Sustained authentication of a customer in a physical environment

• US 10,540,861 B2
• Filed: 12/20/2007
• Issued: 01/21/2020
• Est. Priority Date: 12/20/2007
• Status: Active Grant

• Current Assignee: NCR Corporation
• Original Assignee: NCR Corporation
• Inventors: McNamara, Michael R.
• Primary Examiner(s): Detweiler, James M
• Assistant Examiner(s): Mandel, Monica A
• Application Number:
  US12/004,350
• Publication Number:
  US 20090165092A1
• Time in Patent Office: 4,415 Days
• Field of Search: 705 64
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06T 2207/30241 Trajectory
• CPC Class Codes: G06T 7/70 Determining position or orientation of objects or cameras camera calibration G06T7/80
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system for use in allowing a user to conduct one or more transactions at one or more touchpoints in a business facility includes an authentication component, a tracking component, and a control component. The authentication component is configured to authenticate the user as a person allowed to conduct the one or more transactions. The tracking component is configured to track the user'"'"'s location within the facility as the user moves through the facility. The control component is configured (a) to receive authentication information from the authentication component, (b) to receive location information from the tracking component, (c) to use the location information to recognize that the user has moved into position to engage one of the touchpoints, and (d) to deliver a message to the touchpoint authorizing the touchpoint to engage in one or more transactions with the user.

Claims

1. A method of allowing a user to conduct multiple transaction sessions at multiple transaction terminals and a visual-camera-based user tracking system (tracking system) in a business facility without requiring user entry of authenticating information on more than one of the transaction terminals associated with the transaction sessions, wherein the tracking system includes a device and video cameras situated within the business facility, wherein each of the transaction terminals and the device includes a processor that executes instructions stored in a persistent storage medium, the instructions executed to perform the method, the method comprising:

detecting, at an initial transaction terminal, a card inserted by the user along with a Personal Identification Number (PIN) that is entered by the user after insertion of the card at the initial transaction terminal;

authenticating, by the initial transaction terminal, the user as an authenticated user based on the card and the PIN for a first transaction within a business facility;

sending, by the initial transaction terminal, an authentication record for the authenticated user to the tracking system;

performing, by the initial transaction terminal, the first transaction based on selections and input provided by the authenticated user;

tracking, by the tracking system, real-time visual data of the authenticated user while the authenticated user remains in the business facility;

determining, by the tracking system, from the real-time visual data that the authenticated user is at a second transaction terminal within the business facility;

sending, by the tracking system, a first message that includes an authentication packet to the second transaction terminal based on the authentication record maintained for the authenticated user;

receiving, by the second transaction terminal within the business facility, the first message containing the authentication packet from the tracking system

recognizing, by the second transaction terminal, based on receipt of the first message that the authenticated user is located at the second transaction terminal for a second transaction within the business facility;

obtaining, by the second transaction terminal, an authentication code from the authentication packet;

beginning, by the second transaction terminal, a transaction session for the second transaction within the business facility using information in the authentication packet and the authentication code without requiring the authenticated user to provide any user identifying information to the second transaction terminal;

identifying, by the tracking system, movement of the authenticated user away from the second transaction terminal;

sending, by the tracking system, a second message to the second transaction terminal;

receiving, by second the transaction terminal, the second message from the tracking system as an indication that the authenticated user is no longer located at the second transaction terminal;

ending, by the second transaction terminal, the transaction session for the second transaction based on receipt of the second message; and

sustaining, by the tracking system, authentication of the user for transacting at other transaction terminals through further first and second messages sent to the other transaction terminals while locations of the user are detected as being within the business facility.

2. The method of claim 1 wherein the authentication packet further includes an account number of the authenticated user.

3. The method of claim 1 wherein the authentication packet further includes an image of the authenticated user.

4. The method of claim 1 wherein the second transaction terminal comprises an automated teller machine.