Automated banking machine operation authorization based on user location verified by data read from data bearing records

• US 8,479,983 B1
• Filed: 09/10/2012
• Issued: 07/09/2013
• Est. Priority Date: 11/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Ramachandran, Natarajan, Graef, H. Thomas, Block, James, Blackson, Dale H., Enright, Jeffery M.
• Primary Examiner(s): St. Cyr, Daniel
• Application Number:
  US13/608,255
• Time in Patent Office: 302 Days
• Field of Search: 235/379, 235/380, 235/382
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07G 3/003 Anti-theft control theft alarms G08B13/00
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

An automated banking machine transaction request is authorized based on the determined location of an authorized user relative to the machine. Identification of an authorized machine user is linked to a remotely locatable item (e.g., a cell phone) of the authorized user. A machine receiving the user identification causes the location of the cell phone to be determined. A comparison is then made of the cell phone location and the machine location. If the locations correspond, then the current machine user is recognized as the authorized user and machine transactions are permitted. If the locations do not correspond, then the current user is denied transactions at the machine. The security arrangement helps prevent an unauthorized person from using a fraudulent machine card to access a financial account.

Claims

1. Apparatus comprising:

a system operable to cause financial transfers responsive at least in part to data read from data bearing records,

wherein the system comprises at least one computer associated with a self-service automated banking machine that includes at least one reader, a cash dispenser, and at least one camera,

wherein the at least one computer is operable to use user data read by the at least one reader to identify a financial account on which financial transactions can be carried out,

wherein the at least one computer is operable to cause the machine to carry out for an authorized user, a cash dispense transaction involving the financial account, responsive at least in part to computer-determined correspondence between user data read by the at least one reader and the financial account,

wherein the at least one computer is operable during a user session involving a machine user, to obtain through use of user data read by the at least one reader, information regarding a mobile device of a customer,

wherein the information includes a current location of the mobile device,

wherein the information includes an address of the mobile device,

wherein the at least one computer is operable during the user session to compare location of the machine to the current location of the mobile device,

wherein the at least one computer is operable to determine that the user session is suspicious based at least in part on a discrepancy between the location of the machine and the current location of the mobile device,

 

wherein the at least one computer is operable responsive at least in part to a determination that the user session is suspicious, to cause the at least one camera to capture at least one image of at least a portion of the machine user,

 

wherein the at least one computer is operable during the user session to use the address to send the at least one image to the mobile device,

 

wherein the at least one computer is operable subsequent to the at least one image being sent, to;

 

allow the user session to continue, responsive at least in part to consent from the customer for the user session being timely received, and

 

cause the user session to end, responsive at least in part to consent from the customer for the user session not being timely received.

2. The apparatus according to claim 1 wherein the machine is part of a banking system that includes a plurality of cash dispensing automated banking machines,

wherein the at least one reader includes a card reader and a biometric reader,

wherein the at least one computer is operative during a transaction to

cause card data to be read from a user card through operation of the card reader, and

cause biometric data to be read from a user through operation of the biometric reader,

wherein the at least one computer is operative to cause read card data to be compared with card information stored in an authorized machine user information data store,

wherein the at least one computer is operative to cause read biometric data to be compared with biometric information stored in the authorized machine user information data store,

wherein the at least one computer is operative to authorize a machine user to request a cash dispense transaction responsive at least in part to both

computer-determined correspondence between the read card data and stored card information, and

computer-determined correspondence between the read biometric data and stored biometric information.

3. The apparatus according to claim 1 wherein the at least one computer is operable during the user session to compare a GPS location of the machine to a GPS location of the mobile device.

4. The apparatus according to claim 1 wherein the machine includes the at least one computer.

5. The apparatus according to claim 1 wherein the at least one computer is remotely located from the machine, which is part of the system.

6. Apparatus comprising:

a self-service automated banking machine operable to cause financial transfers responsive at least in part to data read from data bearing records,

wherein the machine includes at least one reader,

wherein the at least one reader is operable to read user data that is both;

usable to identify a financial account on which financial transactions can be carried out, and

associated in at least one data store with a mobile device of a customer, wherein the mobile device is operable to receive images,

wherein the machine includes a cash dispenser operable to dispense cash to authorized users of the machine,

wherein the machine is operable to carry out a cash dispense transaction on a financial account for an authorized user, responsive at least in part to a computer-determined relationship between user data read by the at least one reader and the financial account,

wherein the machine includes at least one camera,

wherein the at least one camera is configured to operate during a user session to capture at least one facial image of a machine user, responsive at least in part to the user session being deemed suspicious based at least in part on user data read by the at least one reader,

wherein the machine is configured to operate to continue the user session, responsive at least in part to consent from the customer for the user session being timely received in reply to the at least one facial image being sent to the mobile device.

7. The apparatus according to claim 6 wherein the machine is part of a banking system that includes a plurality of cash dispensing automated banking machines, wherein the machine is associated with at least one processor,

wherein the at least one reader includes a card reader and a biometric reader,

wherein the at least one processor is operative during a transaction to

cause card data to be read from a user card through operation of the card reader, and

cause biometric data to be read from a user through operation of the biometric reader,

wherein the at least one processor is operative to cause read card data to be compared with card information stored in an authorized machine user information data store,

wherein the at least one processor is operative to cause read biometric data to be compared with biometric information stored in the authorized machine user information data store,

wherein the at least one processor is operative to authorize a machine user to request a transaction responsive at least in part to both

computer-determined correspondence between the read card data and stored card information, and

computer-determined correspondence between the read biometric data and stored biometric information.

8. The apparatus according to claim 6 wherein the at least one reader is operable to read user data that is usable at least in part to obtain a current location of the mobile device,

wherein the machine is associated with at least one processor,

wherein the at least one processor is operable to cause the at least one camera to capture the at least one facial image responsive at least in part to a determination that the current location of the mobile device does not correspond to a location of the machine.

9. The apparatus according to claim 8 wherein the at least one processor is operable to cause the current location of the mobile device to be compared to the location of the machine.

10. The apparatus according to claim 6 wherein the machine is associated with at least one processor, wherein the at least one processor is operable during the user session to cause the at least one facial image to be sent to the mobile device.

11. The apparatus according to claim 10 wherein the mobile device comprises a cell phone, wherein the at least one processor is operable during the user session to cause the at least one facial image to be sent to the cell phone.

12. The apparatus according to claim 10 wherein the mobile device comprises a smart phone, wherein the at least one processor is operable during the user session to cause the at least one facial image to be sent to an Internet address of the smart phone.

13. The apparatus according to claim 10 wherein the at least one processor is operable to determine that the user session is suspicious, and wherein the machine includes the at least one processor.

14. A method comprising:

(a) operating at least one computer during a user session involving a user at a self-service automated banking machine, to determine that the user session is suspicious based at least in part on user data read by at least one reader of the machine;

(b) operating the at least one computer responsive at least in part to the determination in (a), to cause at least one imaging device of the machine to capture at least one image of at least a portion of the user;

(c) operating the at least one computer to cause the at least one image captured in (b) to be sent to a mobile device of a customer linked to the user data; and

(d) subsequent to (c), operating the at least one computer to either;

(di) allow the user session to continue, responsive at least in part to customer consent for the user session being timely received from the customer;

or

(dii) cause the user session to end, responsive at least in part to customer consent for the user session not being timely received from the customer.

15. The method according to claim 14 and further comprising:

(e) operating the at least one computer to obtain machine location data corresponding to location of the machine;

(f) operating the at least one computer during the user session to use the user data read by at least one reader to obtain a current location of the mobile device; and

(g) operating the at least one computer during the user session to compare the location of the machine obtained in (e) and the current location of the mobile device obtained in (f);

wherein (a) includes operating the at least one computer to determine that the user session is suspicious, responsive at least in part to the comparison in (g) indicating a discrepancy between the location of the machine and the current location of the mobile device.

16. The method according to claim 15

wherein (e) includes operating the at least one computer to obtain a GPS location of the machine,

wherein (f) includes operating the at least one computer to obtain a GPS location of the mobile device,

wherein (g) includes operating the at least one computer to compare the GPS location of the machine and the GPS location of the mobile device,

wherein (a) includes operating the at least one computer to determine that the user session is suspicious, responsive at least in part to the comparison in (g) indicating a discrepancy between the GPS location of the machine and the GPS location of the mobile device.

17. The method according to claim 14 and further comprising:

(e) operating the at least one computer during the user session to use the user data read by at least one reader to obtain an address of the mobile device;

wherein (c) includes operating the at least one computer to cause the at least one image to be sent to the address obtained in (e).

18. The method according to claim 17 wherein (c) includes operating the at least one computer to cause a request for user session consent to be sent to the address obtained in (e).

19. The method according to claim 17 wherein the mobile device comprises a smart phone,

wherein (e) includes operating the at least one computer to obtain an address of the smart phone,

wherein (c) includes operating the at least one computer to cause the at least one image to be sent to the address of the smart phone.

20. The method according to claim 19

wherein (e) includes operating the at least one computer to obtain an Internet address of the smart phone,

wherein (c) includes operating the at least one computer to cause the at least one image to be sent to the Internet address.

21. A method comprising:

(a) operating at least one computer during a user session involving a user at a self-service automated banking machine, to receive user data read by at least one reader of the machine;

(b) operating the at least one computer during the user session to obtain address data for a mobile communication device of a customer linked to the user data;

(c) subsequent to (b), operating the at least one computer during the user session to cause, responsive at least in part to a determination that the user session is suspicious, at least one message to be sent to the mobile communication device,

wherein the at least one message informs of the user session,

wherein the at least one message allows the customer to provide through input to the mobile communication device, customer consent to end the user session,

wherein the at least one computer is operative to receive through input to the mobile communication device, a timely reply to the at least one message; and

(d) subsequent to (c), operating the at least one computer to either;

(di) cause the user session to end, based at least in part on customer consent to end the user session being timely input to the mobile communication device in reply to the at least one message;

or

(dii) allow the user session to continue, based at least in part on customer consent to end the user session not being timely input to the mobile communication device in reply to the at least one message.

22. The method according to claim 21 and further comprising:

(e) operating the at least one computer responsive at least in part to the determination that the user session is suspicious, to cause at least one imaging device of the machine to capture at least one image of at least a portion of the user;

wherein in (c) the at least one message includes the at least one image captured in (e).

23. The method according to claim 22

wherein (b) includes operating the at least one computer to obtain a GPS location of the mobile communication device,

and further comprising prior to (c):

(f) operating the at least one computer to obtain a GPS location of the machine;

(g) operating the at least one computer to compare the GPS location of the machine and the GPS location of the mobile communication device;

(h) operating the at least one computer to determine that the user session is suspicious, responsive at least in part to the comparison in (g) indicating a discrepancy between the GPS location of the machine and the GPS location of the mobile communication device;

wherein (c) includes operating the at least one computer responsive at least in part to the determination in (h).

24. A method comprising:

(a) operating at least one computer during a user session involving a user at a self-service automated banking machine, to determine that the user session is suspicious based at least in part on user data read by at least one reader of the machine;

(b) operating the at least one computer responsive at least in part to the determination in (a), to cause at least one imaging device of the machine to capture at least one image of at least a portion of the user;

(c) subsequent to (b), operating the at least one computer during the user session to cause at least one message to be sent to a mobile communication device of a customer linked to the user data, wherein the at least one message includes;

the at least one image, and

a session authorization code; and

(d) operating the at least one computer to either;

(di) allow the user session to continue, based at least in part on the machine timely receiving from the user subsequent to (c), the session authorization code included in the at least one message;

or

(dii) cause the user session to end, based at least in part on the machine not timely receiving from the user subsequent to (c), the session authorization code included in the at least one message.