Devices and systems for detecting unauthorized communication of data from a magnetic stripe device or embedded smart chip device

• US 10,366,582 B2
• Filed: 06/21/2016
• Issued: 07/30/2019
• Est. Priority Date: 06/21/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kurian, Manu Jacob
• Primary Examiner(s): Bridges, Christopher
• Application Number:
  US15/188,659
• Publication Number:
  US 20170365134A1
• Time in Patent Office: 1,134 Days
• Field of Search: None
• CPC Class Codes: G06K 19/06187 with magnetically detectable marking
• CPC Class Codes: G06K 19/07309 Means for preventing undesired reading or writing from or onto record carriers
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3437 the counter having non-monetary units, e.g. trips
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Disclosed are devices, systems and the like for determining unauthorized communication of data from a card device equipped with a magnetic stripe and/or smart chip. The card device is able to count by recording the number of instances in which the card device has either been swiped at a magnetic card reader or communicated data via an embedded Integrated Circuit (IC). In specific embodiments, the device is further configured to differentiate between authorized swipes/data communications and unauthorized data communications.

Claims

1. A device configured for detecting unauthorized communication of data from the device, the device comprising:

a card-like body;

an integrated circuit, embedded within the card-like body, having corresponding memory configured to store user data;

at least one sensor in communication with the integrated circuit and comprising one or more of a gyroscope, a pressure sensor and a light sensor; and

an insertion detection routine stored in the memory, executable by the integrated circuit and configured to;

detect that the device has been inserted into a reader terminal by implementing one or more of (i) the gyroscope to determine proper insertion orientation of the device into the reader terminal based on location of the integrated circuit, (ii) the pressure sensor to determine a requisite pressure applied to the device while inserted into the reader terminal, and (iii) the light sensor to determine a requisite level of light encountered by the device for a predetermined period of time while inserted into the reader terminal,

count, by recording as first data in the memory, each detected instance of the device being inserted into a reader terminal.

2. The device of claim 1, wherein the integrated circuit is configured to:

count, by recording as second data in the memory, each instance (a) the device coming into contact with an electromagnetic field, and (b) initiating a wireless communication protocol to communicate the second data from the memory.

3. The device of claim 1, wherein the integrated circuit is configured to:

count, by recording as second data in the memory, each instance of (a) the device coming into contact with a short-range wireless communication reader, and (b) initiating a short-range wireless communication protocol to communicate the user data from the memory to the short-range wireless communication reader.

4. The device of claim 1, wherein the at least one sensor further comprises one or more of an accelerometer, the gyroscope, the pressure sensor and the light sensor and the device further comprises:

a magnetic stripe disposed on a facing of the card-like body and configured to store third data;

a swipe detection routine stored in the memory, executable by the integrated circuit and configured to;

detect that the magnetic stripe has been swiped at a magnetic swipe reader by implementing one or more of (i) the accelerometer to determine a requisite level of acceleration associated with swiping, (ii) the gyroscope to determine proper swipe orientation of the device based on location of the magnetic stripe on the device, (iii) the pressure sensor to determine a requisite pressure at the magnetic stripe associated with swiping the device thru the magnetic stripe reader, and (iv) the light sensor to determine a requisite level of light encountered by the device while being swiped thru the magnetic stripe reader, and

count, by recording as second data in the memory, each detected instance of the magnetic strip being swiped at a magnetic stripe reader.

5. The device of claim 1, further comprising a display, disposed on a facing of the card-like body, configured to display a number associated with detected instances of the device being inserted into a reader terminal.

6. The device of claim 1, further comprising at least one short-range wireless communication mechanism, wherein the short-range wireless communication mechanism is configured to communicate, to a mobile communication terminal, a number associated with detected instances of the device being inserted into a reader terminal.

7. The device of claim 1, wherein the device is configured to, upon being inserted into an Automated Teller Machine (ATM), be read, from the memory, a number associated with detected instances of the device being inserted into a reader terminal and, wherein the number is displayed at the ATM.

8. The device of claim 1, further comprising a clock mechanism, wherein the clock mechanism is configured to record a time, at which, each detected instance of the device being inserted into a reader terminal occurred.

9. The device of claim 1, wherein the device is further configured to differentiate between authorized and unauthorized instances of the device being inserted into a reader terminal.

10. The device of claim 9, wherein the device is configured to record, in the memory, a registered identifier, wherein the registered identifier is communicated to the device from an authorized reader terminal in response to communicating the user data from the memory to the authorized reader terminal.

11. The device of claim 1, wherein the device is further configured, in response to determining that a threshold count has been met or exceeded within a predetermined period of time, initiate communication of an electronic alert to a user of the device.

12. The device of claim 1, wherein the device is further configured, in response to determining that a threshold count has been met or exceeded within a predetermined period of time, deactivate the device from communicating the user data.

13. A system for detecting unauthorized communication of data from a device, the system comprising:

a device including;

a card-like body;

an integrated circuit, embedded within the card-like body, having corresponding first memory configured to store user data;

at least one sensor in communication with the integrated circuit and comprising one or more of a gyroscope, a pressure sensor and a light sensor; and

an insertion detection routine stored in the memory, executable by the integrated circuit and configured to;

detect that the device has been inserted into a reader terminal by implementing one or more of (i) the gyroscope to determine proper insertion orientation of the device into the reader terminal based on location of the integrated circuit, (ii) the pressure sensor to determine a requisite pressure applied to the device while inserted into the reader terminal, and (iii) the light sensor to determine a requisite level of light encountered by the device for a predetermined period of time while inserted into the reader terminal,

count, by recording as first data in the memory, each detected instance of the device being inserted into a reader terminal;

and

a mobile communication terminal having a second memory, at least one processor in communication with the second memory, a display and control module, stored in the second memory, executable by the processor and configured to;

receive, via short-range wireless communication, a number associated with detected instances of the device being inserted into a reader terminal, and

display the number on the display of the mobile communication terminal.

14. The system of claim 13, wherein the control module is further configured to reset counting at the device by communicating, via short-range wireless communication, a reset signal to the device.

15. The system of claim 13, wherein the control module is further configured to receive and display, on the mobile communication terminal, an alert that indicates that the device has met or exceeded, over a predetermined period of time, a predetermined number of instances of the device being inserted into a reader terminal.