Systems and methods for performing person-to-person transactions using active authentication

• US 10,453,062 B2
• Filed: 05/27/2011
• Issued: 10/22/2019
• Est. Priority Date: 03/15/2011
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Wolfs, Rudolph Christian, Pinski, David Aaron
• Primary Examiner(s): Obeid, Mamon
• Application Number:
  US13/117,516
• Publication Number:
  US 20120239577A1
• Time in Patent Office: 3,070 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

In some embodiments, a method of performing a person-to-person financial transaction includes receiving an active authentication transaction key at a mobile financial transaction instrument of a transferor from a financial institution, storing the active authentication transaction key in a non-transient machine-readable storage medium of the mobile financial transaction instrument of the transferor, and transferring the active authentication transaction key to a mobile financial transaction instrument of a transferee for completion of the person-to-person financial transaction using wireless transmission.

Claims

1. A computer-implemented method of performing a person-to-person financial transaction between a transferor account from which funds are to be transferred and a transferee account into which funds are to be transferred, the method comprising steps of:

receiving, by one or more first processors associated with a financial institution and from a first device associated with the transferor account, a request to perform a person-to-person financial transaction, the request being associated with one or more parameters configurable by the first device;

generating, by the one or more first processors and in response to the received request, a first PIN and an active authentication key;

storing, in one or more non-transitory memory devices associated with the financial service provider, the active authentication key and the first PIN;

transmitting, by the one or more first processors and to a second device associated with the transferee account, the first PIN;

establishing, by the one or more first processors, a secure connection with the second device;

receiving, by the one or more first processors and from the second device via the established secure connection, a second PIN;

validating, by the one or more first processors, the second PIN by comparing the second PIN to the first PIN;

transmitting, by the one or more first processors and responsive to validating the second PIN, the active authentication key to the second device;

receiving, by the one or more first processors, an authorization request for a funds transfer from one or more second processors associated with an automated teller machine (ATM), the authorization request comprising at least a portion of the active authentication key;

validating, by the one or more first processors, the received at least portion of the active authentication key by comparing the received at least the portion of the active authentication key to the stored active authentication key;

transmitting, by the one or more first processors and responsive to validating the received at least portion of the active authentication key, an authorization message to the one or more second processors authorizing dispersal of funds;

generating, by the one or more second processors, a third PIN;

transmitting, by the one or more second processors, the third PIN to the one or more first processors;

transmitting, by the one or more first processors, the third PIN to the second device;

receiving, by the one or more second processors and from the second device, the third PIN;

verifying, by the one or more second processors and responsive to receiving the authorization message and the third PIN, the received third PIN by comparing the received third PIN with the generated third PIN; and

dispensing, by the one or more second processors and responsive to verifying the received third PIN, funds to complete the person-to-person financial transaction.

2. The method of claim 1, wherein the active authentication transaction key lacks a static identifier.

3. The method of claim 1, wherein the transmitted active authentication transaction key and the first PIN are transmitted via at least one encrypted communication channel.

4. The method of claim 1, wherein the one or more second processors transmit a request to receive contact information for the financial institution from a registry to validate the active authentication transaction key, and the registry transmits the requested contact information to the one or more second processors based on at least a portion of the active authentication transaction key.

5. The method of claim 1 further comprising authenticating, by the one or more first processors, the second device prior to sending the request to the one or more first processors.

6. The method of claim 1 further comprising:

transferring, by the one or more first processors, funds associated with the request into a wash account from the transferor account, and responsive to receiving a confirmation of the request from the first device; and

dispensing, by the one or more first processors, the funds from the wash account responsive to validating the second PIN.

7. The method of claim 1, wherein the active authentication transaction key comprises a single-use active authentication transaction key.

16. The method of claim 1, wherein the request to perform the person-to-person financial transaction comprises a unique identifier of the second, the method further comprising storing, in the one or more non-transitory memory devices, the unique identifier with the active authentication key and the first PIN.

18. The method of claim 1, further comprising transmitting, by the one or more second processors, the active authentication key with the third PIN to the one or more first processors.

8. A system, comprising:

one or more financial service provider processors;

one or more ATM processors in communication with the one or more financial service provider processors;

a first memory in communication with the one or more financial service provider processors and storing instructions that, when executed, are configured to cause the one or more financial service provider processors to;

receive, from a first device associated with a transferor account, a request to perform a person-to-person financial transaction, the request being associated with one or more parameters configurable by the first device;

generate, in response to the received request, a first PIN and an active authentication key;

store, in one or more non-transitory memory devices, the active authentication key and the first PIN;

transmit, to a second device associated with a transferee account, the first PIN;

establish a secure connection with the second device;

receive, from the second device via the established secure connection, the second PIN;

validate the second PIN by comparing the second PIN to the first PIN;

transmit, in response to validating the second PIN, the active authentication key to the second device;

receive, an authorization request for a funds transfer from the one or more ATM processors, the authorization request comprising at least a portion of the active authentication key;

validate the received at least portion of the active authentication key by comparing the received at least the portion of the active authentication key to the stored active authentication key; and

transmit, in response to validating the received at least portion of the active authentication key, an authorization message to the one or more ATM processors authorizing dispersal of funds; and

a second memory in communication with the one or more ATM processors and storing instructions that, when executed, are configured to cause the one or more ATM processors to;

generate a third PIN;

transmit the third PIN to the one or more financial service provider processors;

receive, from the second device, the third PIN;

verify, in response to receiving the authorization message and the third PIN, by comparing the received third PIN with the generated third PIN; and

dispense, in response to verifying the received second PIN, funds to complete the person-to-person financial transaction.

9. The system of claim 8, wherein the active authentication transaction key lacks a static identifier.

10. The system of claim 8, wherein the transmitted active authentication transaction key and the first PIN are transmitted via at least one encrypted communication channel.

11. The system of claim 8, wherein the one or more ATM processors are further configured to transmit a request to receive contact information from a registry, and the registry is configured to transmit the requested contact information to the one or more ATM processors based on at least a portion of the active authentication transaction key.

12. The system of claim 8, wherein the one or more financial service provider processors are further configured to authenticate the mobile financial transaction instrument of the transferor prior to receiving the request.

13. The system of claim 8, wherein the one or more financial service provider processors are further configured to transfer funds associated with the request into a wash account from the transferor account, and responsive to a received confirmation of the request from the first device.

14. The system of claim 13, wherein the one or more financial service provider processors are further configured to dispense the funds from the wash account responsive to validating the second PIN.

15. The system of claim 8, wherein the active authentication transaction key comprises a single-use active authentication transaction key.

19. The system of claim 8, wherein the second memory stores additional instructions that, when executed, are configured to cause the one or more ATM processors to:

transmit the at least a portion of the active authentication key with the third PIN to the one or more financial service provider processors.

17. A system, comprising:

one or more first processors associated with a financial service provider; and

a memory in communication with the one or more first processors and storing instructions that, when executed by the one or more first processors, are configured to cause the system to;

receive, from a first device associated with a transferor account, a request to perform a person-to-person financial transaction, said request being associated with one or more parameters configurable by the first device and comprising a unique identifier of a second device associated with a transferee account;

generate, in response to the received request, a first PIN and an active authentication key;

store, in one or more non-transitory memory devices, the active authentication key, the first PIN, and the unique identifier of the transferee mobile financial transaction device;

transmit, to the second device, the first PIN;

receive, from the second device, a second PIN;

validate the second PIN by comparing the second PIN to the first PIN; and

transmit, in response to validating the second PIN, the active authentication key to the second device;

one or more second processors associated with an ATM; and

a second memory in communication with the one or more second processors and storing instructions that, when executed, are configured to cause the one or more second processors to;

generate a third PIN;

transmit the third PIN to the one or more first processors;

transmit, an authorization request for a funds transfer to one or more first processors, the authorization request comprising at least a portion of the active authentication key;

receive an authorization message from the one or more first processors authorizing the dispersal of funds;

receive, from the second device, the third PIN obtained from the financial service provider processors;

verify, in response to receiving the authorization message and the third PIN, by comparing the received third PIN with the generated third PIN; and

dispense, in response to verifying the received third PIN, funds to complete the person-to-person financial transaction.

20. The system of claim 17, wherein the second memory stores additional instructions that, when executed, are configured to cause the one or more second processors to:

transmit the active authentication key with the third PIN to the one or more first processors.