LOCATION-BASED AUTHENTICATION OF TRANSACTIONS CONDUCTED USING MOBILE DEVICES

摘要

A transaction authentication system authenticates a transaction by determining whether a mobile device and POS device involved in the transaction are at the same location. A POS registry stores location data for POS devices. A PAN registry stores mobile device IDs corresponding to account numbers. A mobile device ID can be provided from the PAN registry in response to receiving an account number from a POS device. The mobile device ID can then be used to retrieve location information from a home location register maintained by a mobile service provider. The retrieved location data for a POS device and the retrieved location data for a mobile device are compared.

主权项

1. A method for authenticating a transaction conducted at a point of sale (POS) device by a customer, the method comprising:
at a POS registry, storing, in association with a POS ID corresponding to each of one or more POS devices, POS location data pertaining to the location of the corresponding POS device; at a PAN registry, storing, in association with an account ID corresponding to each of one or more accounts, a mobile device ID identifying a mobile device of the customer; receiving, at a transaction authentication system, transaction data for a transaction conducted against a specified account at a specified POS device by the customer, the transaction data comprising a POS identifier for the specified POS device and an account ID for the specified account; with the received transaction data at the transaction authentication system, (1) accessing the POS registry for location data for the specified POS device, and (2) accessing the PAN registry to retrieve the mobile device ID associated with the mobile device of the customer; using the retrieved mobile device ID to determine location data for the mobile device, by accessing location information maintained by a mobile service provider; and comparing the accessed location data for the specified POS device and the determined location data for mobile device.