System and method of authentication using a re-writable card verification value

Patent metadata

Field	Value
Publication number	US-9905085-B1
Application number	US-201414546351-A
Country	US
Kind code	B1
Filing date	Nov 18, 2014
Priority date	Apr 7, 2011
Publication date	Feb 27, 2018
Grant date	Feb 27, 2018

Abstract

Embodiments of the method for authenticating may include causing an automated teller machine to replace a card verification value with an updated card verification value during a first transaction at the automated teller machine when a re-write condition is present, such as a request from an account holder, a determination that the security of the card was compromised during a prior transaction, a predetermined time interval has lapsed, a predetermined number of transactions have occurred since a previous time the card verification value was rewritten, and according to a predetermined geographical parameter. The updated card verification value may be stored as a current value in a verification value database. The method may include receiving a card verification request related to a second transaction, and authenticating, using verification logic, the second transaction by determining whether the card verification value for the second transaction matches the current value stored in the database.

First claim

What is claimed is:

1. A method of authenticating a transaction with a transaction card, comprising:
causing an automated teller machine to replace a card verification value with an updated card verification value written to the card as part of a first transaction at the automated teller machine, wherein the updated card verification value is written to the card while inserted into the automated teller machine when a re-write condition for the first transaction is satisfied, wherein the re-write condition for the first transaction is:
a determination that the security of the card has been compromised during a prior transaction;

storing the updated card verification value as a current value in a verification value database;
receiving a card verification request related to a second transaction from a merchant or an automated teller machine; and
authenticating, using verification logic, the second transaction based at least in part on determining whether the card verification value for the second transaction matches the current value stored in the verification value database.

2. The method of claim 1 , further comprising denying the card verification request for the second transaction when the card verification value for the second transaction does not match the current value stored in the verification value database.

3. The method of claim 1 , wherein the card verification value is magnetically written on a strip of magnetic media located on the card.

4. The method of claim 1 , further comprising determining that the re-write condition is satisfied and transmitting a message to the cardholder prompting the cardholder to use the card at an automated teller machine, the message being at least one of: an e-mail, a mobile text message, and a voicemail.

5. The method of claim 1 , further comprising authenticating the card prior to writing the card verification value by receiving a valid personal identification number (PIN) provided at the automated teller machine by a user.

6. A system, comprising:
an automated teller machine comprising a card reader/writer;
a verification code generator; and
authentication logic accessible by the automated teller machine for authenticating a transaction using a transaction card;
wherein the verification code generator is configured to generate a verification code;
wherein the automated teller machine is configured to write a first generated verification code to the transaction card when the transaction card is inserted into the automated teller machine prior to a first transaction during which the security of the card is compromised;
wherein the automated teller machine is configured to determine that the security of the card has been compromised during the first transaction;
wherein the automated teller machine is configured to write a second generated verification code to the transaction card to replace the first generated verification code when the transaction card is inserted into the automated teller machine after the first transaction, responsive to the determination that the security of the card has been compromised during the first transaction;
wherein the authentication logic is configured to detect an attempted fraud during a second transaction, the attempted fraud being detected by comparing the card verification value for the second transaction with the second generated verification code written to the card when inserted into the automated teller machine.

7. The system of claim 6 , wherein the authentication logic denies the second transaction when the card verification value for the second transaction does not match the second generated verification code written to the card.

8. The system of claim 6 , wherein the automated teller machines writes the generated card verification value to a strip of magnetic media located on the card.

9. The system of claim 6 , wherein the authentication logic is further configured to authenticate the card when the card is inserted into the automated teller machine.

10. The system of claim 9 , wherein the card is authenticated based on a personal identification number (PIN) input by the user at the automated teller machine.

11. The system of claim 6 , further comprising communication logic executable by the system configured to cause transmission of a message to a cardholder responsive to the determination that the security of the card has been compromised during the first transaction, wherein the message prompts the cardholder to use the card at the automated teller machine, the message being at least one of: an e-mail, a mobile text message, and a voicemail.

12. A system comprising:
an automated teller machine;
a computer server system comprising one or more networked computer servers having machine-readable media;
program logic stored on the machine-readable media that, when executed by the servers, causes the servers to perform the functions of the system; and
wherein one of the automated teller machine and the computer server system further comprises a verification code generator;
wherein the verification code generator is configured to generate a verification code;
wherein the automated teller machine is configured to write a first generated verification code to the transaction card when the transaction card is inserted into the automated teller machine prior to a first transaction during which the security of the card is compromised;
wherein the automated teller machine is configured to determine that the security of the card has been compromised during the first transaction;
wherein the automated teller machine is configured to write a second generated verification code to the transaction card to replace the first generated verification code when the transaction card is inserted into the automated teller machine after the first transaction, responsive to the determination that the security of the card has been compromised during the first transaction;
wherein the program logic comprises network interface logic to connect the computer server system to the automated teller machine and a merchant transaction machine;
wherein the program logic further comprises authentication logic configured to detect an attempted fraud during a second transaction, the attempted fraud being detected by comparing the card verification value for the second transaction with the second generated verification code written to the card when inserted into the automated teller machine.

13. The system of claim 12 , wherein the authentication logic is configured to deny the second transaction when the card verification value for the second transaction does not match the second generated verification code written to the card.

14. The system of claim 12 , wherein the authentication logic is further configured to authenticate the card when the card is inserted into the automated teller machine.

15. The system of claim 12 , wherein the program logic further comprises communication logic executable by the system configured to cause transmission of a message to a cardholder responsive to the determination that the security of the card has been compromised during the first transaction, wherein the message prompts the cardholder to use the card at the automated teller machine, the message being at least one of: an e-mail, a mobile text message, and a voicemail.

16. The system of claim 12 , wherein the network interface logic further provides an interface for mobile devices.

17. The method of claim 1 , wherein the updated card verification value is updated from a previous card verification value and has different lengt

Assignees

• Wells Fargo Bank Na

Inventors

• Thomas Michael
• Lee Jesse
• Puffer Steve
• Rhodes Jerome

Classifications

• G07F19/209 Primary

  Monitoring, auditing or diagnose of functioning of ATMs · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title