Systems and methods for performing ATM fund transfer using active authentication

Patent metadata

Field	Value
Publication number	US-10108959-B2
Application number	US-201414577716-A
Country	US
Kind code	B2
Filing date	Dec 19, 2014
Priority date	Mar 15, 2011
Publication date	Oct 23, 2018
Grant date	Oct 23, 2018

Abstract

A method of performing a fund transfer at an ATM includes receiving an active authentication transaction key at an ATM from a mobile financial transaction instrument via a wireless communication protocol, generating a PIN at the ATM, and storing the PIN in a machine readable storage medium. An authorization request message is transmitted to a financial institution identified by the active authentication transaction key. The authorization request message includes the PIN and at least a portion of the active authentication transaction key. The PIN is received from a user of the mobile financial transaction instrument, and the funds are dispensed in response to receiving the PIN.

First claim

What is claimed is:

1. A method of performing a funds transfer using an automated teller machine (ATM), comprising:
receiving, by at least one computer processor of a financial institution, a funds transfer request from a transferor having an account with the financial institution, said funds transfer request comprising a unique identifier of a mobile financial transaction instrument of a transferee;
generating, in response to the funds transfer request, by the at least one computer processor, a first PIN and a one-time active authentication transaction key, the key comprising a random alpha-numeric string;
storing, in a non-transient memory device, the one-time active authentication transaction key, the first PIN, and at least the unique identifier;
transmitting, by the at least one computer processor, a message comprising the first PIN to the mobile financial transaction instrument of the transferee uniquely identified in the funds transfer request;
establishing, by the at least one computer processor, a secure connection with the mobile financial transaction instrument of the transferee;
receiving, by the at least one computer processor via the established secure connection, a PIN from the mobile financial transaction instrument of the transferee;
validating, by the at least one computer processor, the received PIN by comparing the received PIN to the stored first PIN;
if the received PIN is validated, transmitting, by the at least one computer processor via the established secure connection, the stored one-time active authentication transaction key to the mobile financial transaction instrument of the transferee;
receiving, by the at least one computer processor, an authorization request for a funds transfer from an automated teller machine (ATM), said authorization request comprising the portion of a one-time active authentication transaction key received by the ATM from the mobile financial transaction instrument of the transferee and a second PIN generated by the ATM to authenticate the transferee;
validating, by the at least one computer processor, the received portion of the one-time active authentication transaction key by comparing the received portion of the one-time active authentication transaction key to the stored one-time active authentication transaction key;
if the received portion of the one-time active authentication transaction key is validated, transmitting, by the at least one computer processor, an authorization message to the ATM authorizing dispersal of funds to complete the funds transfer and transmitting the second PIN to the mobile financial instrument of the transferee;
receiving, by the ATM from the mobile financial transaction instrument of the transferee, the second PIN;
in response to receiving the authorization message from the at least one computer processor and the second PIN from the mobile financial transaction instrument of the transferee, verifying, by the ATM, whether the received second PIN matches the generated second PIN; and
dispensing, by the ATM, funds to complete the funds transfer if the received second PIN matches the generated second PIN.

2. The method of claim 1 , wherein the step of transmitting the first PIN further comprises:
transmitting the first PIN to the mobile financial transaction instrument of the transferee via SMS or voicemail.

3. The method of claim 1 , wherein the funds transfer request further comprises an email address for the transferee, and wherein the step of transmitting the first PIN further comprises:
transmitting the first PIN to the mobile financial transaction instrument of the transferee via email.

4. The method of claim 1 , further comprising:
transmitting, by the at least one computer processor, a transaction confirmation request to a mobile financial transaction instrument of the transferor; and
receiving, at the at least one computer processor, a transaction confirmation from the mobile financial transaction instrument of the transferor.

5. The method of claim 1 , wherein the one-time active authentication transaction key further comprises information identifying the financial institution.

6. The method of claim 1 , further comprising:
transferring, in response to the funds transfer request, by the at least one computer processor, funds from the transferor's account to a wash account.

7. The method of claim 1 , further comprising:
if the portion of the one-time active authentication transaction key received from the ATM is invalid, transmitting, by the at least one computer processor, a message declining the authorization request to the ATM.

8. The method of claim 1 , further comprising:
if the PIN received from the mobile financial transaction instrument of the transferee is invalid, transmitting, by the at least one computer processor, a message declining the funds transfer to the mobile financial transaction instrument of the transferee.

9. The method of claim 1 , wherein the funds transfer request further comprises a time period during which the funds transfer is authorized, the method further comprising:
storing, in the non-transient memory device, the time period of the funds transfer request;
validating, by the at least one computer processor, that the authorization request from the ATM was received during the stored time period; and
if the authorization request from the ATM was received outside of the stored time period, transmitting, by the at least one computer processor, a message declining the authorization request to the ATM.

10. The method of claim 1 , wherein the second PIN comprises a multi-character alphanumeric code generated by a random number generator.

11. A non-transient machine-readable storage medium encoded with program code, wherein the program code is configured such that, when executed by at least one computer processor of a financial institution, the at least one computer processor performs a method comprising the steps of:
receiving, by the at least one computer processor of a financial institution, a funds transfer request from a transferor having an account with the financial institution, said funds transfer request comprising a unique identifier of a mobile financial transaction instrument of a transferee;
generating, in response to the funds transfer request, by the at least one computer processor, a first PIN and a one-time active authentication transaction key, the key comprising a random alpha-numeric string;
storing, in a non-transient memory device, the one-time active authentication transaction key, the first PIN, and at least the unique identifier;
transmitting, by the at least one computer processor, a message comprising the first PIN to the mobile financial transaction instrument of the transferee uniquely identified in the funds transfer request;
establishing, by the at least one computer processor, a secure connection with the mobile financial transaction instrument of the transferee;
receiving, by the at least one computer processor via the established secure connection, a PIN from the mobile financial transaction instrument of the transferee;
validating, by the at least one computer processor, the received PIN by comparing the received PIN to the stored first PIN;
if the received PIN is validated, transmitting, by the at least one computer processor via the established secure connection, the stored one-time active authentication transaction key to the mobile financial transaction instrument of the transferee;
receiving, by the at least one computer processor, an authorization request for a funds transfer from an automated teller machine (ATM), said authorization request comprising the portion of a one-time active authentication

Assignees

• Capital One Financial Corp
• Capital One Services Llc

Inventors

• Wolfs Rudolph Christian
• Pinski David Aaron

Classifications

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/401 Primary

  Transaction verification · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title

• G06Q20/1085

  involving automatic teller machines [ATMs] · CPC title