Methods and systems for validating online transactions using location information

• US 10,482,081 B2
• Filed: 06/27/2007
• Issued: 11/19/2019
• Est. Priority Date: 06/04/2007
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Bouchard, Jean, Fortier, Stephane Maxime Francois
• Primary Examiner(s): Borlinghaus, Jason
• Application Number:
  US12/298,720
• Publication Number:
  US 20100174649A1
• Time in Patent Office: 4,528 Days
• Field of Search: None
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0251 Targeted advertisements
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0254 based on statistics
• CPC Class Codes: G06Q 30/0255 based on user history
• CPC Class Codes: G06Q 30/0264 based upon schedule
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

A method comprising: obtaining a service point location, the service point location being associated with a logical identifier assigned to end-user equipment used in an attempt to make an online transaction; obtaining at least one authorized transaction point location, the at least one authorized transaction point location being associated with transaction object information provided via the end-user equipment; comparing the service point location to each of the at least one authorized transaction point location; and performing an action related to validation of the online transaction based on a result of the comparing. Also provided is an apparatus for implementing this method.

Claims

1. A method comprising:

maintaining a location information database comprising;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

obtaining by a computer apparatus the network address of the end-user equipment connected to the network and used in the attempt to make the online transaction;

consulting, by the computer apparatus the location information database to obtain a service point location that is associated with the network address;

obtaining by the computer apparatus at least one authorized transaction point location, the at least one authorized transaction point location being associated with transaction object information provided via the end-user equipment;

comparing by the computer apparatus the service point location to the at least one authorized transaction point location; and

at the computer apparatus performing an action related to validation of the online transaction based on a result of said comparing.

2. A method as claimed in claim 1, wherein obtaining the at least one authorized transaction point location comprises receiving a message conveying the at least one authorized transaction point location.

3. A method as claimed in claim 2, wherein performing an action related to validation of the online transaction comprises generating and transmitting a message indicative of whether the service point location corresponds to one of the at least one authorized transaction point location.

4. A method as claimed in claim 1, wherein obtaining the at least one authorized transaction point location comprises consulting a second database on a basis of the transaction object information.

5. A method as claimed in claim 4, wherein performing an action related to validation of the online transaction comprises validating the online transaction.

6. A method as claimed in claim 4, wherein, if the result of said comparing is that the service point location does not correspond to one of the at least one authorized transaction point location, performing an action related to validation of the online transaction comprises handling the online transaction in a first manner.

7. A method as claimed in claim 6, wherein, if the result of said comparing is that the service point location corresponds to one of the at least one authorized transaction point location, performing an action related to, validation of the online transaction comprises handling the online transaction in a second manner different from the first manner.

8. A method as claimed in claim 1, wherein the transaction object information comprises payment card information regarding a payment card.

9. A method as claimed in claim 8, wherein the payment card information is credit card information regarding a credit card.

10. A method as claimed in claim 8, wherein the payment card information is debit card information regarding a debit card.

11. A method as claimed in claim 1, wherein the transaction object information comprises electronic check information regarding an electronic check.

12. A method as claimed in claim 1, wherein the transaction object information comprises digital cash information regarding a set of at least one digital cash certificate.

13. A method as claimed in claim 1, wherein the transaction object information comprises account information regarding an account.

14. A method as claimed in claim 1, wherein the service point location is expressed as a civic address.

15. A method as claimed in claim 1, wherein the service point location is expressed as a set of geo-coordinates.

16. A method as claimed in claim 1, wherein each of the at least one authorized transaction point location is expressed as a civic address.

17. A method as claimed in claim 1, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

94. The method defined in claim 1, wherein the network address is an IP address.

18. An apparatus comprising:

an interface for receiving messages; and

a processing unit coupled to said interface, said processing unit being responsive to receipt of a message at said interface for;

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

obtaining the network address of the end-user equipment used in the attempt to make the online transaction;

consulting the location information database to obtain a service point location that is associated with the network address;

obtaining at least one authorized transaction point location, the at least one authorized transaction point location being associated with transaction object information provided via the end-user equipment;

comparing the service point location to the at least one authorized transaction point location; and

performing an action related to validation of the online transaction based on a result of said comparing.

19. An apparatus as claimed in claim 18, wherein the message conveys the at least one authorized transaction point location, and wherein obtaining the at least one authorized transaction point location comprises processing the message to obtain the at least one authorized transaction point location.

20. An apparatus as claimed in claim 19, wherein the message is a first message, and wherein performing an action related to validation of the online transaction comprises generating and transmitting via said interface a second message indicative of whether the service point location corresponds to one of the at least one authorized transaction point location.

21. An apparatus as claimed in claim 18, wherein obtaining the at least one authorized transaction point location comprises consulting a second database on a basis of the transaction object information.

22. An apparatus as claimed in claim 21, wherein performing an action related to validation of the online transaction comprises validating the online transaction.

23. An apparatus as claimed in claim 21, wherein, if the result of said comparing is that the service point location does not correspond to one of the at least one authorized transaction point location, performing an action related to validation of the online transaction comprises handling the online transaction in a first manner.

24. An apparatus as claimed in claim 23, wherein, if the result of said comparing is that the service point location corresponds to one of the at least one authorized transaction point location, performing an action related to validation of the online transaction comprises handling the online transaction in a second manner different from the first manner.

25. An apparatus as claimed in claim 18, wherein the transaction object information comprises payment card information regarding a payment card.

26. An apparatus as claimed in claim 25, wherein the payment card information is credit card information regarding a credit card.

27. An apparatus as claimed in claim 25, wherein the payment card information is debit card information regarding a debit card.

28. An apparatus as claimed in claim 18, wherein the transaction object information comprises electronic check information regarding an electronic check.

29. An apparatus as claimed in claim 18, wherein the transaction object information comprises digital cash information regarding a set of at least one digital cash certificate.

30. An apparatus as claimed in claim 18, wherein the transaction object information comprises account information regarding an account.

31. An apparatus as claimed in claim 18, wherein the service point location is expressed as a civic address.

32. An apparatus as claimed in claim 18, wherein the service point location is expressed as a set of geo-coordinates.

33. An apparatus as claimed in claim 18, wherein each of the at least one authorized transaction point location is expressed as a civic address.

34. An apparatus as claimed in claim 18, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

95. The apparatus defined in claim 18, wherein the network address is an IP address.

35. A computer-readable storage medium storing computer-readable instructions for execution by a computer to implement a method comprising:

maintaining a location information database comprising;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

obtaining at a computer apparatus the network address of the end-user equipment connected to the network and used in the attempt to make the online transaction;

at the computer apparatus, consulting the location information database to obtain a service point location that is associated with the network address;

obtaining at the computer apparatus at least one authorized transaction point location, the at least one authorized transaction point location being associated with transaction object information provided via the end-user equipment;

at the computer apparatus comparing the service point location to the at least one authorized transaction point location; and

at the computer apparatus performing an action related to validation of the online transaction based on a result of said comparing.

96. The computer-readable storage medium defined in claim 35, wherein the network address is an IP address.

36. A method comprising:

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

receiving at a computer apparatus a message conveying a network address;

at the computer apparatus, consulting the location information database to obtain the service point location that is associated with the network address; and

at the computer apparatus, using the service point location to perform an action related to validation of an online transaction attempted to be made using end-user equipment to which the network address is assigned, wherein the message is a first message and further conveys at least one authorized transaction point location, and wherein using the service point location to perform an action comprises;

comparing the service point location to each of the at least one authorized transaction point location; and

generating and transmitting a second message indicative of whether the service point location corresponds to one of the at least one authorized transaction point location.

37. A method as claimed in claim 36, wherein the online transaction is an online payment using payment card information regarding a payment card, and wherein the message is generated by a network element associated with a card issuing entity that issued the payment card.

38. A method as claimed in claim 37, wherein the payment card information is credit card information regarding a credit card.

39. A method as claimed in claim 37, wherein the payment card information is debit card information regarding a debit card.

40. A method as claimed in claim 36, wherein the online transaction is an online payment using electronic check information regarding an electronic check, and wherein the message is generated by a network element associated with a financial entity that issued the electronic check.

41. A method as claimed in claim 36, wherein the online transaction is an online payment using digital cash information regarding a set of at least one digital cash certificate, and wherein the message is generated by a network element associated with a financial entity that issued the set of at least one digital cash certificate.

42. A method as claimed in claim 36, wherein the online transaction is an online fund transfer involving an account, and wherein the message is generated by a network element associated with a financial entity that manages the account.

43. A method as claimed in claim 36, wherein the service point location is expressed as a civic address.

44. A method as claimed in claim 36, wherein the service point location is expressed as a set of geo-coordinates.

45. A method as claimed in claim 36, wherein each of the at least one authorized transaction point location is expressed as a civic address.

46. A method as claimed in claim 36, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

97. The method defined in claim 36, wherein the network address is an IP address.

47. An apparatus comprising:

an interface for receiving a message conveying a network address; and

a processing unit coupled to said interface, said processing unit being operative for;

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

consulting the location information database to obtain the service point location that is associated with the network address; and

using the service point location to perform an action related to validation of an online transaction attempted to be made using end-user equipment to which the network address is assigned, wherein the message is a first message and further conveys at least one authorized transaction point location, and wherein using the service point location to perform an action comprises;

comparing the service point location to each of the at least one authorized transaction point location; and

generating and transmitting a second message indicative of whether the service point location corresponds to one of the at least one authorized transaction point location.

48. An apparatus as claimed in claim 47, wherein the online transaction is an online payment using payment card information regarding a payment card, and wherein the message is generated by a network element associated with a card issuing entity that issued the payment card.

49. An apparatus as claimed in claim 48, wherein the payment card information is credit card information regarding a credit card.

50. An apparatus as claimed in claim 48, wherein the payment card information is debit card information regarding a debit card.

51. An apparatus as claimed in claim 47, wherein the online transaction is an online payment using electronic check information regarding an electronic check, and wherein the message is generated by a network element associated with a financial entity that issued the electronic check.

52. An apparatus as claimed in claim 47, wherein the online transaction is an online payment using digital cash information regarding a set of at least one digital cash certificate, and wherein the message is generated by a network element associated with a financial entity that issued the set of at least one digital cash certificate.

53. An apparatus as claimed in claim 47, wherein the online transaction is an online fund transfer involving an account, and wherein the message is generated by a network element associated with a financial entity that manages the account.

54. An apparatus as claimed in claim 47, wherein the service point location is expressed as a civic address.

55. An apparatus as claimed in claim 47, wherein the service point location is expressed as a set of geo-coordinates.

56. An apparatus as claimed in claim 47, wherein each of the at least one authorized transaction point location is expressed as a civic address.

57. An apparatus as claimed in claim 47, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

98. The apparatus defined in claim 47, wherein the network address is an IP address.

58. A computer-readable storage medium storing computer-readable instructions for execution by a computer to implement a method comprising:

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the known determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

receiving a message conveying the network address;

consulting a database to obtain the service point location that is associated with the network address; and

using the service point location to perform an action related to validation of an online transaction attempted to be made using end-user equipment to which the network address is assigned, wherein the message is a first message and further conveys at least one authorized transaction point location, and wherein using the service point location to perform an action comprises;

comparing the service point location to each of the at least one authorized transaction point location; and

generating and transmitting a second message indicative of whether the service point location corresponds to one of the at least one authorized transaction point location.

99. The computer-readable storage medium defined in claim 58, wherein the network address is an IP address.

59. A method comprising:

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

receiving at a computer apparatus a message conveying;

the network address assigned to the end-user equipment used in the attempt to make the online transaction; and

transaction object information provided via the end-user equipment;

at the computer apparatus, consulting the location information database to obtain the service point location associated with the network address;

at the computer apparatus, consulting a second database to obtain at least one authorized transaction point location associated with the transaction object information; and

at the computer apparatus, verifying whether one of the at least one authorized transaction point location corresponds to the service point location.

60. A method as claimed in claim 59, Wherein the message is a first message, and wherein said verifying comprises:

transmitting a second message to request the service point location, the second message conveying the network address;

receiving a third message conveying the service point location; and

comparing the service point location to each of the at least one authorized transaction point location.

61. A method as claimed in claim 60, comprising handling the online transaction in a first manner if the service point location does not correspond to one of the at least one authorized transaction point location.

62. A method as claimed in claim 61, comprising handling the online transaction in a second manner different from the first manner if the service point location corresponds to one of the at least one authorized transaction point location.

63. A method as claimed in claim 59, wherein the message is a first message, and wherein said verifying comprises:

transmitting a second message conveying the network address and the at least one authorized transaction point location;

receiving a third message transmitted in response to the second message and indicating whether the service point location corresponds to one of the at least one authorized transaction point location; and

determining whether the service point location corresponds to one of the at least one authorized transaction point location based on the third message.

64. A method as claimed in claim 63, comprising handling the online transaction in a first manner if the service point location does not correspond to one of the at least one authorized transaction point location.

65. A method as claimed in claim 64, comprising handling the online transaction in a second manner different from the first manner if the service point location corresponds to one of the at least one authorized transaction point location.

66. A method as claimed in claim 59, wherein the transaction object information comprises payment card information regarding a payment card.

67. A method as claimed in claim 66, wherein the payment card information is credit card information regarding a credit card.

68. A method as claimed in claim 66, wherein the payment card information is debit card information regarding a debit card.

69. A method as claimed in claim 59, wherein the transaction object information comprises electronic check information regarding an electronic check.

70. A method as claimed in claim 59, wherein the transaction object information comprises digital cash information regarding a set of at least one digital cash certificate.

71. A method as claimed in claim 59, wherein the transaction object information comprises account information regarding an account.

72. A method as claimed in claim 59, wherein the service point location is expressed as a civic address.

73. A method as claimed in claim 59, wherein the service point location is expressed as a set of geo-coordinates.

74. A method as claimed in claim 59, wherein each of the at least one authorized transaction point location is expressed as a civic address.

75. A method as claimed in claim 59, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

100. The method defined in claim 59, wherein the network address is an IP address.

76. An apparatus comprising:

an interface for receiving a message conveying;

a network address assigned to end-user equipment used in an attempt to make an online transaction; and

transaction object information provided via the end-user equipment; and

a processing unit coupled to said interface, said processing unit being operative for;

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

consulting the location information database to obtain the service point location associated with the network address;

consulting a second database to obtain at least one authorized transaction point location associated with the transaction object information; and

verifying whether one of the at least one authorized transaction point location corresponds to the service point location.

77. An apparatus as claimed in claim 76, wherein the message is a first message, and wherein said verifying comprises:

transmitting via said interface a second message to request the service point location, the second message conveying the network address, said interface being adapted for receiving a third message conveying the service point location; and

comparing the service point location to each of the at least one authorized transaction point location.

78. An apparatus as claimed in claim 77, said processing unit being operative for handling the online transaction in a first manner if the service point location does not correspond to one of the at least one authorized transaction point location.

79. An apparatus as claimed in claim 78, said processing unit being operative for handling the online transaction in a second manner different from the first manner if the service point location corresponds to one of the at least one authorized transaction point location.

80. An apparatus as claimed in claim 76, wherein the message is a first message, and wherein said verifying comprises:

transmitting via said interface a second message conveying the network address and the at least one authorized transaction point location, said interface being adapted for receiving a third message transmitted in response to the second message and indicating whether the service point location corresponds to one of the at least one authorized transaction point location; and

determining whether the service point location corresponds to one of the at least one authorized transaction point location based on the third message.

81. An apparatus as claimed in claim 80, said processing unit being operative for handling the online transaction in a first manner if the service point location does not correspond to one of the at least one authorized transaction point location.

82. An apparatus as claimed in claim 81, said processing unit being operative for handling the online transaction in a second manner different from the first manner if the service point location corresponds to one of the at least one authorized transaction point location.

83. An apparatus as claimed in claim 76, wherein the transaction object information comprises payment card information regarding a payment card.

84. An apparatus as claimed in claim 83, wherein the payment card information is credit card information regarding a credit card.

85. An apparatus as claimed in claim 83, wherein the payment card information is debit card information regarding a debit card.

86. An apparatus as claimed in claim 76, wherein the transaction object information comprises electronic check information regarding an electronic check.

87. An apparatus as claimed in claim 76, wherein the transaction object information comprises digital cash information regarding a set of at least one digital cash certificate.

88. An apparatus as claimed in claim 76, wherein the transaction object information comprises account information regarding an account.

89. An apparatus as claimed in claim 76, wherein the service point location is expressed as a civic address.

90. An apparatus as claimed in claim 76, wherein the service point location is expressed as a set of geo-coordinates.

91. An apparatus as claimed in claim 76, wherein each of the at least one authorized transaction point location is expressed as a civic address.

92. An apparatus as claimed in claim 76, wherein each of the at least one authorized transaction point location is expressed as a set of geo-coordinates.

101. The apparatus defined in claim 76, wherein the network address is an IP address.

93. A computer-readable storage medium storing computer-readable instructions for execution by a computer to implement a method comprising:

maintaining a location information database by;

maintaining a mapping between service point locations and ports of a network access multiplexer, each service point location having network access provided by a physical link connected to a respective port of the network access multiplexer;

assigning an IP address to end-user equipment connected to a port of the network access multiplexor;

providing the assigned IP address to the end-user equipment over the physical link;

determining the service point location associated with the port connected to the end-user equipment using the mapping between service point locations and ports; and

storing the assigned IP address in association with the determined service point location; and

processing a network address of end-user equipment connected to a network and used in an attempt to make an online transaction in support of validating an online transaction comprising;

receiving a message conveying;

the network address assigned to the end-user equipment used in the attempt to make the online transaction; and

transaction object information provided via the end-user equipment;

consulting the location information database to obtain the service point location associated with the network address;

consulting a second database to obtain at least one authorized transaction point location associated with the transaction object information; and

verifying whether one of the at least one authorized transaction point location corresponds to the service point location.

102. The computer-readable storage medium defined in claim 93, wherein the network address is an IP address.