Systems and methods for performing ATM fund transfer using active authentication

Patent metadata

Field	Value
Publication number	US-11042877-B2
Application number	US-201816145929-A
Country	US
Kind code	B2
Filing date	Sep 28, 2018
Priority date	Mar 15, 2011
Publication date	Jun 22, 2021
Grant date	Jun 22, 2021

Abstract

A method of performing a fund transfer at an ATM includes receiving an active authentication transaction key at an ATM from a mobile financial transaction instrument via a wireless communication protocol, generating a PIN at the ATM, and storing the PIN in a machine readable storage medium. An authorization request message is transmitted to a financial institution identified by the active authentication transaction key. The authorization request message includes the PIN and at least a portion of the active authentication transaction key. The PIN is received from a user of the mobile financial transaction instrument, and the funds are dispensed in response to receiving the PIN.

First claim

What is claimed is:

1. A method of performing a peer-to-peer funds transfer, comprising:
receiving, by one or more financial institution processors associated with a financial institution, a funds transfer request from a first device associated with a transferor account, the funds transfer request comprising a unique identifier of a second device associated with a transferee account;
generating, by the one or more financial institution processors and in response to the funds transfer request, a first PIN and a first one-time active authentication transaction key;
storing, in a non-transitory memory device associated with the financial institution, the first one-time active authentication transaction key, the first PIN, and the unique identifier of the second device;
transmitting, by the one or more financial institution processors, a message comprising the first PIN to the second device;
receiving, by the one or more financial institution processors, a second PIN from the second device;
comparing, by the one or more financial institution processors, the second PIN to the first PIN;
responsive to the second PIN matching the first PIN, transmitting, by the one or more financial institution processors, the first one-time active authentication transaction key to the second device;
receiving, by the one or more financial institution processors, an authorization request for a funds transfer from one or more automated teller machine (ATM) processors, the authorization request comprising a portion of a second one-time active authentication transaction key received by the one or more ATM processors and from the second device;
comparing, by the one or more financial institution processors, the portion of the second one-time active authentication transaction key to the first one-time active authentication transaction key;
transmitting, by the one or more financial institution processors and responsive to the portion of the second one-time active authentication transaction key matching a portion of the first one-time active authentication transaction key, an authorization message to the one or more ATM processors authorizing dispersal of funds to complete the funds transfer;
transferring, by the one or more financial institution processors, a third PIN to the second device;
receiving, by one or more ATM processors and from the second device, the third PIN;
verifying, by the one or more ATM processors and responsive to receiving the authorization message and the third PIN, the third PIN by comparing the third PIN with a fourth PIN; and
dispensing, by the one or more ATM processors and responsive to verifying the third PIN, funds to complete the peer-to-peer funds transfer.

2. The method of claim 1 , wherein the first one-time active authentication transaction key and the second one-time active authentication transaction key lack static identifiers.

3. The method of claim 1 , wherein the one or more ATM processors receive the second one-time active authentication transaction key from the second device via a wireless transmission.

4. The method of claim 1 , wherein the second PIN is received by the one or more financial institution processors via an encrypted communication channel.

5. The method of claim 1 , wherein the one or more ATM processors transmit a request to receive contact information for the financial institution from a registry, and the registry transmits the requested contact information to the one or more ATM processors based on at least a portion of the second one-time active authentication transaction key.

6. The method of claim 1 , further comprising authenticating, by the one or more financial institution processors, the first device.

7. The method of claim 1 , further comprising:
transferring, by the one or more financial institution processors and responsive to receiving confirmation of the funds transfer request from the first device, funds associated with the funds transfer request into a wash account from the transferor account; and
dispensing, by the one or more financial institution processors, the funds from the wash account responsive to validating the second PIN.

8. The method of claim 1 , further comprising:
generating, by the one or more ATM processors, the fourth PIN; and
transmitting, by the one or more ATM processors, the fourth PIN to the one or more financial institution processors.

9. The method of claim 1 , wherein the funds transfer request further comprises a time period during which the funds transfer is authorized, the method further comprising:
storing, in the non-transitory memory device, the time period of the funds transfer request;
validating, by the one or more financial institution processors, that the authorization request from the one or more ATM processors was received during the stored time period; and
responsive to the authorization request from the one or more ATM processors being received outside of the stored time period, transmitting, by the one or more financial institution processors, a message declining the authorization request to the one or more ATM processors.

10. A system for performing a peer-to-peer funds transfer, comprising:
one or more financial institution processors;
one or more ATM processors in communication with the one or more financial institution processors;
a first memory in communication with the one or more financial institution processors and storing instructions that, when executed by the one or more financial institution processors, are configured to cause the system to:
receive, a funds transfer request from a first device associated with a transferor account, the funds transfer request comprising a unique identifier of a second device associated with a transferee account;
generate, in response to the funds transfer request, a first PIN and a first one-time active authentication transaction key;
store, in a non-transitory memory device, the first one-time active authentication transaction key, the first PIN, and the unique identifier of the second device;
transmit a message comprising the first PIN to the second device;
receive a second PIN from the second device;
responsive to the second PIN matching the first PIN, transmit the first one-time active authentication transaction key to the second device; and

a second memory in communication with the one or more ATM processors and storing instructions that, when executed, are configured to cause the one or more ATM processors to:
receive a portion of a second one-time active authentication key from the second device;
transmit an authorization request for a funds transfer to the one or more financial institution processors, the authorization request comprising the portion of a second one-time active authentication transaction key received; and
responsive to the portion of the second one-time active authentication transaction key matching a portion of the first one-time active authentication transaction key, receive, an authorization message authorizing dispersal of funds to complete the funds transfer.

11. The system of claim 10 , further comprising an active authentication registry, wherein the active authentication registry is configured to provide the one or more ATM processors contact information for the one or more financial institution processors.

12. The system of claim 10 , wherein the first one-time active authentication transaction key and the second one-time active authentication transaction key lack static identifiers.

13. The system of claim 10 , wherein the portion of the second one-time active authentication key received by the one or more ATM processors is received via a wireless tran

Assignees

• Capital One Services Llc

Inventors

• Wolfs Rudolph Christian
• Pinski David Aaron

Classifications

• G06Q20/401 Primary

  Transaction verification · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/1085

  involving automatic teller machines [ATMs] · CPC title

• G06Q20/425

  using two different networks, one for transaction and one for security confirmation · CPC title