Systems and methods to enhance security in transactions

• US 9,626,678 B2
• Filed: 08/01/2013
• Issued: 04/18/2017
• Est. Priority Date: 08/01/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Ovick, Joseph Bjorn, Carlson, Mark, Hagey, Ryan, Reid, Margaret, Stan, Patrick, Wright, Patrick, Koganti, Krishna Prasad, Powell, Glenn
• Primary Examiner(s): Obaid, Fateh M
• Application Number:
  US13/957,148
• Publication Number:
  US 20140040051A1
• Time in Patent Office: 1,356 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/29 characterised by micropayments
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07G 3/003 Anti-theft control theft alarms G08B13/00

Abstract

A system includes a digital camera coupled with or integrated within a transaction terminal to capture an image during authorization of a transaction initiated at the transaction terminal. The system further includes a portal configured to receive the image and transmit the image to a communication reference associated with the account information of an account in which the transaction is made, based on a security preference associated with the account information. The image may be optionally analyzed to detect fraudulent use of the account.

Claims

1. A computer-implemented method, comprising:

providing a computing apparatus having;

a transaction handler configured on an electronic payment processing network connecting separate computers, including;

transaction terminals, in response to receiving account identifiers of payment accounts, generating transactions of payments in the electronic payment processing network, wherein each of the transaction terminals includes;

an input device capable of obtaining the account identifiers from account identification devices; and

a digital camera;

first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;

second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and

the transaction handler connecting the first computers and the second computers in the electronic payment processing network;

a data warehouse storing a communication reference in association with account information identifying a payment account in the electronic payment processing network;

a portal coupled with the transaction handler and communicating using a communication channel outside the electronic payment processing network;

receiving, in the transaction handler in the electronic payment processing network from a transaction terminal, an authorization request for a transaction in the payment account, wherein;

the authorization request is generated by the transaction terminal in response to the input device of the transaction terminal obtaining, from an account identification device, account information identifying the payment account, and

in response to the input device of the transaction terminal obtaining, from the account identification device, the account information of the payment account, the transaction terminal automatically captures, using the digital camera of the transaction terminal at a time of the authorization of the transaction in the electronic payment processing network, an image of a user using the account identification device to make the transaction at the transaction terminal;

retrieving, by the transaction handler from the data warehouse, the communication reference that is stored in the data warehouse in association with the account information identified in the authorization request;

providing, by the transaction handler, the communication reference in an authorization response to the authorization request, wherein the authorization response is configured to instruct the transaction terminal receiving the authorization response to transmit, to a user device identified by the communication reference, a notification of the transaction, including the captured image of the user who is using the account identification device to make the transaction at the transaction terminal;

receiving, by the portal via the communication channel outside the electronic payment processing network from the user device identified by the communication reference, the image of the user automatically captured by the digital camera of the transaction terminal and provided in the notification of the transaction; and

storing, by the portal in the data warehouse, the image of the user in association with a transaction record of the transaction authorized by the authorization request.

2. The method of claim 1, further comprising:

providing, by the transaction handler, an indicator in an authorization response to the authorization request for the transaction, wherein the indicator is provided in the authorization response in accordance with a preference stored in the data warehouse in association with the account information of the payment account;

wherein the transaction terminal is configured to use the digital camera of the transaction terminal to capture the image in accordance with the indicator provided in the authorization response.

3. The method of claim 1, further comprising:

receiving, in the transaction terminal, the authorization response for the transaction; and

determining, by the transaction terminal, whether the authorization response containing a predetermined indicator;

wherein the capturing the image of the user is in response to a determination that the predetermined indicator is present in the authorization response.

4. A computing apparatus, comprising:

a transaction handler configured on an electronic payment processing network connecting separate computers, including

transaction terminals, in response to receiving account identifiers of payment accounts, generating transactions of payments in the electronic payment processing network, wherein each of the transaction terminals includes;

an input device capable of obtaining the account identifiers from account identification devices; and

a digital camera;

first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;

second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and

the transaction handler connecting the first computers and the second computers in the electronic payment processing network;

a data warehouse storing;

a communication reference in association with account information of a payment account in the electronic payment processing network; and

a security preference in association with the account information of the payment account;

a portal coupled with the transaction handler and communicating using a communication channel outside the electronic payment processing network;

wherein the transaction handler receives, via the electronic payment processing network from a transaction terminal, an authorization request for a transaction in the payment account, wherein;

the authorization request is generated by the transaction terminal in response to the input device of the transaction terminal obtaining, from an account identification device, the account information identifying the payment account, and

in response to the input device of the transaction terminal obtaining, from the account identification device, the account information of the payment account, the transaction terminal automatically captures, using the digital camera of the transaction terminal at a time of the authorization of the transaction in the electronic payment processing network, an image of a user using the account identification device to make the transaction at the transaction terminal;

wherein in response to the authorization request, the transaction handler;

retrieves, from the data warehouse, the communication reference and the security preference that are stored in the data warehouse in association with the account information identified in the authorization request, and

provides the communication reference in an authorization response to the authorization request, wherein the authorization response instructs the transaction terminal receiving the authorization response to transmit, to a user device identified by the communication reference, a notification of the transaction, including the captured image of the user who is using the account identification device to make the transaction at the transaction terminal;

wherein the portal;

receives, from the user device identified by the communication reference in accordance with the security preference stored in association with the account information, the image of the user captured by the digital camera of the transaction terminal, using the communication channel outside the electronic payment processing network, and

stores, in the data warehouse, the image of the user, who is using the account information at the transaction terminal to make the transaction, in association with a transaction record of the transaction authorized by the authorization request.

5. The computing apparatus of claim 4, wherein the transaction handler is configured to provide, in accordance with the security preference specified by a user of the payment account, a security indicator in the authorization response to the authorization request, the security indicator causing the transaction terminal to capture the image of the user.

6. A transaction terminal, comprising:

an input device that obtains, from an account identification device, account information identifying a payment account;

a digital camera;

at least one processor;

a communication device coupled in an electronic payment processing network connecting separate computers, the separate computers including

transaction terminals, including the transaction terminal, that in response to receiving account identifiers of payment accounts, generate transactions of payments in the electronic payment processing network;

first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;

second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and

a transaction handler connecting the first computers and the second computers in the electronic payment processing network;

a memory storing instructions, which when executed by the at least one processor, cause the transaction terminal to;

receive, using the input device from the account identification device, the account information identifying the payment account;

transmit into the electronic payment processing network an authorization request for a transaction of a payment made using the account information, wherein in response to the authorization request, the transaction handler;

retrieves, from a data warehouse coupled with the transaction handler, a communication reference that is stored in the data warehouse in association with the account information identified in the authorization request; and

provides, by the transaction handler, the communication reference in an authorization response to the authorization request;

receive, using the communication device from the electronic payment processing network, the authorization response to the authorization request for the transaction in the payment account in the electronic payment processing network;

determine, based on the authorization response, whether to use the digital camera to capture an image of a user who is using the account identification device at the transaction terminal to make the payment; and

in response to a determination that the authorization response requires an image of the user,

capture, automatically using the digital camera of the transaction terminal, a facial image of the user who is using the account identification device to make the transaction at the transaction terminal; and

transmit, to a user device identified by the communication reference provided in the authorization response, a notification of the transaction, the notification including the facial image of the user who is using the account identification device to make the transaction at the transaction terminal;

wherein the user device uploads the facial image of the user, received in the notification, to a portal coupled with the data warehouse; and

wherein the portal stores the facial image received from the user device in association with a transaction record generated by the transaction handler for the transaction authorized by the authorization request.

7. The transaction terminal of claim 6, wherein the instructions are further configured to instruct the at least one processor to extract the communication reference from the authorization request to transmit the facial image.

8. The transaction terminal of claim 6, wherein the instructions are further configured to instruct the at least one processor to present the facial image to a cashier at the transaction terminal.