Contextual and time sensitive out of band transactional signing
Provided is contextual and time sensitive out-of-band transactional signing. The transactional signing includes providing a token code in response to a request to initiate a transaction within a secure network. The request is received over a first channel and the token code is provided over a second channel. The first channel and the second channel are different channels. The transactional signing also includes evaluating a received context, wherein the context is appended to the token code. In addition, the transactional signing includes selectively allowing the transaction based on the context appended to the token code.
1. A system, comprising:
a processor coupled to a memory that stores instructions that when executed by the processor cause the processor to:
receive a request to perform a transaction over a first communication channel;
generate a token associated with the transaction;
append the token with context, wherein the appending integrates the context into the token;
initiate transmission of the integrated token over a second communication channel different than the first communication channel;
receive the integrated token with appended context over the second communication channel;
determine an authorization response for the transaction based on the integrated token and comparison of the appended context to an expected context; and
initiate transmission of the authorization response over the first communication channel in response to the request to perform the transaction.
2. The system of claim 1 , wherein the transaction is a non-monetary transaction.
3. The system of claim 1 , wherein the context pertains to one or more details of the transaction comprising at least one of transaction type, beneficiary, or amount.
4. The system of claim 1 , wherein the context comprises a geographic or network location.
5. The system of claim 1 , wherein the context comprises a behavior pattern.
6. The system of claim 1 , further comprising instructions that cause the processor to:
generate one or more questions regarding details of the transaction; and
initiate transmission of the one or more questions with the integrated token over the second communication channel, wherein the one or more questions have been appended and integrated into the token.
7. The system of claim 6 , wherein receive the appended context comprises receive a response to the one or more questions, and wherein the response has been appended and integrated into the token.
8. The system of claim 1 , further comprising instructions that cause the processor to:
compare elapsed time between integrated token transmission time and integrated token receipt to a predetermined time limit; and
deny authorization when the elapsed time exceeds the predetermined time limit.
9. The system of claim 1 , the transaction comprises an online banking application transaction.
10. A method, comprising:
executing, by a processor, instructions that cause the processor to perform operations comprising:
receiving a request to perform a transaction over a first communication channel;
generating a token associated with the transaction;
appending the token with context, wherein the appending integrates the context into the token;
initiating transmission of the integrated token over a second communication channel different than the first communication channel;
receiving the integrated token with appended context over the second communication channel;
determining an authorization response for the transaction based on the integrated token and comparison of the appended context to an expected context; and
initiating transmission of the authorization response over the first communication channel in response to the request to perform the transaction.
11. The method of claim 10 , wherein receiving the request to perform a transaction comprising receiving a request to perform a non-monetary transaction.
12. The method of claim 10 , wherein the context comprises one or more details regarding the transaction.
13. The method of claim 10 , wherein the context comprises location data.
14. The method of claim 10 , the operations further comprising:
generating one or more questions regarding details of the transaction; and
initiating transmission of the one or more questions with the integrated token over the second communication channel, wherein the one or more questions have been appended and integrated into the token.
15. The method of claim 10 , the operations further comprising:
comparing an elapsed time between integrated token transmission time and integrated token receipt to a predetermined time limit; and
denying authorization when the elapsed time exceeds the predetermined time limit.
16. A method, comprising:
executing, by a processor, instructions that cause the processor to perform operations comprising:
receiving a request for context, wherein the request comprises a token related to a requested transaction on a secure site;
acquiring context associated with the requested transaction;
appending the token with the context, wherein the appending integrates the context into the token; and
returning the integrated token with the context in response to the requested transaction.
17. The method of claim 16 , wherein acquiring the context comprises receiving answers to one or more questions regarding the requested transaction.
18. The method of claim 16 , wherein acquiring the context comprises determining one of a geographic or network location.
19. The method of claim 16 , wherein acquiring the context comprises determining a transactional behavior pattern of a user.
20. The method of claim 16 , further comprising acquiring the context automatically without user intervention.