System and method for providing transaction verification
A transaction verification process performed by a transaction network operator in communication with a client computing device and a third party provider. A computing device may be equipped with an integrity verification module for verifying the system integrity of the computing device, and a cryptographic module for digitally signing transaction requests. The transaction network operator may verify that transaction requests processed by the third party provider are properly associated with a valid computing device by verifying signatures from the cryptographic module and the integrity verification module. In response to a request from the third party provider, the transaction network operator may verify that the computing device is authorized to complete the transaction by challenging the computing device for proper credentials. The transaction network operator may verify the credentials provided by the client device and indicate to the third party provider that the transaction is valid.
1. A processing system for providing a secure transaction, the processing system comprising:
a memory, coupled to at least one processor, for storing data corresponding to a list of computing devices registered with a processing system; and
the at least one processor being configured to:
receive transaction details from a service provider corresponding to a secure transaction, the secure transaction being associated with a particular computing device;
in response to receiving the transaction details from the service provider, communicate a digital signature request to the particular computing device, the particular computing device being configured to be switched into a secure mode in response to receiving the digital signature request;
receive, from the particular computing device and subsequent to communicating the digital signature request, a digital signature that is associated with the particular computing device, and wherein the particular computing device is configured to only generate the digital signature once the particular computing device is switched to the secure mode in response to receiving the digital signature request, and wherein the digital signature is not sent to the service provider;
determine that the received digital signature is associated with the particular computing device; and
verify the secure transaction in response to determining that the digital signature is associated with the particular computing device in the list of computing devices to validate the transaction.
2. The processing system of claim 1 , wherein the processor is further configured to:
receive a user credential associated with the transaction;
identify the particular computing device from the list of computing devices based on the user credential; and
determine that the digital signature is associated with the particular computing device prior to verifying the transaction.
3. The processing system of claim 1 , wherein the processor is further configured to instruct the particular computing device to reboot into the secure mode.
4. The processing system of claim 1 , wherein the memory further stores a preferred communication channel associated with at least one of the computing devices and wherein the processor is further configured to notify a user of the particular computing device via the preferred communication channel in response to verification of the secure transaction.
5. The processing system of claim 4 , wherein the preferred communication channel comprises at least one of a text message, an e-mail, or a phone call.
6. The processing system of claim 1 , wherein the processor is further configured to generate a user credential in response to registration of the particular computing device with the processing system, and to associate the user credential with the particular computing device.
7. A system for providing a secure transaction, the system comprising:
a memory, coupled to at least one processor, for storing data corresponding to a list of computing devices registered with a processing system; and
the at least one processor being configured to:
receive transaction details from a service provider corresponding to a secure transaction, the secure transaction being associated with a particular computing device;
in response to receiving the transaction details from the service provider, communicate a digital signature request to the particular computing device, the particular computing device being configured to be switched into a secure mode in response to receiving the digital signature request;
generate, at a the particular computing device, a digital signature that is associated with the particular computing device, and wherein the particular computing device is configured to only generate the digital signature once the particular computing device is switched into the secure mode in response to receiving the digital signature request;
receive, from the particular computing device and subsequent to communicating the digital signature request, the digital signature, and wherein the digital signature is not sent to the service provider;
determine that the received digital signature is associated with the particular computing device; and
verify the secure transaction in response to determining that the digital signature is associated with the particular computing device.