Granted Patent B2

US 12,425,384 · App. 18/734,452 · Granted Sep 23, 2025

Inventors: Reinaldo Gamaliel Rivera Colon (Raleigh, NC); Everardo Calamaco, Jr. (Louisburg, NC); Michaela Rose Cestari (Cary, NC)

Assignee: Truist Bank

H04L63/08H04L63/10H04W4/021H04W4/029H04W4/80H04W12/06H04W12/08H04W12/61H04W12/63H04W12/73

Abstract

Claims (87)

1. A computer server comprising:

a processing unit including one or more processors;

a computer-readable memory storing thereon instructions that are executable by the processing unit to cause the computer server to perform operations comprising:

requesting, for a mobile device and in response to determining that an age of existing location data for the mobile device exceeds a location recency threshold, location data from the mobile device;

receiving a request from the mobile device to access one or more network resources or services provided by receiving the request from a mobile application installed on the mobile device;

providing recommendations or suggestions to a user of the mobile device that a set of locations be designated as predefined secure locations; and

receiving one or more predefined secure location definitions based on the set of locations;

comparing the location data to the one or more predefined secure location definitions associated with the mobile device, the comparing comprising:

comparing a set of geographic coordinates of the mobile device to a set of boundaries of a predefined geofence associated with the mobile device, wherein the set of boundaries of the predefined geofence are definable as an updated secure location via user input that indicates that the predefined geofence is secure within a first distance from the set of geographic coordinates of the mobile device; and

comparing the location data to the one or more predefined secure location definitions by comparing an identifier of a wireless access point to a predefined list of secure wireless access points associated with the mobile device;

accessing a financial services server to facilitate one or more authentication processes for providing the mobile device with access to the one or more network resources or services;

in response to receiving a request from the mobile device to access the one or more network resources or services:

determining, using a result of comparing the location data and the one or more predefined secure location definitions associated with the mobile device, the one or more authentication processes from among a plurality of authentication processes for providing the mobile device with access to the network resources or services;

executing a first authentication process of the one or more authentication processes for providing the mobile device with access to the network resources or services;

executing, based on matching the location data to at least one predefined location definition associated with the mobile device, a second authentication process of the one or more authentication processes, and successfully authenticate the mobile device, prior to providing access to requested network resources or services;

executing, based on not matching the location data to at least one predefined location definition associated with the mobile device, a third authentication process of the one or more authentication processes that is different than the first authentication process and the second authentication process;

allowing, based on matching the location data to at least one predefined location definitions associated with the mobile device, the mobile device to access the requested network resources or services and avoiding additional authentication processes for the mobile device; and

in response to successfully authenticating the mobile device, providing the mobile device with access to the requested network resources or services.

2. The computer server of claim 1 , wherein the one or more predefined secure location definitions comprise the set of boundaries that indicate one or more locations that are private or trusted for the mobile device.

3. The computer server of claim 1 , wherein the operations further comprise:

determining a first time associated with the location data received from the mobile device;

determining a second time associated with the request from the mobile device;

comparing a difference between the second time and the first time to the location recency threshold, wherein the location recency threshold is a duration of time; and

in response to the computer server determining the difference between the second time and the first time is greater than the location recency threshold, requesting new location data from the mobile device.

4. The computer server of claim 1 , wherein the operation of comparing the location data to the one or more predefined secure location definitions comprises determining that the mobile device is not within the one or more locations that are private or trusted for the mobile device, and wherein the operations further comprise:

in response to determining that the mobile device is at a first location that is not within the one or more locations that are private or trusted for the mobile device, and in response to successfully authenticating the mobile device:

providing a recommendation to a user of the mobile device for storing the first location as a private or trusted location for the mobile device;

receiving confirmation from the user of the mobile device indicating that the first location is the private or trusted location for the mobile device; and

receiving data that includes a set of boundaries of the first location for use in providing access in response to future access requests from the mobile device.

5. The computer server of claim 1 , wherein the operations further comprise successfully authenticating the mobile device using the second authentication process or the third authentication process prior to providing access to requested network resources or services.

6. A method comprising:

requesting, for a mobile device and in response to determining that an age of existing location data for the mobile device exceeds a location recency threshold, location

receiving a request from the mobile device to access one or more network resources or services provided by receiving the request from a mobile application installed on the mobile device;

providing recommendations or suggestions to a user of the mobile device that a set of locations be designated as predefined secure locations; and

receiving one or more predefined secure location definitions based on the set of locations;

comparing the location data to the one or more predefined secure location definitions associated with the mobile device, the comparing comprising:

comparing a set of geographic coordinates of the mobile device to a set of boundaries of a predefined geofence associated with the mobile device, wherein the set of boundaries of the predefined geofence are definable as an updated secure location via user input that indicates that the predefined geofence is secure within a first distance from the set of geographic coordinates of the mobile device; and

comparing the location data to the one or more predefined secure location definitions by comparing an identifier of a wireless access point to a predefined list of secure wireless access points associated with the mobile device;

accessing a financial services server to facilitate one or more authentication processes for providing the mobile device with access to one or more network resources or services;

in response to receiving a request from the mobile device to access the one or more network resources or services:

determining, using a result of comparing the location data and the one or more predefined secure location definitions associated with the mobile device, the one or more authentication processes from among a plurality of authentication processes for providing the mobile device with access to the network resources or services;

executing a first authentication process of the one or more authentication processes for providing the mobile device with access to the network resources or services;

executing, based on matching the location data to at least one predefined location definition associated with the mobile device, a second authentication process of the one or more authentication processes, and successfully authenticate the mobile device, prior to providing access to requested network resources or services;

executing, based on not matching the location data to at least one predefined location definition associated with the mobile device, a third authentication process of the one or more authentication processes that is different than the first authentication process and the second authentication process;

allowing, based on matching the location data to at least one predefined location definitions associated with the mobile device, the mobile device to access the requested network resources or services and avoiding additional authentication processes for the mobile device; and

in response to successfully authenticating the mobile device, providing the mobile device with access to the requested network resources or services.

7. The method of claim 6 , wherein the one or more predefined secure location definitions comprise the set of boundaries that indicate one or more locations that are private or trusted for the mobile device.

8. The method of claim 6 , further comprising:

determining a first time associated with the location data received from the mobile device;

determining a second time associated with the request from the mobile device;

comparing a difference between the second time and the first time to the location recency threshold, wherein the location recency threshold is a duration of time; and

in response to determining the difference between the second time and the first time is greater than the location recency threshold, requesting new location data from the mobile device.

9. The method of claim 6 , wherein comparing the location data to the one or more predefined secure location definitions comprises determining that the mobile device is not within the one or more locations that are private or trusted for the mobile device, and wherein the method further comprises:

in response to determining that the mobile device is at a first location that is not within the one or more locations that are private or trusted for the mobile device, and in response to successfully authenticating the mobile device:

providing a recommendation to a user of the mobile device for storing the first location as a private or trusted location for the mobile device;

receiving confirmation from the user of the mobile device indicating that the first location is the private or trusted location for the mobile device; and

receiving data that includes a set of boundaries of the first location for use in providing access in response to future access requests from the mobile device.

10. The method of claim 6 , wherein the method further comprises successfully authenticating the mobile device using the second authentication process or the third authentication process prior to providing access to requested network resources or services.

11. A non-transitory computer-readable medium comprising instructions that are executable by a processing device for causing the processing device to perform operations comprising:

requesting, for a mobile device and in response to determining that an age of existing location data for the mobile device exceeds a location recency threshold, location data from the mobile device;

receiving a request from the mobile device to access one or more network resources or services provided by receiving the request from a mobile application installed on the mobile device;

providing recommendations or suggestions to a user of the mobile device that a set of locations be designated as predefined secure locations; and

receiving one or more predefined secure location definitions based on the set of locations;

comparing the location data to the one or more predefined secure location definitions associated with the mobile device, the comparing comprising:

comparing a set of geographic coordinates of the mobile device to a set of boundaries of a predefined geofence associated with the mobile device, wherein the set of boundaries of the predefined geofence are definable as an updated secure location via user input that indicates that the predefined geofence is secure within a first distance from the set of geographic coordinates of the mobile device; and

comparing the location data to the one or more predefined secure location definitions by comparing an identifier of a wireless access point to a predefined list of secure wireless access points associated with the mobile device;

accessing a financial services server to facilitate one or more authentication processes for providing the mobile device with access to one or more network resources or services;

in response to receiving a request from the mobile device to access the one or more network resources or services:

determining, using a result of comparing the location data and the one or more predefined secure location definitions associated with the mobile device, the one or more authentication processes from among a plurality of authentication processes for providing the mobile device with access to the network resources or services;

executing a first authentication process of the one or more authentication processes for providing the mobile device with access to the network resources or services;

executing, based on matching the location data to at least one predefined location definition associated with the mobile device, a second authentication process of the one or more authentication processes, and successfully authenticate the mobile device, prior to providing access to requested network resources or services;

executing, based on not matching the location data to at least one predefined location definition associated with the mobile device, a third authentication process of the one or more authentication processes that is different than the first authentication process and the second authentication process;

allowing, based on matching the location data to at least one predefined location definitions associated with the mobile device, the mobile device to access the requested network resources or services and avoiding additional authentication processes for the mobile device; and

in response to successfully authenticating the mobile device, providing the mobile device with access to the requested network resources or services.

12. The non-transitory computer-readable medium of claim 11 , wherein the one or more predefined secure location definitions comprise the set of boundaries that indicate one or more locations that are private or trusted for the mobile device.

13. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise:

determining a first time associated with the location data received from the mobile device;

determining a second time associated with the request from the mobile device;

comparing a difference between the second time and the first time to the location recency threshold, wherein the location recency threshold is a duration of time; and

in response to determining the difference between the second time and the first time is greater than the location recency threshold, requesting new location data from the mobile device.

14. The non-transitory computer-readable medium of claim 11 , wherein the operation of comparing the location data to the one or more predefined secure location definitions comprises determining that the mobile device is not within the one or more locations that are private or trusted for the mobile device, and wherein the operations further comprise:

in response to determining that the mobile device is at a first location that is not within the one or more locations that are private or trusted for the mobile device, and in response to successfully authenticating the mobile device:

providing a recommendation to a user of the mobile device for storing the first location as a private or trusted location for the mobile device;

receiving confirmation from the user of the mobile device indicating that the first location is the private or trusted location for the mobile device; and

receiving data that includes a set of boundaries of the first location for use in providing access in response to future access requests from the mobile device.

15. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise successfully authenticating the mobile device using the second authentication process or the third authentication process prior to providing access to requested network resources or services.

16. The non-transitory computer-readable medium of claim 11 , wherein the identifier of the wireless access point is definable as an updated secure wireless access point via user input that indicates that a location corresponding to the wireless access point within a second particular distance is secure.

Assignments (2)

Continuity (4)

References Cited (218)