# US 12,008,534 B2 · Authentication of transactions conducted using mobile devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,534 B2 - Document ID: US12008534B2 - Status: Granted - Kind: B2 - Application number: 17/565,435 - Filed: 2021-12-29 - Published: 2022-06-23 - Granted: 2024-06-11 - Earliest claimed: 2014-11-06 - Assignees: Prove Identity, Inc. - Applicants: Prove Identity, Inc. - Inventors: Rodger R. Desai; Eric Woodward - Web page: https://patentgrep.com/patent/US12008534B2 ## CPC - G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/401: {Transaction verification} - G06Q 20/4015: {using location information} - H04W 4/02: Services making use of location information - H04W 4/029: Location-based management or tracking services - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/06: Authentication - H04W 12/63: Location-dependent; Proximity-dependent - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A transaction authentication system authenticates a transaction by determining whether a mobile device and POS device involved in the transaction are at the same location. A POS registry stores location data for POS devices. A PAN registry stores mobile device IDs corresponding to account numbers. A mobile device ID can be provided from the PAN registry in response to receiving an account number from a POS device. The mobile device ID can then be used to retrieve location information from a home location register maintained by a mobile service provider. The retrieved location data for a POS device and the retrieved location data for a mobile device are compared. ## Claims ### Claim 1 A method comprising: forming, by an authentication server, one or more registries comprising a first plurality of parameters pertaining to a plurality of devices utilized to conduct a set of transactions; computing, by the authentication server, a score based, at least in part, on the first plurality of parameters, wherein the first plurality of parameters include at least one of: a first subset of parameters representative of an occurrence of one or more past fraudulent transactions conducted via a first device of the plurality of devices, a second subset of parameters representative of an occurrence of one or more fraudulent uses of a second device of the plurality of devices, and/or a third subset of parameters representative of an occurrence of one or more fraudulent uses of at least one third device of the plurality of devices positioned in proximity with the second device; determining, by the authentication server, that a potentially fraudulent transaction has been initiated at the first device based at least in part on the computed score; and declining, by the authentication server, the potentially fraudulent transaction. ### Claim 2 (depends on 1) The method of claim 1, further comprising: determining that the first device comprises a point-of-sale (POS) device that is at least occasionally moved from a first location to a second location. ### Claim 3 (depends on 1) The method of claim 1, further comprising: determining that a location of the second device is inconsistent with one or more location patterns of the second device. ### Claim 4 (depends on 3) The method of claim 3, wherein the one or more location patterns of the second device correspond to one or more patterns of locations at which previously authenticated transactions have occurred. ### Claim 5 (depends on 1) The method of claim 1, wherein the first plurality of parameters pertaining to the plurality of devices comprise location parameters. ### Claim 6 (depends on 1) The method of claim 1, further comprising: determining that the second device is presently at a location at which one or more attempted fraudulent transactions has previously occurred. ### Claim 7 (depends on 6) The method of claim 6 further comprising: determining an increase in reported fraudulent transactions involving the at least one third device; and modifying the computed score based, at least in part, on the increase in the reported fraudulent transactions involving the at least the third device. ### Claim 8 (depends on 1) The method of claim 1, wherein the second device is utilized as a presentation instrument to bring about a payment to the first device. ### Claim 9 (depends on 1) The method of claim 1, wherein the computed score is based, at least in part, on a likelihood that the second device and the first device are at a same location. ### Claim 10 (depends on 1) The method of claim 1, further comprising: forming, by the authentication server, a PAN registry comprising one or more parameters of the second device. ### Claim 11 (depends on 1) The method of claim 1, wherein the second device comprises a mobile communications device. ### Claim 12 An apparatus comprising: an authentication server comprising one or more processors, and at least one memory device, the one or more processors to: form, by the authentication server, one or more registries comprising a first plurality of parameters pertaining to a plurality of devices utilized to conduct a set of transactions; compute, by the authentication server, a score based, at least in part, on the first plurality of parameters, wherein the first plurality of parameters include at least one of: a first subset of parameters representative of an occurrence of one or more past fraudulent transactions conducted via a first device of the plurality of devices, a second subset of parameters representative of an occurrence of one or more fraudulent uses of a second device of the plurality of devices, and/or a third subset of parameters representative of an occurrence of one or more fraudulent uses of at least one third device of the plurality of devices positioned in proximity with the second device; determine by the authentication server, that a potentially fraudulent transaction has been initiated at the first device based at least in part on the computed score; and decline, by the authentication server, the potentially fraudulent transaction. ### Claim 13 (depends on 12) The apparatus of claim 12, wherein the one or more processors are additionally to: determine that a location of the second device is inconsistent with one or more location patterns of the second device. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the one or more processors are additionally to: determine that the one or more location patterns of the second device correspond to one or more patterns of locations at which previously authenticated transactions have occurred. ### Claim 15 (depends on 12) The apparatus of claim 12, wherein the plurality of devices comprise one or more point-of-sale (POS) devices and wherein the one or more processors are additionally to: determine that the first plurality of parameters comprise one or more location parameters pertaining to the one or more POS devices. ### Claim 16 (depends on 12) The apparatus of claim 12, wherein the one or more processors are additionally to: determine that the second device is at a location at which one or more attempted fraudulent transactions has previously occurred. ### Claim 17 (depends on 16) The apparatus of claim 16, wherein the one or more processors are additionally to: determine an increase in reported fraudulent transactions involving the at least one third device; and modify the computed score based, at least in part, on the increase in the reported fraudulent transactions involving the at least one third device. ### Claim 18 (depends on 12) The apparatus of claim 12, wherein the second device comprises a mobile communications device. ### Claim 19 An article comprising: a computer-readable medium, having instructions encoded thereon, which, when executed by a processor coupled to at least one memory device, direct the processor to: form, by an authentication server, one or more registries comprising a first plurality of parameters pertaining to a plurality of devices utilized to conduct a set of transactions; compute, by the authentication server, a score based, at least in part, on the first plurality of parameters, wherein the first plurality of parameters include at least one of: a first subset of parameters representative of an occurrence of one or more past fraudulent transactions conducted via a first device of the plurality of devices, a second subset of parameters representative of an occurrence of one or more fraudulent uses of a second device of the plurality of devices, and/or a third subset of parameters representative of an occurrence of one or more fraudulent uses of at least one third device of the plurality of devices positioned in proximity with the second device; determine by the authentication server, that a potentially fraudulent transaction has been initiated at the one first device based at least in part on the computed score; and decline, by the authentication server, the potentially fraudulent transaction. ### Claim 20 (depends on 19) The article of claim 19, wherein the encoded instructions additionally direct the processor coupled to the at least one memory device to: determine that a location of the second device is inconsistent with one or more location patterns of the second device, wherein the one or more location patterns of the second device correspond to one or more patterns of locations at which previously authenticated transactions have occurred. ### Claim 21 (depends on 19) The article of claim 19, wherein the encoded instructions additionally direct the processor coupled to the at least one memory device to: determine that the second device is at a location at which one or more attempted fraudulent transactions have previously occurred. ### Claim 22 (depends on 19) The article of claim 19, wherein the encoded instructions additionally direct the processor coupled to the at least one memory device to: determine an increase in reported fraudulent transactions involving the at least one third; and to modify the computed score based, at least in part, on the increase in reported fraudulent transactions involving the at least the third device.