# US 12,762,541 B2 · Multi-device authentication process and system utilizing cryptographic techniques

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,762,541 B2
- Document ID: US12762541B2
- Status: Granted
- Kind: B2
- Application number: 18/800,786
- Filed: 2024-08-12
- Published: 2024-12-05
- Granted: 2026-10-13
- Earliest claimed: 2016-07-29
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: John F. Sheets; Kim Wagner; Christian Aabye; Jing Jin
- Web page: https://patentgrep.com/patent/US12762541B2

## CPC

- G06Q 20/3674: {involving authentication}
- G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals
- G06F 21/44: Program or device authentication
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- G06Q 20/3672: {initialising or reloading thereof}
- H04L 9/3236: {using cryptographic hash functions}
- H04W 12/63: Location-dependent; Proximity-dependent
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

In a system for verifying transactions, when a user with a portable communication device nears a resource provider location, the portable communication device provides an indication to a transaction processing system of its proximity to the location. The portable communication device then provides a universally unique identifier (UUID) of a base station of the resource provider to the transaction processing system, which generates a hash using the UUID and a primary account number (PAN) of a portable transaction device that is associated with the portable communication device. When the user conducts a transaction with the portable transaction device at the provider, the provider generates a separate hash from the UUID and the PAN and sends the hash to the transaction processing system. A match between the hashes is taken into account as a positive indicator that the transaction is not fraudulent and the resource provider is complying with the system.

## Claims

### Claim 1

A method comprising:
transmitting, by a portable communication device of a user, device information to a server computer;
receiving, by the portable communication device and from the server computer, a first cryptographic pattern that is formed from at least a credential or a token, and a nonce;
receiving, by the portable communication device from a base station, a base station identifier comprising a UUID that uniquely identifies the base station;
forming a second cryptographic pattern by hashing at least the first cryptographic pattern and the base station identifier; and
transmitting the second cryptographic pattern and the nonce to the base station in communication with an access device or transmitting at least the base station identifier to the server computer, wherein the access device is programmed to receive the second cryptographic pattern from the base station, compare the second cryptographic pattern to a third cryptographic pattern derived from the credential or the token from a portable transaction device, and send an authorization request message that comprises at least a portion of the third cryptographic pattern to the server computer or an indication of a successful match between the second cryptographic pattern and the third cryptographic pattern if the second and third cryptographic patterns match, and
wherein the portable communication device, the base station, and the user are within a merchant location.

### Claim 2 (depends on 1)

The method of claim 1, wherein the device information enables the server computer to associate the device information with the credential or the token.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
before transmitting the device information, detecting, by the portable communication device, a beacon.

### Claim 4 (depends on 1)

The method of claim 1, wherein the portable communication device is a mobile phone.

### Claim 5 (depends on 1)

The method of claim 1, wherein the first cryptographic pattern is formed from the credential, wherein the credential is a primary account number.

### Claim 6 (depends on 1)

The method of claim 1, wherein the first cryptographic pattern is formed by hashing at least the credential.

### Claim 7 (depends on 1)

The method of claim 1, wherein forming the second cryptographic pattern comprises hashing at least the first cryptographic pattern, the nonce, and the base station identifier to form the second cryptographic pattern.

### Claim 8 (depends on 7)

The method of claim 7, wherein forming the second cryptographic pattern comprises taking a predetermined number of bytes of the hashed at least the first cryptographic pattern, the nonce, and the base station identifier to form the second cryptographic pattern.

### Claim 9 (depends on 1)

The method of claim 1, wherein the method comprises transmitting the second cryptographic pattern to the base station in communication with the access device and transmitting the at least the base station identifier to the server computer.

### Claim 10 (depends on 9)

The method of claim 9, wherein the access device retrieves the second cryptographic pattern from the base station.

### Claim 11 (depends on 1)

The method of claim 1, wherein the access device is a point of sale terminal.

### Claim 12

A system comprising:
a portable communication device comprising:
a processor, and
a non-transitory computer readable medium comprising code executable by the processor, for performing a method comprising,
transmitting device information of the portable communication device of a user to a server computer,
receiving, from the server computer, a first cryptographic pattern that is formed from at least a credential or a token, and a nonce,
receiving, from a base station, a base station identifier comprising a UUID that uniquely identifies the base station,
forming a second cryptographic pattern by hashing at least the first cryptographic pattern and the base station identifier, and
transmitting the second cryptographic pattern and the nonce to the base station in communication with an access device or transmitting at least the base station identifier to the server computer; and
the access device, wherein the access device is programmed to receive the second cryptographic pattern from the base station, compare the second cryptographic pattern to a third cryptographic pattern derived from the credential or the token from a portable transaction device, and send an authorization request message that comprises at least a portion of the third cryptographic pattern or an indication of a successful match between the second cryptographic pattern and the third cryptographic pattern to the server computer if the second and third cryptographic patterns match, and
wherein the portable communication device, the base station, and the user are within a merchant location.

### Claim 13 (depends on 12)

The system portable of claim 12, wherein forming the second cryptographic pattern comprises taking a predetermined number of bytes of the hashed at least the first cryptographic pattern and the base station identifier.

### Claim 14 (depends on 12)

The system of claim 12, wherein the method comprises transmitting the second cryptographic pattern to the base station in communication with an access device and transmitting at least the base station identifier to the server computer.

### Claim 15 (depends on 12)

The system portable of claim 12, wherein the portable communication device is a mobile phone.

### Claim 16 (depends on 12)

The system of claim 12, wherein the first cryptographic pattern is formed from the credential, wherein the credential is a primary account number.

### Claim 17 (depends on 12)

The system of claim 12, wherein the portable communication device is configured to communicate with the base station using BLE (Bluetooth Low Energy).

### Claim 18 (depends on 16)

The system of claim 16, wherein the credential is a credit or debit card number.