Controlling Access to Data

摘要

A system for controlling access to data includes: one or more interfaces operable to receive: an account identifier associated with a financial account and authentication criteria associated with the financial account, the authentication criteria identifying required authentication data based on a value of the transaction; one or more interfaces operable to receive a proposed transaction message, the proposed transaction message including a value of a proposed transaction, an account identifier, and a location of the proposed transaction; one or more processors communicatively coupled to the one or more interfaces, the one or more processors operable to: determine a financial account associated with the received account identifier and determine required authentication data for the proposed transaction based on the received account identifier and received value of the proposed transaction, the required form of authentication including one or more of: biometric authentication and location authentication.

主权项

1. A system for controlling access to data, comprising:
one or more interfaces operable to receive:
an account identifier associated with a financial account;contact information for a wireless communication device associated with the financial account;authentication criteria associated with the financial account, the authentication criteria identifying required authentication data based on a value of the transaction; one or more interfaces operable to receive a proposed transaction message, the proposed transaction message including a value of a proposed transaction, an account identifier, and a location of the proposed transaction; one or more processors communicatively coupled to the one or more interfaces, the one or more processors operable to:
determine a financial account associated with the received account identifier;determine contact information for a device associated with the received account identifier; anddetermine required authentication data for the proposed transaction based on the received account identifier and received value of the proposed transaction, the required form of authentication including one or more of: biometric authentication and location authentication; the one or more interfaces further operable to:
communicate an authentication criteria message to the determined device associated with the received account identifier, the authentication criteria message identifying the form of authentication data required to complete the proposed transaction;receive a transaction authentication message, the transaction authentication message including authentication data associated with the proposed transaction; the one or more processors further operable to:
determine that the received authentication data complies with the determined form of authentication for the proposed transaction; andauthorize the proposed transaction with the financial account associated with the received account identifier.