# US 2020/0288308 A1 · Proximity based user identification and authentication system and method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0288308 A1 - Document ID: US20200288308A1 - Status: Published application - Kind: A1 - Application number: 16/811,396 - Filed: 2020-03-06 - Published: 2020-09-10 - Earliest claimed: 2019-03-06 - Assignees: XyberFocus, LLC - Applicants: XyberFocus, LLC - Inventors: Giovanni Jimenez; Russell Andrew Wenger - Web page: https://patentgrep.com/patent/US20200288308A1 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/64: using geofenced areas - H04W 12/71: Hardware identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The present disclosure generally relates to a system, comprising a mobile device configured to register with a service provider via an application program, obtain network credentials of communication networks operated by the service provider at various locations, connect to a communication network via the network credentials when approaching a selected location of the service provider, and transmit, to a first computing device via the communication network, a first identifier that uniquely identifies the mobile device. The system also comprises the first computing device positioned at service provider's locations and configured to receive and transmit the first identifier to a second computing device. The system also comprises the second computing device configured to receive the first identifier, compare the unique identifier to a plurality of unique identifiers, and provide a service customized to a user of the mobile device based at least upon the comparison result. ## Claims ### Claim 1 A system, comprising: a mobile device, comprising: a non-transitory computer-readable storage medium configured to store at least one application program; and a processor coupled to the non-transitory computer-readable storage medium and configured to control a plurality of modules to execute instructions of the at least one application program for: registering with at least one service provider via the at least one application program, obtaining at least network credentials of communication networks operated by the at least one service provider at various locations, detecting and connecting to a communication network via the network credentials when approaching a selected location of the at least one service provider, and transmitting, to a first computing device via the communication network, a first identifier that uniquely identifies the mobile device; the first computing device positioned at the selected location of the at least one service provider and configured to detect and receive the first identifier when the mobile device approaches the selected location and transmit the first identifier to a second computing device; and the second computing device configured to receive the first identifier of the mobile device from the first computing device, compare the unique identifier to a plurality of unique identifiers, and initiate an event to determine and provide a service customized to a user of the mobile device based at least upon a comparison result of the first identifier to the plurality of unique identifiers. ### Claim 2 (depends on 1) The system of claim 1, wherein the mobile device comprises a smart device, and the first identifier of the mobile device comprises at least a factory media access control (MAC) address of the mobile device. ### Claim 3 (depends on 1) The system of claim 1, wherein the second computing device is configured to store the plurality of unique identifiers associated with a plurality of mobile devices. ### Claim 4 (depends on 1) The system of claim 1, wherein the service customized to the user of the mobile device comprises at least one of: greeting, recognizing and authenticating the user of the mobile device within a range of the selected location. ### Claim 5 (depends on 1) The system of claim 1, wherein the processor of the mobile device is further configured to: register with the at least one service provider via the at least one application program within the selected location of the at least one service provider; store at least the network credentials of communication networks operated by the at least one service provider at the various locations on the non-transitory computer-readable storage medium; detect and connect to a different communication network via the network credentials when approaching a different location of the at least one service provider; and receive the service customized to the user of the mobile device at the different location of the at least one service provider. ### Claim 6 (depends on 1) The system of claim 1, wherein the processor of the mobile device is further configured to: register with the at least one service provider via the at least one application program away from the various locations of the at least one service provider; store at least the network credentials of communication networks operated by the at least one service provider at the various locations on the non-transitory computer-readable storage medium; and in response to detecting a failed connection using the network credentials, obtain a second identifier from the second computing device. ### Claim 7 (depends on 6) The system of claim 6, wherein the first computing device is configured to continuously broadcast at least a beacon signal at the selected location of the at least one service provider, wherein the processor of the mobile device is configured to transmit the second identifier to the first computing device in response to detecting the beacon signal when approaching the selected location. ### Claim 8 (depends on 7) The system of claim 7, wherein the processor of the mobile device is further configured to: in response to detecting the beacon signal, connect to a network available at the selected location of the at least one service provider via the network credentials; and transmit, to the first computing device via the network, the first identifier that uniquely identifies the mobile device. ### Claim 9 (depends on 1) The system of claim 1, wherein the processor of the mobile device is further configured to store the network credentials to a list of trusted communication networks on the mobile device. ### Claim 10 (depends on 1) The system of claim 1, wherein the processor of the mobile device is further configured to: obtain information related to a user carrying the mobile device in response to determining that the user needs to be authenticated; generate data for uniquely identifying the user based at least on the information related to the user; encrypt the data uniquely identifying the user; store encrypted data uniquely identifying the user on the non-transitory computer-readable storage medium of the mobile device; and transmit the encrypted second data to the first computing device, wherein the information related to the user carrying the mobile device comprise a biometric or non-biometric characteristic of the user including at least one of: a fingerprint, a palm/finger vein pattern, a voice pattern, a facial image, a palm print, a hand geometry, a retina and iris recognition, a digital signature, a username and password, and a token. ### Claim 11 A method, comprising: registering, by a mobile device, with at least one service provider via at least one application program installed on the mobile device; obtaining, by the mobile device, at least network credentials of communication networks operated by the at least one service provider at various locations; detecting and connecting, by the mobile device, to a communication network via the network credentials when approaching a selected location of the at least one service provider; transmitting, from the mobile device to a first computing device via the communication network, a first identifier that uniquely identifies the mobile device, wherein the first computing device is positioned at the selected location of the at least one service provider; detecting and receiving, by the first computing device, the first identifier in response to detecting that the mobile device approaches the selected location; transmitting, by the first computing device, the first identifier to a second computing device; receiving, by the second computing device from the first computing device, the first identifier of the mobile device; comparing, by the second computing device, the unique identifier to a plurality of unique identifiers; and initiating, by the second computing device, an event to determine and provide a service customized to a user of the mobile device based at least upon a comparison result of the first identifier to the plurality of unique identifiers. ### Claim 12 (depends on 11) The method of claim 11, wherein the mobile device comprises a smart device, and the first identifier of the mobile device comprises at least a factory media access control (MAC) address of the mobile device. ### Claim 13 (depends on 11) The method of claim 11, further comprising storing, by the second computing device, the plurality of unique identifiers associated with a plurality of mobile devices. ### Claim 14 (depends on 11) The method of claim 11, wherein the service customized to the user of the mobile device comprises at least one of: greeting, recognizing and authenticating the user of the mobile device within a range of the selected location. ### Claim 15 (depends on 11) The method of claim 11, further comprising: registering, by the mobile device, with the at least one service provider via the at least one application program within the selected location of the at least one service provider; storing, by the mobile device, at least the network credentials of communication networks operated by the at least one service provider at the various locations on a non-transitory computer-readable storage medium of the mobile device; detecting and connecting, by the mobile device, to a different communication network via the network credentials when approaching a different location of the at least one service provider; and receiving, by the mobile device, the service customized to the user of the mobile device at the different location of the at least one service provider. ### Claim 16 (depends on 11) The method of claim 11, further comprising: registering, by the mobile device, with the at least one service provider via the at least one application program away from the various locations of the at least one service provider; storing, by the mobile device, at least the network credentials of communication networks operated by the at least one service provider at the various locations on the non-transitory computer-readable storage medium; and in response to detecting a failed connection using the network credentials, obtaining, by the mobile device, a second identifier from the second computing device. ### Claim 17 (depends on 16) The method of claim 16, further comprising: continuously broadcasting, by the first computing device, at least a beacon signal at the selected location of the at least one service provider; and transmitting, by the mobile device, the second identifier to the first computing device in response to detecting the beacon signal when approaching the selected location. ### Claim 18 (depends on 17) The method of claim 17, further comprising: in response to detecting the beacon signal, connecting, by the mobile device, to a network available at the selected location of the at least one service provider via the network credentials; and transmitting, from the mobile device to the first computing device via the network, the first identifier that uniquely identifies the mobile device. ### Claim 19 (depends on 11) The method of claim 11, further comprising storing, by the mobile device, the network credentials to a list of trusted communication networks on the mobile device. ### Claim 20 (depends on 11) The method of claim 11, further comprising: obtaining, by the mobile device, information related to a user carrying the mobile device in response to determining that the user needs to be authenticated; generating, by the mobile device, data for uniquely identifying the user based at least on the information related to the user; encrypting, by the mobile device, the data uniquely identifying the user; storing, by the mobile device, encrypted data uniquely identifying the user on the non-transitory computer-readable storage medium of the mobile device; and transmitting, by the mobile device, the encrypted second data to the first computing device, wherein the information related to the user carrying the mobile device comprise a biometric or non-biometric characteristic of the user including at least one of: a fingerprint, a palm/finger vein pattern, a voice pattern, a facial image, a palm print, a hand geometry, a retina and iris recognition, a digital signature, a username and password, and a token.