System and method for authenticating transactions
AssigneesKabushiki Kaisha Toshiba, Toshiba Tec Kabushiki Kaisha
InventorsFabio M. Gava, Mohammad Suleiman
Life of this patent
Estimating the term…
Abstract
A system and method for authenticating document processing transactions wherein the transaction is rejected if the user is not within a selected geographical region. A transaction request is first received representing a request for the completion of a selected transaction associated with a selected user. Preauthorized geographic region data, associated with the selected user, is then received indicating from where the associated user is allowed to request transactions. Location data representing the source of the transaction request is then received and tested against the preauthorized geographic region data. The result of this testing determines whether the requested transaction is authorized.
Claims17
A transaction authentication system comprising:
- means adapted for receiving into a transaction device, from a remote user terminal, transaction request data representative of a request for completion of a selected transaction associated with a selected user, the transaction request data including identification data corresponding to the selected user;
- the transaction device including means adapted for communicating the identification data to an associated database, the database including means for receiving, from the user, data corresponding to user-customized, preauthorized geographic locations associated with the identification data;
- means adapted for receiving, from the database, region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;
- means adapted for receiving location data from the transaction device to an authentication server, which location data is representative of a source geographic region corresponding to the transaction device;
- testing means adapted for testing the region data against the location data;
- and
- means adapted for generating authorization data representative of an output of the test means.
A transaction authentication method comprising the steps of:
- receiving into a transaction device, from a remote user terminal, transaction request data representative of a request for completion of a selected transaction associated with a selected user, the transaction request data including identification data corresponding to the selected user;
- communicating the identification data from the transaction device to an associated database, the database including means for receiving, from the user, data corresponding to user-customized preauthorized geographic locations associated with the identification data;
- receiving, from the database, region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;
- receiving location data from the transaction device to an authentication server, which location data is representative of a source geographic region corresponding to the transaction device;
- testing the region data against the location data;
- and
- generating authorization data representative of an output of the testing.
A computer-implemented method for authenticating transactions comprising the steps of:
- receiving into a transaction device, from a remote user terminal, transaction request data representative of a request for completion of a selected transaction associated with a selected user, the transaction request data including identification data corresponding to the selected user;
- communicating the identification data from the transaction device to an associated database, the database including means for receiving, from the user, data corresponding to user-customized preauthorized geographic locations associated with the identification data;
- receiving, from the database, region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;
- receiving location data from the transaction device to an authentication server, which location data is representative of a source geographic region corresponding to the transaction device;
- testing the region data against the location data;
- and
- generating authorization data representative of an output of the testing.
Dependencies are inferred from the claim text.