# US 2012/0084203 A1 · System and method for secure transactions using device-related fingerprints

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2012/0084203 A1
- Document ID: US20120084203A1
- Status: Published application
- Kind: A1
- Application number: 12/894,456
- Filed: 2010-09-30
- Published: 2012-04-05
- Earliest claimed: 2010-09-30
- Assignees: The Western Union Company
- Inventors: Evans Mehew; Kimberly Dunwoody; Gail Galuppo
- Web page: https://patentgrep.com/patent/US20120084203A1

## CPC

- G06Q 20/105: {involving programming of a portable memory device, e.g. IC cards, "electronic purses"}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A system for conducting money transfer transactions includes a wallet application at a mobile network host that facilitates the collection of fingerprint data at a mobile user device and that maintains wallets where the fingerprint data corresponding to a user device is stored as a reference fingerprint. The fingerprint data includes both device feature characteristics and device use characteristics. When a transaction is conducted a the user device, current fingerprint data from the user device is compared to the reference fingerprint, and the transaction is permitted based on the comparison.

## Claims

### Claim 1

A method for providing security to a financial transaction conducted at a user device, comprising:
initially collecting fingerprint data from the user device, the fingerprint data including both data relating to features of the user device and data relating to use of the user device;
transmitting the initially collected fingerprint data to a host computer, and storing the initially collected fingerprint data at the host computer as a reference fingerprint;
when a financial transaction is to be conducted at the user device, transmitting current fingerprint data collected at the user device to the host computer, the current fingerprint data corresponding to the fingerprint data initially collected at the user device;
comparing the current fingerprint data to the reference fingerprint at the host; and
based on the comparison, determining at the host computer whether to authorize the financial transaction.

### Claim 2 (depends on 1)

The method of claim 1,
wherein the data relating to features of the user device comprises one or more of:
characteristics relating to the operating system of the user device;
characteristics relating to applications installed at the user device;
characteristics relating to a browser installed at the user device; and
wherein the data relating to use of the user device comprises one or more of:
characteristics relating to email sent or received at the user device;
characteristics relating to telephone calls made or received at the user device;
characteristics' relating to websites visited by the user device; and
characteristics relating to a location of the user device.

### Claim 3 (depends on 1)

The method of claim 1, wherein the user device is a mobile device.

### Claim 4 (depends on 1)

The method of claim 1, wherein the host computer includes a mobile wallet application, wherein the reference fingerprint is stored in at least one of a plurality of wallets maintained at the wallet application, wherein multiple users conduct financial transactions using the wallet application, and wherein each user is associated with at least one of the wallets maintained at the wallet application.

### Claim 5 (depends on 1)

The method of claim 1, wherein at least one of the plurality of wallet is a multi-user wallet, for storing a reference fingerprint for each of a plurality of users.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
storing the initially collected fingerprint data at the user device.

### Claim 7 (depends on 6)

The method of claim 6, further comprising periodically updating the initially collected fingerprint data, wherein the step of storing the initially collected fingerprint data at the user device includes storing the updated fingerprint data at the user device, and wherein the step of transmitting current fingerprint data collected at the user device comprises transmitting the updated fingerprint data stored at the user device.

### Claim 8 (depends on 1)

The method of claim 1, wherein the step of transmitting current fingerprint data collected at the user device to the host computer comprises:
collecting fingerprint data at the user device at the time the financial transaction is conducted; and
transmitting the fingerprint data collected a the time of the financial transaction is conducted to the host computer.

### Claim 9 (depends on 1)

The method of claim 1, further comprising:
periodically updating the initially collected fingerprint data;
transmitting the updated fingerprint data to the host computer; and
in response to receiving the updated fingerprint data at the host computer, storing the updated fingerprint data at the host computer as the reference fingerprint.

### Claim 10 (depends on 9)

The method of claim 9, wherein a plurality of reference fingerprints are stored at the host computer, each representing updated fingerprint data collected at a different point in time, and wherein the step of determining at the host computer whether to authorize the financial transaction includes using the plurality of reference fingerprints in the comparison.

### Claim 11 (depends on 9)

The method of claim 9, further comprising:
providing a fingerprint application to the user device, and wherein the fingerprint application, when executed at the user device, performs the steps of initially collecting fingerprint data from the user device and periodically updating the initially collected fingerprint data.

### Claim 12 (depends on 11)

The method of claim 11, wherein the fingerprint application is provided to the user device over a wireless communications network.

### Claim 13 (depends on 11)

The method of claim 11, wherein the financial transaction is a consumer-oriented money transfer transaction, and wherein the fingerprint application is provided to the user device at a money transfer agent location.

### Claim 14

A method for authorizing a financial transaction conducted at a user mobile device, comprising:
collecting fingerprint data at the user device, the fingerprint data comprising multiple characteristics related to the user device, wherein at least some of the characteristics vary over time;
transmitting the fingerprint data to a host computer;
storing the provided fingerprint data at the host computer as a reference fingerprint;
periodically updating the reference fingerprint by collecting updated fingerprint data at the user device, providing the updated fingerprint data to the host computer, and storing the updated fingerprint data at the host computer as the reference fingerprint;
when a financial transaction is to be conducted at the user device, transmitting current fingerprint data at the user device to the host computer;
comparing the transmitted current device fingerprint data to the reference fingerprint stored at the host; and
based on the comparison, determining whether to authorize the financial transaction.

### Claim 15

A system for providing secure transactions, comprising:
a user device configured to:
collect fingerprint data for the user device, the fingerprint data including both device feature data and device use data, the device feature data comprising data identifying components installed on the user device, the device use data comprising data identifying uses of the device by a user of the user device;
transmit a first, collected fingerprint data to a host computer; and
when a transaction is to be conducted at the user device, transmit a second, current fingerprint data collected at the user device; and
a host computer communicatively coupled to the mobile device and configured to:
store the first fingerprint data as a reference fingerprint;
compare the second, current fingerprint data to the reference fingerprint at the host; and
based on the comparison, determine whether to authorize the transaction.

### Claim 16 (depends on 15)

The system of claim 15,
wherein the data identifying components installed on the user device comprises one or more of:
characteristics relating to the operating system of the user device;
characteristics relating to applications installed at the user device;
characteristics relating to a browser installed at the user device; and
wherein the data identifying uses of the device comprises one or more of:
characteristics relating to email sent or received at the user device;
characteristics relating to telephone calls made or received at the user device;
characteristics' relating to websites visited by the user device; and
characteristics relating to a location of the user device.

### Claim 17 (depends on 15)

The system of claim 15, wherein the user device is a mobile device.

### Claim 18 (depends on 17)

The method of claim 17, wherein the host computer comprises a mobile wallet application, wherein the reference fingerprint is stored in at least one of a plurality of wallets maintained at the wallet application, wherein multiple users conduct transactions using the wallet application, and wherein each user is associated with at least one of the wallets maintained at the wallet application.

### Claim 19 (depends on 18)

The system of claim 18, wherein at least one of the plurality of wallets is a multi-user wallet, for storing a reference fingerprint for each of a plurality of users.

### Claim 20 (depends on 17)

The system of claim 17, wherein the user device is further configured to:
store the first, collected fingerprint data at the user device.

### Claim 21 (depends on 17)

The system of claim 17,
wherein the user device is further configured to:
periodically update the first, collected fingerprint data; and
transmit the updated fingerprint data to the host computer; and
wherein the host computer is further configured to:
in response to receiving the updated fingerprint data at the host computer, storing the updated fingerprint data at the host computer as the reference fingerprint.

### Claim 22 (depends on 17)

The method of claim 17, wherein a plurality of reference fingerprints are stored at the host computer, each representing updated fingerprint data collected at a different points in time, and wherein the host computer is further configured to:
compare the second, current fingerprint data to the plurality of reference fingerprints at the host; and
determine whether to authorize the transaction based on the comparison to the plurality of reference fingerprints.
