US 12,147,983 B2
Systems and methods for multi-factor authentication using device tracking and identity verification
Jeffrey Rule, Chevy Chase, MD (US); Kevin Osborn, Newton Highlands, MA (US); and Wayne Lutz, Fort Washington, MD (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Jan. 13, 2023, as Appl. No. 18/096,881.
Prior Publication US 2024/0242221 A1, Jul. 18, 2024
Int. Cl. G06Q 20/40 (2012.01)
CPC G06Q 20/4015 (2020.05) [G06Q 20/409 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for incorporating device proximity monitoring in multi-factor authentication, the method comprising:
providing a mobile device associated with a user, with an external card pocket, structured to store a user card within a Near-Field communication (NFC) field of the mobile device;
monitoring, by a user application stored on the mobile device, a connectivity status of an NFC link established between the user card, disposed in the external card pocket, and the mobile device;
generating one or more event timestamps associated with one or more detection events, wherein each detection event corresponds to a change in the connectivity status of the NFC link;
comparing, by a validation process, a most recent event timestamp from the one or more event timestamps, with a transaction timestamp associated with a transaction request message for a transaction initiated by the user card, wherein the one or more event timestamps are transmitted to the validation process by the user application;
verifying that the transaction timestamp does not exceed the most recent event timestamp by more than a predefined threshold value, wherein the most recent event timestamp corresponds to a removal of the card from the external card pocket; and
generating a two-factor strong validation response for the transaction request message based on verifying proximity of the user card to the mobile device.