CARD-PRESENT SECURITY SYSTEM

• US 20120023022A1
• Filed: 03/22/2010
• Published: 01/26/2012
• Est. Priority Date: 03/20/2009
• Status: Abandoned Application

• Current Assignee: ValidSoft UK Limited (Pareteum Corp.)
• Original Assignee: ValidSoft UK Limited (Pareteum Corp.)
• Inventors: Petersen, John, Alford, Jonathan, Carroll, Pat
• Application Number:
  US13/138,694
• Publication Number:
  US 20120023022A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A method, system and apparatus for authenticating the validity of a transaction. The method includes the steps of receiving data identifying a means for carrying out the financial transaction; receiving data identifying a mobile network segment for routing communications via a mobile communication device associated with a user requesting the transaction; comparing the mobile network segment data and the data identifying the means for carrying out the transaction with a database of correlated data identifying one or more means for carrying out a transaction associated with further data identifying one or more mobile network segments; and authenticating the transaction in dependence on the result of the comparison.

Claims

1. A method for authenticating a transaction comprising the steps of:

receiving data identifying a means for carrying out the transaction;

receiving data identifying a mobile network segment for routing communications via a mobile communication device associated with a user requesting the transaction;

comparing the mobile network segment data and the data identifying the means for carrying out the transaction with a database of correlated data identifying one or more means for carrying out a transaction associated with further data identifying one or more mobile network segments; and

authenticating the transaction in dependence on the result of the comparison.

2. A method according to claim 1 in which the database of correlated data further comprises data representing the number of previously authenticated transactions requested at each of the one or more means for carrying out the transaction.

3. A method according to claim 2 in which the data identifying each means for carrying out the transaction is further associated with the data identifying the number of previously authenticated transactions performed by the means for carrying out the transaction.

4. A method according to claim 2 further comprising the step of determining the number of previously authenticated transactions performed by the means for carrying out the transaction.

5. A method according to claim 4 in which the step of determining the number of previously authenticated transactions is performed by searching the correlated data, using the received data identifying the means for carrying out the transaction, for the number of previously authenticated transactions associated with the data identifying the means for carrying out the transaction.

6. A method according to claim 5 in which the number of previously authenticated transaction is determined as the number of transactions which are associated with the data identifying the means for carrying out the transaction which corresponds to the received data identifying the means for carrying out the transaction.

7. A method according to claim 2 in which the transaction is only determined to be authentic if the number of previously authenticated transactions is greater than a predetermined value.

8. A method according to claim 2 further comprising the step of updating the data identifying the number of previously authenticated transactions performed by the means for carrying out the transaction.

9. A method according to claim 8 in which the updating step is only performed if the transaction has been determined to be authentic.

10. A method according to claim 1 in which the data identifying the number of previously authenticated transactions is numeric data.

11. A method according to claim 10 in which the step of updating the data comprises incrementing by one integer the data identifying the number of transactions previously authenticated at the means for carrying out the transaction.

12. A method according to claim 1 in which the received data consists of the data identifying a means for carrying out a transaction and the data identifying a mobile network segment associated with the user requesting the transaction.

13. A method according to claim 1 further comprising the step of searching the database of correlated data using the received data identifying the mobile network segment or the received data identifying the means for carrying out the transaction.

14. A method according to claim 1 in which the transaction is determined to be authentic if the database of correlated data comprises data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction.

15. A method according to claim 1 further comprising the step of adding newly correlated data to the database of correlated data.

16. A method according to claim 15 in which the newly correlated data comprises data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction.

17. A method according to claim 15 wherein the step of adding newly correlated data is only performed if it is determined that the database of correlated data does not comprise data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction.

18. A method according to claim 1 in which the mobile network segment data is received from a mobile network aggregator storing mobile network segment data of a plurality of mobile devices, the devices preferably registered with different mobile service providers.

19. A method according to claim 1 further comprising the step of receiving data identifying a user account of a user requesting the transaction.

20. A method according to claim 19 further comprising the step of searching a second database of correlated data comprising data identifying a user account associated with data identifying the mobile communication device associated with the user account.

21. A method according to claim 20 in which the searching step is performed by searching the second database using the received data identifying a user account, in particular a user account number.

22. A method according to claim 21 in which the data identifying a mobile communication device of a user requesting the transaction is determined to be the data which is associated with the data identifying a user account which corresponds to the received data identifying the user account of the user requesting the transaction.

23. A method according to claim 1 further comprising the step of searching a third database of correlated data comprising data identifying a mobile communication device which is associated with data identifying a mobile network segment for routing communications via a mobile communication device.

24. A method according to claim 23 in which the data identifying a mobile network segment for routing communications via the mobile communication device associated with a user requesting the transaction is determined to be the data which is associated with the data identifying the mobile communication device which corresponds to the determined data identifying the mobile communication device.

25. A method according to claim 1 further comprising the step of searching a database of Location Register data for data which is associated with data identifying the mobile communication device associated with the user requesting the transaction.

26. A method according to claim 1 further comprising the step of searching a database of Location Register data for the mobile network segment identifier data which is associated with a field.

27. A method according to claim 1 wherein the database of correlated data further comprises data indicative of when a transaction was last requested at each of the means for carrying out the transaction.

28. A method according to claim 27 in which the data identifying each means for carrying out the transaction is further associated with the data indicative of when a transaction was last requested at each of the means for carrying out the transaction.

29. A method according to claim 27 further comprising the step of determining when a transaction was last requested at the means for carrying out the transaction.

30. A method according to claim 29 in which the step of determining when the transaction was last requested at the means for carrying out the transaction is performed by searching the correlated data, using the received data identifying the means for carrying out the transaction, for the data indicative of when a transaction was last requested which is associated with the data identifying the means for carrying out the transaction.

31. A method according to claim 30 in which the data indicative of when a transaction was last requested is determined as the data which is associated with the data identifying the means for carrying out the transaction which corresponds to the received data identifying the means for carrying out the transaction.

32. A method according to claim 27 further comprising the step of determining the period of time which has elapsed between the transaction being requested and the transaction previously requested at the means for carrying out the transaction.

33. A method according to claim 32 in which the transaction is only determined to be authentic if the determined period of time is less than a predetermined period of time.

65. A computer readable medium for storing code or a computer program which when executed performs the method of claim 1.

34. Apparatus for authenticating a transaction comprising:

means for receiving data identifying a means for carrying out the financial transaction;

means for receiving data identifying a mobile network segment for routing communications via a mobile communication device associated with a user requesting the transaction;

means for comparing the network segment data and the data identifying the means for carrying out the transaction with a database of correlated data identifying one or more means for carrying out a transaction associated with further data identifying one or more mobile network segments; and

means for determining the authenticity of the transaction dependence on the result of the comparison.

35. Apparatus according to claim 34 in which the database of correlated data further comprises data identifying the number of previously authenticated transactions requested at each of the one or more means for carrying out the transaction.

36. Apparatus according to claim 35 in which the data identifying each means for carrying out the transaction is further associated with the data identifying the number of previously authenticated transactions performed by the means for carrying out the transaction.

37. Apparatus according to claim 35 further comprising means for determining the number of previously authenticated transactions performed by the means for carrying out the transaction.

38. Apparatus according to claim 37 in which the means for determining the number of previously authenticated transactions searches the correlated data, using the received data identifying the means for carrying out the transaction, for the number of previously authenticated transactions associated with the data identifying the means for carrying out the transaction.

39. Apparatus according to claim 38 in which the number of previously authenticated transaction is determined as the number of transactions which are associated with the data identifying the means for carrying out the transaction which corresponds to the received data identifying the means for carrying out the transaction.

40. Apparatus according to claim 34 in which the transaction is only determined to be authentic if the number of previously authenticated transactions is greater than a predetermined value.

41. Apparatus according to claim 35 further comprising means for updating the data identifying the number of previously authenticated transactions performed by the means for carrying out the transaction.

42. Apparatus according to claim 41 in which the updating means only updates the data identifying the number of previously authenticated transactions if the transaction is determined to be authentic.

43. Apparatus according to claim 35 in which the data identifying the number of previously authenticated transactions is numeric data.

44. Apparatus according to claim 41 in which the updating means updates by one integer the data identifying the number of transactions previously authenticated at the means for carrying out the transaction.

45. Apparatus according to claim 34 in which the received data consists of the data identifying a means for carrying out a transaction and the data identifying a mobile network segment associated with the user requesting the transaction.

46. Apparatus according to claim 34 in which the data comparison means searches the database of correlated data using the received data identifying the mobile network segment or the received data identifying the means for carrying out the transaction.

47. Apparatus according to claim 34 in which the transaction is determined to be authentic if the comparison means determines that database of correlated data comprises data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction.

48. Apparatus according to claim 34 further comprising means for adding newly correlated data to the database of correlated data.

49. Apparatus according to claim 48 in which the newly correlated data comprises data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction.

50. Apparatus according to claim 48 wherein the means for adding newly correlated data only adds newly correlated data if it is determined that the database of correlated data does not comprise data corresponding to the received data identifying the means for carrying out the transaction associated with data corresponding to the received data identifying the mobile network segment for routing communications via the mobile communication device associated with a user requesting the transaction.

51. Apparatus according to claim 34 further comprising a mobile network aggregator storing mobile network segment data of a plurality of mobile devices registered with different mobile service providers.

52. Apparatus according to claim 51 wherein the apparatus is arranged to receive the mobile network segment data from the mobile network aggregator.

53. Apparatus according to claim 34 further comprising means for searching a database of Location Register data for data which is associated with data identifying the mobile communication device associated with the user requesting the transaction.

54. Apparatus according to claim 34 further comprising means for searching a database of Location Register data for the mobile network segment identifier data which is associated with a field.

55. Apparatus according to claim 34 in which the database of correlated data further comprises data indicative of when a transaction was last requested at each of the means for carrying out the transaction.

56. Apparatus according to claim 34 in which the data identifying each means for carrying out the transaction is further associated with the data indicative of when a transaction was last requested at each of the means for carrying out the transaction.

57. Apparatus according to claim 34 further comprising means for determining when a transaction was last requested at the means for carrying out the transaction.

58. Apparatus according to claim 34 in which the step of determining when a transaction was last requested at the means for carrying out the transaction is performed by searching the correlated data, using the received data identifying the means for carrying out the transaction, for the data indicative of when a transaction was last requested which is associated with the data identifying the means for carrying out the transaction.

59. Apparatus according to claim 34 in which the data indicative of when a transaction was last requested is determined as the data which is associated with the data identifying the means for carrying out the transaction which corresponds to the received data identifying the means for carrying out the transaction.

60. Apparatus according to claim 34 further comprising means for determining the period of time which has elapsed between the transaction being requested and the transaction previously requested at the means for carrying out the transaction.

61. Apparatus according to claim 34 in which the transaction is only determined to be authentic if the determined period of time is less than a predetermined period of time.

67. A security system or security device comprising the apparatus of claim 34.

62. A system for carrying out a transaction comprising:

means for carrying out the transaction;

a server for storing a database of correlated data identifying one or more means for carrying out a or the transaction associated with further data identifying one or more mobile network segments for routing communications via a mobile communication device associated with a user requesting the transaction, the server being arranged to receive data identifying the means for carrying out the transaction and to receive data identifying a mobile network segment for routing communications via the mobile communication device associated with the user requesting the transaction;

wherein the server compares the network segment data and the data identifying the means for carrying out the transaction with the database of correlated data and allows the transaction in dependence on the result of the comparison.

63. A system according to claim 62 further comprising a mobile communication device associated with the user requesting the transaction.

64. A system according to claim 62 in which the transaction is allowed if the transaction is determined to be authentic or declined if the transaction is determined not to be authentic.

66. A security system or security device comprising the system of claim 62.