Patent Description:
Ever increasing security challenges plague ATMs, posing substantial financial losses and risk to financial institutions and their clients. Moreover, as financial transactions can increasingly involve mobile or other portable devices to facilitate transactions, man-in-the-middle (MitM) attacks can create additional challenges.

Document <CIT> relates to localizing and identifying a mobile computing device using a short-range mesh network. When it is determined that the user of the mobile computing device is within a certain distance from an ATM, that ATM may perform the transaction that was previously specified by the user.

Document <CIT> relates to determining that a user is located in a predefined area when multiple transceiver devices with antennas aimed at that area confirm receipt of a signal from a mobile device of the user.

According to a first aspect, there is provided a system as defined in appended claim <NUM>. According to a second aspect, there is provided a computer-implemented method as defined in appended claim <NUM>.

As described above, man-in-the-middle attacks present a security challenges. In the context of ATMs, an attacker with physical proximity can intercept financial transactions. For example, a customer who attempts to withdraw money from an ATM via a mobile phone application may encounter another person ahead in line at the ATM. A system should enable the ATM to dispense cash only after ensuring that the user is present in front of the ATM that is authorized to dispense the cash.

Provided herein are system, apparatus, device, method and/or computer program product embodiments, and/or combinations and sub-combinations thereof, for conducting ATM transactions. Many banks presently offer a mobile app experience that allows account holders to conduct a variety of transactions. For example, an account holder may use the mobile app to transfer funds from a savings account to a checking account, or pay bills from their funds. Embodiments verify that the individual is in front of the ATM to avoid the man-in-the-middle attacks described above.

To verify a position of an ATM user, antennas, such as directional antennas, may be configured to interact with a mobile device of the ATM user. In this way, embodiments verify that the user is present in front of the ATM that is used for the withdraw. By verifying that the user is present in front of the ATM, security is improved.

The modules, units, and services in the following description of the embodiments can be coupled to one another as described or as shown. The coupling can be direct or indirect, without or with intervening items between coupled modules, units, or services. The coupling can be by physical contact or by communication between modules, units, or services.

<FIG> illustrates a computerized financial terminal system. As described in detail below, the system permits a customer to make real-time financial inquiries and transactions at when present at the terminal system. In some embodiments, the terminal system <NUM> can be an ATM system to transact using a secure connection. In some embodiments, terminal system <NUM> can be a cardless ATM system enabling the customer <NUM> to conduct a device-based transaction.

Terminal system <NUM> can include a kiosk <NUM>, a transmitter <NUM>, a sensor <NUM>, and a receiver <NUM>. Kiosk <NUM> can include one or more processors, which can be configured to perform an electronic payment transaction. Transmitter <NUM>, the sensor <NUM> and receiver <NUM> can be connected to kiosk <NUM>. For example, transmitter <NUM>, the sensor <NUM> and receiver <NUM> can be connected with kiosk to provide an interface through which a customer can associate with a bank. In one example, kiosk <NUM> is an ATM kiosk that can communicate with a portable device of a customer through transmitter <NUM> and receiver <NUM>. The components and arrangement of the components included in terminal system <NUM> may vary. Thus, terminal system <NUM> may further include other components or devices that perform or assist in the performance of one or more processes consistent with the disclosed embodiments. The components and arrangements shown in <FIG> are not intended to limit the disclosed embodiments, as the components used to implement the disclosed processes and features may vary.

Transmitter <NUM> and receiver <NUM> can include directional antennas and positioned in a manner that enables a transaction to be performed by cardless ATM system when the customer is present before kiosk <NUM>. Specifically, transmitter <NUM> can be electrically coupled to kiosk <NUM> and configured to transmit a first signal to a customer's portable device at a first direction. In one example, transmitter <NUM> can be disposed within a mat, and configured to transmit a signal in a direction perpendicular to the floor, i.e., up. Receiver <NUM> can also be electrically coupled to kiosk <NUM> and configured to receive a second signal from the customer's portable device at a second direction. In one example, receiver <NUM> can be disposed overhead and receive a second signal from a customer's portable device situated below receiver <NUM>. In some embodiments, transmitter <NUM> and receiver <NUM> are positioned such that the first and second direction enable determination of a position of the user.

Further, although an exemplary wall-mounted arrangement is shown, the physical arrangement of kiosk <NUM> may vary and is not limited to this arrangement. For example, kiosk <NUM> can be part of a terminal system provided in a financial institution (e.g., a bank, an office, a department providing financial services, etc.) or other location. In some embodiments, an employee representing the financial institution may assist with the inputting of information from provided by the customer.

In some embodiments, transmitter <NUM> includes one or more directional antenna or beam antenna. That is, transmitter <NUM> includes at least an antenna that radiates or receives greater power in specific directions allowing increased performance and reduced interference from unwanted sources. In some embodiments, transmitter <NUM> is configured to transmit a radiofrequency (RF) signal in only one direction, within a range of about ten percent or less from the direction. In some embodiments, transmitter <NUM> can include a directional antenna with a focused, narrow radiowave beam width, such as a high-gain antenna (HGA), permitting more precise targeting of the radio signals. However, embodiments of the present invention are not limited to this configuration and dipole, low-gain antenna (LGA), or any other transmitting device can be used.

<FIG> is a flowchart illustrating steps of a cardless ATM customer authentication method <NUM>, by which an ATM system verifies and authenticates a customer attempting to operate a terminal system <NUM>, in accordance with an embodiment. It is to be appreciated the process may not execute all steps shown or in the order shown, and may execute additional steps.

Method <NUM> will be described with respect to <FIG>, which illustrates an exemplary usage of terminal system <NUM>. <FIG> is for illustrative purposes only and are not to scale. In addition, <FIG> may not reflect the actual geometry of the real structures, features, or layers. Some structures, layers, or geometries may have been deliberately augmented or omitted for illustrative and clarity purposes.

Referring to <FIG>, exemplary transaction authentication method <NUM> begins with operation <NUM>, where a transaction request is submitted by a user <NUM> to a financial institution. A transaction request may be presented to a financial institution by a user, who may be a customer of the financial institution, by a computerized process. In an exemplary embodiment described in greater detail with respect to <FIG> below, a customer can initiate a transaction request by a mobile device <NUM>. For example, user <NUM> can initiate a transaction request to withdraw an amount of cash from the financial institution. The transaction request can be initiated without constraint as to the location. For example, the transaction request can be initiated by user <NUM> from a home, office, financial institution, or any other location. In some embodiments, the transaction request can be initiated without limitation as to the location of the kiosk from which cash will be drawn.

As shown in <FIG>, terminal system <NUM> can include a kiosk <NUM>, a transmitter <NUM>, and a receiver <NUM>, which can be embodiments of kiosk <NUM>, transmitter <NUM> and receiver <NUM>, respectively. Transmitter <NUM> and receiver <NUM> can be connected to kiosk <NUM>. For example, transmitter <NUM> and receiver <NUM> can be connected with kiosk to provide an interface through which a customer can associate with a bank. Kiosk <NUM> can be an ATM kiosk that can communicate with a portable device of a customer, such as user device <NUM>, through transmitter <NUM> and receiver <NUM>. The components and arrangement of the components included in terminal system <NUM> may vary. Thus, terminal system <NUM> may further include other components or devices that perform or assist in the performance of one or more processes consistent with the disclosed embodiments.

Referring to <FIG>, exemplary transaction authentication method <NUM> continues with operation <NUM>, where the presence of user <NUM> is detected relative to terminal system <NUM>. Terminal system <NUM> can include a kiosk <NUM>, a transmitter <NUM>, and a receiver <NUM>, which can be embodiments of kiosk <NUM>, transmitter <NUM> and receiver <NUM>, respectively.

In one non-limiting example, a sensor (not shown) is configured to detect the presence of a customer. In some embodiments, the sensor can be a piezoelectric element disposed within transmitter <NUM>, in accordance with the above description. In other embodiments, the sensor can be an infrared (IR) sensor, motion detector, PIR-based motion detector, ultrasonic sensor, passive infrared (PIR) sensor, tomographic sensor, microwave sensor, or any other sensor or combinations thereof, configured to detect the presence of a customer at terminal system <NUM>. In still other embodiments.

Exemplary transaction authentication method <NUM> continues with operation <NUM>, where the detection of user <NUM> initiates a key generation process. A processor generates a key (e.g., first signal <NUM>) to be used in the authentication of user device <NUM> before carrying out one or more financial transactions. Embodiments are not limited with respect to a specific key generation algorithm. For example, in some embodiments, a symmetric-key algorithm can be used to generate an encryption key. In some embodiments, the encryption key can be either partially or entirely randomly generated using any random number generator (RNG) or pseudorandom number generator (PRNG), including known PRNGs such as Yarrow, Blum, Shub, or Lagged Fibonacci generators. Additionally, key generation protocols can include cipher protocol, such as a block cipher, stream cipher, linear-feedback shift register (LFSR), or any other cipher protocol.

Transaction authentication method <NUM> continues with operation <NUM>, where a first signal <NUM> is transmitted from transmitter <NUM> to user device <NUM> in a first direction (e.g., ΘT). First signal <NUM> can include the key generated by a key generation process, as described above. Transmitter <NUM> can include a directional antenna that is configured to transmit first signal <NUM> in a specific direction, such that user device <NUM> is only enabled to acquire first signal <NUM> when disposed at a specific location relative to transmitter <NUM>.

In some embodiments, transmitter <NUM> is configured to transmit an RF signal in only one direction, within a range of about ten percent or less from the direction. In a non-limiting example, transmitter <NUM> includes a directional antenna configured to transmit first signal <NUM> upward, where user device <NUM> is only enabled to acquire first signal <NUM> when disposed above transmitter <NUM>. Specifically, transmitter <NUM> can be disposed in a floor mat and include a directional antenna configured to transmit first signal <NUM>. A directional antenna of transmitter <NUM> is configured to transmit first signal <NUM> in a direction (y) orthogonal to the floor (e.g., at an angle ΘT that is between about <NUM>° and about <NUM>° to the floor, or between about <NUM>° and <NUM>° to the floor, or at an angle about <NUM>° to the floor). Thereby, user device <NUM> generally is enabled to receive first signal <NUM> when positioned over transmitter <NUM>.

Transaction authentication method <NUM> continues with operation <NUM>, where a password based on key <NUM> is transmitted from user device <NUM> as second signal <NUM>. Second signal <NUM> can be received from user device <NUM> by receiver <NUM> at a second direction. In some embodiments, the second direction can be identical or substantially identical to the first direction. In other embodiments, the second direction can be different from the first direction. Like transmitter <NUM>, receiver <NUM> can include a directional antenna that is configured to receive second signal <NUM> in a specific direction only when user device <NUM> disposed at a specific location relative to receiver <NUM>.

In some embodiments, receiver <NUM> is configured to receive an RF signal in only one direction, within a range of about ten percent or less from the direction. In a non-limiting example, receiver <NUM> includes a directional antenna configured to receive second signal <NUM> upward, where receiver <NUM> is enabled to receive second signal <NUM> primarily when user device <NUM> is situated below receiver <NUM>. Specifically, transmitter <NUM> can be disposed overhead (e.g., in a ceiling or overhead structure) and include a directional antenna configured to receive second signal <NUM>. A directional antenna of receiver <NUM> is configured to receive second signal <NUM> in a direction (y) orthogonal to the ceiling (e.g., at an angle ΘR that is between about <NUM>° and about <NUM>° to the ceiling, or between about <NUM>° and <NUM>° to the ceiling, or at an angle about <NUM>° to the ceiling). Thereby, receiver <NUM> generally is enabled to receive second signal <NUM> when positioned over user device <NUM>.

Referring to <FIG>, exemplary transaction authentication method <NUM> continues with operation <NUM>, where the password transmitted from user device <NUM> in second signal, and received by receiver <NUM> in operation <NUM>, is compared to a password is matched to the user's credentials. If the password is verified to match the user's credentials, then the kiosk authenticates the user and enables the user to complete the financial transaction request. For example, after verifying the password, the kiosk can perform an operation to complete the cash withdrawal transaction that was initiated in operation <NUM> above. Thus, transaction authentication method <NUM> enables an kiosk <NUM> to perform a financial transaction initiated by user device <NUM> only when the user device <NUM> is present at a location relative to the kiosk, to ensure that user <NUM> is present. By enabling the financial transaction only when the user <NUM> corresponding to the transaction is present in front of the ATM, financial losses and risk to financial institutions and their clients can be reduced.

<FIG> illustrates a cardless ATM system <NUM>, in accordance with an embodiment. In an embodiment, mobile device <NUM> is used by an account holder of a banking institution to conduct online banking. Specifically, mobile device <NUM> will typically have a mobile application ("app") installed thereon and usable for interacting with the banking institution for performing banking transactions on a user account holder's accounts.

In some embodiments, mobile device <NUM> interacts with the banking institution through a secure interface <NUM>. Secure interface <NUM> can provide facilities for securely communicating with the banking institution's backend systems to conduct transactions, and also protects the banking institution's backend systems from improper access attempts (e.g., distributed denial of service (DDoS) attacks, injection attacks, etc.).

In an embodiment, interaction with the banking institution's backend systems through secure interface <NUM> is accomplished through a variety of micro-services provided by micro-service repository <NUM>. For example, cardless services <NUM> allow mobile device <NUM> to interact with an ATM <NUM> without the need to have a physical ATM card as an authentication mechanism for the account holder.

Specifically, cardless services <NUM> can allow the user account holder to authenticate themselves to the banking institution using authentication procedures within an app installed on mobile device <NUM>. By way of non-limiting example, this may include a username and password based login, biometric recognition, access key, and other authentication mechanisms, including the use of multiple authentication mechanisms in a multi-factor authentication scheme. A skilled artisan will appreciate that a variety of authentication mechanisms may be employed at mobile device <NUM> in order to ensure that the user is authorized to access their specific account through cardless services <NUM>.

In an embodiment, an authenticated user on mobile device <NUM> may request a transaction through cardless services <NUM> that needs to be serviced through ATM <NUM> (such as a cash withdrawal). Since the authenticated user is known to the banking institution as having proper access to perform the transaction, even without the use of an ATM card, cardless services <NUM> can inform ATM <NUM> that the authenticated user is permitted to complete the transaction at ATM <NUM>.

In order to complete the transaction, cardless services <NUM> can pair the transaction to ATM <NUM> to allow completion of the transaction at ATM <NUM>. And if, with pairing complete through pairing service <NUM>, cardless services <NUM> issues a request for ATM <NUM> to perform a specific transaction (e.g., providing cash to complete a cash withdrawal transaction), the instructions can be provided through ATM middleware <NUM> to direct the behavior of ATM <NUM>.

In accordance with an embodiment, pairing service <NUM> handles pairing of transactions from mobile device <NUM> with ATM <NUM> through the use of a barcode or other unique identifying information obtained from ATM <NUM> and provided through mobile device <NUM> as confirmation. For example, ATM <NUM> may display a barcode, such as QR code <NUM>, on its screen. This barcode includes an identifier associated with ATM <NUM>. When mobile device <NUM> has prepared a transaction for performance through cardless services <NUM>, the mobile app executing on mobile device <NUM> may instruct the authenticated user to visit ATM <NUM> to complete the transaction. A skilled artisan will recognize that, although the disclosure herein is presented principally by way of barcodes (which include special cases of barcodes, such as QR codes), other forms of coding may be used in place of barcodes to equivalent effect.

In this embodiment, upon arriving at ATM <NUM>, the user of mobile device <NUM> is presented with QR code <NUM> on the display screen of ATM <NUM>. The mobile app executing on mobile device <NUM> may present the user with an option for obtaining this QR code <NUM> (or other code) from the ATM <NUM>. For example, the mobile app may access a camera feature to allow the user to scan QR code <NUM> using a camera <NUM> built into mobile device <NUM>. The mobile device <NUM> sends this QR code to cardless services <NUM> and on to pairing service <NUM>, which recognizes the identifier for ATM <NUM> in scanned QR code <NUM>. Accordingly, pairing service <NUM> is able to pair the transaction initiated from mobile device <NUM> with ATM <NUM> specifically on the basis of the identifier.

In a further embodiment, QR code <NUM> (or other form of barcode) may be read by a barcode reader <NUM>. Barcodes, such as QR codes, that are formed in accordance with a specific standard are commonly readable by any reader that itself conforms to the barcode standards. For example, if barcode reader <NUM> is capable of reading QR codes such as QR code <NUM>, then barcode reader <NUM> would be able to obtain raw data present in any such QR code. Accordingly, a skilled artisan would understand that barcode reader <NUM> is any form of device capable of reading a barcode (such as QR code <NUM>) displayed on ATM <NUM>, and may include devices such as a handheld barcode scan tool or a mobile phone with an installed application capable of reading and processing the barcode.

<FIG> illustrate a wireframe of a mobile device ATM fulfillment process, in accordance with an embodiment. <FIG> shows an exemplary home screen for a mobile app used for banking on a mobile device, such as mobile device <NUM> of <FIG>. From this screen, a user of the mobile app may select a transaction that requires an ATM for fulfillment - in this case, "Get Cash at an ATM. " <FIG> shows an exemplary screen allowing the user to select an account from which to perform the ATM withdrawal. <FIG> shows an exemplary screen for selecting an amount for the ATM cash withdrawal, while <FIG> shows an exemplary screen for confirming details of the withdrawal (including the account and the amount selected).

<FIG> shows an exemplary screen notifying the user that the transaction has been approved, and is ready to be completed at an ATM. This screen also provides an option allowing the user to scan a code, which, once selected, navigates to the exemplary screen of <FIG>. The exemplary screen of <FIG> shows a camera feature allowing the user to approach the ATM with their mobile device to scan the code (e.g., a QR code) shown on the ATM display. And the exemplary screen of <FIG> shows a confirmation screen indicating that the transaction has been completed by the ATM.

As discussed in the context of <FIG>, in an embodiment pairing service <NUM> uses an identifier for ATM <NUM> obtained by mobile device <NUM> (e.g., by scanning QR code <NUM> with an embedded identifier, using camera <NUM> of mobile device <NUM>) to pair ATM <NUM> with the transaction provided by mobile device <NUM>. In this embodiment, the exemplary screens of <FIG> illustrate the process of preparing the transaction for fulfillment by ATM <NUM>, and <FIG> illustrate the process of pairing the specific ATM <NUM> to the transaction of mobile device <NUM> by scanning QR code <NUM> using camera <NUM> of mobile device <NUM>.

Various embodiments may be implemented, for example, using one or more well-known computer systems. One or more computer systems may be used, for example, to implement any of the embodiments discussed herein, as well as combinations and sub-combinations thereof.

Computer system may include one or more processors (also called central processing units, or CPUs), such as a processor Processor may be connected to a communication infrastructure or bus <NUM>.

Computer system may also include user input/output device(s) such as monitors, keyboards, pointing devices, etc., which may communicate with communication infrastructure through user input/output interface(s).

One or more of processors may be a graphics processing unit (GPU). In an embodiment, a GPU may be a processor that is a specialized electronic circuit designed to process mathematically intensive applications. The GPU may have a parallel structure that is efficient for parallel processing of large blocks of data, such as mathematically intensive data common to computer graphics applications, images, videos, etc..

Computer system may also include a main or primary memory, such as random access memory (RAM). Main memory may include one or more levels of cache. Main memory may have stored therein control logic (i.e., computer software) and/or data.

Computer system may also include one or more secondary storage devices or memory Secondary memory may include, for example, a hard disk drive and/or a removable storage device or drive. Removable storage drive may be a floppy disk drive, a magnetic tape drive, a compact disk drive, an optical storage device, tape backup device, and/or any other storage device/drive.

Removable storage drive may interact with a removable storage unit Removable storage unit may include a computer usable or readable storage device having stored thereon computer software (control logic) and/or data. Removable storage unit may be a floppy disk, magnetic tape, compact disk, DVD, optical storage disk, and/ any other computer data storage device. Removable storage drive may read from and/or write to removable storage unit.

Secondary memory may include other means, devices, components, instrumentalities or other approaches for allowing computer programs and/or other instructions and/or data to be accessed by computer system. Such means, devices, components, instrumentalities or other approaches may include, for example, a removable storage unit and an interface. Examples of the removable storage unit and the interface may include a program cartridge and cartridge interface (such as that found in video game devices), a removable memory chip (such as an EPROM or PROM) and associated socket, a memory stick and USB port, a memory card and associated memory card slot, and/or any other removable storage unit and associated interface.

Computer system may further include a communication or network interface. Communication interface may enable computer system to communicate and interact with any combination of external devices, external networks, external entities, etc. For example, communication interface may allow computer system to communicate with external or remote devices over communications path, which may be wired and/or wireless (or a combination thereof), and which may include any combination of LANs, WANs, the Internet, etc. Control logic and/or data may be transmitted to and from computer system via communication path.

Computer system may also be any of a personal digital assistant (PDA), desktop workstation, laptop or notebook computer, netbook, tablet, smart phone, smart watch or other wearable, appliance, part of the Internet-of-Things, and/or embedded system, to name a few non-limiting examples, or any combination thereof.

Computer system may be a client or server, accessing or hosting any applications and/or data through any delivery paradigm, including but not limited to remote or distributed cloud computing solutions; local or on-premises software ("on-premise" cloud-based solutions); "as a service" models (e.g., content as a service (CaaS), digital content as a service (DCaaS), software as a service (SaaS), managed software as a service (MSaaS), platform as a service (PaaS), desktop as a service (DaaS), framework as a service (FaaS), backend as a service (BaaS), mobile backend as a service (MBaaS), infrastructure as a service (IaaS), etc.); and/or a hybrid model including any combination of the foregoing examples or other services or delivery paradigms.

Any applicable data structures, file formats, and schemas in computer system <NUM> may be derived from standards including but not limited to JavaScript Object Notation (JSON), Extensible Markup Language (XML), Yet Another Markup Language (YAML), Extensible Hypertext Markup Language (XHTML), Wireless Markup Language (WML), MessagePack, XML User Interface Language (XUL), or any other functionally similar representations alone or in combination. Alternatively, proprietary data structures, formats or schemas may be used, either exclusively or in combination with known or open standards.

In some embodiments, a tangible, non-transitory apparatus or article of manufacture comprising a tangible, non-transitory computer useable or readable medium having control logic (software) stored thereon may also be referred to herein as a computer program product or program storage device. This includes, but is not limited to, computer system, main memory, secondary memory, and removable storage units, as well as tangible articles of manufacture embodying any combination of the foregoing. Such control logic, when executed by one or more data processing devices (such as computer system ), may cause such data processing devices to operate as described herein.

Embodiments can operate with software, hardware, and/or operating system implementations other than those described herein.

An exemplary usage of a cardless ATM cardless authentication system, by which an ATM system verifies and authenticates a customer, in accordance with an embodiment, is illustrated below.

A financial institution can receive transaction requests independently submitted by a first user and a second user. For example, the first user may submit a transaction request from her home, to draw some amount of cash from an ATM kiosk, while the second user may submit a transaction request from her automobile to perform a deposit.

Cardless ATM cardless authentication system can include first kiosk , first transmitter, and first receiver, and second kiosk, second transmitter , and second receiver. First transmitter and first receiver can be connected to first kiosk, while second transmitter and second receiver can be connected to second kiosk. Upon arrival at kiosk, a sensor (not shown) can detect the presence of one or more of the first user and the second user. For example, a sensor in transmitter can be provided to detect the presence of a user at kiosk. In this example, a piezoelectric element disposed within transmitter initiates an electric signal to kiosk indicating the presence of user standing on transmitter.

Based on the detection, a key can be generated by kiosk for transmission by transmitter to user device controlled by user. One or more processors generates a key to be used in the authentication of user device before carrying out one or more financial transactions. For example, an encryption key is randomly generated using a PRNG such as a linear-feedback shift register (LFSR) or other cipher protocol. A signal including the key is transmitted by transmitter to user device in a first direction. Transmitter can include a directional antenna that is configured to transmit a first signal in a specific direction, such that user device is only enabled to acquire a first signal when disposed at a specific location relative to transmitter.

As described above, transmitter is configured to transmit an RF signal in only one direction, within a range of about ten percent or less from the direction. Transmitter includes a directional antenna configured to transmit a first signal, where user device is only enabled to acquire first signal when disposed above transmitter Specifically, transmitter can be disposed in a floor mat and include a directional antenna configured to transmit first signal. A directional antenna of transmitter is configured to transmit first signal in a direction (y) orthogonal to the floor (e.g., at an angle between about <NUM>° and about <NUM>° to the floor, or between about <NUM>° and <NUM>° to the floor, or at an angle about <NUM>° to the floor). Thereby, user device generally is enabled to receive first signal when positioned over transmitter. Transmitter is similarly configured to transmit only to a direction enabled to reach a device operated by a user standing in front of kiosk (e.g., the second user) such that user device generally is enabled to receive a signal transmitted by transmitter.

User device receives the key and generates a one-time-password (OTP) that is cryptographically combined with the key using a one-way function hash function. For example, user device can generate a signal based on the key and OTP using a SHA function. The cryptographically combined one-time-password is transmitted from user device to receiver. Because receiver is positioned relative to the expected location of a user of kiosk, a directional antenna of receiver is oriented to receive signals from that expected location.

In some embodiments, an antenna of receiver is configured to not receive signals outside some threshold variance from that expected location (e.g., from outside <NUM>% of a center point of a given location). Specifically, receiver includes a directional antenna configured to receive the second signal only from a user standing in front of kiosk. Specifically, transmitter can be disposed overhead, beside, at any given orientation and include a directional antenna such that a signal can be received only from a location proximal relative to kiosk. Thereby, receiver is enabled to receive a second signal from user device.

Then, based on the OTP transmitted from user device in second signal, and received by receiver, the credentials of the first user are confirmed enabling the user to complete the financial transaction request.

Likewise, user device of the second user generates a separate OTP that is cryptographically combined with a separate key received from transmitter. The OTP is also generated using a one-way function hash function. The OTP generated by user device can be transmitted to receiver, which is oriented to receive signals from the expected location of user device. Thereby, the credentials of the second user are confirmed enabling the user to complete the financial transaction request.

Claim 1:
A system (<NUM>) comprising:
a kiosk (<NUM>), the kiosk (<NUM>) comprising a processor, the processor configured to perform an electronic payment transaction based on instructions received from a portable device (<NUM>) of a user;
a transmitting device (<NUM>) electrically coupled to the kiosk (<NUM>), the transmitting device (<NUM>) configured to transmit a first signal to the portable device (<NUM>) at a first direction based on an instruction received from the kiosk (<NUM>); and
a receiving device (<NUM>) electrically coupled to the kiosk (<NUM>), the receiving device (<NUM>) configured to receive a second signal from the portable device (<NUM>) at a second direction, wherein the transmitting device (<NUM>) and receiving device (<NUM>) are positioned such that the first and second direction enable determination of a position of the user,
wherein the processor enables the electronic payment transaction to be processed only when the portable device (<NUM>) is at a location relative to the kiosk (<NUM>), and
wherein the location is disposed within a transmission path coextensive with both the first direction and the second direction.