ONLINE TRANSACTION VALIDATION USING A LOCATION OBJECT

• US 20100235279A1
• Filed: 12/05/2007
• Published: 09/16/2010
• Est. Priority Date: 06/04/2007
• Status: Abandoned Application

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Francois, Stéphane Maxime, Bouchard, Jean
• Application Number:
  US12/162,297
• Publication Number:
  US 20100235279A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/0251 Targeted advertisements
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0254 based on statistics
• CPC Class Codes: G06Q 30/0255 based on user history
• CPC Class Codes: G06Q 30/0264 based upon schedule
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

A method that comprises obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and validating an online transaction attempted using the end user equipment, based at least in part on the location object so obtained. The method may further comprise obtaining transaction object information provided via the end user equipment; and obtaining information to assist in validating online transactions attempted using the transaction object information. The validating of the online transaction may comprise comparing a location specified by the location object to the information to assist in validating online transactions attempted using the transaction object information and taking a validation action based on a result of the comparing.

Claims

1. A method, comprising:

obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and

validating an online transaction attempted using the end user equipment, based at least in part on the location object.

2. The method defined in claim 1, further comprising:

obtaining transaction object information provided via the end user equipment; and

obtaining information to assist in validating online transactions attempted using the transaction object information;

wherein validating the online transaction comprises;

comparing a location specified by the location object to the information to assist in validating online transactions attempted using the transaction object information; and

taking a validation action based on a result of said comparing.

3. The method defined in claim 2, wherein the information to assist in validating online transactions attempted using the transaction object information includes at least one authorized transaction point location, and wherein the validation action comprises handling the online transaction in a first manner if the location specified by the location object corresponds to at least one of the at least one authorized transaction point location.

4. The method defined in claim 3, wherein the validation action comprises handling the online transaction in a second manner different from the first manner if the location specified by the location object does not correspond to any of the at least one authorized transaction point location.

5. The method defined in claim 4, wherein handling the online transaction in the second manner comprises denying the online transaction.

6. The method defined in claim 2, wherein the information to assist in validating online transactions attempted using the transaction object information includes at least one unauthorized transaction point location, and wherein the validation action comprises handling the online transaction in a first manner if the location specified by the location object corresponds to at least one of the at least one unauthorized transaction point location.

7. The method defined in claim 6, wherein the validation action comprises handling the online transaction in a second manner different from the first manner if the location specified by the location object does not correspond to any of the at least one unauthorized transaction point location.

8. The method defined in claim 2, wherein obtaining the information to assist in validating online transactions attempted using the transaction object information comprises consulting a database on a basis of the transaction object information.

9. The method defined in claim 2, wherein obtaining the information to assist in validating online transactions attempted using the transaction object information comprises receiving a message conveying the information to assist in validating online transactions attempted using the transaction object information.

10. The method defined in claim 2, wherein the transaction object information comprises at least one of:

payment card information regarding a payment card;

electronic check information regarding an electronic check;

digital cash information regarding a set of at least one digital cash certificate; and

account information regarding an account.

11. The method defined in claim 1, wherein the location object specifies a service point location associated with the end user equipment.

12. The method defined in claim 11, wherein the service point location is expressed as a civic address.

13. The method defined in claim 11, wherein the service point location is expressed as a set of geo-coordinates.

14. The method defined in claim 1, wherein the location object specifies a current position of the end user equipment.

15. The method defined in claim 1, executed by a transaction validation entity.

16. The method defined in claim 1, further comprising transmitting to the end user equipment a location request message, wherein said obtaining comprises receiving a message containing the location object transmitted in response to receipt by the end user equipment of said location request message.

17. The method defined in claim 1, wherein said obtaining further comprises:

receiving encrypted data from the end user equipment; and

decrypting the encrypted data using a key provided by the service provider to obtain the location object.

18. A computer-readable medium storing a program element for execution by a computer, said program element comprising:

first program code for causing the computer to obtain from end user equipment a location object caused to be stored on the end user equipment by a service provider; and

second program code for causing the computer to validate an online transaction attempted using the end user equipment, based at least in part on the location object.

19. An apparatus, comprising:

an interface for communication with end user equipment over a network; and

a processing unit coupled to said interface, said processing unit being configured to;

obtain from the end user equipment via said interface a location object caused to be stored on the end user equipment by a service provider; and

validate an online transaction attempted using the end user equipment, based at least in part on the location object.

20. An apparatus, comprising:

means for obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and

means for validating an online transaction attempted using the end user equipment based on the location object.

21. A method for execution by end user equipment connected to a network, said method comprising:

storing in a memory a location object provided by a service provider; and

sending the location object to a server over the network for validation of an online transaction attempted using the end user equipment.

22. The method defined in claim 21, wherein the location object specifies a service point location associated with the end user equipment.

23. The method defined in claim 21, further comprising receiving from the server a result of the validation of the online transaction based at least in part on the location object.

24. The method defined in claim 21, wherein the location object is formatted in conformity with (i) a Presence Information Document Format—

Location Object (ii) Geographic Markup Language;

or (iii) a revised, updated or equivalent of the foregoing.

25. The method defined in claim 21, further comprising sending transaction object information when the online transaction is attempted.

26. The method defined in claim 21, wherein sending the location object is performed in response to receipt of a location request message from the server.

27. The method defined in claim 26, further comprising receiving the location request message from the server consequent to the online transaction being attempted.

28. The method defined in claim 27, further comprising effecting a determination of whether the server is authorized to request the location object, wherein said sending the location object is effected only if said determination is positive.

29. The method defined in claim 21, wherein sending the location object is performed prior to the online transaction being attempted.

30. The method defined in claim 21, further comprising receiving the location object over the network and implementing a security feature that prevents the location object from being altered between said receiving and said sending of the location object.