DISPLAY PAYMENT CARD WITH FRAUD AND LOCATION DETECTION

• US 20090248581A1
• Filed: 06/08/2009
• Published: 10/01/2009
• Est. Priority Date: 12/17/2003
• Status: Active Grant

• Current Assignee: Fitbit, Inc. (Alphabet Inc.)
• Original Assignee: Qsecure Inc.
• Inventors: Brown, Kerry D.
• Granted Patent: US 8,104,679 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06K 19/06187 with magnetically detectable marking
• CPC Class Codes: G06K 19/06196 Constructional details
• CPC Class Codes: G06K 19/07 with integrated circuit chips
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/12 the marking being sensed by magnetic means
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/343 Cards including a counter
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A payment card comprises a display to support card-not-present transactions where no card reader is available to automate the transaction, and an account number retrieval method for dynamic, one-time use virtual account numbers whose use can assist authorities in rapid fraud and location detection. The account number generator is able to produce a sequence of virtual account numbers over its life that are predictable by the issuing bank and useful in authenticating transactions. A server for the issuing bank logs the merchant locations associated with each use or attempted use, and provides real-time detection of fraudulent attempts to use a virtual account number outside the predicted set. Fraud identification efforts can then be directed in a timely and useful way.

Claims

1. A method for limiting card-not-present payment card fraud, comprising:

loading individual table values with a sequence of next valid values to crypto-tables within a population of payment cards during manufacturing and before distribution to their corresponding users;

equipping each said payment card with a user display, and a device to automatically fetch a next valid value in a sequence from said crypto-table to a dynamic portion of a new account number readable on said display each time such is used in a merchant transaction;

providing a financial network for reporting said new account number by a user to a merchant when initiating a card-not-present merchant transaction;

analyzing a report from said merchant to determine if said new account number includes an expected next valid value in said crypto-table that was loaded in that particular payment card during manufacturing and before distribution its user;

logging a merchant identification data associated with each said report from said merchant into a database; and

deciding whether to authorize said merchant transaction based on previous data logged into said database related to previous merchant transactions for said particular payment card.

2. The method of claim 1, further comprising:

mining said database for evidence of fraudulent payment card use that includes an attempt to initiate any subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

reporting corresponding merchant identification data from said database for law enforcement efforts which identify said payment card and locations of said merchant card reader.

3. The method of claim 1, further comprising:

mining said database for evidence of fraudulent payment card use that includes an attempt to initiate any subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

not allowing said payment card to initiate any further merchant transactions.

4. The method of claim 1, further comprising:

mining said database for evidence of fraudulent payment card use that includes an attempt to initiate any subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

disabling said payment card from being able to initiate any further merchant transactions.

5. A card-not-present payment card system, comprising:

a payment card with a display to communicate account information to a payment processing server through a merchant;

a sequence of next valid values permanently disposed in crypto-tables within said payment card;

a microcontroller included in said payment card to internally fetch a sequence of next valid values said crypto-table to include as a dynamic portion of a new account number for automatic presentation on said display and without user intervention each time the payment card is used in a merchant transaction;

a payment processing server configured to analyze a report from said merchant to determine if said new account number includes an expected next valid value in said crypto-table that was loaded in that particular payment card during manufacturing and before distribution to its user;

a database of merchant identification data associated with each said report from said merchant; and

a program for deciding whether to authorize said merchant transaction based on a validity criteria associated with said new account number.

wherein, the user is not provided an input to make choices or selections into their payment card, and the payment card itself does not employ a card number generator algorithm to calculate said new account number.

6. The payment card system of claim 5, further comprising:

a device for mining said database for evidence of fraudulent payment card use that includes an attempt to initiate a subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

a report data to enable efforts in real-time which identify said payment card and locations of said merchant card reader.

7. The payment card system of claim 5, further comprising:

a processor for mining said database for evidence of fraudulent payment card use that includes an attempt to initiate a subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

a processor for disabling said payment card from being able to initiate any further merchant transactions.

8. The payment card system of claim 5, further comprising:

a device for mining said database for evidence of fraudulent payment card use that includes an attempt to initiate a subsequent merchant transaction with an account number that was already accepted for use in a previous merchant transaction; and

a reporting device to identify payment cards and locations of said merchants, and that reduce uncertainty in when and where a fraudulent transaction had originated.

9. A display-type payment card for card-not-present financial transactions, comprising:

a user display on a payment card base;

a crypto-table disposed in the payment card and including a set of individual table values having a sequence of next valid values loaded during manufacturing and before distribution to users, wherein the numbers stored in the table during manufacturing were already encrypted using a seed connected with the user, or chosen at random and then ordered, such that a next valid number cannot be predicted from any that were used before and that there is an expected order to the crypto-table values being fetched by each payment card; and

a device to automatically fetch a next valid value in a sequence from said crypto-table to a dynamic portion of a new account number readable on said display during a merchant transaction.

10. The display-type payment card of claim 9, further comprising:

a Q-button for triggering said account numbers to be presented on said user display in response to a finger press.

11. The display-type payment card of claim 9, further comprising:

a front layer that includes a digital user display for displaying a virtual account number and/or an expiration date, and a middle layer that includes electronics for a virtual account number generator and a display controller.

12. The display-type payment card of claim 9, further comprising:

a flexible digital display and an embedded battery able to operate the electronics, wherein at least some digits of a virtual account number displayed are fixed by being embossed or printed and not electronically represented.

13. The display-type payment card of claim 9, further comprising:

a device for not writing or displaying any virtual account numbers until they are actually going to be used in a card-not-present transaction, and wherein a new valid use-once account number is provided in said user display in response to a stimulus.

14. The display-type payment card of claim 9, further comprising:

a dynamic magnetic stripe;

wherein, the sending of a virtual account number to said user display and dynamic magnetic stripe are independent, or they are coordinated in the case of a card-present point-of-sale transaction such that the last four account numbers can be read off and keyed manually into a card reader.

15. The display-type payment card of claim 9, wherein said user display presents a 16-digit personal account number (PAN).