RESTRICTED ACCESS TO ONLINE BANKING

• US 20150026026A1
• Filed: 07/19/2013
• Published: 01/22/2015
• Est. Priority Date: 07/19/2013
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Calman, Matthew A., Kelley, William E., Purvis, Chris, Jain, Dipika, Toth, Michael E.
• Granted Patent: US 9,519,934 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3265 characterised by personalisation for use
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

Disclosed is a system and associated method for restricting access to a customer'"'"'s online banking account. The system typically includes a processor, a memory, and an online banking module stored in the memory. The module is typically configured for determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account. If the first online banking transaction is within a first restricted transaction definition and if the computing device is not enrolled with the customer'"'"'s online banking account, geographic location information associated with the computing device and geographic location information associated with a first mobile device enrolled with the customer'"'"'s account are received. The module determines whether the location of the computing device is proximate to a predefined location and/or whether the location of the computing device is proximate to the location of the first mobile device.

Claims

1. A system for restricting access to a customer'"'"'s online banking account, comprising:

a computer apparatus including a processor and a memory; and

an online banking module stored in the memory, executable by the processor and configured for;

receiving an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information associated with the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating the device identification information associated with the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information associated with the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving device identification information associated with the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving geographic location information associated with the computing device;

receiving geographic location information associated with the first mobile device; and

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining whether the geographic location information associated with the computing device is geographically proximate to a predefined location and/or whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

2. The system according to claim 1, wherein the online banking module is configured for denying the first online banking transaction based on determining (i) that the geographic location information associated with the computing device is not geographically proximate to the predefined location and (ii) that the geographic location information associated with the computing device is not geographically proximate to the geographic location information associated with the first mobile device.

3. The system according to claim 1, wherein the online banking module is configured for completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the predefined location.

4. The system according to claim 1, wherein the online banking module is configured for completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

5. The system according to claim 1, wherein determining whether the geographic location information associated with the computing device is geographically proximate to a predefined location comprises determining whether the computing device is in communication with a predefined local area network.

6. The system according to claim 1, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining if the computing device and the first mobile device are in communication with the same local area network.

7. The system according to claim 1, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining whether the computing device and the first mobile device are in communication with one another via Near Field Communication (NFC).

8. A computer program product for restricting access to a customer'"'"'s online banking account, comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

receiving an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information associated with the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating the device identification information associated with the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information associated with the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving device identification information associated with the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving geographic location information associated with the computing device;

receiving geographic location information associated with the first mobile device; and

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining whether the geographic location information associated with the computing device is geographically proximate to a predefined location and/or whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

9. The computer program product according to claim 8, wherein the non-transitory computer-readable storage medium has computer-executable instructions for denying the first online banking transaction based on determining (i) that the geographic location information associated with the computing device is not geographically proximate to the predefined location and (ii) that the geographic location information associated with the computing device is not geographically proximate to the geographic location information associated with the first mobile device.

10. The computer program product according to claim 8, wherein the non-transitory computer-readable storage medium has computer-executable instructions for completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the predefined location.

11. The computer program product according to claim 8, wherein the non-transitory computer-readable storage medium has computer-executable instructions for completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

12. The computer program product according to claim 8, wherein determining whether the geographic location information associated with the computing device is geographically proximate to a predefined location comprises determining whether the computing device is in communication with a predefined local area network.

13. The computer program product according to claim 8, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining if the computing device and the first mobile device are in communication with the same local area network.

14. The computer program product according to claim 8, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining whether the computing device and the first mobile device are in communication with one another via Near Field Communication (NFC).

15. A method for restricting access to a customer'"'"'s online banking account, comprising:

receiving, with a computer processor, an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information associated with the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating, with a computer processor, the device identification information associated with the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information associated with the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining, with a computer processor, that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching, with a computer processor, a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving, with a computer processor, device identification information associated with the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving, with a computer processor, geographic location information associated with the computing device;

receiving, with a computer processor, geographic location information associated with the first mobile device; and

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining, with a computer processor, whether the geographic location information associated with the computing device is geographically proximate to a predefined location and/or whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

16. The method according to claim 15, comprising denying the first online banking transaction based on determining (i) that the geographic location information associated with the computing device is not geographically proximate to the predefined location and (ii) that the geographic location information associated with the computing device is not geographically proximate to the geographic location information associated with the first mobile device.

17. The method according to claim 15, comprising completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the predefined location.

18. The method according to claim 15, comprising completing the first online banking transaction based on determining that the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device.

19. The method according to claim 15, wherein determining whether the geographic location information associated with the computing device is geographically proximate to a predefined location comprises determining whether the computing device is in communication with a predefined local area network.

20. The method according to claim 15, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining if the computing device and the first mobile device are in communication with the same local area network.

21. The method according to claim 15, wherein determining whether the geographic location information associated with the computing device is geographically proximate to the geographic location information associated with the first mobile device comprises determining whether the computing device and the first mobile device are in communication with one another via Near Field Communication (NFC).