Systems and methods for performing ATM fund transfer using active authentication

• US 10,108,959 B2
• Filed: 12/19/2014
• Issued: 10/23/2018
• Est. Priority Date: 03/15/2011
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Wolfs, Rudolph Christian, Pinski, David Aaron
• Primary Examiner(s): Obeid, Mamon
• Application Number:
  US14/577,716
• Publication Number:
  US 20150106275A1
• Time in Patent Office: 1,404 Days
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

A method of performing a fund transfer at an ATM includes receiving an active authentication transaction key at an ATM from a mobile financial transaction instrument via a wireless communication protocol, generating a PIN at the ATM, and storing the PIN in a machine readable storage medium. An authorization request message is transmitted to a financial institution identified by the active authentication transaction key. The authorization request message includes the PIN and at least a portion of the active authentication transaction key. The PIN is received from a user of the mobile financial transaction instrument, and the funds are dispensed in response to receiving the PIN.

Claims

1. A method of performing a funds transfer using an automated teller machine (ATM), comprising:

receiving, by at least one computer processor of a financial institution, a funds transfer request from a transferor having an account with the financial institution, said funds transfer request comprising a unique identifier of a mobile financial transaction instrument of a transferee;

generating, in response to the funds transfer request, by the at least one computer processor, a first PIN and a one-time active authentication transaction key, the key comprising a random alpha-numeric string;

storing, in a non-transient memory device, the one-time active authentication transaction key, the first PIN, and at least the unique identifier;

transmitting, by the at least one computer processor, a message comprising the first PIN to the mobile financial transaction instrument of the transferee uniquely identified in the funds transfer request;

establishing, by the at least one computer processor, a secure connection with the mobile financial transaction instrument of the transferee;

receiving, by the at least one computer processor via the established secure connection, a PIN from the mobile financial transaction instrument of the transferee;

validating, by the at least one computer processor, the received PIN by comparing the received PIN to the stored first PIN;

if the received PIN is validated, transmitting, by the at least one computer processor via the established secure connection, the stored one-time active authentication transaction key to the mobile financial transaction instrument of the transferee;

receiving, by the at least one computer processor, an authorization request for a funds transfer from an automated teller machine (ATM), said authorization request comprising the portion of a one-time active authentication transaction key received by the ATM from the mobile financial transaction instrument of the transferee and a second PIN generated by the ATM to authenticate the transferee;

validating, by the at least one computer processor, the received portion of the one-time active authentication transaction key by comparing the received portion of the one-time active authentication transaction key to the stored one-time active authentication transaction key;

if the received portion of the one-time active authentication transaction key is validated, transmitting, by the at least one computer processor, an authorization message to the ATM authorizing dispersal of funds to complete the funds transfer and transmitting the second PIN to the mobile financial instrument of the transferee;

receiving, by the ATM from the mobile financial transaction instrument of the transferee, the second PIN;

in response to receiving the authorization message from the at least one computer processor and the second PIN from the mobile financial transaction instrument of the transferee, verifying, by the ATM, whether the received second PIN matches the generated second PIN; and

dispensing, by the ATM, funds to complete the funds transfer if the received second PIN matches the generated second PIN.

2. The method of claim 1, wherein the step of transmitting the first PIN further comprises:

transmitting the first PIN to the mobile financial transaction instrument of the transferee via SMS or voicemail.

3. The method of claim 1, wherein the funds transfer request further comprises an email address for the transferee, and wherein the step of transmitting the first PIN further comprises:

transmitting the first PIN to the mobile financial transaction instrument of the transferee via email.

4. The method of claim 1, further comprising:

transmitting, by the at least one computer processor, a transaction confirmation request to a mobile financial transaction instrument of the transferor; and

receiving, at the at least one computer processor, a transaction confirmation from the mobile financial transaction instrument of the transferor.

5. The method of claim 1, wherein the one-time active authentication transaction key further comprises information identifying the financial institution.

6. The method of claim 1, further comprising:

transferring, in response to the funds transfer request, by the at least one computer processor, funds from the transferor'"'"'s account to a wash account.

7. The method of claim 1, further comprising:

if the portion of the one-time active authentication transaction key received from the ATM is invalid, transmitting, by the at least one computer processor, a message declining the authorization request to the ATM.

8. The method of claim 1, further comprising:

if the PIN received from the mobile financial transaction instrument of the transferee is invalid, transmitting, by the at least one computer processor, a message declining the funds transfer to the mobile financial transaction instrument of the transferee.

9. The method of claim 1, wherein the funds transfer request further comprises a time period during which the funds transfer is authorized, the method further comprising:

storing, in the non-transient memory device, the time period of the funds transfer request;

validating, by the at least one computer processor, that the authorization request from the ATM was received during the stored time period; and

if the authorization request from the ATM was received outside of the stored time period, transmitting, by the at least one computer processor, a message declining the authorization request to the ATM.

10. The method of claim 1, wherein the second PIN comprises a multi-character alphanumeric code generated by a random number generator.

11. A non-transient machine-readable storage medium encoded with program code, wherein the program code is configured such that, when executed by at least one computer processor of a financial institution, the at least one computer processor performs a method comprising the steps of:

receiving, by the at least one computer processor of a financial institution, a funds transfer request from a transferor having an account with the financial institution, said funds transfer request comprising a unique identifier of a mobile financial transaction instrument of a transferee;

generating, in response to the funds transfer request, by the at least one computer processor, a first PIN and a one-time active authentication transaction key, the key comprising a random alpha-numeric string;

storing, in a non-transient memory device, the one-time active authentication transaction key, the first PIN, and at least the unique identifier;

transmitting, by the at least one computer processor, a message comprising the first PIN to the mobile financial transaction instrument of the transferee uniquely identified in the funds transfer request;

establishing, by the at least one computer processor, a secure connection with the mobile financial transaction instrument of the transferee;

receiving, by the at least one computer processor via the established secure connection, a PIN from the mobile financial transaction instrument of the transferee;

validating, by the at least one computer processor, the received PIN by comparing the received PIN to the stored first PIN;

if the received PIN is validated, transmitting, by the at least one computer processor via the established secure connection, the stored one-time active authentication transaction key to the mobile financial transaction instrument of the transferee;

receiving, by the at least one computer processor, an authorization request for a funds transfer from an automated teller machine (ATM), said authorization request comprising the portion of a one-time active authentication transaction key received by the ATM from the mobile financial transaction instrument of the transferee and a second PIN generated by the ATM to authenticate the transferee;

validating, by the at least one computer processor, the received portion of the one-time active authentication transaction key by comparing the received portion of the one-time active authentication transaction key to the stored one-time active authentication transaction key;

if the received portion of the one-time active authentication transaction key is validated, transmitting, by the at least one computer processor, an authorization message to the ATM authorizing dispersal of funds to complete the funds transfer and transmitting the second PIN to the mobile financial instrument of the transferee;

receiving, by the ATM from the mobile financial transaction instrument of the transferee, the second PIN;

in response to receiving the authorization message from the at least one computer processor and the second PIN from the mobile financial transaction instrument of the transferee, verifying, by the ATM, whether the received second PIN matches the generated second PIN; and

dispensing, by the ATM, funds to complete the funds transfer if the received second PIN matches the generated second PIN.

12. The non-transient storage medium of claim 11, wherein the one-time active authentication transaction key further comprises information identifying the financial institution.

13. The non-transient storage medium of claim 11, wherein the step of transmitting the first PIN further comprises:

transmitting the first PIN to the mobile financial transaction instrument of the transferee via SMS or voicemail.

14. The non-transient storage medium of claim 11, wherein the funds transfer request further comprises an email address for the transferee, and wherein the step of transmitting the first PIN further comprises:

transmitting the first PIN to the mobile financial transaction instrument of the transferee via email.

15. The non-transient storage medium of claim 11, wherein the encoded program code is further configured such that, when executed by the at least one computer processor, the method performed further comprises:

transmitting a transaction confirmation request to a mobile financial transaction instrument of the transferor; and

receiving a transaction confirmation from the mobile financial transaction instrument of the transferor.

16. The non-transient storage medium of claim 11, wherein the encoded program code is further configured such that, when executed by the at least one computer processor, the method performed further comprises:

transferring, in response to the funds transfer request, funds from the transferor'"'"'s account to a wash account.

17. The non-transient storage medium of claim 11, wherein the encoded program code is further configured such that, when executed by the at least one computer processor, the method performed further comprises:

if the portion of the one-time active authentication transaction key received from the ATM is invalid, transmitting a message declining the authorization request to the ATM; and

if the PIN received from the mobile financial transaction instrument of the transferee is invalid, transmitting a message declining the funds transfer to the mobile financial transaction instrument of the transferee.

18. The non-transient storage medium of claim 11, wherein the encoded program code is further configured such that, when executed by the at least one computer processor, the method performed further comprises:

storing, in the non-transient memory device, a time period of the funds transfer request, wherein the funds transfer request further comprises the time period during which the funds transfer is authorized;

validating that the authorization request from the ATM was received during the stored time period; and

if the authorization request from the ATM was received outside of the stored time period, transmitting a message declining the authorization request to the ATM.