System, method, and recording medium for identity fraud prevention in secure transactions using multi-factor verification

Abstract

A secure transaction method, system, and computer program product including prior to authorizing a transaction distributing a location challenge code generated by a payment provider to a service provider module physically accessible to a user, distributing a biometric data request indicative of a location of the user by the payment provider to the personal communication device of the user, sending the location challenge code and a biometric data response from the personal communication device of the user to the payment provider, verifying, via the payment provider a match between the biometric data response and biometric data of the user stored in a storage unit and a match between the location challenge code received from the personal communication device of the user and the location challenge code generated by the payment provider, and authorizing the transaction based on a result of the verifying.

What is claimed is: 
     
         1 . A secure transaction system comprising:
 a processor; and   a memory, the memory storing instructions to cause the processor to perform:
 prior to authorizing a transaction:
 distributing a location challenge code generated by a payment provider to a service provider module physically accessible to a user; 
 distributing a biometric data request indicative of a location of the user by the payment provider to the personal communication device of the user; 
 sending the location challenge code and a biometric data response from the personal communication device of the user to the payment provider; 
 verifying, via the payment provider:
 a match between the biometric data response and biometric data of the user stored in a storage unit; and 
 a match between the location challenge code received from the personal communication device of the user and the location challenge code generated by the payment provider; and 
 
 
 authorizing the transaction based on a result of the verifying. 
   
     
     
         2 . A computer-implemented secure transaction method comprising:
 prior to authorizing a transaction:
 distributing a location challenge code generated by a payment provider to a service provider module physically accessible to a user; 
 distributing a biometric data request indicative of a location of the user by the payment provider to the personal communication device of the user; 
 sending the location challenge code and a biometric data response from the personal communication device of the user to the payment provider; 
 verifying, via the payment provider:
 a match between the biometric data response and biometric data of the user stored in a storage unit; and 
 a match between the location challenge code received from the personal communication device of the user and the location challenge code generated by the payment provider; and 
 
   authorizing the transaction based on a result of the verifying.   
     
     
         3 . A computer program product for a secure transaction program, the computer program product comprising a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform:
 prior to authorizing a transaction:
 distributing a location challenge code generated by a payment provider to a service provider module physically accessible to a user; 
 distributing a biometric data request indicative of a location of the user by the payment provider to the personal communication device of the user; 
 sending the location challenge code and a biometric data response from the personal communication device of the user to the payment provider; 
 verifying, via the payment provider:
 a match between the biometric data response and biometric data of the user stored in a storage unit; and 
 a match between the location challenge code received from the personal communication device of the user and the location challenge code generated by the payment provider; and 
 
   authorizing the transaction based on a result of the verifying.