Online transaction validation using a location object

Abstract

A method that comprises obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and validating an online transaction attempted using the end user equipment, based at least in part on the location object so obtained. The method may further comprise obtaining transaction object information provided via the end user equipment; and obtaining information to assist in validating online transactions attempted using the transaction object information. The validating of the online transaction may comprise comparing a location specified by the location object to the information to assist in validating online transactions attempted using the transaction object information and taking a validation action based on a result of the comparing.

1 . A method, comprising:
 obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and   validating an online transaction attempted using the end user equipment, based at least in part on the location object.   
     
     
         2 . The method defined in  claim 1 , further comprising:
 obtaining transaction object information provided via the end user equipment; and   obtaining information to assist in validating online transactions attempted using the transaction object information;   
       wherein validating the online transaction comprises:
 comparing a location specified by the location object to the information to assist in validating online transactions attempted using the transaction object information; and 
 taking a validation action based on a result of said comparing. 
 
     
     
         3 . The method defined in  claim 2 , wherein the information to assist in validating online transactions attempted using the transaction object information includes at least one authorized transaction point location, and wherein the validation action comprises handling the online transaction in a first manner if the location specified by the location object corresponds to at least one of the at least one authorized transaction point location. 
     
     
         4 . The method defined in  claim 3 , wherein the validation action comprises handling the online transaction in a second manner different from the first manner if the location specified by the location object does not correspond to any of the at least one authorized transaction point location. 
     
     
         5 . The method defined in  claim 4 , wherein handling the online transaction in the second manner comprises denying the online transaction. 
     
     
         6 . The method defined in  claim 2 , wherein the information to assist in validating online transactions attempted using the transaction object information includes at least one unauthorized transaction point location, and wherein the validation action comprises handling the online transaction in a first manner if the location specified by the location object corresponds to at least one of the at least one unauthorized transaction point location. 
     
     
         7 . The method defined in  claim 6 , wherein the validation action comprises handling the online transaction in a second manner different from the first manner if the location specified by the location object does not correspond to any of the at least one unauthorized transaction point location. 
     
     
         8 . The method defined in  claim 2 , wherein obtaining the information to assist in validating online transactions attempted using the transaction object information comprises consulting a database on a basis of the transaction object information. 
     
     
         9 . The method defined in  claim 2 , wherein obtaining the information to assist in validating online transactions attempted using the transaction object information comprises receiving a message conveying the information to assist in validating online transactions attempted using the transaction object information. 
     
     
         10 . The method defined in  claim 2 , wherein the transaction object information comprises at least one of:
 payment card information regarding a payment card;   electronic check information regarding an electronic check;   digital cash information regarding a set of at least one digital cash certificate; and   account information regarding an account.   
     
     
         11 . The method defined in  claim 1 , wherein the location object specifies a service point location associated with the end user equipment. 
     
     
         12 . The method defined in  claim 11 , wherein the service point location is expressed as a civic address. 
     
     
         13 . The method defined in  claim 11 , wherein the service point location is expressed as a set of geo-coordinates. 
     
     
         14 . The method defined in  claim 1 , wherein the location object specifies a current position of the end user equipment. 
     
     
         15 . The method defined in  claim 1 , executed by a transaction validation entity. 
     
     
         16 . The method defined in  claim 1 , further comprising transmitting to the end user equipment a location request message, wherein said obtaining comprises receiving a message containing the location object transmitted in response to receipt by the end user equipment of said location request message. 
     
     
         17 . The method defined in  claim 1 , wherein said obtaining further comprises:
 receiving encrypted data from the end user equipment; and   decrypting the encrypted data using a key provided by the service provider to obtain the location object.   
     
     
         18 . A computer-readable medium storing a program element for execution by a computer, said program element comprising:
 first program code for causing the computer to obtain from end user equipment a location object caused to be stored on the end user equipment by a service provider; and   second program code for causing the computer to validate an online transaction attempted using the end user equipment, based at least in part on the location object.   
     
     
         19 . An apparatus, comprising:
 an interface for communication with end user equipment over a network; and   a processing unit coupled to said interface, said processing unit being configured to:
 obtain from the end user equipment via said interface a location object caused to be stored on the end user equipment by a service provider; and 
 validate an online transaction attempted using the end user equipment, based at least in part on the location object. 
   
     
     
         20 . An apparatus, comprising:
 means for obtaining from end user equipment a location object caused to be stored on the end user equipment by a service provider; and   means for validating an online transaction attempted using the end user equipment based on the location object.   
     
     
         21 . A method for execution by end user equipment connected to a network, said method comprising:
 storing in a memory a location object provided by a service provider; and   sending the location object to a server over the network for validation of an online transaction attempted using the end user equipment.   
     
     
         22 . The method defined in  claim 21 , wherein the location object specifies a service point location associated with the end user equipment. 
     
     
         23 . The method defined in  claim 21 , further comprising receiving from the server a result of the validation of the online transaction based at least in part on the location object. 
     
     
         24 . The method defined in  claim 21 , wherein the location object is formatted in conformity with (i) a Presence Information Document Format—Location Object (ii) Geographic Markup Language; or (iii) a revised, updated or equivalent of the foregoing. 
     
     
         25 . The method defined in  claim 21 , further comprising sending transaction object information when the online transaction is attempted. 
     
     
         26 . The method defined in  claim 21 , wherein sending the location object is performed in response to receipt of a location request message from the server. 
     
     
         27 . The method defined in  claim 26 , further comprising receiving the location request message from the server consequent to the online transaction being attempted. 
     
     
         28 . The method defined in  claim 27 , further comprising effecting a determination of whether the server is authorized to request the location object, wherein said sending the location object is effected only if said determination is positive. 
     
     
         29 . The method defined in  claim 21 , wherein sending the location object is performed prior to the online transaction being attempted. 
     
     
         30 . The method defined in  claim 21 , further comprising receiving the location object over the network and implementing a security feature that prevents the location object from being altered between said receiving and said sending of the location object.