Telephone based credit card protection

• US 5,655,007 A
• Filed: 12/23/1994
• Issued: 08/05/1997
• Est. Priority Date: 10/13/1994
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Bell Atlantic Network Services, Inc. (Verizon Communications Inc.)
• Inventors: McAllister, Alex
• Primary Examiner(s): Woo, Stella
• Application Number:
  US08/363,041
• Time in Patent Office: 956 Days
• Field of Search: 379/91, 379/88, 379/89, 379/93, 379/94, 379/201, 379/95
• US Class Current: 379/91.01
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0833 Card having specific functional components
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP

Abstract

A system and method for enhancing the security of use of a transaction device such as a transaction card through a telephone system wherein subscribers to the service may require voice authentication as a prerequisite to a conventional transaction card authentication step. The service is automatically invoked based on a code inserted in the card, or the identity of the calling subscriber, or the identity of the called authentication bureau. The service may also be invoked in situations which do not involve the use of a transaction device but which require the input of an identifying password or number when seeking access to limited access data or services.

Claims

1. In a telephone system comprising:

telephone stations;

spaced central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with a plurality of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, the peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via the telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from said trunk circuits for two-way communications of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a transaction authentication platform;

a method comprising the steps of;

(a) initiating a call by dialing a virtual number at one of said telephone stations which results in sending control signals from one of said switching systems to said service control point, said control signals representing an inquiry regarding the call and including data identifying a transaction device and including data identifying action to be taken with respect to said transaction device;

(b) said service control point identifying a service corresponding to said virtual number and accessing in its database data identifying transaction devices of subscribers to said service;

(c) on identifying one of said transaction devices in said data identifying transaction devices in said database, sending control signals to said peripheral platform for providing said service, said control signals identifying said one of said transaction devices;

(d) said peripheral platform using the identity of said one of said transaction devices to access a personal speech identification template corresponding to the identity of said one of said transaction devices;

(e) connecting said dialing telephone station to said peripheral platform for voice communication;

(f) inputting to said connected telephone station a voice utterance of a word corresponding to a word used to create said template;

(g) receiving at said peripheral platform a signal resulting from the inputting of said utterance;

(h) comparing said received signal with said template to establish a match;

(i) if a match is not established for said utterance terminating the connection to said connected station;

(j) if a match is established sending to said one of said switching systems control signals directing further connection of said connected telephone station to said transaction authentication platform.

2. A method according to claim 1 wherein said data identifying action to be taken with respect to said transaction device is derived from said transaction device.

3. A method according to claim 2 wherein said dialing is responsive to a transaction device reader reading data from said transaction device.

4. A method according to claim 3 wherein said transaction device is a card and said transaction device reader is a card reader.

5. A method according to claim 3 wherein step (i) includes the steps of:

A. if a match is established accessing a database of prestored parameters corresponding to transaction devices, at least one of said parameters corresponding to the transaction device identified in said call;

B. determining the present value of the parameter which is accessed;

C. comparing the present value of the parameter which is accessed to the prestored value of said parameter;

D. if a match is established sending to said switching system control signals directing connection of said connected telephone station to said transaction authentication platform.

6. A method according to claim 5 wherein the parameter which is accessed is selected from (i) a time period, (b) a monetary limit, and (iii) a geographic area.

7. A method according to claim 3 including the establishment of at least one of said parameters by the steps of:

A. a subscriber to a telephone station connected to one of said central office switching systems calling a new service facility of said switching system and requesting a subscription to a transaction device security service;

B. responsive to connection to said facility said caller in cooperation with said facility establishing at least one of the following parameters;

(i) a time period during which said transaction device is activated;

(ii) a monetary total for which said transaction device may be used to conduct transactions during said time period

(iii) a geographic area in which said transaction device may be used to conduct transactions during said time period; and

(iv) an identification signal valid for use of said transaction device during said period.

8. A method according to claim 7 wherein said parameters are stored in a database associated with said peripheral platform.

9. A method according to claim 1 wherein step (i) includes the steps of:

A. if a match is established accessing a database of prestored parameters corresponding to transaction devices to identify at least one stored parameter corresponding to the transaction device identified in said call;

B. determining the present value of said one parameter;

C. comparing the present value of said one parameter to the prestored value of said parameter which has been accessed;

D. if a match is established sending to said one of said switching systems control signals directing further connection of said connected telephone station to said transaction authentication platform.

10. A method according to claim 9 wherein said one parameter is selected from (i) a time period, (b) a monetary limit, and (iii) a geographic area.

11. A method according to claim 9 including the establishment of at least one of said parameters by the steps of:

A. a subscriber to a telephone station connected to one of said trunk connected switching systems calling a new service facility of said telephone system and requesting a subscription to a transaction device security service;

B. responsive to connection to said facility said calling subscriber in cooperation with said facility establishing as a parameter at least one of the following;

(i) a time period during which said transaction device is activated;

(ii) a monetary total for which said transaction device may be used to conduct transactions during said time period

(iii) a geographic area in which said transaction device may be used to conduct transactions during said time period; and

(iv) an identification signal valid for use of said transaction device during said period.

12. A method according to claim 11 wherein said parameters are stored in a database associated with said peripheral platform.

13. In a telephone system comprising:

telephone stations;

spaced central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with at least certain of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, said peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via the telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from the trunk circuits for two-way communication of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a transaction authentication platform;

a method comprising the steps of;

(a) initiating a call by dialing a virtual number at one of said telephone stations which results in sending control signals from one of said switching systems to said service control point representing an inquiry regarding the call and including data identifying a transaction device and including data identifying action to be taken with respect to said transaction device, said last named data being associated with at least one of the calling or called numbers;

(b) said service control point determining from its database a service corresponding to said at least one of said numbers;

(c) on identifying said action sending control signals to said peripheral platform for providing said determined service, said control signals identifying said transaction device;

(d) said peripheral platform using the identity of the transaction device determined by said control signals in step (c) to access a personal speech identification template corresponding to the identity of said transaction device;

(e) connecting said dialing telephone station to said peripheral platform for voice communication;

(f) inputting to said connected station a voice utterance of a word corresponding to a word used to create said template;

(g) receiving at said peripheral platform a signal resulting from the inputting of said utterance;

(h) comparing said received signal with said template to establish a match;

(i) if a match is not established for said utterance terminating the connection to said connected station;

(j) if a match is established sending to the switching system to which said telephone station is connected control signals directing further connection of said connected telephone station to said transaction authentication platform.

14. A method according to claim 13 wherein said dialing is responsive to a transaction device reader reading data from said transaction device.

15. A method according to claim 14 wherein said transaction device is a card and said transaction device reader is a card reader.

16. A method according to claim 15 wherein step (i) includes the steps of:

A. if a match is established accessing a database of prestored parameters corresponding to transaction devices to identify at least one of said prestored parameters corresponding to the transaction device identified in said call;

B. determining the present value of the parameter which is identified;

C. comparing the present value of the parameter which is identified to the prestored value of said parameter;

D. if a match is established sending to said switching system control signals directing connection of said calling telephone station to said transaction authentication platform.

17. A method according to claim 16 wherein a parameter is selected from (i) a time period, (b) a monetary limit, and (iii) a geographic area.

18. A method according to claim 15 including the establishment of at least one of said parameters by the steps of:

A. a subscriber to a telephone station connected to one of said switching systems calling a new service facility of said switching system and requesting a subscription to a transaction device security service;

B. responsive to connection to said facility said calling subscriber in cooperation with said facility establishing at least one of the following parameters;

(i) a time period during which said transaction device is activated;

(ii) a monetary total for which said transaction device may be used to conduct transactions during said time period

(iii) a geographic area in which said transaction device may be used to conduct transactions during said time period; and

(iv) an identification signal valid for use of said transaction device during said period.

19. A method according to claim 18 wherein said parameters are stored in a database associated with said peripheral platform.

20. A method according to claim 13 wherein step (i) includes the steps of:

A. if a match is established accessing a database of prestored parameters corresponding to transaction devices, to identify at least one stored parameter corresponding to the transaction device identified in said call;

B. determining the present value of said one parameter;

C. comparing the present value of the parameter accessed to the prestored value of said parameter which has been accessed;

D. if a match is established sending to the switching system to which said telephone station is connected control signals directing further connection of said connected telephone station to said transaction authentication platform.

21. A method according to claim 20 wherein a parameter is selected from (i) a time period, (b) a monetary limit, and (iii) a geographic area.

22. A method according to claim 13 including the establishment of at least one of said parameters by the steps of:

A. a subscriber to a telephone station connected to one of said spaced switching systems calling a new service facility of said switching system to which said telephone station is connected and requesting a subscription to a transaction device security service;

B. responsive to connection to said facility said caller in cooperation with said facility establishing at least one of the following parameters;

(i) a time period during which said transaction device is activated;

(ii) a monetary total for which said transaction device may be used to conduct transactions during said time period

(iii) a geographic area in which said transaction device may be used to conduct transactions during said time period; and

(iv) an identification signal valid for use of said transaction device during said period.

23. A method according to claim 22 wherein said parameters are stored in a database associated with said peripheral platform.

24. In a telephone system comprising:

telephone stations;

spaced central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations and including connections between said telephone stations and end central offices associated therewith;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with a plurality of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, said peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via said telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from said trunk circuits for two-way communication of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a transaction authentication platform;

a transaction device reader at the site of at least one of said telephone stations associated with one of said switching systems;

a method comprising the steps of;

(a) initiating a call by reading a transaction device at the site of said telephone station at which said transaction device is located to generate a signal causing dialing of a virtual number which results in sending control signals from the switching system with which the telephone station at which said transaction device is located is associated to said service control point representing an inquiry regarding the call and including data identifying said transaction device and including data identifying action to be taken with respect to said transaction device, said last named data being associated with at least one of the calling or called numbers;

(b) said service control point determining from its database a service corresponding to said at least one of said numbers;

(c) on identifying said action sending control signals to said peripheral platform for providing said determined service, said control signals identifying said transaction device;

(d) said peripheral platform responding to said control signals by accessing a personal speech identification template which is identified by said control signals;

(e) connecting said dialing telephone station to said peripheral platform for voice communication;

(f) inputting to said connected telephone station a voice utterance of a word corresponding to a word used to create said template;

(g) receiving at said peripheral platform a signal resulting from the inputting of said utterance;

(h) comparing said received signal with said template to establish a match;

(i) if a match is not established for said utterance terminating the connection to said connected station;

(j) if a match is established sending to said switching system from which said call was originated control signals directing further connection of said connected telephone station and transaction device reader to said transaction authentication platform;

(k) reading said transaction device with said transaction device reader;

(l) sending a data signal to said transaction authentication platform representative of the information contained in said data signal;

(m) following authentication of said transaction device sending a data signal to said transaction device reader authorizing said transaction.

25. A method according to claim 24 wherein said transaction device is a card and said transaction device reader is a transaction card reader.

26. In a telephone system comprising:

telephone stations;

spaced central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with a plurality of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, said peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via the telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from said trunk circuits for two-way communications of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a method comprising the steps of;

(a) initiating a call by dialing a number at one of said telephone stations which results in sending control signals from one of said switching systems to said service control point representing an inquiry regarding the call and including data identifying a procedure being requested;

(b) said service control point determining the procedure being requested and the entitlement of the telephone station which initiated said call to said procedure as indicated by data transmitted to said service control point;

(c) on establishing said entitlement sending control signals to said peripheral platform, said control signals identifying the source of the request on the basis of identification signals inputted at said telephone station at which said call was initiated;

(d) said peripheral platform using said control signals identifying the source of said request to access a personal speech identification template corresponding to said identity of said source of said request indicated by said identification signals;

(e) connecting said dialing telephone station to said peripheral platform for voice communication;

(f) inputting to said connected station a voice utterance of a word corresponding to a word used to create said template;

(g) receiving at said peripheral platform a signal resulting from the inputting of said utterance;

(h) comparing said received signal with said template to establish a match;

(i) if a match is not established for said utterance terminating said connection to said connected station;

(j) if a match is established sending to said switching system to which said telephone station is connected control signals directing further connection of said connected telephone station to access the requested procedure.

27. A telephone system comprising:

telephone stations;

spaced central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations and including connections between said telephone stations and end central offices associated therewith;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with a plurality of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, said peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via said telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from said trunk circuits for two-way communications of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a transaction authentication platform;

a voice processing unit;

a transaction device reader at the site of at least one of said telephone stations and connected to the connection of said telephone station to its end office switch, said transaction device reader on reading a transaction device initiating the dialing of a virtual number associated with that transaction device reader;

said switching systems comprising program controlled switches programmed so that said dialing of said virtual number results in sending control signals from the switching system to which said end office switch is connected to said service control point, said control signal representing an inquiry regarding the dialing of said vertical number and including data identifying the transaction device read by said transaction device reader;

said service control point responsive to receiving said control signal determining the service corresponding to said virtual number and sending control signals to said peripheral platform, said signals including identification of said transaction device;

said peripheral platform responding to said control signals including identification of said transaction device by accessing the speech identification template corresponding to the identity of said transaction device as indicated by said control signals;

said peripheral platform following accessing said template causing the initiation from said voice processing unit of a request to utter the speech corresponding to the speech represented by said template;

said peripheral platform on receiving signals representative of a responsive utterance into the telephone station at the site of said transaction device reader comparing said signals to said template to attempt to establish a match;

said peripheral platform on establishing a match originating data signals to cause said telephone station at the site of said transaction device reader and said transaction device reader to be connected to said transaction authentication platform.

28. A telephone system comprising:

telephone stations;

central office switching systems interconnected via trunk circuits for selectively providing switched telephone call communications between at least two of said telephone stations and including connections between said telephone stations and end central offices associated therewith;

a service control point, separate from said central office switching systems, comprising a database storing call processing data associated with a plurality of said telephone stations for control of call processing through one or more of said central office switching systems;

a peripheral platform connected to at least one of said central office switching systems via a telephone call connection channel, said peripheral platform comprising means for providing at least one auxiliary telephone call processing capability via the telephone call connection channel and including a database of personal speech identification templates;

a signaling communication system separate from said trunk circuits for two-way communications of data messages between said central office switching systems, between said central office switching systems and said service control point, and between said peripheral platform and said services control point;

a transaction authentication platform;

a voice processing unit;

a transaction device reader at the site of at least one of said telephone stations and connected to the connection of said telephone station to its end office switch, said transaction device reader on reading a transaction device initiating the dialing of a virtual number associated with that transaction device reader;

said switching systems comprising program controlled switches programmed so that dialing said virtual number at a predetermined one of said telephone stations results in sending control signals from said switching system to which said predetermined telephone station is connected to said service control point, said control signal representing an inquiry regarding said dialing and including data identifying the calling telephone station and the transaction device read by said transaction device reader;

said service control point responsive to receiving said control signals determining the service corresponding to said virtual number and identity of said predetermined telephone station and sending control signals to said peripheral platform, said signals including identification of said transaction device;

said peripheral platform responding to said control signals to identify said transaction device to access the speech identification template corresponding to said transaction device identified by said control signals;

said peripheral platform following accessing said template causing the initiation from said voice processing unit of a request to utter the speech corresponding to the speech represented by said template;

said peripheral platform on receiving signals representative of the responsive utterance comparing said signals to said template to attempt to establish a match;

said peripheral platform on establishing a match originating data signals to cause said predetermined telephone station and transaction device reader to be connected to said transaction authentication platform.

29. A telephone system according to claim 28 wherein said transaction device reader again reads said transaction device following connection of the transaction device reader to said transaction authentication platform and initiates a signal representative of the data read to said transaction authentication platform, and said authentication platform on establishing authentication initiates a signal to said transaction device reader authorizing said transaction.