METHOD FOR SECURE USE OF IDENTIFICATION CARDS

• US 20090283586A1
• Filed: 04/24/2009
• Published: 11/19/2009
• Est. Priority Date: 04/25/2008
• Status: Active Grant

• Current Assignee: Advanced Platform Solutions LLC
• Original Assignee: Advanced Platform Solutions LLC
• Inventors: Cecere, Christopher
• Granted Patent: US 9,508,074 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions

Abstract

A method for approving or refusing a transaction is based on the use of an identification card having card data thereon, the card data identifying account information pertaining to the authorized user of the identification card. The method includes storing issuer secondary security data in association with the account information. A transaction approval request is received from a vendor, the transaction approval request including the card data and transaction secondary identifier (secondary ID) data. The transaction is refused if the transaction secondary ID data does not correlate properly to the stored issuer secondary security data. Optionally, a post-transaction confirmation request is issued if the transaction is not refused.

Claims

1. A method for improving the security of a transaction based on the use of an identification card having card data thereon, the card data identifying account information pertaining to the authorized user of the identification card, the method comprising:

storing issuer secondary security data in association with account information;

receiving a transaction approval request from a vendor, the transaction approval request including the card data and transaction secondary identification (secondary ID) data;

comparing the transaction secondary ID data to the stored issuer secondary security data; and

refusing the transaction if the transaction secondary ID data does not correspond to the stored issuer secondary security data.

2. The method of claim 1 wherein the issuer secondary security data is derived from a secondary ID document of the authorized user.

4. The method of claim 1 wherein the issuer secondary security data is derived from a biometric based on a biological aspect of the card user.

5. The method of claim 4 wherein the biometric is derived from an electronic file based on the card user'"'"'s fingerprint, iris or voice.

6. The method of claim 1 wherein the issuer secondary security data is derived from a plurality of secondary IDs.

7. The method of claim 6 wherein the issuer secondary security data is derived from a secondary ID document and a biometric based on a biological aspect of the card user.

3. The method of claim 3 wherein the secondary ID document is a driver'"'"'s license.

8. A method for improving the security of a transaction based on the use of an identification card having card data thereon, the card data identifying account information pertaining to the authorized user of the identification card, the method comprising:

receiving a transaction approval request from a vendor;

approving the transaction;

issuing a post-transaction confirmation request after the transaction is approved; and

taking remedial action upon receipt of a repudiation response to the post-transaction confirmation request or upon lack of a response to the post-transaction confirmation request.

9. The method of claim 8, further comprising replacing the issuer secondary security data with new issuer secondary security data after the transaction.

10. The method of claim 8, wherein the post-transaction confirmation request comprises a cell phone text message, an interactive cell phone message, an email, or a combination of two or more thereof.

11. A method for improving the security of a transaction based on the use of an identification card having card data thereon, the card data identifying account information pertaining to the authorized user of the identification card, the method comprising:

receiving a transaction approval request from a vendor;

approving the transaction;

issuing a post-transaction confirmation request after the transaction is approved;

receiving a response to the post-transaction confirmation request;

characterizing the response as a confirmation response or a repudiation response; and

recording a confirmation record after receiving a confirmation response to the post-transaction confirmation request or taking remedial action upon receipt of a repudiation response to the post-transaction confirmation request.

12. The method of claim 11, further comprising replacing the issuer secondary security data with new issuer secondary security data after the transaction.

13. The method of claim 11, wherein the post-transaction confirmation request comprises a cell phone text message, an interactive cell phone message, an email, or a combination of two or more thereof.

14. A method for improving the security of a transaction based on the use of an identification card having card data thereon, the card data identifying account information pertaining to the authorized user of the identification card, the method comprising:

storing issuer secondary security data in association with account information;

receiving a transaction approval request from a vendor, the transaction approval request including the card data and transaction secondary identification (secondary ID) data;

comparing the transaction secondary ID data to the stored issuer secondary security data;

approving the transaction;

issuing a post-transaction confirmation request after the transaction is approved; and

receiving a response to the post-transaction confirmation request;

characterizing the response as a confirmation response or a repudiation response; and

recording a confirmation record after receiving a confirmation response to the post-transaction confirmation request or taking remedial action upon receipt of a repudiation response to the post-transaction confirmation request or upon lack of a response to the post-transaction confirmation request.