Smartphone Location Verification for Financial Transaction Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Financial institutions face significant losses due to identity theft and fraudulent transactions, despite existing authentication measures like PINs and CCV codes, indicating a need for additional security layers to verify user transactions.

Innovation Solution

A method and apparatus that utilize a two-factor authentication approach combining Near Field Communication (NFC) with traditional user information, where the user's smartphone location is verified via GPS or triangulation to ensure the transaction is authorized only if the device is within a predetermined distance of the transaction location, enhancing security by requiring both the credit card holder's physical presence and smartphone authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication measures (PINs, CCV codes, zip codes) are used, then authentication speed is maintained, but security against fraudulent transactions is insufficient

Engineering Contradiction:
Improvesecurity against fraudulent transactionsVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple authentication factors into a unified system: traditional credentials (PIN, CCV, zip code) are merged with smartphone-based location verification and NFC technology. This integration creates a multi-layered security approach where each factor reinforces the others, significantly improving fraud detection capability while maintaining a streamlined user experience through the smartphone's centralized authentication interface.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The smartphone serves multiple authentication functions simultaneously: it stores the user's profile information, performs location verification via GPS, enables NFC communication for contactless authentication, and provides a universal interface for all authentication methods. This multi-functionality eliminates the need for separate authentication devices while enhancing security coverage across different transaction scenarios.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If additional authentication measures are implemented, then security against fraud is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvesecurity against fraudulent transactionsVSAvoiduser authentication convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system leverages the smartphone's built-in capabilities (GPS location services, NFC hardware, stored credentials) to perform authentication functions automatically without requiring additional user actions. The smartphone itself provides the authentication service by verifying its own location and communicating securely with the point-of-sale system, eliminating the need for separate authentication devices or complex user procedures.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

User authentication information, including profile data and security credentials, is pre-loaded into the smartphone during account setup. The smartphone continuously maintains location data and authentication readiness, so that during actual transactions, the verification process is expedited rather than requiring fresh data collection. This preliminary preparation significantly reduces authentication time and complexity.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10373246B1Method and apparatus of providing enhanced authentication and security for financial institution transactions
Publication Date: 2019.08.06 WEST TECH GRP LLC
  • US10373246B1 patent drawing
  • US10373246B1 patent drawing
  • US10373246B1 patent drawing

AI summary

Example embodiments of the present invention may include a method and apparatus configured to authenticate a user transaction (e.g., point-of-sale, ATM transactions, etc.). One example method may include receiving user authentication information during the user transaction and confirming the user authentication information is correct. The method may also include determining a current user location by a location associated with the user's mobile device, and comparing the current user location to a known location of an entity associated with the user transaction. The method may also include authenticating the transaction if the current user location is within a predetermined distance of the known location of the entity associated with the user transaction.