SECURE FINANCIAL PAYMENT

• US 20160019547A1
• Filed: 07/15/2014
• Published: 01/21/2016
• Est. Priority Date: 07/15/2014
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Gurnani, Roger, Martin, John C.
• Granted Patent: US 9,384,486 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

To improve security for processing of financial transactions on a customer'"'"'s account, particularly for users of mobile devices, the examples authenticate the customer or user in an effective manner and/or transfer funds upon successful authentication, using intelligence of the customers'"'"' mobile devices. The present approach uses an identifier of the mobile device or user at the mobile device. The user is authenticated for a particular desired transaction based on some number of authentication factors, one or more of which is a biometric input. The user authentication technique, e.g. factors used and/or precision of matching of received user authentication factors to reference factors, can be varied based on a variety of parameters, such as transaction amount, time, device location, history of prior transactions or history of other aspects of device usage. The processing avoids storage of sensitive customer data, e.g. account number at a merchant and/or at the customer'"'"'s mobile device.

Claims

1. A computer, comprising:

a network communication interface;

a processor;

a memory accessible to the processor; and

programming in the memory, wherein execution of the programming by the processor configures the computer to perform functions, including functions to;

receive a parameter of a first financial transaction via a network and the communication interface;

receive a user or device identification, other than a financial account identifier, from a mobile device via the network and the communication interface;

receive, from the mobile device via the network and the communication interface, at least two user authentication factors obtained by the mobile device from a current user of the mobile device for authentication relative to the first financial transaction, at least one of the received factors being a biometric factor;

based at least in part on the parameter of the first financial transaction, identify a first rule set, from among a plurality of rule sets of a financial transaction entity defining requirements for user authentications;

identify an authentication file based on the received identification, the authentication file corresponding to but not including an identification of any financial account maintained by the financial transaction entity corresponding to the received identification;

based on the first rule set, obtain one or more reference factors from the identified authentication file for authentication relative to the first financial transaction, at least one obtained reference factor corresponding to a valid user of the corresponding financial account;

authenticate the current user of the mobile device as the valid user based on a successful comparison of the one or more obtained reference factors to a corresponding one or more of the user authentication factors received for authentication relative to the first financial transaction; and

in response to the authentication of the current user as the valid user, transmit data via the communication interface and the network to enable completion of the first financial transaction with respect to the corresponding financial account by the financial entity.

2. The computer of claim 1, wherein:

execution of the programming by the processor configures the computer to perform a further function to store data regarding, transaction parameters, factors used or activities of the mobile device from processing of financial transactions involving the corresponding financial account to form a transaction history relative to the mobile device or user; and

at least one difference between requirements of the rule sets is based on the transaction history.

3. The computer of claim 1, wherein:

execution of the programming by the processor configures the computer to perform a further function to store data regarding activities of the mobile device to form a history relative to the mobile device or user, at least some of the activities of the mobile device occurring at times when the mobile device is not involved in processing of any financial transaction; and

at least one difference between requirements of the rule sets is based on the history.

4. The computer of claim 1, wherein execution of the programming by the processor configures the computer to perform further functions, including functions to:

receive, via the network and the communication interface, a parameter of a second financial transaction different from the parameter of the first financial transaction;

receive, from the mobile device via the network and the communication interface, two user authentication factors obtained by the mobile device from a current user of the mobile device for authentication relative to the second financial transaction, at least one of the received factors received the second financial transaction being a biometric factor;

based at least in part on the parameter of the second financial transaction, identify a second rule set, from among the plurality of rule sets of the financial transaction entity defining requirements for user authentication, the requirements defined by the second rule set being different from the requirements defined by the first rule set;

based on the second rule set, identify one or more reference factors for authentication relative to the second financial transaction, at least one reference factor identified based on the second rule set corresponding to the valid user of the corresponding financial account;

authenticate the current user of the mobile device as the valid user based on a successful comparison of the one or more reference factors identified based on the second rule set to a corresponding one or more of the user authentication factors received for authentication relative to the second financial transaction; and

in response to the authentication of the current user as the valid user using the second rule set, transmitting data via the communication interface and the network to complete the second financial transaction with respect to the corresponding financial account.

5. The computer of claim 4, wherein:

the first and second rule sets apply to different ranges of monetary transaction value; and

the requirements of the first and second rule sets differ as to the number of factors required to match and/or degree of matching of a factor, such that authentication for a transaction having value in a higher transaction value range requires matching of more factors and/or more precise factor matching than for a transaction having value in a lower value transaction value range.

6. The computer of claim 4, wherein:

the first and second rule sets apply to different locations of the mobile device when involved in transaction processing; and

the requirements of the first and second rule sets differ as to the number of factors required to match and/or degree of matching of a factor, such that authentication for a transaction when the mobile device is at a location known from prior transaction processing resulting in a successful user authentication requires matching of fewer factors and/or less precise factor matching than for a transaction when the mobile device is at another location not known from prior transaction processing resulting in a successful user authentication.

7. The computer of claim 4, wherein:

the first and second rule sets apply to different types of financial transactions; and

the requirements of the first and second rule sets differ as to the number of factors required to match and/or degree of matching of a factor, such that authentication for a first type of financial transaction requires matching of more factors and/or more precise factor matching than for second type of financial transaction of lower risk to the financial entity that the first type of financial transaction.

8. The computer of claim 4, wherein:

the first and second rule sets apply to different conditions in relation to historical usage of the mobile device in financial transactions; and

the requirements of the first and second rule sets differ as to the number of factors required to match and/or degree of matching of a factor, such that authentication for a financial transaction corresponding to a historical record of financial transactions involving the mobile device requires matching of fewer factors and/or less precise factor matching than for a transaction that does not correspond to a historical record of financial transactions involving the mobile device.

9. The computer of claim 4, wherein:

the first and second rule sets apply to different conditions in relation to historical usage of the mobile device for non-transactional device usage; and

the requirements of the first and second rule sets differ as to the number of factors required to match and/or degree of matching of a factor, such that authentication for a financial transaction when recent usage of the mobile device for non-transactional device usage conforms to one or more aspects of the usage of the mobile device for non-transactional device usage requires matching of fewer factors and/or less precise factor matching than for a transaction when recent usage of the mobile device for non-transactional device usage deviates from one or more aspects of the usage of the mobile device for non-transactional device usage.

10. The computer of claim 1, wherein:

each of the two user authentication factors obtained by the mobile device is a factor from the following group;

a user fingerprint, a user facial image, user speech input, a gestural input, and a passcode input; and

the identification is an identification of the mobile device from the following group;

an electronic serial number (ESN), a mobile equipment identifier (MEID), an international mobile subscriber identity (IMSI), and a media access control (MAC) address.

11. The computer of claim 1, wherein:

the computer is a computer of a mobile network operator;

the programming configures the computer of the mobile network operator to transmit the data to a computer system of the financial entity to initiate a payment from the corresponding financial account to an account of a merchant; and

the data transmitted to the computer system of the financial entity includes the received identification but not an identification of the corresponding financial account.

12. The computer of claim 1, wherein:

the computer is a computer of the financial entity; and

the programming configures the computer of the financial entity to identify the corresponding financial account based on the received identification and transmit the data to effectuate transfer of funds from the identified financial account to make a payment to an account of a merchant.

13. The computer of claim 1, wherein:

the computer stores an image of the valid user of the corresponding financial account for possible use as a reference factor; and

the execution of the programming by the processor configures the computer to perform a further function to transmit the image of the valid user to a merchant'"'"'s terminal device at a location at which the current user of the mobile device requested the first desired financial transaction.

14. A mobile device, comprising:

a wireless mobile transceiver;

at least one user interface element configured to receive a user input and to provide information output to the user;

a sensor for a biometric input of the user;

a processor;

a memory accessible to the processor; and

programming in the memory, wherein execution of the programming by the processor configures the mobile device to perform functions, including functions to;

receive a user input of a parameter of a desired financial transaction, via the at least one user interface element;

transmit the transaction parameter and a user or device identification other than a financial account identifier, via the wireless mobile transceiver through a network for a server of a transaction service entity;

prompt the user for and collect from the user two or more user authentication factors, at least one of the user authentication factors being a biometric factor responsive to an input via the sensor;

transmit the collected user authentication factors, via the wireless mobile transceiver through the network for the server of the transaction service entity; and

receive notification of successful authentication for the desired financial transaction based on analysis of the collected user authentication factors according to an authentication rule set of the transaction service entity to the parameter of the desired financial transaction, in relation to corresponding valid user authentication factors for a financial account associated with the valid user or the mobile device, from the server through the network via the wireless mobile transceiver.

15. The mobile device of claim 14, wherein:

each of the two user authentication factors obtained by the mobile device is a factor from the following group;

a user fingerprint, a user facial image, user speech input, a gestural input, and a passcode input; and

the identification is an identification of the mobile device from the following group;

an electronic serial number (ESN), a mobile equipment identifier (MEID), an international mobile subscriber identity (IMSI), and a media access control (MAC) address.

16. The mobile device of claim 14, wherein:

the at least one user interface element comprises a display; and

the function to prompt the user for the two user authentication factors comprises;

showing on the display a first distinctive icon indicating a first type of user input for a first of the factors; and

showing on the display a second distinctive icon indicating a second type of user input for a second of the factors, the second distinctive icon being different from the first distinctive icon.

17. The mobile device of claim 14, wherein execution of the programming by the processor configures the mobile device to perform functions, including functions to:

receive a user input of another parameter of another financial transaction, via the at least one user interface element;

transmit the other transaction parameter and the user or device identification other than a financial account identifier, via the wireless mobile transceiver through the network for the server of the transaction service entity;

prompt the user for and collect from the user two or more user authentication factors for the other financial transaction, at least one of the user authentication factors for the other financial transaction being different from the user authentication factors for the desired financial transaction and at least one of the user authentication factors for the other financial transaction being a biometric factor responsive to an input via the sensor;

transmit the collected user authentication factors for the other financial transaction, via the wireless mobile transceiver through the network for the server of the transaction service entity; and

receive notification of successful authentication for the other financial transaction based on analysis of the collected user authentication factors for the other financial transaction according to an authentication rule set of the transaction service entity to the parameter of the desired financial transaction, in relation to corresponding valid user authentication factors for a financial account associated with the valid user or the mobile device, from the server through the network via the wireless mobile transceiver.

18. The mobile device of claim 17, further comprising:

rule sets stored in the memory, each respective rule set specifying two or more user authentication factors and a basis for applying the respective rule set;

wherein execution of the programming by the processor further configures the mobile device to;

select and apply a first of the rule sets so as to prompt for and collect user inputs for the user authentication factors for the desired financial transaction when a parameter related to the desired financial transaction satisfies the basis for applying the first rule set;

select and apply a second of the rule sets so as to prompt for and collect user inputs for the user authentication factors for the other financial transaction when a parameter related to the other financial transaction satisfies the basis for applying second rule set; and

the parameter related to the other financial transaction is different from the parameter related to the desired financial transaction.

19. The mobile device of claim 17, wherein execution of the programming by the processor further configures the mobile device to:

collect user inputs for the user authentication factors for the desired financial transaction in response to a first instruction received from the server based on the transmitted transaction parameter of the desired financial transaction; and

collect user inputs for the user authentication factors for the other financial transaction in response to a second instruction received from the server based on the transmitted transaction parameter of the other financial transaction.