# US 12,015,964 B2 · Method and system for location-based resource access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,964 B2 - Document ID: US12015964B2 - Status: Granted - Kind: B2 - Application number: 17/524,622 - Filed: 2021-11-11 - Published: 2022-03-03 - Granted: 2024-06-18 - Earliest claimed: 2021-11-11 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Thomas Bellenger - Web page: https://patentgrep.com/patent/US12015964B2 ## CPC - H04W 4/023: {using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds} - G06Q 20/223: {based on the use of peer-to-peer networks} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/3227: {using secure elements embedded in M-devices} - G06Q 20/382: {insuring higher security of transaction} - G06Q 20/3827: {Use of message hashing} - H04W 4/00: Services specially adapted for wireless communication networks; Facilities therefor - H04W 4/025: {using location based information parameters} - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/08: Access security - H04W 12/47: using near field communication [NFC] or radio frequency identification [RFID] modules - H04W 48/04: based on user or terminal location or mobility data, e.g. moving direction, speed - H04W 76/14: Direct-mode setup - H04W 12/63: Location-dependent; Proximity-dependent - H04W 12/67: Risk-dependent, e.g. selecting a security level depending on risk profiles - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method is disclosed. The method includes establishing, by a first device, a wireless connection to a second device; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the received location data; generating, by the first device, an altered value based on the received location data and the determined distance; and transmitting, by the first device and to the second device, the altered value and an account identifier associated with a user of the first device. ## Claims ### Claim 1 A method, comprising: establishing, by a first device, a wireless connection to a second device, wherein the first device is a client device and the second device is an access device at a location of a merchant; transmitting a request, by the first device and to the second device, for location data indicative of a location of the second device; receiving, by the first device and from the second device, the location data indicative of the location of the second device; determining, by the first device, a distance between the first device and the second device based at least in part on the location data received from the second device that is indicative of the location of the second device; determining, by the first device, a risk score based on the determined distance; generating, by the first device, an encrypted value based on the received location data, the determined distance, and the determined risk score; transmitting, by the first device and to the second device, the encrypted value that is a payment token associated with a user of the first device, wherein the second device transmits the encrypted value and the payment token received from the first device to a server computer, wherein the server computer decrypts the encrypted value received from the second device to obtain the location data, the distance data and the risk score, and wherein the server computer sends a notification to the access device to allow the client device to access a resource after analyzing the decrypted value; and receiving, by the first device from the second device, a notification to access the resource. ### Claim 2 (depends on 1) The method of claim 1, wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection. ### Claim 3 (depends on 1) The method of claim 1, wherein the first device is a portable device. ### Claim 4 (depends on 3) The method of claim 3, wherein the portable device is a mobile phone and the access device is a point of sale (POS) device. ### Claim 5 (depends on 1) The method of claim 1, wherein the method further comprises, in response to establishing the wireless connection to the second device, receiving, by the first device and from the second device, an unpredictable number, and wherein the generated encrypted value is further based on the unpredictable number. ### Claim 6 (depends on 1) The method of claim 1, wherein the location data comprises latitude and longitude data. ### Claim 7 (depends on 1) The method of claim 1, wherein the encrypted value is a hashed value. ### Claim 8 (depends on 1) The method of claim 1, wherein the distance is a straight line distance. ### Claim 9 (depends on 1) The method according to claim 1, wherein the located data is encrypted using a public key, and wherein the server computer analyzes the encrypted value by decrypting the encrypted value using a private key corresponding to the public key. ### Claim 10 (depends on 1) The method according to claim 1, wherein the second device transmits access device characteristics to the server computer, wherein the access device characteristics include a communication range associated with the access device, and wherein the analyzing, by the server computer, the decrypted value includes determining the communication range associated with the access device. ### Claim 11 (depends on 1) The method according to claim 1, wherein the payment token is primary account number (PAN). ### Claim 12 A first device, the first device comprising: a processor; and a non-transitory computer readable medium, the non-transitory computer readable medium comprising computer executable code for executing a method, the method comprising: establishing a wireless connection to a second device, wherein the first device is a client device and the second device is an access device at a location of a merchant; transmitting a request, to the second device, for location data indicative of a location of the second device; receiving, from the second device, the location data indicative of the location of the second device; determining a distance between the first device and the second device based at least in part on the location data received from the second device that is indicative of the location of the second device; determining a risk score based on the determined distance; generating an encrypted value based on the received location data, the determined distance, and the determined risk score; transmitting, to the second device, the encrypted value that is a payment token associated with a user of the first device, wherein the second device transmits the encrypted value and the payment token received from the first device to a server computer, wherein the server computer decrypts the encrypted value received from the second device to obtain the location data, the distance data, and the risk score, and wherein the server computer sends a notification to the access device to allow the client device to access a resource after analyzing the decrypted value; and receiving, by the first device from the second device, a notification to access the resource. ### Claim 13 (depends on 12) The first device of claim 12, wherein the wireless connection is at least one of a Bluetooth Low Energy (BLE), Near Field Communication (NFC), or Wi-Fi connection. ### Claim 14 (depends on 12) The first device of claim 12, wherein the method further comprises, in response to establishing the wireless connection to the second device, receiving, by the first device and from the second device, an unpredictable number, and wherein the generated encrypted value is further based on the unpredictable number. ### Claim 15 (depends on 12) The first device of claim 12, wherein the encrypted value is a hashed value. ### Claim 16 A method, comprising: receiving, by a server computer and from a first device, an encrypted value and a payment token associated with a user of a second device; wherein the encrypted value is generated by the second device based on location data received from the first device, a determined distance between the first device and the second device based at least in part on the location data received from the first device, and a risk score determined based on the determined distance, wherein the second device is a client device and the first device is an access device at a location of a merchant; decrypting, by the server computer, the encrypted value received from the first device to obtain the location data, the distance data, and the risk score; allowing, by the server computer, access to a resource after decrypting the encrypted value after determining that the location data, the distance data and the risk score are in a predetermined range; and sending, by the server computer, a notification to the access device to allow the client device to access the resource. ### Claim 17 (depends on 16) The method of claim 16, wherein the encrypted value is a hashed value.