Method and system for validating transactions
A method for facilitating the detection of misuse of an identity during an electronic transaction comprises the step of receiving a notification to authenticate the use of an identity at a first location, wherein the identity is associated with a mobile phone; determining an approximate location of the mobile phone, and determining whether the first location and mobile phone locations match in geographical proximity. The approximate location of the mobile phone is determined based on cached position information. The invention provides a method for ensuring that the cached position information is up to date, by overwriting stale information with new position information derived by accessing a database that correlates Wi-Fi signals detected by the mobile phone with a geographic location.
1. A method for authentication of an electronic transaction, comprising the steps of:
A. obtaining a cached location stored on the mobile phone, the cached location being associated with a cached location time stamp;
B. determining if the cached location is stale;
C. if the cached location is stale, obtaining from the mobile phone a current location of the mobile phone, the current location being associated with a current location time stamp, and using the current location as the location of the mobile phone; otherwise
D. if the cached location is not stale, then using the cached location as the location of the user's mobile phone;
E. calculating an elapsed time between the time stamp of the cached location or the current location and a time stamp associated with the transaction;
F. determining a distance between the cached location or the current location and the transaction location; and
G. calculating a speed required to travel the distance between the cached location or the current location and the transaction location in the elapsed time;
H. validating the transaction if the speed required to travel the distance between the cached location or the current location and the transaction location is less than a predetermined value; otherwise
I. declining to validate the transaction.
2. The method of claim 1 , further comprising the step of generating an alert if the speed required to travel the distance between the cached location or the current location and the location of the transaction is greater than the predetermined value.
3. The method of claim 1 , wherein the cached location is updated via an Inertial Navigation System.
4. The method of claim 1 , further comprising the step of verifying the user's identity prior to obtaining the current location of the mobile phone.
5. The method of claim 1 , wherein the current mobile phone location or the cached location is identified by detection, via the user's mobile phone, of a Wi-Fi Unique ID that is matched with a known position.
6. A method for validating an electronic transaction, comprising:
A. receiving a transaction time stamp associated with an electronic transaction performed by the user at a transaction location;
B. obtaining from the mobile phone a second location of the mobile phone, wherein the second location is associated with a second time stamp;
C. determining a distance between the transaction location and the second location of the mobile phone;
D. determining an elapsed time between the time stamp of the second location and the transaction time stamp; and
E. calculating the speed required to travel the distance between the transaction location and the or second location of the mobile phone in the elapsed time.
7. The method of claim 6 , further comprising the step of:
F. generating an alert if the speed required to travel between the transaction location and the second location is more than a predetermined value.
8. The method of claim 6 , further comprising the step of receiving a third location, wherein the third location is the mobile phone location determined by GPS or triangulation.
9. The method of claim 8 , wherein the third location is obtained by a mobile phone carrier of the mobile phone.
10. The method of claim 6 , further comprising the step of storing the second location on the mobile phone.
11. The method of claim 6 , further comprising the step of verifying the user's identity prior to obtaining the second location.
12. The method of claim 6 , further comprising the step of:
F. validating the transaction if the speed required to travel between the transaction location and the second location is less than a predetermined value; otherwise
G. declining to validate the transaction.
13. A method for validating an electronic transaction, comprising:
A. associating a user identity with a mobile phone;
B. receiving a notification to authenticate the user of the identity at a first location;
C. obtaining from the mobile phone a second location;
D. obtaining a first time stamp for the first location and a second time stamp for the second location;
E. calculating a speed required to move from the first location to the second location in the time elapsed between the first time stamp and the second time stamp;
F. generating an alert if the speed is above a value; and
G. communicating the alert to a predetermined device.
14. The method of claim 13 , further comprising the steps of:
H. obtaining a cached location stored on the mobile phone;
I. determining if the cached location is stale; and
J. if the cached location is stale, obtaining from the mobile phone a second location of the mobile phone, the second location being identified by detection, via the user's mobile phone, of a Wi-Fi Unique ID that is matched with a known position.
15. The method of claim 13 , further comprising the step of:
H. if the speed required to travel between the transaction location and the or second location is less than a predetermined value, validating the transaction;
wherein the second location is stored on the mobile phone.
16. The method of claim 13 , wherein the second location is a cached location of the mobile phone and said cached location is stored on the mobile phone.
17. The method of claim 13 , wherein the second location is updated location of the mobile phone and wherein the second location is identified by detection, via the mobile phone, of a Wi-Fi Unique ID that is matched with a known position.
18. The method of claim 13 , wherein the value in step F is a predetermined value and wherein the second location is identified by detection, via the mobile phone, of a Wi-Fi Unique ID that is matched with a known position.
19. A method for validating an electronic transaction, comprising
A. receiving a first location of a mobile phone, wherein said first location has a first time stamp;
B. obtaining from the mobile phone a second location of the mobile phone, wherein the second location is a transaction location and has a second time stamp;
C. calculating speed to travel the distance between the first and the second locations based on the time difference between the first and second time stamps;
D. checking if the calculated speed is more than a predetermined speed value; and
E. generating an alert if the speed is above the predetermined value.
20. The method of claim 19 , further comprising the step of: determining that a cached location stored on the mobile phone is stale, the cached location being associated with a cached location time stamp.
21. The method of claim 19 , wherein the second location is a fresh location of the mobile phone.
22. The method of claim 21 , further comprising the step of:
F. if the speed required to travel between the first location and the second location is less than a predetermined value, validating the transaction.
23. The method of claim 21 , further comprising the step of:
F. if the speed required to travel between the first location and the second location is more than a predetermined value, declining the transaction.
24. The method of claim 21 , wherein the fresh location is updated via at least one method selected from the group consisting of GPS, antenna triangulation, WiFi, and Inertial Navigation System.
25. The method of claim 19 , further comprising the steps of:
F. requesting, via the user's mobile phone, the user's authorization to obtain the location of the mobile phone; and
G. receiving, via the mobile phone, the user's authorization.
26. The method of claim 19 , further comprising the step of receiving a third location of the mobile phone, wherein the third location is determined by GPS or triangulation and wherein the third location is obtained by a mobile phone carrier of the mobile phone.
27. The method of claim 19 , further comprising the steps of:
F. determining if the second location time stamp is stale;
G. if the second location time stamp is stale, obtaining from the mobile phone a current location of the mobile phone, the current location being associated with a current time stamp.
28. The method of claim 23 , further comprising the step of storing the second location on a remote position database or on the mobile phone.