Data security system using mobile communications device

Patent metadata

Field	Value
Publication number	US-10496990-B2
Application number	US-201314379478-A
Country	US
Kind code	B2
Filing date	Feb 22, 2013
Priority date	Feb 22, 2012
Publication date	Dec 3, 2019
Grant date	Dec 3, 2019

Abstract

Embodiments of the invention provide systems and methods to unlock an account associated with a user for a limited period of time to enable the user conduct a transaction using funds from that account. In one embodiment of the invention, the user may select options relating to the transaction using a payment menu provided at a mobile communications device associated with the user. A notification message is received at the mobile communications device informing the user that the account is unlocked for a certain period of time and for a certain amount. After the transaction is complete, the user is notified and the account is locked again.

First claim

What is claimed is:

1. A method comprising:
transmitting, by a server computer to a user interface of a mobile communications device over a network, a menu including two or more types of transactions;
receiving, at the server computer from the mobile communications device via the user interface, a request message to unlock an account associated with a user for conducting two or more transactions of the two or more types of transactions on the account, wherein the request message includes a selected transaction type from the two or more types of transactions;
transmitting, by the server computer to the mobile communications device via the user interface, a request for a passcode, a total number of transactions, and an unlock amount;
receiving, by the server computer from the mobile communications device via the user interface, the passcode, the unlock amount, and the total number of transactions specified by the user;
verifying, by the server computer, the passcode based on account information associated with the user stored in a database communicatively coupled to the server computer;
unlocking, by the server computer, the account for a limited period of time, for the selected transaction type, for the unlock amount, and for the total number of transactions, to allow conducting transactions using the account within the limited period of time and for the total number of transactions using a personal identification number (PIN), wherein a total amount associated with the transactions is less than or equal to the unlock amount;
transmitting, by the server computer, a notification message indicating that the account associated with the user is unlocked;
receiving a plurality of first authorization request messages, corresponding to a respective plurality of first transactions, comprising a respective plurality of first transaction amounts, an issuer account identifier for the selected transaction type, and the personal identification number (PIN) associated with the issuer account identifier;
determining, by a lock-unlock module in the server computer, that (a) a total of the first transaction amounts is less than the unlock amount and (b) that the limited period of time has not elapsed, based on a timer in the server computer;
transmitting the plurality of first authorization request messages, corresponding to the respective plurality of first transactions, to an issuer of the issuer account identifier for approval;
receiving a subsequent authorization request message comprising a subsequent transaction amount for a subsequent transaction and the personal identification number (PIN);
determining, by the lock-unlock module in the server computer, that a sum of the subsequent transaction amount and the total of the first transaction amounts exceeds the unlock amount; and
transmitting an authorization response message declining the subsequent transaction.

2. The method of claim 1 , further comprising:
locking the account after the limited period of time expires.

3. The method of claim 1 , further comprising:
sending a message to the issuer associated with the account to notify unlocking of the account.

4. The method of claim 1 , wherein the selected transaction type includes sending money to a recipient.

5. The method of claim 4 , wherein a message is sent to the recipient after the money is sent to the recipient.

6. The method of claim 1 , wherein the transactions are conducted on the account using the mobile communications device.

7. The method of claim 1 , wherein the transactions are conducted on the account using a payment card.

8. The method of claim 1 , wherein the transactions are conducted on the account using a token.

9. The method of claim 1 , wherein the selected transaction type includes an automated teller machine transaction, and wherein the method further comprises:
obtaining a current location of the mobile communications device;
generating a list of automated teller machines closest to the mobile communications device using the current location; and
providing the list of automated teller machines to the mobile communications device.

10. The method of claim 1 , wherein the notification message comprises a current balance associated with the account.

11. The method of claim 1 , wherein receiving the passcode by the server computer is in response to transmitting the request for the passcode.

12. The method of claim 1 , wherein the selected transaction type includes a withdrawal from an automated teller machine.

13. The method of claim 12 , wherein a payment card configured to be presented at the automated teller machine is linked to the account.

14. The method of claim 1 , wherein the selected transaction type includes a withdrawal from an agent associated with an agent mobile device.

15. The method of claim 1 , wherein receiving the plurality of first authorization request messages comprises receiving the plurality of first authorization request messages from one or more access devices, automated teller machines, client computers, and/or agent mobile devices.

16. A server computer comprising a processor, and a non-transitory computer readable medium, the computer readable medium coupled to the processor and including encoded instructions executable by the processor for implementing a method comprising:
transmitting, by the server computer to a user interface of a mobile communications device over a network, a menu including two or more types of transactions;
receiving, at the server computer from the mobile communications device via the user interface, a request message to unlock an account associated with a user for conducting two or more transactions of the two or more types of transactions on the account, wherein the request message includes a selected transaction type from the two or more types of transactions;
transmitting, by the server computer to the mobile communications device via the user interface, a request for a passcode, a total number of transactions, and an unlock amount;
receiving, by the server computer from the mobile communications device via the user interface, the passcode, the unlock amount, and the total number of transactions specified by the user;
verifying, by the server computer, the passcode based on account information associated with the user stored in a database communicatively coupled to the server computer;
unlocking, by the server computer, the account for a limited period of time, for the selected transaction type, for the unlock amount, and for the total number of transactions, to allow conducting transactions using the account within the limited period of time and for the total number of transactions using a personal identification number (PIN), wherein a total amount associated with the transactions is less than or equal to the unlock amount;
transmitting, by the server computer, a notification message indicating that the account associated with the user is unlocked;
receiving a plurality of first authorization request messages, corresponding to a respective plurality of first transactions, comprising a respective plurality of first transaction amounts, an issuer account identifier for the selected transaction type, and the personal identification number (PIN) associated with the issuer account identifier;
determining, by a lock-unlock module in the server computer, that (a) a total of the first transaction amounts is less than the unlock amount and (b) that the limited period of time has not elapsed, based on a timer in the server computer;
transmitting the plurality of first authorization request messages, correspondi

Assignees

• Visa Int Service Ass

Inventors

• Pourfallah Stacy
• Yang Jessica
• Mahadkar Shilpak

Classifications

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• H04W12/06

  Authentication · CPC title

• G06Q40/02 Primary

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title