# US 2017/0286953 A1 · Location based authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0286953 A1 - Document ID: US20170286953A1 - Status: Published application - Kind: A1 - Application number: 15/632,189 - Filed: 2017-06-23 - Published: 2017-10-05 - Earliest claimed: 2007-10-25 - Assignees: Visa International Service Association - Inventors: Ayman Hammad; Patrick Faith - Web page: https://patentgrep.com/patent/US20170286953A1 ## CPC - G06Q 20/3825: {Use of electronic signatures} - G06Q 10/087: Inventory or stock management, e.g. order filling, procurement or balancing against orders - G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems - G06Q 20/102: {Bill distribution or payments} - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/32: using wireless devices - G06Q 20/3223: {Realising banking transactions through M-devices} - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/3274: {using a pictured code, e.g. barcode or QR-code, being displayed on the M-device} - G06Q 20/3276: {using a pictured code, e.g. barcode or QR-code, being read by the M-device} - G06Q 20/387: {Payment using discounts or coupons (relating to marketing G06Q30/02)} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 20/4015: {using location information} - G06Q 30/00: Commerce - G06Q 30/0212: {Chance discounts or incentives} - G06Q 30/0215: {Including financial accounts} - G06Q 30/0601: Electronic shopping [e-shopping] - G06Q 40/00: Finance; Insurance; Tax strategies; Processing of corporate or income taxes - G06Q 40/03: Credit; Loans; Processing thereof - G06Q 40/12: Accounting - G06Q 40/128: {Check-book balancing, updating or printing arrangements} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A portable consumer device that is used to conduct a transaction at a merchant is authenticated. Information provided to a server computer includes locations of a merchant and a mobile communication device possessed by a consumer. If the location of the mobile communication device corresponds to the location of the merchant, the portable consumer device that is used to conduct the transaction is authenticated. ## Claims ### Claim at position 1 1-18. (canceled) ### Claim 19 A method for conducting a transaction, the method comprising: receiving, at a server, first location information associated with a location of a mobile communication device of a consumer during a transaction conducted with a merchant; receiving, at the server, second location information associated with a geographic location of the merchant at a time of the transaction, wherein the second location information is transferred from the merchant to the mobile communication device during the transaction, and wherein the second location information is then forwarded to the server from the mobile communication device instead of from an access device operated by the merchant; using the server, determining that a portable consumer device held by the consumer is authentic when the first location information matches the second location information; and wherein the first location information and the second location information are received from the mobile communication device held by the consumer, and wherein the second location information is provided to the mobile communication device directly from the access device operated by the merchant. ### Claim 20 (depends on 19) The method of claim 19 wherein the mobile communication device is also a portable consumer device. ### Claim 21 (depends on 19) The method of claim 19, wherein the second location is a particular merchant location, and wherein the method further comprises: in the event that a subsequent transaction is initiated using a different portable consumer device at a different merchant at a different merchant location, determining that the different portable consumer device is authentic based on at least one of a distance between the particular merchant location and the different merchant location and an amount of time elapsed between the transaction at the particular merchant location and the subsequent transaction at the different merchant location. ### Claim 22 (depends on 19) The method of claim 19 further comprising: sending a message to the merchant indicating that the portable consumer device is authentic. ### Claim 23 (depends on 19) The method of claim 19 further comprising: determining that a subsequent transaction is authentic using the first location information and the second location information. ### Claim 24 (depends on 19) The method of claim 19, wherein the second location information is encrypted at the merchant using an electronic signature before it is transferred to the mobile communication device. ### Claim 25 (depends on 19) The method of claim 19, further comprising: contacting the consumer to authenticate when the first location information and the second location information do not match. ### Claim 26 (depends on 19) The method of claim 19, further comprising: authenticating the consumer with the mobile communication device before initiating the transaction with the merchant. ### Claim 27 (depends on 19) The method of claim 19, wherein the second location information is generated by the access device operated by the merchant, and wherein the first location information and the second location information are received at the server in the same authorization request message forwarded by the consumer's mobile communication device. ### Claim 28 A server comprising: a processor; and a computer readable medium, the computer readable medium comprising code, executable by the processor, to implement a method comprising: receiving first location information associated with a location of a mobile communication device of a consumer during a transaction conducted with a merchant; receiving second location information associated with a fixed geographic location of the merchant at a time of the transaction, wherein the second location information is transferred from the merchant to the mobile communication device during the transaction, and wherein the second location information is then forwarded to the server from the mobile communication device instead of from an access device operated by the merchant; determining that a portable consumer device held by the consumer is authentic when the first location information matches the second location information; and wherein the first location information and the second location information are received from the mobile communication device held by the consumer, and wherein the second location information is provided to the mobile communication device directly from the access device operated by the merchant. ### Claim 29 (depends on 28) The server of claim 28 wherein the mobile communication device is also a portable consumer device. ### Claim 30 (depends on 28) The server of claim 28, wherein the second location is a particular merchant location, and wherein the method further comprises: in the event that a subsequent transaction is initiated using a different portable consumer device at a different merchant at a different merchant location, determining that the different portable consumer device is authentic based on at least one of a distance between the particular merchant location and the different merchant location and an amount of time elapsed between the transaction at the particular merchant location and the subsequent transaction at the different merchant location. ### Claim 31 (depends on 28) The server of claim 28, wherein the method further comprises: sending a message to the merchant indicating that the portable consumer device is authentic. ### Claim 32 (depends on 28) The server of claim 28, wherein the method further comprises: determining that a subsequent transaction is authentic using the first location information and the second location information. ### Claim 33 (depends on 28) The server of claim 28, wherein the second location information is encrypted at the merchant using an electronic signature before it is transferred to the mobile communication device. ### Claim 34 (depends on 28) The server of claim 28, wherein the method further comprises: contacting the consumer to authenticate when the first location information and the second location information do not match. ### Claim 35 (depends on 28) The server of claim 28, wherein the method further comprises: authenticating the consumer with the mobile communication device before initiating the transaction with the merchant. ### Claim 36 (depends on 28) The server of claim 28, wherein the second location information is generated by the access device operated by the merchant, and wherein the first location information and the second location information are received at the server in the same authorization request message forwarded by the mobile communication device. ### Claim 37 A method for conducting a transaction, the method comprising: providing first location information to a server computer, wherein the first location information corresponds to a location of a mobile communication device held by a consumer during a transaction conducted with a merchant; and providing second location information to the server computer, wherein the second location information corresponds to a geographic location of the merchant at a time of the transaction, wherein the second location information is transferred from the merchant to the consumer's mobile communication device during the transaction and is thereafter forwarded to the server computer from the mobile communication device instead of from the merchant, wherein the server computer is configured to determine that a portable consumer device used in the transaction is authentic when the first location information matches with the second location information; and wherein the second location information is generated by an access device operated by the merchant, and the first location information and the second location information are received from the mobile communication device, wherein the second location information is provided to the mobile communication device directly from the access device operated by the merchant. ### Claim 38 (depends on 37) The method of claim 37 wherein the first location information comprises global positioning system information associated with the mobile communication device, and wherein the second location information comprises a merchant identifier received in an authorization request message from an access device of the merchant that is conducting the transaction.