Patent ID: 9332011
Filing Date: 2016-05-03
CPC Classification: G06F,H04L

Claim Text:
1. A method of automatic detection and rejection of a fraudulent operation request, the method comprising of: sending an operation request from an insecure terminal to a server computer; sending an encrypted challenge by said server computer to a secure device connected to said insecure terminal, wherein said encrypted challenge comprises a nonce and an operation identifier; retrieving said operation identifier by said secure device by decrypting said encrypted challenge; receiving a copy of said operation request by said secure device from said insecure terminal; comparing said operation request received from said insecure terminal and said encrypted operation identifier received from said server computer by said secure device; constructing an encrypted challenge response comprising said nonce, said operation identifier and a rejection message by said secure device, on said secure device determining a mismatch between said operation request received from said insecure terminal and said encrypted operation identifier received from said server computer; sending said encrypted challenge response to said server computer by said secure device; decrypting said received challenge response by said server computer; and rejecting said operation request by said server computer based on said rejection message retrieved from said challenge response.