Authentication systems and methods using location matching
According to some embodiments of the invention, an authentication method is provided. Transaction data for a transaction is received at a communication device from an access device or a resource provider. The transaction data comprises a location of the access device. A location of the communication device is determined by the communication device. It is determined whether a distance between the location of the access device and the location of the communication device is within a predetermined threshold. The transaction is not authorized if the distance between the location of the access device and the location of the communication device is not within a predetermined threshold.
1. A method of conducting a transaction between a user and a resource provider, the method comprising:
providing, by an access device of a resource provider system associated with the resource provider to a communication device of the user, a code comprising transaction data for the transaction, which provides the transaction data to an application provider computer, which provides a transaction identifier associated with the transaction data to a token server, wherein the transaction data comprises a location of the access device and a first time at which the location of the access device is determined, and wherein the communication device is programmed to determine a location of the communication device and a second time at which the location of the communication device is determined, calculate using a distance module on the communication device, a distance between the location of the access device and the communication device, calculate a time difference between the first time and the second time, and in response to determining that the distance is below a distance threshold and that the time difference is below a time threshold, transmit sensitive information to the application provider computer;
transmitting, by the access device to a resource provider computer in the resource provider system, the transaction data and the transaction identifier;
retrieving, by the resource provider computer from the token server, a token using the transaction identifier, the token associated with the sensitive information;
constructing, by the resource provider computer, an authorization request message comprising the transaction data and the token; and
transmitting, by the resource provider computer, the authorization request message comprising the transaction data and the token to a transaction processing computer, which retrieves the sensitive information associated with the token from the token server and obtains authorization for the transaction.
2. The method of claim 1 , further comprising:
receiving, by the resource provider computer, an authorization response message for the transaction from the transaction processing computer.
3. The method of claim 1 , wherein the application provider computer hosts a digital wallet application operating at the communication device.
4. The method of claim 1 , wherein the access device is a POS terminal.
5. The method of claim 1 , wherein the code is a QR code.
6. The method of claim 1 , wherein obtaining authorization for the transaction comprises transmitting the authorization request message comprising the sensitive information associated with the token to an authorizing entity computer for authorization.
7. The method of claim 6 , wherein the sensitive information comprises a PAN.
8. The method of claim 1 , wherein the communication device of the user also provides a location or address of the access device to the application provider computer.
9. The method of claim 1 , wherein the communication device is a mobile phone.
10. The method of claim 1 wherein the token is a payment token.
11. The method of claim 1 , wherein the authorization request message comprises an amount.
12. The method of claim 11 , wherein the transaction is a payment transaction.
13. A system comprising:
an access device comprising a first processor, and a first non-transitory computer readable medium, the first non-transitory computer readable medium comprising code, executable by the first processor to cause the access device to perform operations including,
providing, to a communication device of a user, a code comprising transaction data for a transaction, which provides the transaction data to an application provider computer, which provides a transaction identifier associated with the transaction data to a token server, wherein the transaction data comprises a location of the access device and a first time at which the location of the access device is determined, and wherein the communication device is programmed to determine a location of the communication device and a second time at which the location of the communication device is determined, calculate using a distance module on the communication device, a distance between the location of the access device and the communication device, calculate a time difference between the first time and the second time, and in response to determining that the distance is below a distance threshold and that the time difference is below a time threshold, transmit sensitive information to the application provider computer, and
transmitting, by the access device to a resource provider computer in the system, the transaction data and the transaction identifier; and
the resource provider computer, the resource provider computer comprising a second processor, and a second non-transitory computer readable medium, the second non-transitory computer readable medium comprising code executable by the second processor to cause the resource provider computer to perform operations including,
retrieving, by the resource provider computer from the token server, a token using the transaction identifier, the token associated with the sensitive information,
constructing, by the resource provider computer, an authorization request message comprising the transaction data and the token, and
transmitting, by the resource provider computer, the authorization request message comprising the transaction data and the token to a transaction processing computer, which retrieves the sensitive information associated with the token from the token server and obtains authorization for the transaction.
14. The system of claim 13 , wherein the access device is a POS terminal.
15. The system of claim 13 , wherein the sensitive information comprises a PAN.
16. The system of claim 13 , wherein the token is in a same format as the sensitive information.
17. The system of claim 13 , wherein the code is a QR code.
18. The system of claim 17 , wherein a location of the access device is embedded in the QR code.
19. The system of claim 17 , further comprising the communication device.