Systems and methods for performing ATM fund transfer using active authentication

Patent metadata

Field	Value
Publication number	US-10789580-B2
Application number	US-201816149740-A
Country	US
Kind code	B2
Filing date	Oct 2, 2018
Priority date	Mar 15, 2011
Publication date	Sep 29, 2020
Grant date	Sep 29, 2020

Abstract

A method of performing a fund transfer at an ATM includes receiving an active authentication transaction key at an ATM from a mobile financial transaction instrument via a wireless communication protocol, generating a PIN at the ATM, and storing the PIN in a machine readable storage medium. An authorization request message is transmitted to a financial institution identified by the active authentication transaction key. The authorization request message includes the PIN and at least a portion of the active authentication transaction key. The PIN is received from a user of the mobile financial transaction instrument, and the funds are dispensed in response to receiving the PIN.

First claim

What is claimed is:

1. A method of performing a fund transfer at an automated teller machine (ATM), comprising:
receiving, at a first computer processor associated with a financial institution, a request for authentication from a first user device associated with a first user having an account at the financial institution;
authenticating, by the first computer processor, the first user based on data received from the first user device;
receiving, via a wireless communication protocol, parameters associated with an ATM fund transfer request transmitted from the first user device;
generating, by the first computer processor, a unique single-use active authentication transaction key;
transmitting, via the wireless communication protocol, the single-use active authentication transaction key to a second user device, the second user device being a mobile device associated with a second user;
receiving, via the wireless communication protocol, the single-use active authentication transaction key at the ATM from the second user device;
generating, at a second computer processor, a first personal identification number (PIN) in response to receiving the single-use active authentication transaction key, the second computer processor being associated with the ATM;
extracting, by the second computer processor, at least a first portion of the single use active authentication transaction key;
transmitting, by the second computer processor, the at least a first portion of the single-use active authentication transaction key to an active authentication registry to identify the financial institution to which the single-use active authentication transaction key is to be routed;
transmitting, by the second computer processor, an authorization request message to the financial institution, the authorization request message including the first PIN, the at least a first portion of the single-use active authentication transaction key, and the parameters;
receiving a first message from the financial institution authorizing the ATM fund transfer request;
processing, by the second computer processor, a second PIN received from the second user device, responsive to receiving the first message
comparing, by the second processor, the second PIN to the first PIN to confirm that the first PIN and the second PIN match; and
dispensing, by the second computer processor, funds associated with the ATM fund transfer request to the second user in response to confirming that the first PIN and the second PIN match.

2. The method of claim 1 , wherein the single-use active authentication transaction key includes a substantially random alpha-numeric string.

3. The method of claim 1 , wherein the parameters include at least one of:
a specific account from which the ATM fund transfer request is to be dispensed; an amount of funds to be dispensed; or
a future period of time during which the funds are to be dispensed.

4. The method of claim 1 , further comprising:
transmitting a second portion of the single-use active authentication transaction key to the active authentication registry; and
receiving an identity of the financial institution from the active authentication registry based on the second portion of the single-use active authentication transaction key.

5. The method of claim 1 , further comprising identifying the financial institution based on a second portion of the single-use active authentication transaction key.

6. The method of claim 1 , wherein the single-use active authentication transaction key:
is a non-static identifier associated with the account, is unique for the ATM fund transfer request, and is valid for a limited period of time.

7. The method of claim 1 , wherein the second PIN is received via a wireless transmission from the second user device.

8. The method of claim 1 , wherein the second PIN is received from the second user device via physical contact between the second user device and the ATM.

9. A non-transitory machine-readable storage medium storing instructions that when executed by a plurality of processors, cause the plurality of processors to:
receive a request for authentication from a first user device associated with a first user having an account at a financial institution;
authenticate the first user based on data received from the first user device;
receive parameters associated with an ATM fund transfer request transmitted from the first user device;
generate a unique single-use active authentication transaction key;
transmit the single-use active authentication transaction key to a second user device, the second user device being a mobile device associated with a second user;
generate a first personal identification number (PIN in response to receiving the single-use active authentication transaction key at an automated teller machine (ATM) from the second user device;
extract at least a first portion of the single-use active authentication transaction key;
transmit the at least a first portion of the single-use active authentication transaction key to an active authentication registry to identify the financial institution to which the single-use active authentication transaction key is to be routed;
transmit an authorization message to the financial institution, the authorization message including the first PIN, the at least a first portion of the single-use active authentication transaction key, and the parameters;
receive a first message from the financial institution authorizing the ATM fund transfer request;
process a second PIN received from the second user device in response to receiving the first message;
compare the second PIN to the first PIN to confirm that the first PIN and the second PIN match; and
dispense funds associated with the ATM fund transfer request to the second user in response to confirming that the first PIN and the second PIN match.

10. The non-transitory machine-readable storage medium of claim 9 , wherein the single-use active authentication transaction key includes a non-static, substantially random alpha-numeric string, wherein the non-static, substantially random alphanumeric string is unique for the ATM fund transfer request and is valid for a limit period of time.

11. The non-transitory machine-readable storage medium of claim 9 , wherein the parameters include at least one of:
a specific account from which the ATM fund transfer request is to be dispensed;
an amount of funds to be dispensed; or
a future period of time during which the funds are to be dispensed.

12. The non-transitory machine-readable storage medium of claim 9 , wherein the instructions further cause the plurality of processors to:
transmit a second portion of the single-use active authentication transaction key to the active authentication registry; and
receive an identity of the financial institution from the active authentication registry based on the second portion of the single-use active authentication transaction key.

13. The non-transitory machine-readable storage medium of claim 9 , wherein the instructions further cause the plurality of processors to identify the financial institution based on a second portion of the single-use active authentication transaction key.

14. The non-transitory machine-readable storage medium of claim 9 , wherein the instructions further cause the plurality of processors to receive the second PIN from the second user device.

15. A system, comprising:
a first computer processor associated with a financial institution and configured to:
receive a request for authentication from a first user device associated with a first user having a

Assignees

• Capital One Services Llc

Inventors

• Wolfs Rudolph Christian
• Pinski David Aaron

Classifications

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/18 Primary

  involving self-service terminals [SST], vending machines, kiosks or multimedia terminals · CPC title