Messaging customer mobile device when electronic bank card used

• US 9,367,845 B2
• Filed: 09/23/2014
• Issued: 06/14/2016
• Est. Priority Date: 09/23/2014
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Candelore, Brant, Zustak, Frederick J., Richman, Steven Martin
• Primary Examiner(s): Marshall, Christle I
• Application Number:
  US14/493,683
• Publication Number:
  US 20160086188A1
• Time in Patent Office: 630 Days
• Field of Search: 235/380
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A bank customer'"'"'s CE device is texted by a bank computer when the customer'"'"'s electronic debit or credit card (“e-card”) is sought to be used so that the customer is alerted to possibly fraudulent “fishing” of the e-card data by a nearby thief device.

Claims

1. CE device comprising:

at least one processor;

at least one output device configured for being controlled by the processor; and

at least one computer storage comprising instructions executable to;

receive a message from a financial institution that an electronic transaction card (e-card) associated with a customer in turn associated with the CE device has been used or has sought to have been used for a monetary transaction;

present on the output device a first user interface (UI),

the first UI including a “

none”

selector, selection of which permits future authentications using the CE device not to require a password, a “

password only”

selector, selection of which mandates that future authentications using the CE device must include entry of a correct password, and a “

password plus biometric”

selector, selection of which mandates that future authentications using the CE device must include entry of a correct password and entry of a correct biometric input.

2. The CE device of claim 1, wherein the message is a text message.

3. The CE device of claim 1, wherein the message is established at least in part by a photograph of a person who has used or has sought to use the e-card for the monetary transaction.

4. The CE device of claim 1, wherein the instructions are executable to:

responsive to receiving the message, present on the output device a second UI allowing the customer to accept or decline the transaction.

5. The CE device of claim 1, wherein the instructions are executable to:

present on the output device a second UI informing a user that a particular e-card has been sought to be used for a transaction, along with a dollar amount of the transaction, the second UI including an allow selector selectable to authorize the transaction to proceed, and a disallow selector selectable to prevent the transaction from being consummated.

6. The CE device of claim 1, wherein the CE device is implemented by a wireless telephone.

7. The CE device of claim 1, comprising a near field communication (NFC) receiver configured to communicate information to the processor.

8. Non-transitory computer readable storage medium (NTCRSM) including instructions executable by at least one processor to:

receive a message from a bank computer when an electronic transaction card (“

e-card”

) is sought to be used so that a customer associated with the e-card is alerted to possibly fraudulent “

fishing”

of the e-card, the processor not being part of the e-card; and

present on an output device a first user interface (UI) prompting a user to select a desired level of authentication protection for authenticating e-card transactions, the first UI including a “

none”

selector, selection of which permits future authentications using the CE device not to require a password, a “

password only”

selector, selection of which mandates that future authentications using the CE device must include entry of a correct password, and a “

password plus biometric”

selector, selection of which mandates that future authentications using the CE device must include entry of a correct password and entry of a correct biometric input.

9. The NTCRSM of claim 8, wherein the instructions when executed by the processor configure the processor to, responsive to receiving the message, present on an output device a user interface allowing the customer to accept or decline the transaction.

10. The NTCRSM of claim 8, wherein the message is a text message.

11. The NTCRSM of claim 8, wherein the message is established at least in part by a photograph of a person who has used or has sought to use the e-card for a monetary transaction.

12. The NTCRSM of claim 8, wherein the instructions are executable to:

present on the output device a second UI informing a user that a particular e-card has been sought to be used for a transaction, along with a dollar amount of the transaction, the second UI including an allow selector selectable to authorize the transaction to proceed, and a disallow selector selectable to prevent the transaction from being consummated.

13. The NTCRSM of claim 8, wherein the NTSCRSM is implemented by a wireless telephone.

14. A consumer electronics (CE) device:

at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to;

establish communication with a financial institution computer system (FICS) in near field communication (NFC) with an electronic transaction card (e-card) of a customer;

receive a message from the FICS addressed to an address of the CE device derived from identifying information from the e-card, the message regarding a prospective transaction by use of the e-card;

wherein the CE device is required to send an authorization signal to the e-card pursuant to the message from the FICS to trigger the e-card to complete the transaction.

15. The CE device of claim 14, wherein the message received from the FICS contains a code that must be input into at a point-of-sale (POS) terminal at which the e-card is presented in order to complete the transaction.

16. The CE device of claim 14, wherein the instructions are executable to:

selectively send to the FICS an acceptance signal to complete the transaction or a denial signal to not complete the transaction, wherein responsive to a timeout period expiring without receiving a signal from the CE device, the FICS does not complete the transaction, or completes the transaction but limited to no more than a threshold monetary amount.