Method and system for data communication over network

• US 9,692,769 B2
• Filed: 06/03/2016
• Issued: 06/27/2017
• Est. Priority Date: 11/13/2013
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Huang, Mian
• Primary Examiner(s): SHAIFER HARRIMAN, DANT B
• Application Number:
  US15/173,066
• Publication Number:
  US 20160285889A1
• Time in Patent Office: 389 Days
• Field of Search: 726 4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

Embodiments of the present application relate to a method for data communication, a system for data communication, and a computer program product for data communication. A method for data communication is provided. The method includes identifying one or more first users located within a present range of a location of a second user, comparing an authorization code with one or more exchange codes pre-allocated to the one or more first users, and verifying validity of the authorization code, and in the event that, among the one or more exchange codes of the one or more first users within a definite range of the second user location, an exchange code matching the authorization code of the second user exists, and the authorization code of the second user is determined to be valid, performing a data exchange between the second user and the first user.

Claims

1. A method for data communication over a network, comprising:

identifying two or more first users located within a preset range of a location of a second user based on second user location information and first user location information;

comparing an authorization code in a data request received from the second user with two or more exchange codes pre-allocated to the two or more first users who are located within a preset range of a second user location, and verifying validity of the authorization code; and

in the event that, among the two or more exchange codes of the two or more first users within a definite range of the second user location, more than one exchange code matching the authorization code of the second user exists, and the authorization code of the second user is determined to be valid;

determining whether at least one of the first users has a user id that matches a prestored user id associated with the authorization code; and

performing a data exchange over the network between the second user and the at least one first user determined to have the user ID that matches the prestored user ID.

2. The method as described in claim 1, wherein:

The preset range comprises a preset geographic area range; and

the identifying of the two or more first users located within the preset range of the location of the second user based on the second user location information and the first user location information further comprises;

comparing the first user location information from the two or more first users with the second user location information; and

in the event that a location indicated by the first user location information falls within the preset geographic area range for the location indicated by the second user location information, confirming a first user having the first user location information within the preset geographic area range as a first user within the preset range of the second user location.

3. The method as described in claim 1, further comprising:

ending a data exchange process flow in the event that none of the two or more exchange codes of the two or more first users located within the preset range of the second user location matches the authorization code of the second user or the authorization code of the second user is determined to be invalid.

4. The method as described in claim 1, wherein:

in the event that an exchange code matching the authorization code of the second user exists;

verifying the validity of the authorization code; and

in the event that the authorization code is determined to be invalid, ending a data exchange process flow; and

in the event that an exchange code that matches the authorization code of the second user does not exist;

omitting verifying the validity of the authorization code; and

ending the data exchange process flow.

5. The method as described in claim 1, wherein:

an exchange code represents unique data, has a valid time, and is subject to only one use by a first user bound to the exchange code within the valid time;

or

an exchange code representing unique random data within a certain range, having a valid time, and being subject to only one use by a first user bound to the exchange code within the valid time.

6. The method as described in claim 1, wherein the authorization code in a data exchange request of the second user is created based on an exchange code pre-allocated to the first user.

7. The method as described in claim 1, wherein the verifying of the validity of the authorization code comprises:

comparing an upload time for the authorization code with a cut-off time of the exchange code matched with the authorization code; and

in the event that the upload time of the authorization code is less than or equal to the cut-off time, determining the authorization code to be valid.

8. A system for data communication over a network, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to;

identify two or more first users located within a preset range of a location of a second user based on second user location information and first user location information;

compare an authorization code in a data request received from the second user with two or more exchange codes pre-allocated to the two or more first users who are located within preset range of a second user location, and verify validity of the authorization code; and

in the event that, among the two or more exchange codes of the two or more first users within a definite range of the second user location, more than one exchange code matching the authorization code of the second user exists, and the authorization code of the second user is determined to be valid;

determine whether at least one of the first users has a user id that matches a prestored user id associated with the authorization code; and

perform a data exchange between the second user and the at least one first user determined to have the user ID that matches the prestored user ID.

9. The system as described in claim 8, wherein:

the preset range comprises a preset geographic area range; and

the identifying of the two or more first users located within the preset range of the location of the second user based on the second user location information and the first user location information, further comprises;

compare the first user location information from the two or more first users with the second user location information; and

in the event that a locations indicated by the first user location information falls within the preset geographic area range for the location indicated by the second user location information, confirm the two or more first users having the first user location information within the preset geographic area range as a first user within the preset range of the second user location.

10. The system as described in claim 8, wherein the processor is further configured to:

end the data exchange in the event that none of the more than one exchange codes of the two or more first users located within the preset range of the second user location matches the authorization code of the second user or the authorization code of the second user is determined to be invalid.

11. The system as described in claim 8, wherein:

in the event that an exchange code matching the authorization code of the second user exists;

verify the validity of the authorization code; and

in the event that the authorization code is determined to be invalid, end the data exchange; and

in the event that an exchange code that matches the authorization code of the second user does not exist;

omit verifying the validity of the authorization code; and

end the data exchange.

12. The system as described in claim 8, wherein:

an exchange code represents unique data, has a valid time, and is subject to only one use by a first user bound to the exchange code within the valid time;

or

an exchange code representing unique random data within a preset range, having a valid time, and being subject to only one use by a first user bound to the exchange code within the valid time.

13. The system as described in claim 8, wherein the authorization code in a data exchange request of the second user is created based on an exchange code pre-allocated to the first user.

14. The system as described in claim 8, wherein the verifying of the validity of the authorization code comprises:

compare an upload time for the authorization code with a cut-off time of an exchange code matched with the authorization code; and

in the event that the upload time of the authorization code is less than or equal to the cut-off time, determine the authorization code to be valid.

15. A computer program product for data communication over a network, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

identifying two or more first users located within a preset range of a location of a second user based on second user location information and first user location information;

comparing an authorization code in a data request received from the second user with two or more exchange codes pre-allocated to the two or more first users who are located within preset range of a second user location, and verifying validity of the authorization code; and

in the event that, among the two or more exchange codes of the two or more first users within a definite range of the second user location, more than one exchange code matching the authorization code of the second user exists, and the authorization code of the second user is determined to be valid;

determining whether at least one of the first users has a user id that matches a prestored user id associated with the authorization code; and

performing a data exchange between the second user and the at least one first user determined to have the user ID that matches the prestored user ID.