Enhancing transaction authentication with privacy and security enhanced internet geolocation and proximity

Abstract

Transaction authentication with techniques and geolocation are combined to provide privacy and security enhanced geolocation. In an example implementation, a user initiates a transaction at a web service which in turns triggers a security server. The security server uses its always on connection with the combined client on user security device to perform geolocation, proximity and transaction authentication. These results may be used by the web service to make a decision on whether to proceed with the transaction.

1 . (canceled) 
     
     
         2 . A computerized system, comprising:
 a processor; and   memory, the memory holding instructions that, when executed by the processor, cause the system to perform operations including:   receiving, from a web server, a request for a transaction initiated at a first user device;   transmitting, to a second user device, a one-time password derived at least in part from 1) a secret shared with the web server, and 2) details of the transaction;   receiving, from a first slave server, a first message originating from the first user device and passing through the first slave server, the message indicating a travel time of the first message from the first user device to the first slave server; and   receiving, from a second slave server, a second message originating from the second user device and passing through the second slave server, the second message indicating a travel time of the second message from the second user device to the second slave server; and   based on the travel times indicated in the first and second messages, estimating the geographic proximity of the first and second user devices.   
     
     
         3 . The system of  claim 2 , wherein the first and second user devices are reciprocal slaves. 
     
     
         4 . The system of  claim 2 , wherein the first slave server and the second slave server are different slave servers. 
     
     
         5 . The system of  claim 2 , wherein estimating the location of the user device comprises estimating an absolute geographic location of the user device. 
     
     
         6 . The system of  claim 2 , wherein the computerized system further comprises a master server, and the operations are performed by a processor at the master server. 
     
     
         7 . The system of  claim 6 , wherein estimating the geographic proximity of the first and second user devices is further based on a travel time of a third message transmitted between the user device to the master server. 
     
     
         8 . The system of  claim 2 , wherein estimating the geographic proximity of the first user device includes estimating a relative location of the first user device to the first slave server, and wherein estimating the geographic proximity of the second user device includes estimating a relative location of the second user device to the second slave server. 
     
     
         9 . The system of  claim 2 , wherein estimating the geographic proximity of the first and second user devices includes estimating the geographic proximity of the first and second user devices with respect to each other. 
     
     
         10 . The system of  claim 2 , wherein the content of the first message is derived from the one-time password. 
     
     
         11 . The system of  claim 2 , wherein the one-time password is derived in part from one or more details of the transaction details including a type of the transaction and an amount of the transaction. 
     
     
         12 . A method, comprising:
 receiving, from a web server, a request for a transaction initiated at a first user device;   transmitting, to a second user device, a one-time password derived at least in part from 1) a secret shared with the web server, and 2) details of the transaction;   receiving, from a first slave server, a first message originating from the first user device and passing through the first slave server, the message indicating a travel time of the first message from the first user device to the first slave server; and   receiving, from a second slave server, a second message originating from the second user device and passing through the second slave server, the second message indicating a travel time of the second message from the second user device to the second slave server; and   based on the travel times indicated in the first and second messages, estimating the geographic proximity of the first and second user devices.   
     
     
         13 . The method of  claim 12 , wherein the first and second user devices are reciprocal slaves. 
     
     
         14 . The method of  claim 12 , wherein the first slave server and the second slave server are different slave servers. 
     
     
         15 . The method of  claim 12 , wherein estimating the location of the user device comprises estimating an absolute geographic location of the user device. 
     
     
         16 . The method of  claim 12 , wherein the computerized system further comprises a master server, and the operations are performed by a processor at the master server. 
     
     
         17 . The method of  claim 16 , wherein estimating the geographic proximity of the first and second user devices is further based on a travel time of a third message transmitted between the user device to the master server. 
     
     
         18 . The method of  claim 12 , wherein estimating the geographic proximity of the first user device includes estimating a relative location of the first user device to the first slave server, and wherein estimating the geographic proximity of the second user device includes estimating a relative location of the second user device to the second slave server. 
     
     
         19 . The method of  claim 12 , wherein estimating the geographic proximity of the first and second user devices includes estimating the geographic proximity of the first and second user devices with respect to each other. 
     
     
         20 . The method of  claim 12 , wherein the content of the first message is derived from the one-time password. 
     
     
         21 . The method of  claim 12 , wherein the one-time password is derived in part from one or more details of the transaction details including a type of the transaction and an amount of the transaction.