System and method for authenticating transactions

• US 20060190411A1
• Filed: 02/23/2005
• Published: 08/24/2006
• Est. Priority Date: 02/23/2005
• Status: Active Grant

• Current Assignee: Toshiba Corporation, Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: TOSHIBA CORPORATION AND TOSHIBA TEC KABUSHIKI KAISHA
• Inventors: Gava, Fabio M., Suleiman, Mohammad
• Granted Patent: US 7,584,482 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 17/26 for printing, stamping, franking, typing or teleprinting apparatus ticket printing or the like apparatus G07F17/42
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A system and method for authenticating document processing transactions wherein the transaction is rejected if the user is not within a selected geographical region. A transaction request is first received representing a request for the completion of a selected transaction associated with a selected user. Preauthorized geographic region data, associated with the selected user, is then received indicating from where the associated user is allowed to request transactions. Location data representing the source of the transaction request is then received and tested against the preauthorized geographic region data. The result of this testing determines whether the requested transaction is authorized.

Claims

1. A transaction authentication system comprising:

means adapted for receiving transaction request data representative of a request for completion of a selected transaction associated with a selected user;

means adapted for receiving region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;

means adapted for receiving location data representative of a source geographic region from which the selected transaction is requested;

testing means adapted for testing the region data against the location data; and

means adapted for generating authorization data representative of an output of the test means.

2. The transaction authentication system of claim 1 wherein the transaction request data is received from an associated document processing device.

3. The transaction authentication system of claim 2 wherein the associated document processing device includes a printing device, a copying device, a facsimile device, a scanning device, and a multifunctional peripheral device.

4. The transaction authentication system of claim 2 wherein the transaction request data includes data representative of a requested document processing operation on the associated document processing device.

5. The transaction authentication system of claim 4 wherein the requested document processing operation includes printing, scanning, faxing, copying, and document distribution.

6. The transaction authentication system of claim 4 wherein the transaction request data further includes identification data representative of an identity of the selected user.

7. The transaction authentication system of claim 4 further comprising means adapted for generating interface data so as to prompt input of the location data from a selected user.

8. A transaction authentication method comprising the steps of:

receiving transaction request data representative of a request for completion of a selected transaction associated with a selected user;

receiving region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;

receiving location data representative of a source geographic region from which the selected transaction is requested;

testing the region data against the location data; and

generating authorization data representative of an output of the testing.

9. The transaction authentication method of claim 8 wherein the transaction request data is received from an associated document processing device.

10. The transaction authentication method of claim 9 wherein the associated document processing device includes a printing device, a copying device, a facsimile device, a scanning device, and a multifunctional peripheral device.

11. The transaction authentication method of claim 9 wherein the transaction request data includes data representative of a requested document processing operation on the associated document processing device.

12. The transaction authentication method of claim 11 wherein the requested document processing operation includes printing, scanning, faxing, copying, and document distribution.

13. The transaction authentication method of claim 11 wherein the transaction request data further includes identification data representative of an identity of the selected user.

14. The transaction authentication method of claim 11 further comprising the step of generating interface data so as to prompt input of the location data from a selected user.

15. A computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions comprising:

instructions for receiving transaction request data representative of a request for completion of a selected transaction associated with a selected user;

instructions for receiving region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;

instructions for receiving location data representative of a source geographic region from which the selected transaction is requested;

instructions for testing the region data against the location data; and

instructions for generating authorization data representative of an output of the testing instructions.

16. The computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions of claim 15 wherein the transaction request data is received from an associated document processing device.

17. The computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions of claim 16 wherein the associated document processing device includes a printing device, a copying device, a facsimile device, a scanning device, and a multifunctional peripheral device.

18. The computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions of claim 16 wherein the transaction request data includes data representative of a requested document processing operation on the associated document processing device.

19. The computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions of claim 18 wherein the transaction request data further includes identification data representative of an identity of the selected user.

20. The computer-readable medium of instructions with computer-readable instructions stored thereon for authenticating transactions of claim 18 further comprising instructions for generating interface data so as to prompt input of the location data from the selected user.

21. A computer-implemented method for authentication transactions comprising the steps of:

receiving transaction request data representative of a request for completion of a selected transaction associated with a selected user;

receiving region data representative of a preauthorized geographic region associated with the selected user, from which selected transactions are enabled;

receiving location data representative of a source geographic region from which the selected transaction is requested;

testing the region data against the location data; and

generating authorization data representative of an output of the testing.

22. The computer-implemented method for authentication transactions of claim 21 wherein the transaction request data is received from an associated document processing device.

23. The computer-implemented method for authentication transactions of claim 22 wherein the associated document processing device includes a printing device, a copying device, a facsimile device, a scanning device, and a multifunctional peripheral device.

24. The computer-implemented method for authentication transactions of claim 22 wherein the transaction request data includes data representative of a requested document processing operation on the associated document processing device.

25. The computer-implemented method for authentication transactions of claim 22 wherein the transaction request data further includes identification data representative of an identity of the selected user.

26. The computer-implemented method for authentication transactions of claim 22 further comprising the step of generating interface data so as to prompt input of the location data from the selected user.