SYSTEMS AND METHODS FOR PROVIDING SECURE DATA TRANSMISSION BETWEEN NETWORKED COMPUTING SYSTEMS

• US 20160012428A1
• Filed: 07/10/2015
• Published: 01/14/2016
• Est. Priority Date: 07/11/2014
• Status: Active Application

• Current Assignee: Toronto-Dominion Bank
• Original Assignee: Toronto-Dominion Bank
• Inventors: Chan, Paul Mon-Wah, Cummins, Michael D., Van Heerden, Lauren, Sivashanmugam, Prabaharan, Haldenby, Perry, Lee, John Jong Suk, Lin, Jenny, Del Vecchio, Orin, Nadarajah, Gunalan
• Application Number:
  US14/796,512
• Publication Number:
  US 20160012428A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3572 Multiple accounts on card
• CPC Class Codes: G06Q 20/383 Anonymous user system

Abstract

The disclosed embodiments include methods and systems that provide secure data transmission between networked computing systems by obfuscating sensitive customer account data with placeholder account data generated in real-time and without customer intervention. The disclosed embodiments may include a computerized device that monitors user input to detect an initiation of a purchase transaction at a merchant, and upon detection of the initiated purchase transaction, may obtain a placeholder account suitable for use in the purchase transaction and capable of masking a user'"'"'s sensitive account information without user intervention. In some instances, a system of a financial institution may activate and fund the placeholder account in real time and in an amount consistent with a transaction amount of the purchase transaction. Devices consistent with the disclosed embodiments may request execution of the initiated purchase transaction in accordance with the activated and funded placeholder account.

Claims

1. A device, comprising:

a storage device; and

at least one processor coupled to the storage device, the storage device storing instructions for controlling the at least one processor when executed by the at least one processor, the at least one processor being operative with the instructions to;

monitor data input into the device by a user;

detect an initiation of a purchase transaction by the user;

obtain transaction information and payment information from the monitored data, the transaction information identifying the purchase transaction, and the payment information identifying a payment instrument involved in the purchase transaction;

receive, from a first system, data identifying a placeholder account associated with the user, the placeholder account being activated for use in the initiated purchase transaction in accordance with the transaction information;

modify at least a portion of the payment information to include portions of the received placeholder account data; and

perform operations that transmit, across a network to a second computer system associated with the merchant, a request to execute the initiated purchase transaction in accordance with the modified payment information.

2. The device of claim 1, wherein:

the transaction information comprises a transaction amount and an identifier of a merchant; and

an amount of funding associated with the placeholder account is equivalent to the transaction amount, the placeholder account being funded from an account associated with the payment instrument and held by the user.

3. The device of claim 2, wherein the at least one processor is further operative with the instructions to:

generate a request to obtain the placeholder account data, the request comprising information identifying the user and at least a portion of the transaction information;

perform operations that transmit the generated request to the first computer system across the network; and

receive the placeholder account data from the first computer system in response to the request.

4. The device of claim 1, wherein:

the payment information comprises at least one of an account number of the payment instrument, an expiration date of the payment instrument, a card security code of the payment instrument, or billing information associated with the payment instrument; and

the placeholder account data comprises at least one of a placeholder account number, a placeholder expiration data, or a placeholder card security code.

5. The device of claim 4, wherein the at least one processor is further operative with the instructions to:

modify portions of the payment information to replace at least one of (i) the payment instrument account number with the placeholder account number, (ii) the payment instrument expiration date with the placeholder expiration date, or (iii) the payment instrument card security code with the placeholder card security code; and

generate the request to execute the initiated purchase transaction based on the modified portions of the payment information.

6. The device of claim 4, wherein the at least one processor is further operative with the instructions to:

perform operations that generate a temporary data file within a data repository and store the transaction information and the payment information in corresponding portions of the temporary data file;

modify at least a portion of the temporary data file storing the payment information to replace at least one of (i) the payment instrument account number with the placeholder account number, (ii) the payment instrument expiration date with the placeholder expiration date, or (iii) the payment instrument card security code with the placeholder card security code; and

generate the request to execute the initiated purchase transaction based on the modified portions of the temporary data file.

7. The device of claim 1, wherein the at least one processor is further operative with the instructions to:

receive, from the second computer system, notification data indicative of a status of the initiated purchase transaction; and

perform operations that render the notification data for presentation to the user.

8. The device of claim 1, wherein the at least one processor is further operative with the instructions to modify the payment information portion to include the portions of the received placeholder account data without user instruction.

9. The device of claim 1, wherein the at least one processor is further operative with the instructions to receive at least a portion of the monitored data as input to an interface presented by the device to the user.

10. The device of claim 1, wherein:

the payment instrument comprises a physical payment instrument;

the device further comprises a sensor configured to detect the physical payment instrument; and

the at least one processor is further operative with the instructions to receive at least a portion of the monitored data from the sensor.

11. The device of claim 1, wherein:

at least a portion of the payment information represents sensitive information; and

the modified payment information obscures the sensitive information during transmission across the network.

12. The device of claim 1, wherein the at least one processor is further operative with the instructions to detect the initiated purchase transaction based on at least one of the monitored data or at least one rule established by a business entity.

13. A computer-implemented method, comprising:

monitoring, by one or more processors, data input into the device by a user;

detecting, by one or more processors, an initiation of a purchase transaction by the user;

obtaining, by one or more processors, transaction information and payment information from the monitored data, the transaction information identifying the purchase transaction, and the payment information identifying a payment instrument involved in the purchase transaction;

receiving, by one or more processors, and from a first system across a network, data identifying a placeholder account associated with the user, the placeholder account being activated for use in the initiated purchase transaction in accordance with the transaction information;

modifying, by one or more processors, at least a portion of the payment information to include portions of the received placeholder account data; and

performing, by one or more processors, operations that transmit, across the network to a second computer system associated with the merchant, a request to execute the initiated purchase transaction in accordance with the modified payment information.

14. The method of claim 13, wherein:

the transaction information comprises a transaction amount and an identifier of a merchant; and

an amount of funding associated with the placeholder account is equivalent to the transaction amount, the placeholder account being funded from an account associated with the payment instrument and held by the user.

15. The method of claim 14, further comprising:

generating, by the one or more processors, a request to obtain the placeholder account data, the request comprising information identifying the user and at least a portion of the transaction information;

performing, by the one or more processors, operations that transmit the generated request to the first computer system across the network; and

receiving, by the one or more processors, the placeholder account data from the first computer system in response to the request.

16. The method of claim 13, wherein:

the payment information comprises at least one of an account number of the payment instrument, an expiration date of the payment instrument, a card security code of the payment instrument, or billing information associated with the payment instrument; and

the placeholder account data comprises at least one of a placeholder account number, a multicard expiration data, or a placeholder card security code.

17. The method of claim 16, further comprising:

modifying, by the one or more processors, portions of the payment information to replace at least one of (i) the payment instrument account number with the placeholder account number, (ii) the payment instrument expiration date with the placeholder expiration date, or (iii) the payment instrument card security code with the placeholder card security code; and

generating, by the one or more processors, the request to execute the initiated purchase transaction based on the modified portions of the payment information.

18. The method of claim 16, further comprising:

performing, by the one or more processors, operations that generate a temporary data file within a data repository and store the transaction information and the payment information in corresponding portions of the temporary data file;

modifying, by the one or more processors, at least a portion of the temporary data file storing the payment information to replace at least one of (i) the payment instrument account number with the placeholder account number, (ii) the payment instrument expiration date with the placeholder expiration date, or (iii) the payment instrument card security code with the placeholder card security code; and

generating, by the one or more processors, the request to execute the initiated purchase transaction based on the modified portions of the temporary data file.

19. The method of claim 13, further comprising:

receiving, by the one or more processors, and from the second computer system, notification data indicative of a status of the initiated purchase transaction; and

performing, by the one or more processors, operations that render the notification data for presentation to the user.

20. The method of claim 13, further comprising modifying, by the one or more processors, the portion of the payment information to include the portions of the received placeholder account data without user intervention.

21. The method of claim 13, further comprising receiving, by the one or more processors, at least a portion of the monitored data as input to an interface presented by the device to the user.

22. The method of claim 21, wherein the received portion of the monitored data comprises at least one of the account number of the payment instrument, the expiration date of the payment instrument, or the card security code of the payment instrument.

23. The method of claim 13, wherein:

the payment instrument comprises a physical payment instrument;

the device further comprises a sensor configured to detect the physical payment instrument; and

the method further comprises receiving, by the one or more processors, at least a portion of the monitored data from the sensor.

24. The method of claim 13, wherein:

at least a portion of the payment information represents sensitive information; and

the modified payment information obscures the sensitive information during transmission across the network.

25. A payment device, comprising:

an integrated circuit; and

a storage device coupled to the integrated circuit and configured to store payment information, the payment information comprising at least one of an account number, expiration date, or card security code of a payment instrument associated with a user,

the integrated circuit being configured to;

detect an initiation of a purchase transaction involving the merchant, the initiated purchase transaction being associated with a corresponding purchase amount;

receive, from a first system across a network, data identifying a placeholder account associated with the user, the placeholder account being activated for use in the initiated purchase transaction;

modify at least a portion of the stored payment information to include portions of the received placeholder account data; and

provide, to the merchant device, at least a portion of the stored placeholder account data to execute the initiated purchase transaction.

26. The payment device of claim 25, wherein the integrated circuit is further configured to:

detect a proximity of the payment device to a sensor of a device associated with a merchant;

based on the detected proximity, identify the initiation of the purchase transaction involving the merchant.

27. An apparatus, comprising:

a storage device; and

at least one processor coupled to the storage device, the storage device storing instructions for controlling the at least one processor when executed by the at least one processor, the at least one processor being operative with the instructions to;

receive a request to obtain data identifying a placeholder account associated with a user, the request identifying transaction information associated with an initiated purchase transaction, and the transaction information identifying a transaction amount and a merchant associated with the initiated purchase transaction;

identify a placeholder account available to the user for use in the initiated purchase transaction;

perform operations that initiate a transfer of funds corresponding to the transaction amount from at least one financial services account of the user to the available placeholder account;

generate placeholder account data corresponding to the funded placeholder account and store the placeholder account data in a data repository, the stored placeholder account data comprising information identifying at least one of the merchant or the user, and information confirming an activation of the funded placeholder account for use in the initiated purchase transaction; and

perform operations that transmit at least a portion of the stored placeholder account data to a device associated with the received request.

28. The apparatus of claim 27, wherein:

the request further identifies payment information associated with the initiated purchase transaction, the payment information comprising an account number of a payment instrument associated with the user; and

the method further comprises identifying the at least one financial services account of the user based on the account number of the payment instrument.