# US 2025/0148468 A1 · Systems and methods for multi-factor authentication using device tracking and identity verification

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0148468 A1
- Document ID: US20250148468A1
- Status: Published application
- Kind: A1
- Application number: 18/948,842
- Filed: 2024-11-15
- Published: 2025-05-08
- Earliest claimed: 2023-01-13
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Jeffrey RULE; Kevin OSBORN; Wayne LUTZ
- Web page: https://patentgrep.com/patent/US20250148468A1

## CPC

- G06Q 20/3224: {Transactions dependent on location of M-devices}
- G06Q 20/4015: {using location information}
- G06Q 20/3226: {Use of secure elements separate from M-devices}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- G06Q 20/409: {Device specific authentication in transaction processing}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Systems and methods are directed to a modified device configuration for disposing a NFC compatible user card within a NFC field of a user mobile device so as to enable continuous proximity monitoring based on a status of an NFC link established between the card and the mobile device. The modified device configuration may be utilized to implement card tracking functionality by using a mobile application, running on the mobile device, to generate a timestamp upon detection of change in a connectivity status of the NFC link to the card. The timestamp NFC connectivity data may then be paired with mobile device GPS coordinates, concurrently retrieved from one or more mobile GPS-based navigation applications, to facilitate card tracking functionality as well as multi-factor validation for electronic transactions initiated by the NFC compatible card and/or the mobile device.

## Claims

### Claim at position 1

1-20. (canceled)

### Claim 21

A system for implementing multi-factor transaction authentication, comprising:
a structural element for storing a user card within a near field communication (NFC) range of a mobile device; and
a user application executing on the mobile device,
wherein the user application:
generates one or more event timestamps associated with one or more detection events, wherein each detection event corresponds to a change in the connectivity status of an NFC link between the user card and the mobile device;
transmits, to a validation server, a most recent event timestamp from the one or more event timestamps for comparison with a transaction timestamp associated with a transaction request message for a transaction involving the user card; and
receives, from the validation server, a validation response for the transaction request message.

### Claim 22 (depends on 21)

The system of claim 21, wherein the structural element comprises an external storage component affixed to the mobile device.

### Claim 23 (depends on 22)

The system of claim 22, wherein the external storage component is configured to dispose the user card within the NFC range of the mobile device.

### Claim 24 (depends on 22)

The system of claim 22, wherein the external storage component is configured to orient the user card to dispose an NFC tag of the user card within the NFC range of the mobile device.

### Claim 25 (depends on 22)

The system of claim 22, wherein the external storage component is configured to orient the user card to dispose the user card to overlap an NFC reader of the mobile device.

### Claim 26 (depends on 21)

The system of claim 21, wherein the structural element comprises a cardholder pocket.

### Claim 27 (depends on 21)

The system of claim 21, wherein the user application records a Global Positioning System (GPS) location coordinates corresponding to a GPS location of the mobile device, at each of the one or more event timestamps.

### Claim 28 (depends on 27)

The system of claim 27, wherein a most recent GPS location of the mobile device corresponds to a most recently recorded timestamp.

### Claim 29 (depends on 21)

The system of claim 21, wherein the user application comprises one or more application components executing on the validation server.

### Claim 30 (depends on 21)

The system of claim 21, wherein the change in connectivity status of the NFC link comprises a determination of at least one selected from the group of a change from an active connectivity status to an inactive connectivity status and a change from an inactive connectivity status to an active connectivity status.

### Claim 31 (depends on 30)

The system of claim 30, wherein the change from an inactive connectivity status to an active connectivity status corresponds to an insertion of the user card into the structural element.

### Claim 32 (depends on 30)

The system of claim 30, wherein the change in the connectivity status of the NFC link from an active connectivity status to an inactive connectivity status corresponds to a removal of the user card into the structural element.

### Claim 33

A method for multi-factor transaction authentication, the method comprising:
providing a structural element for storing a user card within a near field communication (NFC) range of a mobile device;
generating, by a user application executing on the mobile device, one or more event detection timestamps associated with one or more detection events, wherein each detection event corresponds to a change in the connectivity status of an NFC link between the user card and the mobile device;
transmitting, by the user application to a validation server, a most recent event timestamp from the one or more event timestamps for comparison with a transaction timestamp associated with a transaction request message for a transaction involving the user card; and
receiving, by the user application from the validation server, a validation response for the transaction request message.

### Claim 34 (depends on 33)

The method of claim 33, further comprising determining, by the validation server, whether a GPS location data associated with the most recent event timestamp corresponds to a merchant location identified from the transaction request message.

### Claim 35 (depends on 34)

The method of claim 34, wherein the validation response comprises a multi-factor strong validation response generated by the validation server and corresponding to a validation of a merchant location based on verification of the most recent GPS location of the mobile device and the most recent event timestamp.

### Claim 36 (depends on 33)

The method of claim 33, further comprising:
monitoring, by the user application, the connectivity status of the NFC link,
wherein the NFC link is established between the user card and the mobile device when the user card is inserted into the structural element.

### Claim 37 (depends on 33)

The method of claim 33, further comprising verifying, by the validation server, that the transaction timestamp does not exceed the most recent event timestamp by more than a predefined threshold value

### Claim 38 (depends on 37)

The method of claim 37, wherein a detection event associated with the most recent event timestamp corresponds to a removal of the user card from the structural element.

### Claim 39

A non-transitory computer-accessible medium containing executable instructions, wherein, when executed by a computer hardware arrangement comprising a processor, a near field communication (NFC) reader, and a structural element for storing a user card within a NFC range of the computer hardware arrangement, the instructions cause the computer hardware arrangement to perform procedures comprising:
generating one or more event timestamps associated with one or more detection events, wherein each detection event corresponds to a change in the connectivity status of an NFC link between the user card and the mobile device;
transmitting, to a validation server, a most recent event timestamp from the one or more event timestamps for comparison with a transaction timestamp associated with a transaction request message for a transaction involving the user card; and
receiving, from the validation server, a validation response for the transaction request message.

### Claim 40 (depends on 39)

The non-transitory computer-accessible medium of claim 39, the procedures further comprising:
monitoring the connectivity status of the NFC link,
wherein the NFC link is established between the user card and the computer hardware arrangement when the user card is inserted into the structural element.
