Systems and methods for authentication based on personal network
A financial institution computing system includes a network circuit exchanging information over a network, a customer database storing financial information, and a transaction circuit. The transaction circuit receives a transaction request associated with a user computing device. The transaction request specifies a financial account. The transaction circuit receives payment card location information indicative of a location of a payment card with respect to the user computing device. The payment card location information indicates that the payment card is within a threshold distance of the user computing device. The transaction circuit authenticates the transaction request using the payment card location information and by determining whether the payment card is associated with an authorized user of the financial account. The transaction circuit authorizes the transaction request based on whether the transaction request is authenticated and transmits a confirmation to a transaction terminal over the network via the network circuit.
1. A computing system comprising a processor and a network circuit, configured to:
receive, over the internet, a request for authorization of a transaction between a mobile application running on a mobile device and a transaction terminal involving a financial account;
determine, in response to receiving the request for authorization, that a physical card being within a range is required to authorize the transaction;
in response to determining that the physical card being within the range is required to authorize the transaction, transmit, over the internet via the network circuit, a request to determine whether the physical card is within the range to the mobile device, to cause the mobile device to:
communicate, via a personal area network created by the mobile device, using a short range wireless communication protocol and a wireless transceiver of the mobile device, to detect that a physical card that corresponds to the financial account is physically located within range of the short range wireless transceiver, the physical card having a microchip;
receive, over the internet from the mobile device, responsive to causing the mobile device to communicate with the microchip of the physical card, an indication of whether the physical card corresponding to the financial account is within range of the short range wireless transceiver; and
transmit, over the internet, authorization for the transaction to the transaction terminal when the microchip of the physical card corresponding to the financial account is within the range of the short range wireless transceiver of the mobile device, and otherwise deny the transaction.
2. The computing system of claim 1 , wherein the transaction terminal is a merchant computing device, and wherein the processor is configured to receive the request for authorization from the merchant computing device, and transmit the authorization for the transaction to the merchant computing device.
3. The computing system of claim 1 , wherein the transaction is an online transaction with a merchant computing device.
4. The computing system of claim 1 , wherein the transaction terminal is a merchant transaction terminal, and wherein the transaction is with the merchant transaction terminal.
5. The computing system of claim 1 , wherein the physical card is a payment card for making payments from the financial account.
6. The computing system of claim 1 , wherein the request for authorization includes a transaction amount, and wherein the processor is configured to determine that the physical card being within the range is required to authorize the transaction based on the transaction amount in the request for authorization exceeding a threshold amount.
7. The computing system of claim 6 , wherein the processor is further configured to receive, over the internet from the mobile device, the threshold amount as specified via input to the mobile application running on the mobile device.
8. The computing system of claim 1 , wherein the financial account is a first financial account of a user, and wherein the processor is configured to transmit authorization for the transaction upon confirmation that the physical card is associated with at least one of the first financial account and a second financial account of the user.
9. The computing system of claim 1 , wherein the financial account is a first financial account at a first financial institution, and wherein the physical card, detected for authorizing the transaction, is configured for making payments from a second financial account at a second financial institution distinct from the first financial institution.
10. The computing system of claim 1 , wherein the processor is further configured to:
generate a token for use by the mobile application running on the mobile device in transactions involving the financial account; and
provision the token to the mobile application by transmitting, over the internet via the network circuit, the token to the mobile device.
11. The computing system of claim 10 , wherein generating the token comprises tokenizing an account number associated with the financial account.
12. The computing system of claim 10 , wherein the request for authorization includes the token.
13. The computing system of claim 1 , wherein the mobile device communicates with a plurality of physical cards within a wireless range of the mobile device to determine whether the physical card that corresponds to the financial account is detectable.
14. A method comprising:
receiving, over the internet by the computing system, a request for authorization of a transaction between a mobile application running on a mobile device and a transaction terminal involving a financial account;
determining, by the computing system, in response to receiving the request for authorization, that a physical card being within a range is required to authorize the transaction;
in response to determining that the physical card being within the range is required to authorize the transaction, transmitting, over the internet by the computing system, a request to determine whether the physical card is within the range to the mobile device, to cause the mobile device to:
communicate, via a personal area network created by the mobile device, using a short range wireless communication protocol and a wireless transceiver of the mobile device, to detect that a physical card that corresponds to the financial account is physically located within range of the short range wireless transceiver, the physical card having a microchip;
receiving, over the internet by the computing system, from the mobile device, responsive to causing the mobile device to communicate with the microchip of each of the plurality of physical cards, an indication of whether the physical card corresponding to the financial account is within range of the short range wireless transceiver; and
transmitting, over the internet by the computing system, authorization for the transaction to the transaction terminal when the microchip of the physical card corresponding to the financial account is within range of the short range wireless transceiver of the mobile device, and otherwise denying the transaction.
15. The method of claim 14 , wherein the transaction terminal is a merchant computing device, wherein the request for authorization is received from the merchant computing device, and wherein the authorization for the transaction is transmitted to the merchant computing device.
16. The method of claim 14 , wherein the transaction is an online transaction with a merchant computing device.
17. The method of claim 14 , wherein the physical card is a payment card for making payments from the financial account.
18. The method of claim 14 , wherein the request for authorization includes a transaction amount, and wherein determining that the physical card is required to authorize the transaction is based on the transaction amount in the request for authorization exceeding a threshold amount.
19. The method of claim 14 , wherein the financial account is a first financial account of a user, and wherein the authorization for the transaction is transmitted upon confirmation that the physical card is associated with at least one of the first financial account and a second financial account of the user.
20. The method of claim 14 , wherein the financial account is a first financial account at a first financial institution, and wherein the physical card, detected for authorizing the transaction, is configured for making payments from a second financial account at a second financial institution distinct from the first financial institution.