Payment device policy management

• US 20130254083A1
• Filed: 03/22/2012
• Published: 09/26/2013
• Est. Priority Date: 03/22/2012
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bolgert, Anne Louise, Cohen, Richard Jay, Forlenza, Randolph Michael, Kalyanaraman, Raghuraman, Kumar, Suresh Vemulapalli
• Application Number:
  US13/427,229
• Publication Number:
  US 20130254083A1
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

A method, apparatus and computer program product enables user-directed, selective control of payment transactions for a user'"'"'s payment device. The techniques enable a payment device user to create and manage self-defined policies on how a particular payment device (tangible or intangible) may be used. This approach enables the end user, as opposed to the financial or commercial institution, to control transactions with respect to the account. Thus, for example, using a display interface, the account holder can control factors such as: allowed or disallowed vendors, a number of charges, timing of charges, a charge frequency, types of purchases allowed, and the amount charged. This fine-grained, device-specific control mechanism enables account holders to protect financial assets against fraudulent or improper activity. The approach provides a policy management system by which user-directed options for selectively controlling and restricting payment transactions may be realized, thereby providing better security and more customized account control.

Claims

1-8. -8. (canceled)

9. Apparatus for policy creation and management, comprising:

a processor;

computer memory holding computer program instructions that when executed by the processor perform a method for user-directed, selective control of payment transactions, the method comprising;

upon receipt of a request, providing a permitted user access to a user interface associated with a policy management system, the policy management system having a hardware element;

receiving, via one or more display screens associated with the user interface, configuration data by which the permitted user defines a user-specific, payment device-specific transaction policy; and

enforcing the user-specific, payment device-specific transaction policy with respect to particular transaction account associated with the user.

10. The apparatus as described in claim 9 wherein the configuration data limits transactions to a first user-specified set of vendors, or disallows transactions with respect to a second user-specified set of vendors.

11. The apparatus as described in claim 9 wherein the configuration data limits transactions to a first user-specified set of categories, or disallows transactions with respect to a second user-specified set of categories.

12. The apparatus as described in claim 9 wherein the configuration data limits transactions to a first user-specified set of geographic locations, or disallows transactions with respect to a second user-specified set of geographic locations.

13. The apparatus as described in claim 9 wherein the configuration data limits a total amount per transaction.

14. The apparatus as described in claim 9 wherein the configuration data limits a number of transactions per vendor, optionally over a configurable period of time.

15. The apparatus as described in claim 9 wherein the configuration data limits transactions to a one-time purchase or transaction amount, optionally within a configurable period of time.

16. The apparatus as described in claim 9 wherein the configuration data defines a vendor-specific transaction policy.

17. A computer program product in a computer readable medium for policy creation and management in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system, perform a method for user-directed, selective control of payment transactions, the method comprising:

upon receipt of a request, providing a permitted user access to a user interface associated with a policy management system, the policy management system having a hardware element;

receiving, via one or more display screens associated with the user interface, configuration data by which the permitted user defines a user-specific, payment device-specific transaction policy; and

enforcing the user-specific, payment device-specific transaction policy with respect to particular transaction account associated with the user.

18. The computer program product as described in claim 17 wherein the configuration data limits transactions to a first user-specified set of vendors, or disallows transactions with respect to a second user-specified set of vendors.

19. The computer program product as described in claim 17 wherein the configuration data limits transactions to a first user-specified set of categories, or disallows transactions with respect to a second user-specified set of categories.

20. The computer program product as described in claim 17 wherein the configuration data limits transactions to a first user-specified set of geographic locations, or disallows transactions with respect to a second user-specified set of geographic locations.

21. The computer program product as described in claim 17 wherein the configuration data limits a total amount per transaction.

22. The computer program product as described in claim 17 wherein the configuration data limits a number of transactions per vendor, optionally over a configurable period of time.

23. The computer program product as described in claim 17 wherein the configuration data limits transactions to a one-time purchase or transaction amount, optionally within a configurable period of time.

24. The computer program product as described in claim 17 wherein the configuration data defines a vendor-specific transaction policy.