US20090102712A1 - Method and system for monitoring electronic purchases and cash-withdrawals - Google Patents

Method and system for monitoring electronic purchases and cash-withdrawals Download PDF

Info

Publication number
US20090102712A1
US20090102712A1 US12/260,065 US26006508A US2009102712A1 US 20090102712 A1 US20090102712 A1 US 20090102712A1 US 26006508 A US26006508 A US 26006508A US 2009102712 A1 US2009102712 A1 US 2009102712A1
Authority
US
United States
Prior art keywords
location
wireless terminal
transaction
wireless
unique
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US12/260,065
Inventor
Guy Heffez
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US11/346,240 external-priority patent/US7503489B2/en
Priority to US12/260,065 priority Critical patent/US20090102712A1/en
Application filed by Individual filed Critical Individual
Publication of US20090102712A1 publication Critical patent/US20090102712A1/en
Priority to US13/065,691 priority patent/US8640197B2/en
Priority to US13/290,988 priority patent/US8413898B2/en
Priority to US13/479,235 priority patent/US8770477B2/en
Priority to US14/145,862 priority patent/US9033225B2/en
Priority to US14/446,527 priority patent/US20140337503A1/en
Priority to US14/479,266 priority patent/US20150020162A1/en
Priority to US14/835,707 priority patent/US9391985B2/en
Priority to US15/134,545 priority patent/US9727867B2/en
Priority to US15/606,270 priority patent/US10289833B2/en
Priority to US15/787,805 priority patent/US10521786B2/en
Priority to US15/859,589 priority patent/US10554645B2/en
Priority to US16/362,753 priority patent/US10645072B2/en
Priority to US16/724,361 priority patent/US11308477B2/en
Priority to US18/482,880 priority patent/US20240037549A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322Aspects of commerce using mobile devices [M-devices]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3224Transactions dependent on location of M-devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4016Transaction verification involving fraud or risk level assessment in transaction processing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02Services making use of location information
    • H04W4/021Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12Messaging; Mailboxes; Announcements
    • H04W4/14Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Definitions

  • This invention relates to a method and system for monitoring electronic purchases.
  • a cellular telephone location system for automatically recording the location of one or more mobile cellular telephones is described, for example, in U.S. Pat. No. 5,327,144.
  • the system comprises a central site system operatively coupled to at least three cell sites. Each of the cell sites receives cellular telephone signals and integrates a timing signal common to all the cell sites.
  • the central site calculates differences in times of arrival of the cellular telephone signals arriving among the cell sites and thereby calculates the position of the cellular telephone producing the cellular telephone signals. Additional examples of known methods for locating phones are cell sector and cell site.
  • the full disclosure of U.S. Pat. No. 5,327,144 is hereby incorporated by reference in its entirety.
  • the Federal Communications Commission has recently mandated wireless Enhanced 911 (E911) rules to improve the effectiveness and reliability of wireless 911 service by providing 911 dispatchers with additional information on wireless 911 calls.
  • E911 wireless Enhanced 911
  • the wireless E911 program is divided into two part—Phase I and Phase II.
  • Phase I requires carriers, upon appropriate request by a local Public Safety Answering Point (PSAP), to report the telephone number of a wireless 911 caller and the location of the antenna that received the call.
  • Phase II requires wireless carriers to provide far more precise location information, within 50 to 300 meters in most cases.
  • the deployment of E911 requires the development of new technologies and upgrades to local 911 PSAPs, as well as coordination among public safety agencies, wireless carriers, technology vendors, equipment manufacturers, and local wireline carriers.
  • the FCC established a four-year rollout schedule for Phase II, beginning Oct. 1, 2001 and to be completed by Dec. 31, 2005.
  • a method for facilitating the detection of misuse of an identity during an electronic transaction comprises at least five embodiments.
  • the method comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity.
  • an approximate location of the first wireless terminal is determined based on cached position information stored on a GPS position database. For some embodiments, an approximate location of the internet user's geographical is determined using wireless technology.
  • FIG. 1 is a schematic block diagram showing exemplary hardware elements that can enable the practice of the various embodiments of the present invention.
  • FIG. 2 shows a schematic block diagram of an exemplary first wireless terminal fitted with a GPS receiver operatively coupled to an inertial navigation system according to one aspect of the present invention.
  • FIG. 3 shows a non-limiting example of a user registration process according to one aspect of the present invention.
  • FIG. 4 shows a non-limiting flow chart of one embodiment of the invention.
  • a user identity (such as the user's credit card, cash card, etc.) is associated with a first wireless terminal, e.g., the user's cell phone.
  • the position of the user's cell phone is determined at intervals and cached (i.e., archived) to provide a stream of regularly updated pre-transaction positions.
  • Each cached pre-transaction position can be stored on a remote position database (PDB) or on the user's cell phone.
  • PDB remote position database
  • the invention detects the use of the user's credit card (i.e., identity) at the first location and compares the first location with the most recent cached position of the user's cell phone (now treated as a pre-transaction position to provide a second location for comparison). Specifically, a determination is made as to whether the first and second locations match in geographical proximity.
  • POS point of sale
  • the invention If the first and second locations do not match in geographical proximity, the invention generates an alert or advisory message that is communicated to a predetermined notification device, such as the user's email account, a POS electronic terminal, a financial institution's computers or offices (such as the user's credit card company's computers, etc.).
  • a predetermined notification device such as the user's email account, a POS electronic terminal, a financial institution's computers or offices (such as the user's credit card company's computers, etc.).
  • the alert can also be a reply message for blocking an associated electronic transaction at the first location.
  • the invention can be adjusted such that as each new pre-transaction position corresponding to the user's cell phone becomes available, the new pre-transaction position can be used to overwrite the currently archived pre-transaction position to prevent illicit or unauthorized tracking of the user's movements.
  • a post-transaction position (being a third location) of the user's cell phone is obtained and compared to the known first location and an alert generated if the post-transaction location (third location) and known POS location (first location) do not match in geographical proximity.
  • Such matching can be based on a predetermined distance.
  • an alert is generated and communicated to a predetermined device such as the user's cell phone and/or email address, and/or to an appropriate financial institution such as the user's bank or a credit card company's computers, the user's wireless personal digital assistant or a user's wireless enabled laptop, etc.
  • a predetermined device such as the user's cell phone and/or email address
  • an appropriate financial institution such as the user's bank or a credit card company's computers, the user's wireless personal digital assistant or a user's wireless enabled laptop, etc.
  • the user's cell phone may include a GPS receiver capable of determining the position of the user's cell phone, but only if the user's GPS capable cell phone is able to receive GPS signals necessary to calculate the location of the user's cell phone.
  • GPS signals are transmitted by dedicated satellites and are often not strong enough to be received inside buildings where many ATM and POS terminals are located.
  • the invention provides a non-obvious way of monitoring the use of one or more identities (such as a credit card or cash card number) associated with a user regardless of the ability of a user's cell phone to pick up GPS signals at the time of transaction (i.e., when the user's identity is used to authorize a transaction).
  • the invention facilitates the detection of a possible fraudulent or an invalid electronic purchase involving the use of a user's identity, for example, a credit card, debit card or any other kind of electronic payment or purchase system including biometric based purchases.
  • a user's identity for example, a credit card, debit card or any other kind of electronic payment or purchase system including biometric based purchases.
  • an advisory message is communicated to a predetermined notification device.
  • the intent of this invention is to provide an alert upon detection of an inappropriate purchase or transaction.
  • a computer signature (unique ID) is created by identifying certain characteristics of the computer. These characteristics act as identifiers of the computer or mobile wireless terminal such as PDA, Mobile Phone, Smart Phone, Mobile computer, Laptop, Mini Laptop or any such device with computing and communicating via wireless capabilities. Every device that is connected to the internet has a few unique identifiers such as, but not limited to: Computer Network Mac address, CPU serial number, Operating System S/N, Cookie, and more.
  • the computer uses other network resources that have unique identifiers such as, but not limited to, a Gateway or Router Mac Address.
  • every computer has common identifiers such as, but not limited to: Operating system version, Disk Size, Internet browser version, hardware installed on the computer, network card speed, Operating system patches installed on the computer, CPU speed, memory size, cookie, secret cookie, virtual memory size, unique software installed by vendor which can uniquely identify the user or other installed software on the computer, and more.
  • identifiers such as, but not limited to: Operating system version, Disk Size, Internet browser version, hardware installed on the computer, network card speed, Operating system patches installed on the computer, CPU speed, memory size, cookie, secret cookie, virtual memory size, unique software installed by vendor which can uniquely identify the user or other installed software on the computer, and more.
  • Wireless communication device as used in the context of the present invention, applies to any communication device capable of communicating with another communication device via wireless technology or determining the internet user's location using wireless technology. For unlimited examples: WiFi, WiMax, antenna triangulation, Cell ID, GPS, Galileo, Radio or any other such wireless networks known now or in the future.
  • the vendor may use the contact information to access the internet user's wireless device, geo-locate the internet user's wireless device, and associate the geo-location of the internet user's wireless device with the internet user.
  • the location of the internet user may be compared with the location of the computer which the internet user was using to reach the vendor (in some cases, the same as the wireless device) for authentication purposes.
  • the web site can get the geographical location associated with that user. Determining the internet user's geographical location using wireless technology will allow improved services to the internet user. For example: if GoogleTM knows exactly where the internet user is geographically located then GoogleTM can provide search results that are relevant to that internet user's geographical location. If an internet user is searching for “Pizza” then GoogleTM can provide the closest Pizza store to that internet user location, perhaps across the street.
  • wireless terminal (and its derivatives such as “first wireless terminal”), as used in the context of the present invention, applies to any device capable of communicating with a wireless network or cellular system.
  • a non-limiting example of a first wireless terminal includes a cellular telephone (sometimes referred to as a cell phone or a wireless phone).
  • Other non-limiting examples include any device that has been modified or designed to communicate with a wireless network including, but not limited to: a Personal Digital Assistant (“PDA”), such as a WiFi capable PDA, or a wireless Blackberry (such as the Blackberry 7520 model).
  • PDA Personal Digital Assistant
  • WiFi capable PDA such as a WiFi capable PDA
  • wireless Blackberry such as the Blackberry 7520 model
  • the predetermined notification device can be any suitable device capable of receiving communications directly or indirectly from a wireless network, such as, but not limited to: a first mobile terminal, a second mobile terminal, a Personal Digital Assistant (PDA) capable of communicating with a wireless network, a laptop computer capable of communicating with a wireless network, a message server, and an email server, an electronic terminal 120 , alone or in combination.
  • PDA Personal Digital Assistant
  • the position of a mobile terminal can be determined by, for example, an internal positioning apparatus and an external position apparatus, alone or in combination.
  • Examples of internal positioning apparatus include a GPS receiver built into the mobile terminal that receives Global Positioning System (“GPS”) radio signals transmitted from GPS satellites.
  • GPS Global Positioning System
  • the GPS system can be supplemented with an INS (inertial navigation system) also built into the mobile terminal (see FIG. 2 ).
  • INS inertial navigation system
  • the external positioning apparatus can be a cellular positioning system that computes the position of the mobile terminal by observing time differences among the arrivals of a radio signal transmitted by the mobile terminal at a plurality of observation points, i.e., base stations, which typically form part of the wireless network.
  • the external positioning apparatus could be a single base station that the mobile terminal is in contact with.
  • Each base station has a particular base station ID and a location associated with the base station ID.
  • the location of a mobile terminal can be approximated to the actual location of a base station, but given that the typical area covered by a base station is often about one kilometer, it is difficult to accurately determine the position of the mobile terminal.
  • the position of a mobile terminal can also be tracked using external RFID tags (Radio Frequency Identification tags) in combination with an RFID reader built into the mobile terminal.
  • RFID tags and readers work is described in U.S. Patent Publication No. 20050143916 published Jun. 30, 2005 to Kim, In-Jun, et al. U.S. Patent Publication No. 20050143916 is incorporated by reference herein in its entirety.
  • a method for facilitating the detection of misuse of an identity during an electronic transaction.
  • the first embodiment comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity.
  • the cached position information can be cached GPS position information stored on the first wireless terminal.
  • the step of determining the second location can further comprise the step of updating the cached position information with an inertial navigation system correction performed by the first wireless terminal to provide an updated location of the first wireless terminal, the updated location being the second location.
  • the step of determining the second location further comprises the step of detecting whether GPS signals are being received by the first wireless terminal to determine a post-transaction location of the first wireless terminal, the post-transaction location being the second location.
  • the step of detecting whether sufficient GPS signals are being received by the first wireless terminal for the first terminal to determine a post-transaction is only performed if cached position information is not stored on the first wireless terminal or if the cached position information is stale.
  • the cached position information is regarded as stale if the information has not been updated for a predetermined time period, e.g., has not been within the last 30 minutes, 15 minutes or last 5 minutes.
  • the predetermined time period defining when the cached position information is stale can vary and may be factory set or optionally set by the owner or user of the identity.
  • the first wireless terminal can be any device that can wirelessly communicate with a network, such as a cell phone, which can communicate wirelessly with a wireless network.
  • a network such as a cell phone
  • Examples of suppliers of cell phones are Nokia, Motorola, and Ericsson.
  • the terms “cell” and “cellular” are regarded as equivalent terms.
  • the identity can be a credit card number, an account number, a debit card identification number, a driver's license number, a name and address, a social security number, a telephone number, a finger print, an iris scan identity, a retina scan identity, and a membership identity (such as a membership password), alone or in combination.
  • the identity can also be any suitable biometric identity, such as a fingerprint, an iris scan identity and a retina scan identity, alone or in combination.
  • the notification can be generated, for example, by an electronic transaction device (such as a credit card reader at a restaurant, an ATM machine such as a cash-withdrawal terminal that incorporates a card reader) at the first location or by, for example, a credit card company in communication with the electronic device at the first location.
  • an electronic transaction device such as a credit card reader at a restaurant, an ATM machine such as a cash-withdrawal terminal that incorporates a card reader
  • a credit card company in communication with the electronic device at the first location.
  • the electronic transaction device could be any suitable device where the identity can be entered for the purpose of performing an electronic transaction.
  • a credit card with a credit card number can be read by the electronic device, and the credit card number communicated to the credit card company associated with the credit card, and in response the credit card company generates a notification, which is routed to the first wireless terminal.
  • the first wireless terminal determines its location based on cached position information stored on the first wireless terminal or if the cached location information is stale requesting the first wireless terminal to provide a fresh location.
  • the generated alert can take any suitable form.
  • the alert can be an advisory message, which is communicated to at least one predetermined device.
  • the at least one predetermined device could be the first wireless terminal and/or a second wireless terminal, wherein the first wireless terminal also acting as the predetermined device could be a cell phone.
  • the predetermined device can be any suitable device, such as a Personal Digital Assistant (PDA) and/or a laptop capable of communicating with a wireless network and/or receiving emails, and a message server.
  • PDA Personal Digital Assistant
  • An example of a message server is a server accessible via the world-wide-web (WWW) and which stores messages for downloading by, for example, a wireless capable laptop with authorization to access the message server.
  • the message server could be an email server programmed to store and/or forward emails to subscribers.
  • Other examples of message servers include the hotmail email system and the webmail service provided by Google called Gmail.
  • the generated alert can be routed to the user's email address recorded during a previous registration of the identity.
  • the alert is a reply message, such as a non-authorization message, for blocking an associated electronic transaction at the first location, and more particularly for blocking a transaction at the first location associated with the identity.
  • the identity may not be limited to one identity, but could encompass one or more identities such as a user's credit card number together with the user's email address, social security number, phone number, residential address or phone number.
  • a card reader may read a user's credit card and the user asked to enter or otherwise provide their email address or phone number.
  • the use of an identity is associated with a first time stamp.
  • the first time stamp corresponds to the time of the associated electronic transaction (or attempted electronic transaction) performed at a first location
  • the step of reading a cached location is associated with a second time stamp.
  • the speed can be calculated based on the distance between the first and second locations and the time difference between the first and second time stamps such that the first and second locations are judged not to match in geographical proximity if the speed is above a predetermined value.
  • a predetermined value is set at 40 mph
  • a confidence score is calculated to determine if the position mismatch with respect to the first and second locations is acceptable or unacceptable, and the alert is only generated if the confidence score is below a predetermined threshold.
  • the system can also use additional factors to derive the confidence score. These factors can be weather conditions, time of day, day of year, urban makeup (e.g. a suburb area versus a downtown area), etc.
  • the step of determining the second location further comprises the step of detecting a WiFi Unique ID associated with the position of the first wireless terminal, and converting the WiFi unique ID into a post-transaction location for the first wireless terminal, the post-transaction location being the second location, wherein the step of detecting a WiFi Unique ID is only performed if cached position information is not stored on the first wireless terminal. For example, if the wireless terminal lacks cached position information and the first wireless terminal is able to detect a WiFi unique ID, then the WiFi unique ID is used to determine the position of the first wireless terminal.
  • a WiFi's unique ID i.e., identity such as, but not limited to, an Internet media-access-control (MAC) address
  • MAC Internet media-access-control
  • This database might be stored, for example, on a .ltoreq.1.5′′ hard drive (i.e., a less-than or equal to 1.5 inch hard drive) or on a large capacity memory chip fitted to the first wireless terminal 160 .
  • the step of determining the second location further comprises the step of detecting a WiMAX Unique ID associated with the position of the first terminal, and converting the WiMAX Unique ID into a post-transaction location for the first wireless terminal, the post-transaction location being the second location, wherein the step of detecting a WiMAX Unique ID is only performed if cached position information is not stored on the first wireless terminal.
  • the step of detecting a WiMAX Unique ID is only performed if the cached position information is stale, wherein the cached position information is regarded as stale if the information has not been updated for a predetermined time period.
  • unique IDs may be associated with the position of the first terminal, including, in addition to GPS, WiFI, and WiMax, IDs derived from cell phone signal triangulation or from obtaining a cell tower ID (or the equivalent) from the wireless system.
  • Those of skill in the art, enlightened by this disclosure, will also appreciate that the present technique of geo-location using unique IDs may be used in a variety of related applications, such as providing geographically oriented search results from a search engine. For example, a user searching for a pizza store may be directed to one nearest him, rather than being left on his own to determine his location and pick the store off a map, as is presently done.
  • the step of determining the second location further comprises the step of obtaining a post-transaction position for the first wireless terminal as soon as the first wireless terminal is able to receive GPS signals to calculate its post-transaction position, the post-transaction position being the second location, wherein the step of obtaining a post-transaction position is only performed if cached position information is not stored on the first wireless terminal.
  • the step of determining the second location further comprises the step of obtaining a post-transaction position for the first wireless terminal as soon as the first wireless terminal is able to receive GPS signals to calculate its post-transaction position, the post-transaction position being the second location, wherein the step of obtaining a post-transaction position is only performed if the cached position information is stale, wherein the cached position information is regarded as stale if the information has not been updated for a predetermined time period.
  • a method for facilitating the detection of misuse of an identity during an electronic transaction.
  • the second embodiment comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information stored on a GPS position database, wherein the GPS position database is operatively connected to a wireless provider 180 and/or a financial institution's computers 140 , the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity.
  • a method for facilitating the detection of misuse of an identity during an electronic transaction, comprising the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; reading a cached location of the first wireless terminal based on cached position information stored on the first wireless terminal, the location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; determining a post-transaction location of the first wireless terminal if the first and second locations do not match in geographical proximity, the post-transaction location of the first wireless terminal being a third location; and generating an alert if: (1) the first and second locations do not match in geographical proximity and (2) the first and third locations do not match in geographical proximity.
  • the post-transaction location can be obtained, for example, by processing GPS signals received by the first wireless terminal 160 within a reasonable time after the transaction (referred to hereinafter as “post-transaction GPS signals”).
  • Post-transaction location can also be obtained, for example, using WiFi unique ID (if available) or WiMax unique ID.
  • the post-transaction location can be obtained by using an inertial navigation module (INM) 400 (discussed infra) to convert the most recent cached location into a post-transaction location for the first wireless terminal, wherein updating the most recent cached position of the INM module is integrated into the design of the first wireless terminal (see, e.g., FIG. 3 ).
  • the post-transaction location can be determined based on a method selected from the group consisting of: processing post-transaction GPS signals, WiFi unique ID, and WiMax unique ID, and any combination thereof.
  • a method for facilitating the detection of misuse of an identity during an electronic transaction comprising the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; reading a cached location of the first wireless terminal based on cached position information stored on the first wireless terminal, the location of the first wireless location being a second location; determining whether the first and second locations match in geographical proximity; determining the post-transaction location of the first wireless terminal if the first and second locations do not match in geographical proximity, the post-transaction location of the first wireless terminal being a third location; determining a post-transaction position of the first wireless terminal if (1) the first and second positions do not match in geographical proximity and (2) it is not possible to determine the post-transaction location, wherein the post-transaction position is treated as the third location; and generating an alert if: (1) the first and second locations do not match in geographical proximity and (2) the first and third locations do not match in geographical proximity.
  • FIG. 1 is a schematic block diagram showing exemplary hardware elements that can enable the practice of the various embodiments of the present invention.
  • An electronic transaction terminal is shown at 120 .
  • the electronic transaction terminal 120 can be, for example, a credit and/or debit card terminal located at a first location such as a point of sale location inside a retail store, i.e., at a known first location.
  • the terminal 120 could be a credit/debit card terminal linked to a cash register (not shown) or the terminal 120 could be a regular ATM (automatic teller machine) for dispensing cash to registered holders of cash cards.
  • the terminal 120 can take various forms without detracting from the spirit of the present invention. If the first and second locations do not match in geographical proximity, the alert can be a reply message for blocking an associated electronic transaction at the first location.
  • the terminal 120 is operatively coupled to a financial institution's computers 140 such as a credit card company's computers or a bank's computers if, for example, terminal 120 is an ATM and used for cash withdrawals).
  • the financial institution's computers 140 are those computers authorized to process the user's financial transactions.
  • the financial institution's computers 140 are in turn able to communicate with a first wireless terminal 160 via a wireless provider 180 and, based on signal strength, the nearest base station 170 to the first wireless terminal 160 .
  • Examples of credit card companies include Visa, Discover, American Express, MasterCard, and Eurocard.
  • wireless providers include Sprint, Verizon and T-Mobile.
  • An optional position database (PDB) 300 can be operatively coupled to the wireless provider 180 .
  • PDB 300 can be operatively coupled to the financial institution's computer 140 .
  • the PDB 300 can be operatively coupled to more than one element such as wireless provider 180 and financial institution's computers 140 .
  • the PDB 300 can be directly or indirectly linked to wireless provider 180 and/or financial institution's computers 140 .
  • the terms “coupled” or “operatively coupled” are intended to cover both direct and indirect links.
  • Pre-transaction and/or post-transaction positions with respect to the first wireless terminal 160 can be stored on the PDB 300 .
  • the PDB 300 can store positions derived from any known position determination technique such as, but not limited to, GPS position data derived from a GPS receiver 200 located on the first wireless terminal 160 (see, e.g., FIG. 2 ).
  • the optional PDB 300 can, for example, archive or cache a position history of the first wireless terminal 160 .
  • the optional position database 300 can be accessed to provide the latest available position of the first wireless terminal 160 , i.e., in this scenario, the first wireless terminal 160 uploads its position at predetermined intervals to the wireless vendor 180 and thence to the position database 300 .
  • positions based on previously received GPS signals can be stored in a memory 320 integrated with the first wireless terminal 180 .
  • the memory 320 can be any suitable memory such as, but not limited to: a RAM chip, a floppy disk, a hard disk drive such as an iPod battery powered 1.8-inch 60 GB hard disk drive or the anticipated 0.85 inch 3 GB hard disc drive, a CD-ROM, and a DVD-ROM, any known memory or anticipated memory option, alone or in combination.
  • the wireless terminal 160 is a cell phone fitted with a GPS receiver 200 .
  • the first wireless terminal can also include memory for storing cached positions, i.e., a history of the positions of the first wireless terminal, so that if the wireless terminal is required to supply its post-transaction position but is unable to do so, perhaps because the first wireless terminal is unable to receive GPS signals, then the latest cached position can be used.
  • the first wireless terminal 160 can be a GPS enabled cell phone as shown, or any wireless terminal capable of communication with a wireless provider such as a Blackberry in combination with a GPS receiver.
  • terminal 120 includes a card reader 240 for reading a credit card 260 .
  • An identity in the form of a credit card number and details are stored on a magnetic strip 280 and are read by the card reader 240 .
  • the magnetic strip 280 could be replaced with any known or future technology, e.g., a smart chip embedded in a credit or debit card, which can be read by, for example, waving the card near a card reader enabled to so read credit and/or debit cards fitted with smart chips.
  • a notification can be generated by the electronic terminal 120 or other device operatively coupled to the terminal 120 , and/or the credit card company's or bank's computers 140 .
  • One or more notifications can be generated by, for example, the electronic transaction terminal 120 and the credit card company's or bank's computers 140 , alone or in combination.
  • the notification acts as a trigger wherein the post-transaction or cached position of the first wireless terminal 160 (treated as the second position) is determined and compared to the position of the electronic transaction terminal 120 (regarded as the first position). More specifically, a check is made to determine if the first and second positions match in geographical proximity.
  • the task of determining if the first and second positions match in geographical proximity can be done by one or more elements such as, but not limited to, the first wireless terminal 160 , the wireless provider 180 and the computers 140 , the electronic transaction terminal 120 (or an optional processor 130 operatively coupled to the terminal 120 ), alone or in combination. If the computers 140 , first wireless terminal 160 , wireless provider 180 , alone or in combination, is/are tasked to determine if the first and second positions match in geographical proximity, then the notification should include data representative of the first position of the electronic transaction terminal 120 .
  • wireless terminals e.g., wireless mobile terminals such as cell phones
  • a GPS receiver combined with a communication system capable of communicating with a base station
  • U.S. Pat. No. 5,945,944 describes such a device
  • the prior art does not teach a method and system for monitoring electronic purchases and cash-withdrawals of the present invention.
  • U.S. Pat. No. 5,945,944, issued Aug. 31, 1999 to N. F. Krasner is herein incorporated by reference in its entirety.
  • FIG. 2 shows a schematic block diagram of an exemplary first wireless terminal 160 fitted with a GPS receiver 200 operatively coupled to an INM 400 .
  • the GPS receiver and INM combination can be housed inside the housing 165 of the first wireless terminal.
  • Suppliers of miniature inertial navigation hardware include Analog Devices Inc. and Comarco, Inc. (and more particularly its subsidiary Comarco Wireless Technologies (CWT) of Irvine, Calif. 92618, USA).
  • CWT miniature inertial modules are capable of precision position measurements in buildings and urban canyons and, when combined with a GPS receiver 200 , can determine the position of a first wireless terminal 160 with a high degree of accuracy and reliability.
  • INM technology in the form of silicon is available, for example, from Analog Devices Inc. (ADI).
  • the ADI ADXL103 (a 5 mm.times.5 mm.times.2 mm LCC package), which is a high accuracy, high stability, low cost, low power, complete single axis accelerometer with a signal conditioned voltage output, all on a single monolithic IC.
  • the ADXL213 supplied by ADI is a precision, low power, complete dual axis accelerometer with signal conditioned, duty cycle modulated outputs, on a single monolithic integrated chip (IC) measuring 5 mm.times.5 mm.times.2 mm.
  • ADI's ADXL311 is a low cost, low power, complete dual axis accelerometer with signal conditioned voltage outputs, all on a single monolithic IC of dimensions of just 5 mm.times.5 mm.times.2 mm.
  • ADI's ADXRS401 is a low-cost complete ultra small and light ( ⁇ 0.15 cc, ⁇ 0.5 gram) angular rate-sensing gyroscope capable of measuring up to 75 degrees per second with all of the required electronics on a single chip.
  • a credit card customer agrees to be locatable via his or her mobile phone provider and registers a credit card or debit card (hereinafter “credit card”) in such a manner that the user's credit card is associated with at least one mobile terminal.
  • credit card a credit card or debit card
  • the process of registering a credit card in a Location-Based Fraud Protection (“LBFP”) System involves a financial institution which partners with one or more mobile phone or wireless providers that provide mobile geographical location(s).
  • a mobile phone provider agrees, usually for a fee, to release the location of a subscriber who, in order to comply with privacy laws, authorizes this action.
  • the financial institution using the LBFP system, can register its clients using the following method (as shown in FIG.
  • the LBFP system will require at least two identifying numbers. These identifying numbers can be the last 4 digits of the credit card and the home address zip code. Once the customer enters these numbers, the LBFP system will communicate these details to the client's financial institution for verification. For added security, the LBFP system can also challenge the client by sending a 4-digit SMS random number to the cell phone and asking the client to enter it using his phone keypad. If verified, the LBFP system will be able to associate the correct credit card with the customer's cell phone number.
  • the LBFP system will then check to see if the client's cell phone carrier participates in this program. If it does, the LBFP will successfully add the client to its database (as described in the next paragraph) for credit card transaction monitoring.
  • the LBFP system can then provide an optional unique PIN to the client so that he can access the LBFP web site to further custom the alerting logic. In turn, this customization can further increase the accuracy of the LBFP system.
  • the client can add known locations to be used when an online transaction takes place. Known locations can be a work address, relative/friend's address, etc. Using these addresses will increase the LBFP accuracy when a customer uses a credit card online by comparing known locations with client's cell phone location at the approximate time of the online transaction.
  • the financial institution stores in a database the subscriber customer (hereinafter “subscriber”) details.
  • subscriber the subscriber's first and last name (stored as a type UTF-8 characters), Mobile carrier/Wireless provider code (e.g., Sprint-1, Nextel-2) stored as type Integer number, 10-digit Mobile phone number (3-digit area code and 7-digit phone number, stored as type Integer number), and ID number that is associated with the financial institution's subscriber's ID number (stored as type Integer number), such cross-reference number acting as a security measure whereby no personal information (SSN, credit card number) is stored in such database.
  • subscriber the subscriber customer (hereinafter “subscriber”) details.
  • the subscriber's first and last name stored as a type UTF-8 characters
  • Mobile carrier/Wireless provider code e.g., Sprint-1, Nextel-2
  • 10-digit Mobile phone number 3-digit area code and 7-digit phone number, stored as type Integer number
  • the financial institution After registration, each time a subscriber uses the credit card, at the time of a purchase transaction or near to that time, the financial institution will contact the LBFP System servers via a secure encryption link (e.g., SSL/SSH/VPN. With no personal information of the subscriber being transmitted, the financial institution provides the date of transaction, time of transaction, address of the business where the transaction took place, type of transaction (online or physical) and the subscriber's ID number.
  • the LBFP servers will then initiate a request via secure TCP/IP link (e.g., SSL/SSH/VPN) to the subscriber's mobile phone provider requesting the subscriber's post-transaction location, heading and/or speed (see FIG. 4 ).
  • SSL/SSH/VPN secure TCP/IP link
  • the actual physical location of the LBFP System does not matter.
  • the LBFP System can be located on the financial institution's premises or at a distance therefrom. If at a distance from the LBFP System, the financial institution can be
  • the LBFP System receives the purchase information from the financial institution, it cross-references the identifying item from the financial institution with the subscriber's unique carrier ID (e.g., cell phone number).
  • subscriber's unique carrier ID e.g., cell phone number
  • the LBFP System After the LBFP System finds the subscriber's unique carrier ID (or related information), it will then request the subscriber's last known location from the subscriber's carrier. Each carrier has specific means for interfacing with and providing this information. It is sometimes called API, which are known programming methods to execute specific functions. As a practical matter, the LBFP System, or the financial institution, will create a relationship and interface with the carrier ahead of time in order to obtain this information electronically. The LBFP System can interface with multiple carriers and multiple financial institutions.
  • the LBFP system may use additional factors to arrive at a final score/Fraud Confidence Level (“FCL”). These factors include a client's heading, speed, urban type/density, time of day, day of week, weather conditions, etc.
  • FCL Fraud Confidence Level
  • the time can range from 0 to 30 kilometers or more.
  • .DELTA.T the time can range from 0 to 30 minutes or more.
  • Fraud Confidence Level (“FCL”) values are assigned within the LBFP System for each credit card transaction.
  • FCL Fraud Confidence Level
  • a flag will be raised as to a valid transaction.
  • FCL is calculated by the LBFP System to be below a threshold value
  • a flag is raised as to a potentially fraudulent credit card use.
  • the LBFP System will switch into “search mode” as follows: (a) the system will keep attempting to locate the cell phone every 10 minutes for the next 30 minutes, or (b) if the location is determined within 30 minutes after the purchase transaction took place, the LBFP system will calculate the distance between the purchase location and the mobile phone location using an exemplar Table 1 to determine an FCL. TABLE-US-00001
  • the LBFP System tags distance (Km) of the purchase point and the transaction with within 20 minutes of the transaction an FCL of 1 ⁇ 2 3 1 4 5 5 10 6 15 7 20 8 25 9 >30 10
  • the LBFP System will calculate the distance between the purchase location or sale point and the mobile phone location using an exemplar Table 2 to determine an FCL.
  • the LBFP System tags distance (Km) of the purchase point and the transaction with within 10 minutes of the transaction an FCL of 1 ⁇ 2 3 1 4 5 5 10 8 >10 10
  • the LBFP System will calculate the distance difference between the customer's known home, work or other known address and the location of the cell phone. If the LBFP System was able to locate the cell phone with the cell phone being at the above known locations, within 10 minutes after the purchase transaction took place AND the purchase type is online/internet, the LBFP System will calculate the distance between the above known locations and the mobile phone location using an example Table 3 to determine an FCL.
  • the LBFP System tags distance (Km) of the purchase point and the transaction with within 10 minutes of the transaction an FCL of 1 ⁇ 2 4 1 5 5 6 10 8 >10 19
  • a customer purchased goods or service from a physical location (e.g., store) and the LBFP System is unable to locate the cell phone.
  • the wireless provider was able to acquire the customer's location prior to the purchase and store it in a temporary database. If the timestamp is close to the purchase time and the LBFP system is unable to get a newer location fix, then, in that case, the LBFP system may use the cached location information and .DELTA.T to calculate the FCL using a scoring table similar to table 1.
  • the cached location information can be either the location information stored on the location server or on the MT.
  • the LBFP system may use additional factors in order to calculate the LFC/fraud score. These factors may be: time of day, day of the week, urban make (a suburb vs. downtown), weather conditions and traffic condition, among others. This is true for all possible scenarios.
  • the LBFP System may either know in advance, or at the time of the purchase, the frequent or usual address of the purchaser, for instance, home, work or other known location.
  • the configuration and customization can be defined both globally as a system-wide rule and on per individual basis when the subscriber registered for this service.
  • Customization can include scoring/LFC threshold, known locations, and client notification methods (e.g., SMS, email).
  • GPS enabled cellular phones require, for the most part, a clear line of site with the sky in order to acquire GPS location. Since that does not always happen (in case the cellular phone is in the subway or other obstructed location), the location of the cellular phone sometimes does not match the exact location of the business. That is the reason the LBFP System compares both locations within a radius of X miles from such locations. (The number of X miles will be determined once an LBFP System in a particular environment has been through beta testing and becomes operational.). The X miles factor is also expected to vary in various geographical locations, such as rural locations versus large cities. Note also that there are cellular phones that can be located with means other than GPS.
  • An example is the triangulation of the cellular phone's signals with surrounding cell towers.
  • the geographic location of a cell phone tower being used by a cell phone may be acquired by associating the cell phone tower ID, which is software accessible, with its geographic location.
  • the manner by which the carrier obtains the mobile phone's location does not matter.
  • the LBFP System will take into account parameters provided by the carrier such as heading, speed, acquisition-time and location error (accuracy).

Abstract

A method for facilitating the detection of misuse of an identity during an electronic transaction. The invention comprises at least five embodiments. In a first embodiment, the method comprises the step of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity. In a second embodiment, an approximate location of the first wireless terminal is determined based on cached position information stored on a GPS position database. Methods of geo-locating a wireless terminal user are within the scope of the present invention.

Description

    CROSS-REFERENCE TO RELATED APPLICATIONS
  • This application is a continuation-in-part of U.S. patent application Ser. No. 11/346,240 filed on Feb. 3, 2006 and published Oct. 26, 2006 as document 20060237531 which, in turn, claims the benefit of priority from U.S. Provisional Patent Application App. No. 60/674,709, filed Apr. 26, 2005, the entire contents of which are incorporated herein by reference.
  • FIELD OF THE INVENTION
  • This invention relates to a method and system for monitoring electronic purchases.
  • BACKGROUND OF THE INVENTION
  • As credit card and debit card purchases have expanded both in number and in the methods by which they can be accomplished, particularly electronic purchases, the opportunity for fraudulent, invalid or unauthorized purchases has increased. The expansion of such purchase opportunities has resulted in an increase in monetary losses to sellers, merchants, financial institutions and authorized holders of the authorized credit card and debit cards. In response, methods and systems have been developed to reduce the number of fraudulent purchases through verification processes and systems.
  • An example of a method of increasing the security of payments made by credit and cash cards is set forth in U.S. Patent Publication No. 20040073519.
  • Another example of a method of increasing the security of payments made by credit and cash cards is set forth in U.S. Patent Publication No. 20040254868.
  • A cellular telephone location system for automatically recording the location of one or more mobile cellular telephones is described, for example, in U.S. Pat. No. 5,327,144. The system comprises a central site system operatively coupled to at least three cell sites. Each of the cell sites receives cellular telephone signals and integrates a timing signal common to all the cell sites. The central site calculates differences in times of arrival of the cellular telephone signals arriving among the cell sites and thereby calculates the position of the cellular telephone producing the cellular telephone signals. Additional examples of known methods for locating phones are cell sector and cell site. The full disclosure of U.S. Pat. No. 5,327,144 is hereby incorporated by reference in its entirety.
  • The Federal Communications Commission (FCC) has recently mandated wireless Enhanced 911 (E911) rules to improve the effectiveness and reliability of wireless 911 service by providing 911 dispatchers with additional information on wireless 911 calls. According to the FCC website, the wireless E911 program is divided into two part—Phase I and Phase II. Phase I requires carriers, upon appropriate request by a local Public Safety Answering Point (PSAP), to report the telephone number of a wireless 911 caller and the location of the antenna that received the call. Phase II requires wireless carriers to provide far more precise location information, within 50 to 300 meters in most cases. The deployment of E911 requires the development of new technologies and upgrades to local 911 PSAPs, as well as coordination among public safety agencies, wireless carriers, technology vendors, equipment manufacturers, and local wireline carriers. The FCC established a four-year rollout schedule for Phase II, beginning Oct. 1, 2001 and to be completed by Dec. 31, 2005.
  • SUMMARY OF THE INVENTION
  • A method for facilitating the detection of misuse of an identity during an electronic transaction. The present invention comprises at least five embodiments. In a first embodiment, the method comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity. In a second embodiment, an approximate location of the first wireless terminal is determined based on cached position information stored on a GPS position database. For some embodiments, an approximate location of the internet user's geographical is determined using wireless technology.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 is a schematic block diagram showing exemplary hardware elements that can enable the practice of the various embodiments of the present invention.
  • FIG. 2 shows a schematic block diagram of an exemplary first wireless terminal fitted with a GPS receiver operatively coupled to an inertial navigation system according to one aspect of the present invention.
  • FIG. 3 shows a non-limiting example of a user registration process according to one aspect of the present invention.
  • FIG. 4 shows a non-limiting flow chart of one embodiment of the invention.
  • It should be understood that the attached figures are not intended to limit the scope of the present invention in any way.
  • DETAILED DESCRIPTION OF THE INVENTION
  • This invention relates to a method and system for monitoring electronic transactions. In general terms, in one aspect of the invention a user identity (such as the user's credit card, cash card, etc.) is associated with a first wireless terminal, e.g., the user's cell phone. The position of the user's cell phone is determined at intervals and cached (i.e., archived) to provide a stream of regularly updated pre-transaction positions. Each cached pre-transaction position can be stored on a remote position database (PDB) or on the user's cell phone. If the user's identity such as the user's credit or cash card is later used, for example, at a point of sale (POS) electronic terminal having a known location (being a first location), the invention detects the use of the user's credit card (i.e., identity) at the first location and compares the first location with the most recent cached position of the user's cell phone (now treated as a pre-transaction position to provide a second location for comparison). Specifically, a determination is made as to whether the first and second locations match in geographical proximity. If the first and second locations do not match in geographical proximity, the invention generates an alert or advisory message that is communicated to a predetermined notification device, such as the user's email account, a POS electronic terminal, a financial institution's computers or offices (such as the user's credit card company's computers, etc.). The alert can also be a reply message for blocking an associated electronic transaction at the first location.
  • The invention can be adjusted such that as each new pre-transaction position corresponding to the user's cell phone becomes available, the new pre-transaction position can be used to overwrite the currently archived pre-transaction position to prevent illicit or unauthorized tracking of the user's movements.
  • In another aspect of the invention, if the latest archived pre-transaction location (i.e., second location) and known POS location (i.e., first location) don't match, a post-transaction position (being a third location) of the user's cell phone is obtained and compared to the known first location and an alert generated if the post-transaction location (third location) and known POS location (first location) do not match in geographical proximity. Such matching can be based on a predetermined distance. For example, if the post-transaction location of the user's cell phone is determined to be more than 5 miles from the known POS location, an alert is generated and communicated to a predetermined device such as the user's cell phone and/or email address, and/or to an appropriate financial institution such as the user's bank or a credit card company's computers, the user's wireless personal digital assistant or a user's wireless enabled laptop, etc. Thus, if the actual position of the user's cell phone is not available at about the time of the transaction, the pre or post-transaction position of the user's cell phone can be used to determine if an alert is warranted.
  • For example, the user's cell phone may include a GPS receiver capable of determining the position of the user's cell phone, but only if the user's GPS capable cell phone is able to receive GPS signals necessary to calculate the location of the user's cell phone. GPS signals are transmitted by dedicated satellites and are often not strong enough to be received inside buildings where many ATM and POS terminals are located. The invention provides a non-obvious way of monitoring the use of one or more identities (such as a credit card or cash card number) associated with a user regardless of the ability of a user's cell phone to pick up GPS signals at the time of transaction (i.e., when the user's identity is used to authorize a transaction).
  • Specifically, through such monitoring, the invention facilitates the detection of a possible fraudulent or an invalid electronic purchase involving the use of a user's identity, for example, a credit card, debit card or any other kind of electronic payment or purchase system including biometric based purchases. Upon detection of suspect purchase or transaction (such as a cash withdrawal at an ATM), an advisory message is communicated to a predetermined notification device. The intent of this invention is to provide an alert upon detection of an inappropriate purchase or transaction.
  • The invention is now described in more detail. A computer signature (unique ID) is created by identifying certain characteristics of the computer. These characteristics act as identifiers of the computer or mobile wireless terminal such as PDA, Mobile Phone, Smart Phone, Mobile computer, Laptop, Mini Laptop or any such device with computing and communicating via wireless capabilities. Every device that is connected to the internet has a few unique identifiers such as, but not limited to: Computer Network Mac address, CPU serial number, Operating System S/N, Cookie, and more. In addition to the above, the computer uses other network resources that have unique identifiers such as, but not limited to, a Gateway or Router Mac Address. In addition to the above, every computer has common identifiers such as, but not limited to: Operating system version, Disk Size, Internet browser version, hardware installed on the computer, network card speed, Operating system patches installed on the computer, CPU speed, memory size, cookie, secret cookie, virtual memory size, unique software installed by vendor which can uniquely identify the user or other installed software on the computer, and more. Using one or more common identifiers together, it is possible to create one unique computer signature for any given computer.
  • Online vendor request from the internet user a contact number for a wireless communications device, which is accessible to the internet user at the internet user's current location or, alternatively, use the internet user's wireless communication device to locate the user geographical location. “Wireless communication device”, as used in the context of the present invention, applies to any communication device capable of communicating with another communication device via wireless technology or determining the internet user's location using wireless technology. For unlimited examples: WiFi, WiMax, antenna triangulation, Cell ID, GPS, Galileo, Radio or any other such wireless networks known now or in the future. When the internet user provides a contact number for his wireless communication device, or similarly effective contact information, the vendor may use the contact information to access the internet user's wireless device, geo-locate the internet user's wireless device, and associate the geo-location of the internet user's wireless device with the internet user. In a separate step, the location of the internet user may be compared with the location of the computer which the internet user was using to reach the vendor (in some cases, the same as the wireless device) for authentication purposes.
  • By identifying the internet user's unique ID (or computer signature) the web site can get the geographical location associated with that user. Determining the internet user's geographical location using wireless technology will allow improved services to the internet user. For example: if Google™ knows exactly where the internet user is geographically located then Google™ can provide search results that are relevant to that internet user's geographical location. If an internet user is searching for “Pizza” then Google™ can provide the closest Pizza store to that internet user location, perhaps across the street.
  • It should be understood that the term “wireless terminal” (and its derivatives such as “first wireless terminal”), as used in the context of the present invention, applies to any device capable of communicating with a wireless network or cellular system. A non-limiting example of a first wireless terminal includes a cellular telephone (sometimes referred to as a cell phone or a wireless phone). Other non-limiting examples include any device that has been modified or designed to communicate with a wireless network including, but not limited to: a Personal Digital Assistant (“PDA”), such as a WiFi capable PDA, or a wireless Blackberry (such as the Blackberry 7520 model).
  • The predetermined notification device can be any suitable device capable of receiving communications directly or indirectly from a wireless network, such as, but not limited to: a first mobile terminal, a second mobile terminal, a Personal Digital Assistant (PDA) capable of communicating with a wireless network, a laptop computer capable of communicating with a wireless network, a message server, and an email server, an electronic terminal 120, alone or in combination. An alert sent to an electronic terminal 120 at the first location, wherein the alert prevents a transaction associated with the identity
  • The position of a mobile terminal can be determined by, for example, an internal positioning apparatus and an external position apparatus, alone or in combination. Examples of internal positioning apparatus include a GPS receiver built into the mobile terminal that receives Global Positioning System (“GPS”) radio signals transmitted from GPS satellites. The GPS system can be supplemented with an INS (inertial navigation system) also built into the mobile terminal (see FIG. 2).
  • The external positioning apparatus can be a cellular positioning system that computes the position of the mobile terminal by observing time differences among the arrivals of a radio signal transmitted by the mobile terminal at a plurality of observation points, i.e., base stations, which typically form part of the wireless network. Alternatively, the external positioning apparatus could be a single base station that the mobile terminal is in contact with. Each base station has a particular base station ID and a location associated with the base station ID. Thus, the location of a mobile terminal can be approximated to the actual location of a base station, but given that the typical area covered by a base station is often about one kilometer, it is difficult to accurately determine the position of the mobile terminal.
  • The role of base stations in wireless networks is described, for example, in “Cellular Radio Systems”, published by Artech House, Boston (editors: D. M. Balston and R. C. V. Macario; ISBN: 0-89006-646-9); “Digital Cellular Radio” written by G. Calhoun and published by Artech House, Boston (ISBN: 0-89006-266-8). “Cellular Radio Systems” and “Digital Cellular Radio” are hereby incorporated by reference in their entirety.
  • The position of a mobile terminal can also be tracked using external RFID tags (Radio Frequency Identification tags) in combination with an RFID reader built into the mobile terminal. How RFID tags and readers work is described in U.S. Patent Publication No. 20050143916 published Jun. 30, 2005 to Kim, In-Jun, et al. U.S. Patent Publication No. 20050143916 is incorporated by reference herein in its entirety.
  • In a first embodiment of the present invention, a method is provided for facilitating the detection of misuse of an identity during an electronic transaction. The first embodiment comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity.
  • The cached position information can be cached GPS position information stored on the first wireless terminal. The step of determining the second location can further comprise the step of updating the cached position information with an inertial navigation system correction performed by the first wireless terminal to provide an updated location of the first wireless terminal, the updated location being the second location.
  • In one aspect of the first embodiment, the step of determining the second location further comprises the step of detecting whether GPS signals are being received by the first wireless terminal to determine a post-transaction location of the first wireless terminal, the post-transaction location being the second location. The step of detecting whether sufficient GPS signals are being received by the first wireless terminal for the first terminal to determine a post-transaction is only performed if cached position information is not stored on the first wireless terminal or if the cached position information is stale. The cached position information is regarded as stale if the information has not been updated for a predetermined time period, e.g., has not been within the last 30 minutes, 15 minutes or last 5 minutes. The predetermined time period defining when the cached position information is stale can vary and may be factory set or optionally set by the owner or user of the identity.
  • The first wireless terminal can be any device that can wirelessly communicate with a network, such as a cell phone, which can communicate wirelessly with a wireless network. Examples of suppliers of cell phones are Nokia, Motorola, and Ericsson. The terms “cell” and “cellular” are regarded as equivalent terms.
  • The identity can be a credit card number, an account number, a debit card identification number, a driver's license number, a name and address, a social security number, a telephone number, a finger print, an iris scan identity, a retina scan identity, and a membership identity (such as a membership password), alone or in combination. The identity can also be any suitable biometric identity, such as a fingerprint, an iris scan identity and a retina scan identity, alone or in combination.
  • With respect to the notification associated with the use of the identity at the first location, the notification can be generated, for example, by an electronic transaction device (such as a credit card reader at a restaurant, an ATM machine such as a cash-withdrawal terminal that incorporates a card reader) at the first location or by, for example, a credit card company in communication with the electronic device at the first location.
  • It should be understood that the electronic transaction device could be any suitable device where the identity can be entered for the purpose of performing an electronic transaction. For example, a credit card with a credit card number can be read by the electronic device, and the credit card number communicated to the credit card company associated with the credit card, and in response the credit card company generates a notification, which is routed to the first wireless terminal. In response to receiving the notification, the first wireless terminal determines its location based on cached position information stored on the first wireless terminal or if the cached location information is stale requesting the first wireless terminal to provide a fresh location.
  • Referring to the invention in general, the generated alert can take any suitable form. For example, the alert can be an advisory message, which is communicated to at least one predetermined device. The at least one predetermined device could be the first wireless terminal and/or a second wireless terminal, wherein the first wireless terminal also acting as the predetermined device could be a cell phone. The predetermined device can be any suitable device, such as a Personal Digital Assistant (PDA) and/or a laptop capable of communicating with a wireless network and/or receiving emails, and a message server. An example of a message server is a server accessible via the world-wide-web (WWW) and which stores messages for downloading by, for example, a wireless capable laptop with authorization to access the message server. The message server could be an email server programmed to store and/or forward emails to subscribers. Other examples of message servers include the hotmail email system and the webmail service provided by Google called Gmail.
  • Alternatively, the generated alert can be routed to the user's email address recorded during a previous registration of the identity. Alternatively, the alert is a reply message, such as a non-authorization message, for blocking an associated electronic transaction at the first location, and more particularly for blocking a transaction at the first location associated with the identity. It should be understood that the identity may not be limited to one identity, but could encompass one or more identities such as a user's credit card number together with the user's email address, social security number, phone number, residential address or phone number. Thus, a card reader may read a user's credit card and the user asked to enter or otherwise provide their email address or phone number. Some retail outlets routinely ask customers for their home phone number and/or address.
  • In one aspect of the invention, the use of an identity is associated with a first time stamp. The first time stamp corresponds to the time of the associated electronic transaction (or attempted electronic transaction) performed at a first location, and wherein the step of reading a cached location is associated with a second time stamp. The speed can be calculated based on the distance between the first and second locations and the time difference between the first and second time stamps such that the first and second locations are judged not to match in geographical proximity if the speed is above a predetermined value. Thus, if the speed to travel between the first and second locations is calculated to be about 1000 mph, and the predetermined value is set at 40 mph, an alert would be generated.
  • In another aspect of the first embodiment, if the first and second locations do not match in geographical proximity, then a confidence score is calculated to determine if the position mismatch with respect to the first and second locations is acceptable or unacceptable, and the alert is only generated if the confidence score is below a predetermined threshold. In addition to the time and distance difference, the system can also use additional factors to derive the confidence score. These factors can be weather conditions, time of day, day of year, urban makeup (e.g. a suburb area versus a downtown area), etc.
  • In still another aspect of the first embodiment, the step of determining the second location further comprises the step of detecting a WiFi Unique ID associated with the position of the first wireless terminal, and converting the WiFi unique ID into a post-transaction location for the first wireless terminal, the post-transaction location being the second location, wherein the step of detecting a WiFi Unique ID is only performed if cached position information is not stored on the first wireless terminal. For example, if the wireless terminal lacks cached position information and the first wireless terminal is able to detect a WiFi unique ID, then the WiFi unique ID is used to determine the position of the first wireless terminal. This might entail accessing a database that matches a WiFi's unique ID (i.e., identity such as, but not limited to, an Internet media-access-control (MAC) address) with known positions corresponding to each WiFi unique ID. This database might be stored, for example, on a .ltoreq.1.5″ hard drive (i.e., a less-than or equal to 1.5 inch hard drive) or on a large capacity memory chip fitted to the first wireless terminal 160.
  • In still another aspect of the first embodiment, the step of determining the second location further comprises the step of detecting a WiMAX Unique ID associated with the position of the first terminal, and converting the WiMAX Unique ID into a post-transaction location for the first wireless terminal, the post-transaction location being the second location, wherein the step of detecting a WiMAX Unique ID is only performed if cached position information is not stored on the first wireless terminal. Alternatively, the step of detecting a WiMAX Unique ID is only performed if the cached position information is stale, wherein the cached position information is regarded as stale if the information has not been updated for a predetermined time period. Those of skill in the art, enlightened by this disclosure, will recognize that various unique IDs may be associated with the position of the first terminal, including, in addition to GPS, WiFI, and WiMax, IDs derived from cell phone signal triangulation or from obtaining a cell tower ID (or the equivalent) from the wireless system. Those of skill in the art, enlightened by this disclosure, will also appreciate that the present technique of geo-location using unique IDs may be used in a variety of related applications, such as providing geographically oriented search results from a search engine. For example, a user searching for a pizza store may be directed to one nearest him, rather than being left on his own to determine his location and pick the store off a map, as is presently done.
  • In still another aspect of the first embodiment, the step of determining the second location further comprises the step of obtaining a post-transaction position for the first wireless terminal as soon as the first wireless terminal is able to receive GPS signals to calculate its post-transaction position, the post-transaction position being the second location, wherein the step of obtaining a post-transaction position is only performed if cached position information is not stored on the first wireless terminal.
  • In still another aspect of the first embodiment, the step of determining the second location further comprises the step of obtaining a post-transaction position for the first wireless terminal as soon as the first wireless terminal is able to receive GPS signals to calculate its post-transaction position, the post-transaction position being the second location, wherein the step of obtaining a post-transaction position is only performed if the cached position information is stale, wherein the cached position information is regarded as stale if the information has not been updated for a predetermined time period.
  • In a second embodiment of the present invention, a method is provided for facilitating the detection of misuse of an identity during an electronic transaction. The second embodiment comprises the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; determining an approximate location of the first wireless terminal based on cached position information stored on a GPS position database, wherein the GPS position database is operatively connected to a wireless provider 180 and/or a financial institution's computers 140, the approximate location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; and generating an alert if the first and second locations do not match in geographical proximity.
  • In a third embodiment of the present invention, a method is provided for facilitating the detection of misuse of an identity during an electronic transaction, comprising the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; reading a cached location of the first wireless terminal based on cached position information stored on the first wireless terminal, the location of the first wireless terminal being a second location; determining whether the first and second locations match in geographical proximity; determining a post-transaction location of the first wireless terminal if the first and second locations do not match in geographical proximity, the post-transaction location of the first wireless terminal being a third location; and generating an alert if: (1) the first and second locations do not match in geographical proximity and (2) the first and third locations do not match in geographical proximity.
  • Referring to the invention in general and with reference to the third embodiment, the post-transaction location can be obtained, for example, by processing GPS signals received by the first wireless terminal 160 within a reasonable time after the transaction (referred to hereinafter as “post-transaction GPS signals”). Post-transaction location can also be obtained, for example, using WiFi unique ID (if available) or WiMax unique ID. Alternatively, the post-transaction location can be obtained by using an inertial navigation module (INM) 400 (discussed infra) to convert the most recent cached location into a post-transaction location for the first wireless terminal, wherein updating the most recent cached position of the INM module is integrated into the design of the first wireless terminal (see, e.g., FIG. 3). Thus, the post-transaction location can be determined based on a method selected from the group consisting of: processing post-transaction GPS signals, WiFi unique ID, and WiMax unique ID, and any combination thereof.
  • In a fourth embodiment of the present invention, a method is provided for facilitating the detection of misuse of an identity during an electronic transaction, comprising the steps of: receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a first wireless terminal; reading a cached location of the first wireless terminal based on cached position information stored on the first wireless terminal, the location of the first wireless location being a second location; determining whether the first and second locations match in geographical proximity; determining the post-transaction location of the first wireless terminal if the first and second locations do not match in geographical proximity, the post-transaction location of the first wireless terminal being a third location; determining a post-transaction position of the first wireless terminal if (1) the first and second positions do not match in geographical proximity and (2) it is not possible to determine the post-transaction location, wherein the post-transaction position is treated as the third location; and generating an alert if: (1) the first and second locations do not match in geographical proximity and (2) the first and third locations do not match in geographical proximity.
  • FIG. 1 is a schematic block diagram showing exemplary hardware elements that can enable the practice of the various embodiments of the present invention. An electronic transaction terminal is shown at 120. The electronic transaction terminal 120 can be, for example, a credit and/or debit card terminal located at a first location such as a point of sale location inside a retail store, i.e., at a known first location. Alternatively, the terminal 120 could be a credit/debit card terminal linked to a cash register (not shown) or the terminal 120 could be a regular ATM (automatic teller machine) for dispensing cash to registered holders of cash cards. In other words, the terminal 120 can take various forms without detracting from the spirit of the present invention. If the first and second locations do not match in geographical proximity, the alert can be a reply message for blocking an associated electronic transaction at the first location.
  • The terminal 120 is operatively coupled to a financial institution's computers 140 such as a credit card company's computers or a bank's computers if, for example, terminal 120 is an ATM and used for cash withdrawals). The financial institution's computers 140 are those computers authorized to process the user's financial transactions. The financial institution's computers 140 are in turn able to communicate with a first wireless terminal 160 via a wireless provider 180 and, based on signal strength, the nearest base station 170 to the first wireless terminal 160. Examples of credit card companies include Visa, Discover, American Express, MasterCard, and Eurocard. Examples of wireless providers include Sprint, Verizon and T-Mobile.
  • An optional position database (PDB) 300 can be operatively coupled to the wireless provider 180. Alternatively, PDB 300 can be operatively coupled to the financial institution's computer 140. The PDB 300 can be operatively coupled to more than one element such as wireless provider 180 and financial institution's computers 140. The PDB 300 can be directly or indirectly linked to wireless provider 180 and/or financial institution's computers 140. The terms “coupled” or “operatively coupled” are intended to cover both direct and indirect links. Pre-transaction and/or post-transaction positions with respect to the first wireless terminal 160 can be stored on the PDB 300. The PDB 300 can store positions derived from any known position determination technique such as, but not limited to, GPS position data derived from a GPS receiver 200 located on the first wireless terminal 160 (see, e.g., FIG. 2).
  • The optional PDB 300 can, for example, archive or cache a position history of the first wireless terminal 160. Thus, if the first wireless terminal 160 is unable to receive GPS signals or is switched off, the optional position database 300 can be accessed to provide the latest available position of the first wireless terminal 160, i.e., in this scenario, the first wireless terminal 160 uploads its position at predetermined intervals to the wireless vendor 180 and thence to the position database 300.
  • Alternatively, positions based on previously received GPS signals can be stored in a memory 320 integrated with the first wireless terminal 180. The memory 320 can be any suitable memory such as, but not limited to: a RAM chip, a floppy disk, a hard disk drive such as an iPod battery powered 1.8-inch 60 GB hard disk drive or the anticipated 0.85 inch 3 GB hard disc drive, a CD-ROM, and a DVD-ROM, any known memory or anticipated memory option, alone or in combination.
  • In FIG. 1, the wireless terminal 160 is a cell phone fitted with a GPS receiver 200. The first wireless terminal can also include memory for storing cached positions, i.e., a history of the positions of the first wireless terminal, so that if the wireless terminal is required to supply its post-transaction position but is unable to do so, perhaps because the first wireless terminal is unable to receive GPS signals, then the latest cached position can be used. The first wireless terminal 160 can be a GPS enabled cell phone as shown, or any wireless terminal capable of communication with a wireless provider such as a Blackberry in combination with a GPS receiver.
  • Still referring to FIG. 1, terminal 120 includes a card reader 240 for reading a credit card 260. An identity in the form of a credit card number and details are stored on a magnetic strip 280 and are read by the card reader 240. It should be understood that the magnetic strip 280 could be replaced with any known or future technology, e.g., a smart chip embedded in a credit or debit card, which can be read by, for example, waving the card near a card reader enabled to so read credit and/or debit cards fitted with smart chips.
  • At any point after the identity has been read by terminal 120, a notification can be generated by the electronic terminal 120 or other device operatively coupled to the terminal 120, and/or the credit card company's or bank's computers 140. One or more notifications can be generated by, for example, the electronic transaction terminal 120 and the credit card company's or bank's computers 140, alone or in combination. The notification acts as a trigger wherein the post-transaction or cached position of the first wireless terminal 160 (treated as the second position) is determined and compared to the position of the electronic transaction terminal 120 (regarded as the first position). More specifically, a check is made to determine if the first and second positions match in geographical proximity. The task of determining if the first and second positions match in geographical proximity can be done by one or more elements such as, but not limited to, the first wireless terminal 160, the wireless provider 180 and the computers 140, the electronic transaction terminal 120 (or an optional processor 130 operatively coupled to the terminal 120), alone or in combination. If the computers 140, first wireless terminal 160, wireless provider 180, alone or in combination, is/are tasked to determine if the first and second positions match in geographical proximity, then the notification should include data representative of the first position of the electronic transaction terminal 120.
  • While wireless terminals (e.g., wireless mobile terminals such as cell phones) having a GPS receiver combined with a communication system capable of communicating with a base station are known (e.g., U.S. Pat. No. 5,945,944 describes such a device), the prior art does not teach a method and system for monitoring electronic purchases and cash-withdrawals of the present invention. U.S. Pat. No. 5,945,944, issued Aug. 31, 1999 to N. F. Krasner, is herein incorporated by reference in its entirety.
  • In another embodiment, a GPS receiver 200 operatively coupled to a miniature inertial navigation module (INM) 400. FIG. 2 shows a schematic block diagram of an exemplary first wireless terminal 160 fitted with a GPS receiver 200 operatively coupled to an INM 400. The GPS receiver and INM combination can be housed inside the housing 165 of the first wireless terminal. Suppliers of miniature inertial navigation hardware include Analog Devices Inc. and Comarco, Inc. (and more particularly its subsidiary Comarco Wireless Technologies (CWT) of Irvine, Calif. 92618, USA). CWT miniature inertial modules are capable of precision position measurements in buildings and urban canyons and, when combined with a GPS receiver 200, can determine the position of a first wireless terminal 160 with a high degree of accuracy and reliability.
  • INM technology in the form of silicon is available, for example, from Analog Devices Inc. (ADI). The ADI ADXL103 (a 5 mm.times.5 mm.times.2 mm LCC package), which is a high accuracy, high stability, low cost, low power, complete single axis accelerometer with a signal conditioned voltage output, all on a single monolithic IC. The ADXL213 supplied by ADI is a precision, low power, complete dual axis accelerometer with signal conditioned, duty cycle modulated outputs, on a single monolithic integrated chip (IC) measuring 5 mm.times.5 mm.times.2 mm. Also, ADI's ADXL311 is a low cost, low power, complete dual axis accelerometer with signal conditioned voltage outputs, all on a single monolithic IC of dimensions of just 5 mm.times.5 mm.times.2 mm. In addition, ADI's ADXRS401 is a low-cost complete ultra small and light (<0.15 cc, <0.5 gram) angular rate-sensing gyroscope capable of measuring up to 75 degrees per second with all of the required electronics on a single chip.
  • WORKING EXAMPLE
  • The following is a non-limiting working example of a fifth embodiment of the present invention. A credit card customer agrees to be locatable via his or her mobile phone provider and registers a credit card or debit card (hereinafter “credit card”) in such a manner that the user's credit card is associated with at least one mobile terminal. The process of registering a credit card in a Location-Based Fraud Protection (“LBFP”) System involves a financial institution which partners with one or more mobile phone or wireless providers that provide mobile geographical location(s). A mobile phone provider agrees, usually for a fee, to release the location of a subscriber who, in order to comply with privacy laws, authorizes this action. The financial institution, using the LBFP system, can register its clients using the following method (as shown in FIG. 3): sending a letter or calling the client, and requesting the client to call a toll-free number from his cell phone. Using the caller's ID, the LBFP system will require at least two identifying numbers. These identifying numbers can be the last 4 digits of the credit card and the home address zip code. Once the customer enters these numbers, the LBFP system will communicate these details to the client's financial institution for verification. For added security, the LBFP system can also challenge the client by sending a 4-digit SMS random number to the cell phone and asking the client to enter it using his phone keypad. If verified, the LBFP system will be able to associate the correct credit card with the customer's cell phone number. The LBFP system will then check to see if the client's cell phone carrier participates in this program. If it does, the LBFP will successfully add the client to its database (as described in the next paragraph) for credit card transaction monitoring. The LBFP system can then provide an optional unique PIN to the client so that he can access the LBFP web site to further custom the alerting logic. In turn, this customization can further increase the accuracy of the LBFP system. For example, the client can add known locations to be used when an online transaction takes place. Known locations can be a work address, relative/friend's address, etc. Using these addresses will increase the LBFP accuracy when a customer uses a credit card online by comparing known locations with client's cell phone location at the approximate time of the online transaction.
  • The financial institution stores in a database the subscriber customer (hereinafter “subscriber”) details. For example, the subscriber's first and last name (stored as a type UTF-8 characters), Mobile carrier/Wireless provider code (e.g., Sprint-1, Nextel-2) stored as type Integer number, 10-digit Mobile phone number (3-digit area code and 7-digit phone number, stored as type Integer number), and ID number that is associated with the financial institution's subscriber's ID number (stored as type Integer number), such cross-reference number acting as a security measure whereby no personal information (SSN, credit card number) is stored in such database.
  • After registration, each time a subscriber uses the credit card, at the time of a purchase transaction or near to that time, the financial institution will contact the LBFP System servers via a secure encryption link (e.g., SSL/SSH/VPN. With no personal information of the subscriber being transmitted, the financial institution provides the date of transaction, time of transaction, address of the business where the transaction took place, type of transaction (online or physical) and the subscriber's ID number. The LBFP servers will then initiate a request via secure TCP/IP link (e.g., SSL/SSH/VPN) to the subscriber's mobile phone provider requesting the subscriber's post-transaction location, heading and/or speed (see FIG. 4). The actual physical location of the LBFP System does not matter. The LBFP System can be located on the financial institution's premises or at a distance therefrom. If at a distance from the LBFP System, the financial institution can be linked to it via a secure network link (e.g. VPN/SSh/SSL).
  • When the client uses his or her credit card, the LBFP System receives the purchase information from the financial institution, it cross-references the identifying item from the financial institution with the subscriber's unique carrier ID (e.g., cell phone number).
  • After the LBFP System finds the subscriber's unique carrier ID (or related information), it will then request the subscriber's last known location from the subscriber's carrier. Each carrier has specific means for interfacing with and providing this information. It is sometimes called API, which are known programming methods to execute specific functions. As a practical matter, the LBFP System, or the financial institution, will create a relationship and interface with the carrier ahead of time in order to obtain this information electronically. The LBFP System can interface with multiple carriers and multiple financial institutions.
  • There are at least four (4) possible outcomes from the application of the above procedure, namely, (1) unable to locate the cell phone (cell phone out or range, turned off, or other reason that the cell phone cannot be located), (2) able to locate the cell phone—the cell phone is not at home, work or other known location, (3) able to locate the cell phone—the cell phone is at home, work or other known location, the “known location” being the location, in addition to client's home address, where the client usually resides (i.e., work, family addresses), these locations are optional and normally would be entered by the client at registration (see registration process above for more details), (4) able to locate phone with a timestamp prior to the purchase/transaction time.
  • With respect to each of the at least three (3) possible outcomes, a decision (score) table is created using at least the parameters: .DELTA.D=distance between Location of Mobile phone and Location of Purchase Point, and .DELTA.T=difference between Time located phone and Time of transaction, among potential parameters. The LBFP system may use additional factors to arrive at a final score/Fraud Confidence Level (“FCL”). These factors include a client's heading, speed, urban type/density, time of day, day of week, weather conditions, etc. As to .DELTA.D, the time can range from 0 to 30 kilometers or more. As to .DELTA.T, the time can range from 0 to 30 minutes or more. Depending upon the sensitivity desired for questioning whether a credit card purchase is valid, Fraud Confidence Level (“FCL”) values are assigned within the LBFP System for each credit card transaction. When an FCL is calculated by the LBFP System to be above a threshold value, a flag will be raised as to a valid transaction. Alternatively, when an FCL is calculated by the LBFP System to be below a threshold value, a flag is raised as to a potentially fraudulent credit card use.
  • For example, in the case of outcome (1), if the wireless provider is unable to locate the cell phone (no coverage, turned off, etc.), the LBFP System will switch into “search mode” as follows: (a) the system will keep attempting to locate the cell phone every 10 minutes for the next 30 minutes, or (b) if the location is determined within 30 minutes after the purchase transaction took place, the LBFP system will calculate the distance between the purchase location and the mobile phone location using an exemplar Table 1 to determine an FCL. TABLE-US-00001
  • TABLE 1
    scoring example
    If the location of cell phone is within a The LBFP System tags
    distance (Km) of the purchase point and the transaction with
    within 20 minutes of the transaction an FCL of
    ½ 3
     1 4
     5 5
    10 6
    15 7
    20 8
    25 9
    >30  10
  • In the case of outcome (2)—if the LBFP System was able to locate the cell phone, though the cell phone is not at home, namely, the location of the cell phone was found within 10 minutes after the purchase transaction took place and the purchase type is physical (not online/internet), the LBFP System will calculate the distance between the purchase location or sale point and the mobile phone location using an exemplar Table 2 to determine an FCL.
  • TABLE 2
    scoring example
    If the location of cell phone is within a The LBFP System tags
    distance (Km) of the purchase point and the transaction with
    within 10 minutes of the transaction an FCL of
    ½ 3
    1 4
    5 5
    10  8
    >10  10
  • In the case of outcome (3)—the LBFP System will calculate the distance difference between the customer's known home, work or other known address and the location of the cell phone. If the LBFP System was able to locate the cell phone with the cell phone being at the above known locations, within 10 minutes after the purchase transaction took place AND the purchase type is online/internet, the LBFP System will calculate the distance between the above known locations and the mobile phone location using an example Table 3 to determine an FCL.
  • TABLE 3
    scoring example
    If the location of cell phone is within a The LBFP System tags
    distance (Km) of the purchase point and the transaction with
    within 10 minutes of the transaction an FCL of
    ½ 4
    1 5
    5 6
    10  8
    >10  19
  • In the case of outcome (4)—a customer purchased goods or service from a physical location (e.g., store) and the LBFP System is unable to locate the cell phone. There may be situations whereby the wireless provider was able to acquire the customer's location prior to the purchase and store it in a temporary database. If the timestamp is close to the purchase time and the LBFP system is unable to get a newer location fix, then, in that case, the LBFP system may use the cached location information and .DELTA.T to calculate the FCL using a scoring table similar to table 1. The cached location information can be either the location information stored on the location server or on the MT.
  • In addition to the above data, the LBFP system may use additional factors in order to calculate the LFC/fraud score. These factors may be: time of day, day of the week, urban make (a suburb vs. downtown), weather conditions and traffic condition, among others. This is true for all possible scenarios.
  • With respect to an online purchase, such as a purchase from the online company Amazon.com®, the LBFP System may either know in advance, or at the time of the purchase, the frequent or usual address of the purchaser, for instance, home, work or other known location. The configuration and customization can be defined both globally as a system-wide rule and on per individual basis when the subscriber registered for this service. Customization can include scoring/LFC threshold, known locations, and client notification methods (e.g., SMS, email).
  • In the case of wireless network, GPS enabled cellular phones require, for the most part, a clear line of site with the sky in order to acquire GPS location. Since that does not always happen (in case the cellular phone is in the subway or other obstructed location), the location of the cellular phone sometimes does not match the exact location of the business. That is the reason the LBFP System compares both locations within a radius of X miles from such locations. (The number of X miles will be determined once an LBFP System in a particular environment has been through beta testing and becomes operational.). The X miles factor is also expected to vary in various geographical locations, such as rural locations versus large cities. Note also that there are cellular phones that can be located with means other than GPS. An example is the triangulation of the cellular phone's signals with surrounding cell towers. For another example, the geographic location of a cell phone tower being used by a cell phone may be acquired by associating the cell phone tower ID, which is software accessible, with its geographic location. To the LBFP System, the manner by which the carrier obtains the mobile phone's location does not matter. The LBFP System will take into account parameters provided by the carrier such as heading, speed, acquisition-time and location error (accuracy).
  • The invention has been described herein with reference to particular exemplary embodiments. Certain alterations and modifications may be apparent to those skilled in the art, without departing from the scope of the invention. The exemplary embodiments are meant to be illustrative, not limiting of the scope of the invention, which is defined by the appended claims.

Claims (9)

1) A method for identifying an internet user's geographical location comprising the steps of:
a) detecting a wireless terminal unique ID;
b) geographically locating the wireless terminal using at least one of:
i) WiFi;
ii) WiMax;
iii) GPS;
iv) cell-phone signal triangulation; and
v) cell tower ID; and
c) associating the location of the wireless terminal with such internet user.
2) A method for identifying an internet user's geographical location comprising the step of geo-locating a internet user by identifying a unique ID associated with a position of such internet user's mobile terminal.
3) The method for identifying internet user geographical location of claim 2, wherein the unique ID comprises at least one of:
a) WiFi;
b) WiMax;
c) GPS;
d) cell-phone signal triangulation; and
e) Mac Address.
4) A method for identifying internet user geographical location at a location having a wireless terminal, the method comprising the steps of:
a) detecting a unique ID of the wireless terminal;
b) associating the unique ID with the position of the first wireless terminal; and
c) associating the position of the first wireless terminal with such internet user.
5) The method of claim 4, wherein the position of the wireless terminal can be located using a unique ID comprising at least one of:
a) WiFi;
b) WiMax;
c) GPS;
d) cell-phone signal triangulation; and
e) cell tower ID;
6) A method for identifying an internet user's geographical location comprising the step of geo-locating a user's wireless terminal at a first location using a unique ID based on at least one of:
a) WiFi;
b) WiMax;
c) GPS;
d) cell phone signal triangulation; and
e) cell tower ID.
7) A method for identifying an internet user's geographical location comprising the steps of:
a) detecting a WiFi Unique ID associated with the position of the first wireless terminal;
b) converting the WiFi unique ID into a location for the first wireless terminal; and
c) associating the location for the first wireless terminal with such internet user.
8) A method for identifying an internet user's geographical location comprising the steps of:
a) detecting a WiMax Unique ID associated with the position of the first wireless terminal;
b) converting the WiMax unique ID into a location for the first wireless terminal; and
c) associating the location for the first wireless terminal with such internet user.
9) A method for identifying an internet user's geographical location, wherein said internet user is in possession of an operating wireless terminal, the method comprising the steps of detecting a unique wireless terminal identifier of such wireless user's said wireless terminal;
a) converting the unique wireless terminal identifier into a location for said wireless terminal; and
b) associating the location of said wireless terminal with such internet user.
US12/260,065 2005-04-26 2008-10-28 Method and system for monitoring electronic purchases and cash-withdrawals Abandoned US20090102712A1 (en)

Priority Applications (15)

Application Number Priority Date Filing Date Title
US12/260,065 US20090102712A1 (en) 2005-04-26 2008-10-28 Method and system for monitoring electronic purchases and cash-withdrawals
US13/065,691 US8640197B2 (en) 2005-04-26 2011-03-28 Methods for acquiring an internet user's consent to be located and for authenticating the identity of the user using location information
US13/290,988 US8413898B2 (en) 2005-04-26 2011-11-07 Method and system for monitoring electronic purchases and cash-withdrawals
US13/479,235 US8770477B2 (en) 2005-04-26 2012-05-23 Method for identifying the georgrapic location of a router
US14/145,862 US9033225B2 (en) 2005-04-26 2013-12-31 Method and system for authenticating internet users
US14/446,527 US20140337503A1 (en) 2005-04-26 2014-07-30 Methods for acquiring an internet user's consent to be located
US14/479,266 US20150020162A1 (en) 2005-04-26 2014-09-05 Methods for acquiring an internet user's consent to be located
US14/835,707 US9391985B2 (en) 2005-04-26 2015-08-25 Environment-based two-factor authentication without geo-location
US15/134,545 US9727867B2 (en) 2005-04-26 2016-04-21 Method for detecting misuse of identity in electronic transactions
US15/606,270 US10289833B2 (en) 2005-04-26 2017-05-26 Authenticating internet user identities in electronic transactions
US15/787,805 US10521786B2 (en) 2005-04-26 2017-10-19 Method of reducing fraud in on-line transactions
US15/859,589 US10554645B2 (en) 2005-04-26 2017-12-31 Method for authenticating internet users
US16/362,753 US10645072B2 (en) 2005-04-26 2019-03-25 Method and system for validating transactions
US16/724,361 US11308477B2 (en) 2005-04-26 2019-12-22 Method of reducing fraud in on-line transactions
US18/482,880 US20240037549A1 (en) 2005-08-25 2023-10-08 Method for authenticating internet users

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US67470905P 2005-04-26 2005-04-26
US11/346,240 US7503489B2 (en) 2005-04-26 2006-02-03 Method and system for monitoring electronic purchases and cash-withdrawals
US12/260,065 US20090102712A1 (en) 2005-04-26 2008-10-28 Method and system for monitoring electronic purchases and cash-withdrawals

Related Parent Applications (7)

Application Number Title Priority Date Filing Date
US11/346,240 Continuation-In-Part US7503489B2 (en) 2005-04-26 2006-02-03 Method and system for monitoring electronic purchases and cash-withdrawals
US11/405,789 Continuation-In-Part US8590007B2 (en) 2005-04-26 2006-04-18 Method and system for authenticating internet user identity
US12/600,808 Continuation-In-Part US8370909B2 (en) 2007-05-29 2007-05-29 Method and system for authenticating internet user identity
PCT/US2007/012552 Continuation-In-Part WO2008147353A1 (en) 2005-04-26 2007-05-29 Method and system for authenticating internet user indentity
US12/357,380 Continuation-In-Part US8656458B2 (en) 2005-04-26 2009-01-21 Method and system for authenticating internet user identity
US13/065,691 Continuation-In-Part US8640197B2 (en) 2005-04-26 2011-03-28 Methods for acquiring an internet user's consent to be located and for authenticating the identity of the user using location information
US13/479,235 Continuation-In-Part US8770477B2 (en) 2005-04-26 2012-05-23 Method for identifying the georgrapic location of a router

Related Child Applications (4)

Application Number Title Priority Date Filing Date
US11/405,789 Continuation-In-Part US8590007B2 (en) 2005-04-26 2006-04-18 Method and system for authenticating internet user identity
US12/357,380 Continuation-In-Part US8656458B2 (en) 2005-04-26 2009-01-21 Method and system for authenticating internet user identity
US13/065,691 Continuation-In-Part US8640197B2 (en) 2005-04-26 2011-03-28 Methods for acquiring an internet user's consent to be located and for authenticating the identity of the user using location information
US13/290,988 Division US8413898B2 (en) 2005-04-26 2011-11-07 Method and system for monitoring electronic purchases and cash-withdrawals

Publications (1)

Publication Number Publication Date
US20090102712A1 true US20090102712A1 (en) 2009-04-23

Family

ID=40562963

Family Applications (2)

Application Number Title Priority Date Filing Date
US12/260,065 Abandoned US20090102712A1 (en) 2005-04-26 2008-10-28 Method and system for monitoring electronic purchases and cash-withdrawals
US13/290,988 Expired - Fee Related US8413898B2 (en) 2005-04-26 2011-11-07 Method and system for monitoring electronic purchases and cash-withdrawals

Family Applications After (1)

Application Number Title Priority Date Filing Date
US13/290,988 Expired - Fee Related US8413898B2 (en) 2005-04-26 2011-11-07 Method and system for monitoring electronic purchases and cash-withdrawals

Country Status (1)

Country Link
US (2) US20090102712A1 (en)

Cited By (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080200144A1 (en) * 2007-02-16 2008-08-21 Ginsberg Todd D System and Method for Providing Alerts Over a Network
US20110239274A1 (en) * 2005-04-26 2011-09-29 Guy Heffez Methods for acouiring an internet user's consent to be located and for authenticating the identity of the user using location information
US20110250903A1 (en) * 2010-04-07 2011-10-13 Apple Inc. Selective Location Determination
US20110282789A1 (en) * 2009-01-28 2011-11-17 Valid-soft (UK) Limited Card false-positive prevention
US20120010923A1 (en) * 2010-07-12 2012-01-12 Yarmolich Paul M System and method for communicating with individuals
US20120239576A1 (en) * 2008-01-24 2012-09-20 Qualcomm Incorporated Mobile commerce authentication and authorization system
US20120290481A1 (en) * 2010-01-20 2012-11-15 Giesecke & Devrient Gmbh Method for carrying out a transaction between a portable data carrier and a terminal
EP2611123A1 (en) * 2011-12-29 2013-07-03 Research In Motion Limited Mobile communications device providing near field communication (NFC) security features and related methods
EP2665026A1 (en) * 2012-05-15 2013-11-20 Huawei Technologies Co., Ltd. Method, apparatus, and system for controlling account management operation
WO2014150982A1 (en) 2013-03-15 2014-09-25 Facebook, Inc. Multi-factor location verification
US20150161744A1 (en) * 2013-12-05 2015-06-11 Compagnie Industrielle Et Financiere D'ingenierie "Ingenico" Method for Processing Transactional Data, Corresponding Terminal, Server and Computer Program
EP2916520A1 (en) * 2014-03-07 2015-09-09 AOL, Inc. Systems and methods for location-based authentication
US20160132863A1 (en) * 2006-02-28 2016-05-12 Google Inc. Text message payment
US20160135034A1 (en) * 2013-12-20 2016-05-12 Google Inc. Identifying an Entity Associated with Wireless Network Access Point
US20160189160A1 (en) * 2014-12-30 2016-06-30 Verint Systems Ltd. System and method for deanonymization of digital currency users
US9532167B2 (en) * 2014-07-01 2016-12-27 Optim Corporation Mobile terminal, location information related content providing server, content panel display method, and mobile terminal program
WO2017160503A1 (en) * 2016-03-18 2017-09-21 Visa International Service Association Location verification during dynamic data transactions
US20180006821A1 (en) * 2015-02-17 2018-01-04 Visa International Service Association Token and cryptogram using transaction specific information
US9886683B2 (en) * 2009-01-06 2018-02-06 Aro, Inc. Calendaring location-based events and associated travel
US20180053189A1 (en) * 2016-08-18 2018-02-22 Justin T. Monk Systems and methods for enhanced authorization response
US10263936B2 (en) 2011-09-07 2019-04-16 Elwha Llc Computational systems and methods for identifying a communications partner
US10318950B2 (en) 2011-12-29 2019-06-11 Blackberry Limited Mobile communications device providing near field communication (NFC) security features and related methods
US10546306B2 (en) * 2011-09-07 2020-01-28 Elwha Llc Computational systems and methods for regulating information flow during interactions
US10546295B2 (en) 2011-09-07 2020-01-28 Elwha Llc Computational systems and methods for regulating information flow during interactions
US10606989B2 (en) 2011-09-07 2020-03-31 Elwha Llc Computational systems and methods for verifying personal information during transactions
US20210103956A1 (en) * 2014-08-21 2021-04-08 Oracle International Corporation Tunable statistical ids
US20220284530A1 (en) * 2013-08-22 2022-09-08 Todd Bucciarelli System and method for monitoring electronic communications

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150020162A1 (en) * 2005-04-26 2015-01-15 Guy Hefetz Methods for acquiring an internet user's consent to be located
US8770477B2 (en) * 2005-04-26 2014-07-08 Guy Hefetz Method for identifying the georgrapic location of a router
US10554645B2 (en) * 2005-04-26 2020-02-04 Spriv Llc Method for authenticating internet users
US20140337503A1 (en) * 2005-04-26 2014-11-13 Guy Hefetz Methods for acquiring an internet user's consent to be located
US9391985B2 (en) * 2005-04-26 2016-07-12 Guy Hefetz Environment-based two-factor authentication without geo-location
US9033225B2 (en) * 2005-04-26 2015-05-19 Guy Hefetz Method and system for authenticating internet users
US20100131409A1 (en) * 2008-11-22 2010-05-27 Google Inc. Identification verification with user challenge
US8856029B1 (en) * 2010-08-23 2014-10-07 Symantec Corporation Systems and methods for regulating the receipt of data transmitted from a messaging device
US10941086B2 (en) 2012-05-07 2021-03-09 Knowflame, Inc. Capsaicinoid smoke
US20180248892A1 (en) * 2015-08-25 2018-08-30 Guy Hefetz Location-Based Continuous Two-Factor Authentication

Citations (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5327144A (en) * 1993-05-07 1994-07-05 Associated Rt, Inc. Cellular telephone location system
US5945944A (en) * 1996-03-08 1999-08-31 Snaptrack, Inc. Method and apparatus for determining time for GPS receivers
US6012144A (en) * 1996-10-08 2000-01-04 Pickett; Thomas E. Transaction security method and apparatus
US20010034718A1 (en) * 2000-01-31 2001-10-25 Shvat Shaked Applications of automatic internet identification method
US6466779B1 (en) * 2000-03-07 2002-10-15 Samsung Electronics Co., Ltd. System and method for secure provisioning of a mobile station from a provisioning server using IWF-based firewall
US20020188712A1 (en) * 2001-03-20 2002-12-12 Worldcom, Inc. Communications system with fraud monitoring
US20030056096A1 (en) * 2001-04-18 2003-03-20 Albert Roy David Method and system for securely authenticating network access credentials for users
US20030101134A1 (en) * 2001-11-28 2003-05-29 Liu James C. Method and system for trusted transaction approval
US20030144952A1 (en) * 2002-01-31 2003-07-31 International Business Machines Corporation Detection of unauthorized account transactions
US20030187800A1 (en) * 2002-04-02 2003-10-02 Worldcom, Inc. Billing system for services provided via instant communications
US20040073519A1 (en) * 2000-12-22 2004-04-15 Peder Fast Method of increasing security in respect of payments made with credit cards and cash cards
US20040088551A1 (en) * 2000-07-05 2004-05-06 Erez Dor Identifying persons seeking access to computers and networks
US20040111640A1 (en) * 2002-01-08 2004-06-10 Baum Robert T. IP based security applications using location, port and/or device identifier information
US20040234117A1 (en) * 1998-06-19 2004-11-25 Joan Tibor Electronic transaction verification system
US20040254868A1 (en) * 2003-06-12 2004-12-16 International Business Machines Corporation System and method for early detection and prevention of identity theft
US20050065875A1 (en) * 2002-01-16 2005-03-24 Beard Robert E. Method and system for credit card purchases
US20050075985A1 (en) * 2003-10-03 2005-04-07 Brian Cartmell Voice authenticated credit card purchase verification
US20050086164A1 (en) * 1999-02-23 2005-04-21 Grim Electronics Company, Ltd. Method for paying a charge using a mobile phone
US20050143916A1 (en) * 2003-12-26 2005-06-30 In-Jun Kim Positioning apparatus and method combining RFID, GPS and INS
US20050159173A1 (en) * 2000-10-27 2005-07-21 Dowling Eric M. Negotiated wireless peripheral security systems
US20050160280A1 (en) * 2003-05-15 2005-07-21 Caslin Michael F. Method and system for providing fraud detection for remote access services
US20050180395A1 (en) * 2004-01-22 2005-08-18 Mci, Inc. Universal communications identifier

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2383497B (en) 2001-12-21 2005-09-07 Nec Technologies Transaction verification using a mobile telephone network
WO2004079499A2 (en) 2003-03-05 2004-09-16 Tomer Eden System and method for verifying user identity
US7865181B1 (en) * 2004-03-19 2011-01-04 Single Touch Interactive, Inc. Searching for mobile content
US7890376B2 (en) * 2004-11-05 2011-02-15 Ebay Inc. System and method for location based content correlation
US7577665B2 (en) * 2005-09-14 2009-08-18 Jumptap, Inc. User characteristic influenced search results

Patent Citations (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5327144A (en) * 1993-05-07 1994-07-05 Associated Rt, Inc. Cellular telephone location system
US5945944A (en) * 1996-03-08 1999-08-31 Snaptrack, Inc. Method and apparatus for determining time for GPS receivers
US6012144A (en) * 1996-10-08 2000-01-04 Pickett; Thomas E. Transaction security method and apparatus
US20040234117A1 (en) * 1998-06-19 2004-11-25 Joan Tibor Electronic transaction verification system
US20050086164A1 (en) * 1999-02-23 2005-04-21 Grim Electronics Company, Ltd. Method for paying a charge using a mobile phone
US20010034718A1 (en) * 2000-01-31 2001-10-25 Shvat Shaked Applications of automatic internet identification method
US6466779B1 (en) * 2000-03-07 2002-10-15 Samsung Electronics Co., Ltd. System and method for secure provisioning of a mobile station from a provisioning server using IWF-based firewall
US20040088551A1 (en) * 2000-07-05 2004-05-06 Erez Dor Identifying persons seeking access to computers and networks
US20050159173A1 (en) * 2000-10-27 2005-07-21 Dowling Eric M. Negotiated wireless peripheral security systems
US20040073519A1 (en) * 2000-12-22 2004-04-15 Peder Fast Method of increasing security in respect of payments made with credit cards and cash cards
US20020188712A1 (en) * 2001-03-20 2002-12-12 Worldcom, Inc. Communications system with fraud monitoring
US20030056096A1 (en) * 2001-04-18 2003-03-20 Albert Roy David Method and system for securely authenticating network access credentials for users
US20030101134A1 (en) * 2001-11-28 2003-05-29 Liu James C. Method and system for trusted transaction approval
US20040111640A1 (en) * 2002-01-08 2004-06-10 Baum Robert T. IP based security applications using location, port and/or device identifier information
US20050065875A1 (en) * 2002-01-16 2005-03-24 Beard Robert E. Method and system for credit card purchases
US20030144952A1 (en) * 2002-01-31 2003-07-31 International Business Machines Corporation Detection of unauthorized account transactions
US20030187800A1 (en) * 2002-04-02 2003-10-02 Worldcom, Inc. Billing system for services provided via instant communications
US20050160280A1 (en) * 2003-05-15 2005-07-21 Caslin Michael F. Method and system for providing fraud detection for remote access services
US20040254868A1 (en) * 2003-06-12 2004-12-16 International Business Machines Corporation System and method for early detection and prevention of identity theft
US20050075985A1 (en) * 2003-10-03 2005-04-07 Brian Cartmell Voice authenticated credit card purchase verification
US20050143916A1 (en) * 2003-12-26 2005-06-30 In-Jun Kim Positioning apparatus and method combining RFID, GPS and INS
US20050180395A1 (en) * 2004-01-22 2005-08-18 Mci, Inc. Universal communications identifier

Cited By (58)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8640197B2 (en) 2005-04-26 2014-01-28 Guy Heffez Methods for acquiring an internet user's consent to be located and for authenticating the identity of the user using location information
US20110239274A1 (en) * 2005-04-26 2011-09-29 Guy Heffez Methods for acouiring an internet user's consent to be located and for authenticating the identity of the user using location information
US20160132863A1 (en) * 2006-02-28 2016-05-12 Google Inc. Text message payment
US20080200144A1 (en) * 2007-02-16 2008-08-21 Ginsberg Todd D System and Method for Providing Alerts Over a Network
US8914302B2 (en) * 2008-01-24 2014-12-16 Qualcomm Incorporated Mobile commerce authentication and authorization system
US20120239576A1 (en) * 2008-01-24 2012-09-20 Qualcomm Incorporated Mobile commerce authentication and authorization system
US9886683B2 (en) * 2009-01-06 2018-02-06 Aro, Inc. Calendaring location-based events and associated travel
US11449850B2 (en) * 2009-01-28 2022-09-20 Validsoft Limited Card false-positive prevention
US20110282789A1 (en) * 2009-01-28 2011-11-17 Valid-soft (UK) Limited Card false-positive prevention
US10074087B2 (en) * 2010-01-20 2018-09-11 Giesecke+Devrient Mobile Security Gmbh Method for carrying out a transaction between a portable data carrier and a terminal
US20120290481A1 (en) * 2010-01-20 2012-11-15 Giesecke & Devrient Gmbh Method for carrying out a transaction between a portable data carrier and a terminal
US9078230B2 (en) 2010-04-07 2015-07-07 Apple Inc. Selective location determination
US20110250903A1 (en) * 2010-04-07 2011-10-13 Apple Inc. Selective Location Determination
US8447326B2 (en) * 2010-04-07 2013-05-21 Apple Inc. Selective location determination
WO2012009374A1 (en) * 2010-07-12 2012-01-19 Yarmolich Paul M System and method for communicating with individuals
US20120010923A1 (en) * 2010-07-12 2012-01-12 Yarmolich Paul M System and method for communicating with individuals
US10606989B2 (en) 2011-09-07 2020-03-31 Elwha Llc Computational systems and methods for verifying personal information during transactions
US10546295B2 (en) 2011-09-07 2020-01-28 Elwha Llc Computational systems and methods for regulating information flow during interactions
US10546306B2 (en) * 2011-09-07 2020-01-28 Elwha Llc Computational systems and methods for regulating information flow during interactions
US10523618B2 (en) 2011-09-07 2019-12-31 Elwha Llc Computational systems and methods for identifying a communications partner
US10263936B2 (en) 2011-09-07 2019-04-16 Elwha Llc Computational systems and methods for identifying a communications partner
US10318950B2 (en) 2011-12-29 2019-06-11 Blackberry Limited Mobile communications device providing near field communication (NFC) security features and related methods
EP2611123A1 (en) * 2011-12-29 2013-07-03 Research In Motion Limited Mobile communications device providing near field communication (NFC) security features and related methods
EP2665026A1 (en) * 2012-05-15 2013-11-20 Huawei Technologies Co., Ltd. Method, apparatus, and system for controlling account management operation
US10551478B2 (en) 2013-03-15 2020-02-04 Facebook, Inc. Multi-factor location verification
US9715003B2 (en) 2013-03-15 2017-07-25 Facebook, Inc. Multi-factor location verification
EP2972461A4 (en) * 2013-03-15 2016-12-07 Facebook Inc Multi-factor location verification
WO2014150982A1 (en) 2013-03-15 2014-09-25 Facebook, Inc. Multi-factor location verification
US11756142B2 (en) * 2013-08-22 2023-09-12 Todd Bucciarelli System and method for monitoring electronic communications
US20220284530A1 (en) * 2013-08-22 2022-09-08 Todd Bucciarelli System and method for monitoring electronic communications
US20150161744A1 (en) * 2013-12-05 2015-06-11 Compagnie Industrielle Et Financiere D'ingenierie "Ingenico" Method for Processing Transactional Data, Corresponding Terminal, Server and Computer Program
US9767519B2 (en) * 2013-12-05 2017-09-19 Ingenico Group Method for processing transactional data, corresponding terminal, server and computer program
US20160135034A1 (en) * 2013-12-20 2016-05-12 Google Inc. Identifying an Entity Associated with Wireless Network Access Point
US9794766B2 (en) * 2013-12-20 2017-10-17 Google Inc. Identifying an entity associated with wireless network access point
US10237261B2 (en) 2014-03-07 2019-03-19 Oath Inc. Systems and methods for location-based authentication
US9525972B2 (en) 2014-03-07 2016-12-20 Aol Inc. Systems and methods for location-based authentication
US9866544B2 (en) 2014-03-07 2018-01-09 Oath Inc. Systems and methods for location-based authentication
US11716324B2 (en) 2014-03-07 2023-08-01 Verizon Patent And Licensing Inc. Systems and methods for location-based authentication
EP2916520A1 (en) * 2014-03-07 2015-09-09 AOL, Inc. Systems and methods for location-based authentication
US10862882B2 (en) 2014-03-07 2020-12-08 Oath Inc. Systems and methods for location-based authentication
US9532167B2 (en) * 2014-07-01 2016-12-27 Optim Corporation Mobile terminal, location information related content providing server, content panel display method, and mobile terminal program
US11568447B2 (en) * 2014-08-21 2023-01-31 Oracle International Corporation Tunable statistical IDs
US20210103956A1 (en) * 2014-08-21 2021-04-08 Oracle International Corporation Tunable statistical ids
US20220215437A1 (en) * 2014-08-21 2022-07-07 Oracle International Corporation Tunable statistical ids
US20160189160A1 (en) * 2014-12-30 2016-06-30 Verint Systems Ltd. System and method for deanonymization of digital currency users
US20210312448A1 (en) * 2015-02-17 2021-10-07 Visa International Service Association Token and cryptogram using transaction specific information
US11068895B2 (en) * 2015-02-17 2021-07-20 Visa International Service Association Token and cryptogram using transaction specific information
US20180006821A1 (en) * 2015-02-17 2018-01-04 Visa International Service Association Token and cryptogram using transaction specific information
US20210049607A1 (en) * 2016-03-18 2021-02-18 Visa International Service Association Location Verification During Dynamic Data Transactions
AU2017234432B2 (en) * 2016-03-18 2021-08-05 Visa International Service Association Location verification during dynamic data transactions
WO2017160503A1 (en) * 2016-03-18 2017-09-21 Visa International Service Association Location verification during dynamic data transactions
US10861019B2 (en) * 2016-03-18 2020-12-08 Visa International Service Association Location verification during dynamic data transactions
CN108780546A (en) * 2016-03-18 2018-11-09 维萨国际服务协会 Location verification in dynamic data transaction
AU2021240119B2 (en) * 2016-03-18 2023-01-19 Visa International Service Association Location verification during dynamic data transactions
US20170270528A1 (en) * 2016-03-18 2017-09-21 Gyan Prakash Location verification during dynamic data transactions
US11810116B2 (en) * 2016-03-18 2023-11-07 Visa International Service Association Location verification during dynamic data transactions
EP3500992A4 (en) * 2016-08-18 2019-07-17 Visa International Service Association Systems and methods for enhanced authorization response
US20180053189A1 (en) * 2016-08-18 2018-02-22 Justin T. Monk Systems and methods for enhanced authorization response

Also Published As

Publication number Publication date
US8413898B2 (en) 2013-04-09
US20120052881A1 (en) 2012-03-01

Similar Documents

Publication Publication Date Title
US10645072B2 (en) Method and system for validating transactions
US8413898B2 (en) Method and system for monitoring electronic purchases and cash-withdrawals
US9727867B2 (en) Method for detecting misuse of identity in electronic transactions
US7503489B2 (en) Method and system for monitoring electronic purchases and cash-withdrawals
US10521786B2 (en) Method of reducing fraud in on-line transactions
US11308477B2 (en) Method of reducing fraud in on-line transactions
US9033225B2 (en) Method and system for authenticating internet users
US8770477B2 (en) Method for identifying the georgrapic location of a router
US20190272544A1 (en) System and method for identity protection using mobile device signaling network derived location pattern recognition
US9898727B2 (en) Credit card fraud prevention system
US20130030934A1 (en) System and method for credit card transaction approval based on mobile subscriber terminal location
CN102414704B (en) Card-present security system
US20130185166A1 (en) Cardholder mobile device positioning system and method
US20150142623A1 (en) System and method for identity protection using mobile device signaling network derived location pattern recognition
KR20100015663A (en) Method for tracking credit card fraud
US10311423B2 (en) System and method for transaction approval based on confirmation of proximity of mobile subscriber device to a particular location
US11818287B2 (en) Method and system for monitoring and validating electronic transactions
US20240037549A1 (en) Method for authenticating internet users
US20220350878A1 (en) Subscriber authentication responsive to emergency services registration
IES85924Y1 (en) Cardholder mobile device positioning system and method
IE20110326U1 (en) Cardholder mobile device positioning system and method

Legal Events

Date Code Title Description
STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION