GUARDIAN CONTROL OVER ELECTRONIC ACTIONS

• US 20140223520A1
• Filed: 04/10/2014
• Published: 08/07/2014
• Est. Priority Date: 08/30/2011
• Status: Abandoned Application

• Current Assignee: Securepush Limited
• Original Assignee: Securepush Limited
• Inventors: GAFNI, Guy
• Application Number:
  US14/249,683
• Publication Number:
  US 20140223520A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A method for guardian control over an electronic action includes registering one or more guardians and at least one mobile communication device associated with each guardian with an authorization module hosted on an authorization server. Each mobile communication device is identified by a unique hardware identification number. An authentication request for a supervised client that is attempting to perform the electronic action at a site is received by the authorization server from a site. A confirmation request is sent from the authorization server to the mobile communication device requesting the guardian to confirm the action. The action is authorized upon receiving confirmation from the mobile communication device.

Claims

1. A method for guardian control over an electronic action, the method comprising:

registering one or more guardians and at least one mobile communication device associated with each guardian with an authorization module hosted on an authorization server, each of said at least one mobile communication device being identified by a unique hardware identification number;

receiving by the authorization server an authentication request from a site with regard to a supervised client that is attempting to perform the electronic action at the site;

sending a confirmation request from the authorization server to said at least one mobile communication device requesting each guardian of said one or more guardians to confirm the action; and

authorizing the action upon receiving confirmation from at least one device of said at least one mobile communication device that is associated with each said one or more guardians.

3. The method of claim 1, comprising installing a dedicated application in said at least one mobile communication device.

4. The method of claim 1, wherein said at least one mobile communication device comprises a cellular telephone.

5. The method of claim 4, wherein the cellular telephone comprises a smartphone.

6. The method of claim 1, further comprising determining a location of said at least one mobile communication device and verifying that the location is within one or more predetermined zones.

7. The method of claim 6, wherein said one or more predetermined zones include a zone within which the guardian with which that mobile communication device is associated is expected to be.

8. The method of claim 1, wherein requesting each guardian to confirm the action or authorizing the action is subjected to a time limit.

9. The method of claim 1, wherein the electronic action comprises a purchase.

10. The method of claim 1, wherein the site comprises a website that is accessed by a local station.

11. The method of claim 1, wherein the site comprises a point of sale.

12. The method of claim 1, further comprising registering at least one client mobile device associated with the supervised client, each of said at least one client mobile device being identified by a unique hardware identification number;

and

sending a verification request from the authorization server to said at least one client mobile device;

wherein authorizing the action is further conditioned upon receiving verification at least one device of said at least one client mobile device.

13. The method of claim 12, wherein the verification request comprises requesting a geographic location of said at least one client mobile device.

14. The method of claim 13, further comprising comparing the geographic location with a location from which the electronic action was attempted.

2. The method of 1, comprising registering the site with the authorization module.