Payment card authentication management

Patent metadata

Field	Value
Publication number	US-11334887-B2
Application number	US-202016739176-A
Country	US
Kind code	B2
Filing date	Jan 10, 2020
Priority date	Jan 10, 2020
Publication date	May 17, 2022
Grant date	May 17, 2022

Abstract

A payment card system for authorization and authentication is provided. A computing device monitors one or more transactions to detect various security threats comprising one or more accounts. A computing device determines to elevate a security level associated, at least, with one account based, at least, in part, on detection of, at least, one security threat. A computing device generates at least one temporary personal identification number based, at least, on determination to elevate a security level associated, at least, with one account.

First claim

What is claimed is:

1. A computer-implemented method for executing an encrypted access policy, the method comprising:
identifying, by one or more processors, a payment card authentication management request associated with an account, where the payment card authentication management request includes: (i) one or more payment cards, and (ii) one or more security contexts associated with the one or more payment cards;
monitoring, by one or more processors, one or more transactions associated with the account to detect one or more of the security contexts associated with one or more of the payment cards;
determining, by one or more processors, to elevate a security level associated with the account based, at least in part, on the detection of the one or more of the security contexts; and
generating, by one or more processors, at least one temporary personal identification number based, at least in part, on the determination to elevate the security level associated with the account;
establishing, by one or more processors, a dedicated channel connected to an authorized computing device associated with the account;
communicating, by one or more processors, the at least one temporary personal identification number to the authorized computing device through the dedicated channel; and
instructing, by one or more computer processors, the authorized computing device to utilize the at least one temporary personal identification number for one or more authorized transactions until a new payment card is issued to the user.

2. The computer-implemented method of claim 1 , the method further comprising:
in response to communicating the at least one temporary personal identification number to the authorized computing device through the dedicated channel, authorizing, by one or more processors, one or the more transactions utilizing the temporary personal identification number.

3. The computer-implemented method of claim 1 , the method further comprising:
based, at least in part, on the detection of the one or more security contexts, executing, by the one or more processors, a tracking module associated with (i) the account and (ii) the one or more of the payment cards;
identifying, by one or more processors, utilizing the tracking module, data relating to the one or more security contexts; and
predicting, by one or more processors, a location of a future fraudulent transaction based, at least in part, on the identified data relating to the one or more security contexts.

4. The computer-implemented method of claim 1 , the method further comprising:
receiving, by one or more processors, an activation request from the authorized computing device to authenticate a new payment card; and
communicating, by one or more processors, to the authorized computing device, a notification that includes: (i) an indication that the new payment card has been authenticated, and (ii) an instruction to discontinue use of the at least one temporary personal identification number.

5. The computer-implemented method of claim 1 , the method further comprising:
executing, by one or more computer processors, a security response for the associated account, wherein the associated account is a compromised account.

6. The computer-implemented method of claim 1 , the method further comprising:
elevating, by one or more computer processors, the security level of the associated account, wherein the associated account is a compromised account.

7. The computer-implemented method of claim 1 , the method further comprising:
monitoring, by one or more computer processors, one or more payment cards associated with the associated account to track suspicious activity on at least one of the one or more payment cards while the security level of the associated account has been elevated, wherein the associated account is a compromised account.

8. The computer-implemented method of claim 1 , the method further comprising:
tracking, by one or more computer processors, a progression and a physical pathway of an unknown user of one or more payment cards associated with the associated account, wherein the associated account is a compromised account.

9. A computer program product for executing an encrypted access policy, the computer program product comprising:
one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media, the stored program instructions comprising:
program instructions to identify a payment card authentication management request associated with an account, where the payment card authentication management request includes: (i) one or more payment cards, and (ii) one or more security contexts associated with the one or more payment cards;
program instructions to monitor one or more transactions associated with the account to detect one or more of the security contexts associated with one or more of the payment cards;
program instructions to determine to elevate a security level associated with the account based, at least in part, on the detection of the one or more of the security contexts; and
program instructions to generate at least one temporary personal identification number based, at least in part, on the determination to elevate the security level associated with the account;
program instructions to establish a dedicated channel connected to an authorized computing device associated with the account;
program instructions to communicate the at least one temporary personal identification number to the authorized computing device through the dedicated channel; and
program instructions to instruct the authorized computing device to utilize the at least one temporary personal identification number for one or more authorized transactions until a new payment card is issued to the user.

10. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to, in response to communicating the temporary personal identification number to the authorized computing device utilizing the dedicated channel, authorize one or the more transactions utilizing the temporary personal identification number.

11. The computer program product of claim 9 , the stored program instruction further comprising:
program instructions to execute a tracking module associated with (i) the account and (ii) the payment card;
program instructions to identify data relating to the one or more security contexts associated with one or more fraudulent transactions; and
program instructions to predict a location in which at least an additional fraudulent transaction will occur and communicating an alert to an employee or registered official of an institution for the account.

12. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to receive an activation request from the authorized computing device to authenticate a new payment card; and
program instructions to communicate, to the authorized computing device, a notification that includes: (i) an indication that the new payment card has been authenticated, and (ii) an instruction to discontinue use of the at least one temporary personal identification number.

13. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to execute a security response for the associated account, wherein the associated account is a compromised account.

14. The computer program product of claim 9 , the stored program instructions further comprising:
program instructions to elevate the security level of the associated account,

Assignees

• IBM

Inventors

• Kochura Nadiya
• Goldberg Itzhack
• Liu Su
• Lu Fang

Classifications

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q40/02 Primary

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title

• G06Q20/32

  using wireless devices · CPC title