postal codes; d) receiving, by the computer, transaction data for a transaction from an access device, and determining a postal code associated with the access device; e) determining, by the computer, that the postal code associated with the access device matches one of the postal codes in the plurality of postal codes overlapping or within the boundary associated with the mobile communication device; and f) in response to step e), providing a match indicator to an authorizing entity computer or authorizing the transaction to proceed. ### Claim 2 (depends on 1) The method of claim 1, wherein the mobile communication device is a mobile phone. ### Claim 3 (depends on 1) The method of claim 1, wherein the postal code associated with the access device is present in an authorization request message from the access device. ### Claim 4 (depends on 1) The method of claim 1, wherein the boundary is a circle or polygon and the geographic location comprises a latitude value and longitude value. ### Claim 5 (depends on 1) The method of claim 1, wherein the geographic location of the mobile communication device is a first geographic location, wherein the postal codes are a first plurality of postal codes, and wherein the boundary is a first boundary, and wherein the method further comprises: determining, by the computer, a second geographic location of the mobile communication device; determining, by the computer, that the second geographic location of the mobile communication device is proximate to an edge of the boundary; determining, by the computer, a second boundary using the second geographic location; and determining, by the computer, a second plurality of pre-defined geographic zones overlapping or within the second boundary, the second plurality of pre-defined geographic zones respectively associated with a second plurality of postal codes, and wherein the first plurality of postal codes is different than the second plurality of postal codes. ### Claim 6 (depends on 5) The method of claim 5, wherein the access device is a first access device, wherein the match indicator is a first match indicator, wherein the transaction is a first transaction, the transaction data is first transaction data, the postal code is a first postal code, and wherein the method further comprises: receiving, by the computer, second transaction data for a second transaction and determining a second postal code associated with a second access device; determining, by the computer, that the second postal code associated with the second access device matches one of the postal codes in the second plurality of postal codes; and in response to the determination, providing a second match indicator to the authorizing entity computer or authorizing the second transaction to proceed. ### Claim 7 (depends on 1) The method of claim 1, wherein the transaction is one in which the computer seeks to access data provided by the authorizing entity computer. ### Claim 8 (depends on 1) The method of claim 1, wherein the postal code associated with the access device is in the transaction data from the access device. ### Claim 9 A computer comprising: a processor; and a non-transitory computer readable medium, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising: a) determining a geographic location of a mobile communication device; b) determining a boundary associated with the mobile communication device using the geographic location; c) determining, by the computer, a plurality of pre-defined geographic zones overlapping or within the boundary associated with the mobile communication device, the plurality of pre-defined geographic zones are respectively associated with a plurality of postal codes; d) receiving transaction data for a transaction from an access device and determining a postal code associated with the access device; e) determining that the postal code associated with the access device matches one of the postal codes in the plurality of postal codes overlapping or within the boundary associated with the mobile communication device; and f) in response to step e), providing a match indicator to an authorizing entity computer system or authorizing the transaction. ### Claim 10 (depends on 9) The computer of claim 9, wherein the computer is a location determination computer. ### Claim 11 (depends on 9) The computer of claim 9, wherein the postal code associated with the access device is present in an authorization request message from the access device. ### Claim 12 (depends on 9) The computer of claim 9 wherein the boundary is a circle or polygon, and the geographic location comprises a latitude value and longitude value. ### Claim 13 (depends on 9) The computer of claim 9, wherein the boundary is a circle and the geographic location comprises a latitude value and longitude value. ### Claim 14 (depends on 9) The computer of claim 9, wherein the method further comprises: wherein the geographic location of the mobile communication device is a first geographic location, wherein the plurality of postal codes is a first plurality of postal codes, and wherein the boundary is a first boundary, and wherein the method further comprises: determining a second geographic location of the mobile communication device; determining that the second geographic location of the mobile communication device is proximate to an edge of the boundary; and determining a second boundary using the second geographic location. ### Claim 15 (depends on 9) The computer of claim 9, wherein the transaction is one in which the computer seeks to access data provided by the authorizing entity computer system. ### Claim 16 (depends on 9) The computer of claim 9, wherein the mobile communication device is a mobile phone. ### Claim 17 A method comprising: transmitting, by a mobile communication device operated by a user, data representing a geographic location of the mobile communication device to a computer, the computer determining a boundary associated with the mobile communication device using the geographic location, and determining a plurality of pre-defined geographic zones overlapping or within the boundary associated with the mobile communication device, the plurality of pre-defined geographic zones respectively associated with a plurality of postal codes; and interacting, a portable user device, with an access device in a transaction, wherein the access device generates and transmits an authorization request message comprising transaction data to the computer, the computer determining a postal code associated with the access device, and wherein the computer determines that the postal code associated with the access device matches one of the plurality of postal codes in the plurality of postal codes overlapping or within the boundary associated with the mobile communication device, and provides a match indicator to an authorization system, or authorizes the transaction to proceed. ### Claim 18 (depends on 17) The method of claim 17, wherein the access device is a personal computer, and the transaction is one which can allow the user to access data. ### Claim 19 (depends on 17) The method of claim 17, wherein the data representing the geographic location comprises a latitude and longitude of the mobile communication device. ### Claim 20 (depends on 17) The method of claim 17, wherein the portable user device and the access device interact using a short range wireless communication protocol.