DETECTING AN ATTEMPTED THEFT OF INFORMATION STORED IN AN RFID-ENABLED CARD

• US 20180121686A1
• Filed: 10/27/2016
• Published: 05/03/2018
• Est. Priority Date: 10/27/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: ALBERTSON, CHAD M., CAMPBELL, ERIC J., OLLERICH, NICHOLAS J., STEFFEN, CHRISTOPHER W.
• Granted Patent: US 10,796,030 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06K 19/005 the record carrier comprising an arrangement to facilitate insertion into a holding device, e.g. an arrangement that makes the record carrier fit into an etui or a casing ticket holders A45C11/18
• CPC Class Codes: G06K 19/07327 Passive means, e.g. Faraday cages Faraday-type protection of electric circuits in general H05K9/00

Abstract

Detecting an attempted theft of information stored in an RFID-enabled card, including: receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information; determining, by the theft detection module, that the RFID-enabled card information is mock card information, wherein mock card information is provided to an RFID reader by an RFID tag exterior to an RFID shield of an RFID-enabled card security enclosure responsive to an RFID request directed at the security enclosure; and responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

Claims

1. A method of detecting an attempted theft of information stored in a Radio Frequency Identification(‘

RFID’

)-enabled card, the method comprising;

receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information;

determining, by the theft detection module, that the RFID-enabled card information is mock card information, wherein mock card information is provided to an RFID reader by an RFID tag exterior to an RFID shield of an RFID-enabled card security enclosure responsive to an RFID request directed at the security enclosure; and

responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

2. The method of claim 1 wherein:

receiving, by the theft detection module from a user of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

3. The method of claim 1 further comprising:

receiving, by the theft detection module from a manufacturer of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

4. The method of claim 1 further comprising:

the mock card information comprises mock credit card information; and

the transaction request comprises a request to perform a purchase using the mock credit card information.

5. The method of claim 1 wherein:

the mock card information comprises mock security card information; and

the transaction request comprises a request for access to a secured object.

6. The method of claim 1 wherein:

the mock card information comprises mock user identification information; and

the transaction request comprises a request for user authentication.

7. The method of claim 1, wherein:

the transaction request comprises an online transaction request; and

the security actions further comprise capturing an IP (‘

Internet Protocol’

) address of a user from which the transaction request originated.

8. The method of claim 1, wherein:

the transaction request originated from a transaction initiated with a physical card; and

the security actions include capturing a physical location of a user from which the transaction request originated.

9. The method of claim 8, wherein the security action further includes:

capturing one or more images at the physical location from which the transaction request originated.

10. The method of claim 1, wherein the security actions further comprise notifying a user of the RFID-enabled card security enclosure.

11. The method of claim 1, wherein the security actions further comprise notifying law enforcement of an attempted use of the mock card information.

12. The method of claim 1, wherein the security actions further comprise securing one or more RFID-enabled cards enclosed within the RFID-enabled card security enclosure.

13. An apparatus for detecting an attempted theft of information stored in a Radio Frequency Identification(‘

RFID’

)-enabled card, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of;

receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information;

determining, by the theft detection module, that the RFID-enabled card information is mock card information, wherein mock card information is provided to an RFID reader by an RFID tag exterior to an RFID shield of an RFID-enabled card security enclosure responsive to an RFID request directed at the security enclosure; and

responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

14. The apparatus of claim 13 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

receiving, by the theft detection module from a user of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

15. The apparatus of claim 13 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

receiving, by the theft detection module from a manufacturer of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

16. The apparatus of claim 13 wherein:

the mock card information comprises mock credit card information; and

the transaction request comprises a request to perform a purchase using the mock credit card information.

17. The apparatus of claim 13 wherein:

the mock card information comprises mock security card information; and

the transaction request comprises a request for access to a secured object.

18. The apparatus of claim 13 wherein:

the mock card information comprises mock user identification information; and

the transaction request comprises a request for user authentication.

19. A security enclosure for RFID-enabled cards, the security enclosure comprising:

an RFID (‘

Radio Frequency Identification’

) shield, the RFID shield configured to block RFID transmissions from an exterior of the RFID shield into an interior space formed by the RFID shield, the interior space configured to store one or more RFID-enabled cards; and

an RFID tag located exterior to the RFID shield, the RFID tag including mock card information.

20. The security enclosure of claim 19, further comprising:

a controller configured to dynamically modify the mock RFID information.