Restricted access to online banking

• US 9,519,934 B2
• Filed: 07/19/2013
• Issued: 12/13/2016
• Est. Priority Date: 07/19/2013
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Calman, Matthew A., Kelley, William E., Purvis, Chris, Jain, Dipika, Toth, Michael E.
• Primary Examiner(s): Robinson, Kito R
• Application Number:
  US13/946,658
• Publication Number:
  US 20150026026A1
• Time in Patent Office: 1,243 Days
• Field of Search: 705/65
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3265 characterised by personalisation for use
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

Disclosed is a system and associated method for restricting access to a customer'"'"'s online banking account. The system typically includes a processor, a memory, and an online banking module stored in the memory. The module is typically configured for determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account. If the first online banking transaction is within a first restricted transaction definition and if the computing device is not enrolled with the customer'"'"'s online banking account, geographic location information associated with the computing device and geographic location information associated with a first mobile device enrolled with the customer'"'"'s account are received. The module determines whether the location of the computing device is proximate to a predefined location and/or whether the location of the computing device is proximate to the location of the first mobile device.

Claims

1. A system for restricting access to a customer'"'"'s online banking account, comprising:

a computer apparatus including a processor and a memory; and

an online banking module stored in the memory, executable by the processor and configured for;

receiving an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information of the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating the device identification information of the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information of the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving device identification information of the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving geographic location information associated with the computing device, the geographic location information associated with the computing device comprising information related to a local area network connected to the computing device;

receiving geographic location information associated with the first mobile device, the geographic location information associated with the first mobile device comprising information related to a local area network connected to the first mobile device;

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network; and

based on determining whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network, transmitting a command to the computing device, wherein the command causes the computing device to automatically log out of an active online banking session.

2. The system according to claim 1, wherein the online banking module is configured for transmitting the command to the computing device based on determining (i) that the local area network connected to the computing device is not the predefined local area network and (ii) that the local area network connected to the computing device and the local area network connected to the first mobile device are not the same local area network.

3. The system according to claim 1, wherein the online banking module is configured for:

receiving the first restricted transaction definition from the first mobile device;

receiving subsequent device identification information from the first mobile device;

searching the database of records to determine, based on the subsequent device identification information received from the first mobile device and the device identification information of the first mobile device associated with the customer'"'"'s online banking account, if the first mobile device is associated with the customer'"'"'s online banking account;

authenticating the customer based on determining that the first mobile device is associated with the customer'"'"'s online banking account based on the subsequent device identification information received from the first mobile device;

creating a first restricted transaction record based on authenticating the customer, the first restricted transaction record comprising the first restricted transaction definition.

4. A computer program product for restricting access to a customer'"'"'s online banking account, comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

receiving an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information of the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating the device identification information of the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information of the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving device identification information of the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving geographic location information associated with the computing device, the geographic location information associated with the computing device comprising information related to a local area network connected to the computing device;

receiving geographic location information associated with the first mobile device, the geographic location information associated with the first mobile device comprising information related to a local area network connected to the first mobile device;

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network; and

based on determining whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network, transmitting a command to the computing device, wherein the command causes the computing device to automatically log out of an active online banking session.

5. The computer program product according to claim 4, wherein the non-transitory computer-readable storage medium has computer-executable instructions for transmitting the command to the computing device based on determining (i) that the local area network connected to the computing device is not the predefined local area network and (ii) that the local area network connected to the computing device and the local area network connected to the first mobile device are not the same local area network.

6. The computer program product according to claim 4, wherein the non-transitory computer-readable storage medium has computer-executable instructions for:

receiving the first restricted transaction definition from the first mobile device;

receiving subsequent device identification information from the first mobile device;

searching the database of records to determine, based on the subsequent device identification information received from the first mobile device and the device identification information of the first mobile device associated with the customer'"'"'s online banking account, if the first mobile device is associated with the customer'"'"'s online banking account;

authenticating the customer based on determining that the first mobile device is associated with the customer'"'"'s online banking account based on the subsequent device identification information received from the first mobile device;

creating a first restricted transaction record based on authenticating the customer, the first restricted transaction record comprising the first restricted transaction definition.

7. A method for restricting access to a customer'"'"'s online banking account, comprising:

receiving, with a computer processor, an association request from the customer to associate a first mobile device with the customer'"'"'s online banking account, the association request comprising device identification information of the first mobile device and first account identification information associated with the customer'"'"'s online banking account;

associating, with a computer processor, the device identification information of the first mobile device with the customer'"'"'s online banking account and creating an association record based on the device identification information of the first mobile device and the first account identification information associated with the customer'"'"'s online banking account;

determining, with a computer processor, that a computing device has initiated a first online banking transaction associated with the customer'"'"'s online banking account;

searching, with a computer processor, a database of records to determine if the first online banking transaction is within a first restricted transaction definition;

receiving, with a computer processor, device identification information of the computing device and searching a database of records to determine if the computing device is associated with the customer'"'"'s online banking account;

receiving, with a computer processor, geographic location information associated with the computing device, the geographic location information associated with the computing device comprising information related to a local area network connected to the computing device;

receiving, with a computer processor, geographic location information associated with the first mobile device, the geographic location information associated with the first mobile device comprising information related to a local area network connected to the first mobile device;

based on determining that the first online banking transaction is within a first restricted transaction definition and that the computing device is not associated with the customer'"'"'s online banking account, determining, with a computer processor, whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network; and

based on determining whether the local area network connected to the computing device is a predefined local area network and whether the local area network connected to the computing device and the local area network connected to the first mobile device are the same local area network, transmitting a command to the computing device, wherein the command causes the computing device to automatically log out of an active online banking session.

8. The method according to claim 7, comprising transmitting the command to the computing device based on determining (i) that the local area network connected to the computing device is not the predefined local area network and (ii) that the local area network connected to the computing device and the local area network connected to the first mobile device are not the same local area network.

9. The method according to claim 7, comprising:

receiving the first restricted transaction definition from the first mobile device;

receiving subsequent device identification information from the first mobile device;

searching the database of records to determine, based on the subsequent device identification information received from the first mobile device and the device identification information of the first mobile device associated with the customer'"'"'s online banking account, if the first mobile device is associated with the customer'"'"'s online banking account;

authenticating the customer based on determining that the first mobile device is associated with the customer'"'"'s online banking account based on the subsequent device identification information received from the first mobile device;

creating a first restricted transaction record based on authenticating the customer, the first restricted transaction record comprising the first restricted transaction definition.