Systems and methods for performing ATM fund transfer using active authentication

Patent metadata

Field	Value
Publication number	US-10089612-B2
Application number	US-201113101759-A
Country	US
Kind code	B2
Filing date	May 5, 2011
Priority date	Mar 15, 2011
Publication date	Oct 2, 2018
Grant date	Oct 2, 2018

Abstract

A method of performing a fund transfer at an ATM includes receiving an active authentication transaction key at an ATM from a mobile financial transaction instrument via a wireless communication protocol, generating a PIN at the ATM, and storing the PIN in a machine readable storage medium. An authorization request message is transmitted to a financial institution identified by the active authentication transaction key. The authorization request message includes the PIN and at least a portion of the active authentication transaction key. The PIN is received from a user of the mobile financial transaction instrument, and the funds are dispensed in response to receiving the PIN.

First claim

What is claimed is:

1. A method of performing a fund transfer at an ATM, comprising:
receiving, at a first computer processor, a request for authentication from a user device, the user having an account at a financial institution;
authenticating, by the first computer processor, the user based on data received from the user device;
receiving, via a wireless communication protocol, parameters associated with an ATM fund transfer request transmitted from the user device, the parameters including a future time period during which the fund transfer is to be performed;
randomly generating, by the first computer processor, a single-use active authentication transaction key, wherein the single-use active authentication transaction key lacks a static identifier associated with the account and is unique for the ATM fund transfer request and valid for a limited period of time;
transmitting, via the wireless communication protocol, the single-use active authentication transaction key to a mobile financial transaction instrument associated with the account, wherein the mobile financial transaction instrument includes a user device different from the user device from which the user requested authentication;
receiving, via the wireless communication protocol, the single-use active authentication transaction key at an ATM from the mobile financial transaction instrument;
randomly generating, at a second computer processor, a PIN in response to receiving the single-use active authentication transaction key, the second computer processor being associated with the ATM;
extracting and transmitting, by the second computer processor, at least a first portion of the single-use active authentication transaction key to an active authentication registry to identify the financial institution to which the single-use active authentication transaction key is to be routed;
transmitting, by the second computer processor, an authorization request message to the financial institution identified by the single-use active authentication transaction key, the authorization request message including the PIN, the at least a first portion of the single-use active authentication transaction key, and the parameters;
processing a PIN received from the mobile financial transaction instrument, including comparing, by the second processor, the PIN received from the mobile financial transaction instrument to the generated PIN to confirm that the PINs match, responsive to receiving a message from the financial institution authorizing the ATM fund transfer request, wherein authorizing the ATM fund transfer request includes validating the single-use active authentication transaction key and validating that the ATM transaction request complies with the parameters; and
directing, by the second computer processor, that funds associated with the ATM fund transfer request be dispensed in response to processing the PIN.

2. The method of claim 1 , wherein the single-use active authentication transaction key includes a substantially random alpha-numeric string.

3. The method of claim 1 , further comprising:
transmitting a second portion of the single-use active authentication transaction key to the active authentication registry; and
receiving an identity of the financial institution from the active authentication registry based on the second portion of the single-use active authentication transaction key.

4. The method of claim 1 , further comprising identifying the financial institution based on a second portion of the single-use active authentication transaction key.

5. The method of claim 1 , wherein the PIN is received via a wireless transmission from the mobile financial transaction instrument.

6. The method of claim 1 , wherein the PIN is received from the mobile financial transaction instrument via physical contact between the mobile financial transaction instrument and the ATM.

7. A non-transitory machine-readable storage medium storing instructions that when executed by a plurality of processors, cause the plurality of processors to:
receive a request for authentication from a user device, the user having an account at a financial institution;
authenticate the user based on data received from the user device;
receive parameters associated with an ATM fund transfer request transmitted from the user device, the parameters including a future time period during which the fund transfer is to be performed;
cause a single-use active authentication transaction key to be randomly generated, wherein the single-use active authentication transaction key lacks a static identifier associated with an account and is unique for the ATM fund transfer request and valid for a limited period of time;
cause the single-use active authentication transaction key to be transmitted to a mobile financial transaction instrument associated with the account, wherein the user financial transaction instrument includes a user device different from the user device from which the user requested authentication;
cause a PIN to be randomly generated in response to receiving the single-use active authentication transaction key at an ATM from the mobile financial transaction instrument;
cause at least a first portion of the single-use active authentication transaction key to be extracted and transmitted to an active authentication registry to identify the financial institution to which the single-use active authentication transaction key is to be routed;
cause an authorization message to be transmitted to the financial institution identified by the single-use active authentication transaction key, the authorization message including the PIN, the at least a first portion of the single-use active authentication transaction key, and the parameters;
cause a PIN received from the mobile financial transaction instrument to be processed, including comparing the PIN received from the mobile financial transaction instrument to the generated PIN to confirm that the PINs match, responsive to receiving a message from the financial institution authorizing the ATM fund transfer request, wherein authorizing the ATM fund transfer request includes validating the single-use active authentication transaction key and validating that the ATM transaction request complies with the parameters; and
cause funds associated with the ATM fund transfer request to be dispensed in response to processing the PIN.

8. The non-transitory machine-readable storage medium of claim 7 , wherein the single-use active authentication transaction key includes a substantially random alpha-numeric string.

9. The non-transitory machine readable storage medium of claim 7 , wherein the instructions further cause the plurality of processors to:
cause a second portion of the single-use active authentication transaction key to be transmitted to the active authentication registry; and
receive an identity of the financial institution from the active authentication registry based on the second portion of the single-use active authentication transaction key.

10. The non-transitory machine-readable storage medium of claim 7 , wherein the instructions further cause the plurality of processors to identify the financial institution based on a second portion of the single-use active authentication transaction key.

11. The non-transitory machine-readable storage medium of claim 7 , wherein the instructions further cause the plurality of processors to wirelessly receive the PIN from the mobile financial transaction instrument.

12. A system, comprising:
a random number generator;
a first computer processor coupled to the random number generator, the first computer processor configured to:
receive a reques

Assignees

• Wolfs Rudolph Christian
• Pinski David Aaron
• Capital One Services Llc

Inventors

• Wolfs Rudolph Christian
• Pinski David Aaron

Classifications

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/18 Primary

  involving self-service terminals [SST], vending machines, kiosks or multimedia terminals · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title