Method for securing transactions, transaction device, bank server, mobile terminal, and corresponding computer programs

• US 9,697,511 B2
• Filed: 12/21/2009
• Issued: 07/04/2017
• Est. Priority Date: 12/22/2008
• Status: Active Grant

• Current Assignee: Banks And Acquirers International Holding
• Original Assignee: Ingenico Group
• Inventors: Naccache, David
• Primary Examiner(s): Wong, Eric T
• Application Number:
  US12/643,352
• Publication Number:
  US 20100198725A1
• Time in Patent Office: 2,752 Days
• Field of Search: 705 39
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A method for securing a transaction by an electronic card paired with at least one mobile terminal, wherein a banking organization in charge of managing transactions involving the card has previously recorded an identifier of the mobile terminal among data relating to the owner of the card. The securing method includes: transmission, by the mobile terminal, of at least one first signal including a message containing the identifier; receipt, by at least one transaction device near the mobile terminal, of the first signal; transmission, by the transaction device, of a second signal including at least the message to at least one remote banking organization; assignment, by a control server of the banking organization, to a transaction involving the electronic card, by a control server of the banking organization, of information representing proximity between the electronic card and the mobile terminal, according to the second signal received by the banking organization.

Claims

1. A banking server in charge of managing a transaction involving an electronic card, wherein said electronic card is paired with at least one mobile terminal, and wherein said banking server includes:

a computer-readable medium for recording an identifier of said mobile terminal, a location of said mobile terminal and a time of said location, among data relating to the owner of said electronic card; and

a processor configured by program code instructions to;

receive from each of at least some of a plurality of respective transaction devices at least one signal sent by the respective transaction device in response to the mobile terminal being in proximity to the respective transaction device and a communication being initiated between the mobile terminal and the respective transaction device, the at least one signal including a message containing said identifier of said mobile terminal, an identifier of said transaction device, time information, at least one bank reference information element, and at least one addressing information element designating at least one remote banking organization, wherein the time information enables the banking server to determine the time of said location when said mobile terminal is in proximity to said respective transaction device, said plurality of transaction devices comprising a transaction device making the transaction involving the electronic card and other transaction devices not making the transaction;

update the location of said mobile terminal and the time of said location for said mobile terminal in response to the signals received from the respective transaction devices, including those transaction devices not making the transaction;

receive information regarding the transaction involving said electronic card from the transaction device making the transaction during a time when communication with the mobile terminal is unavailable;

determine a distance between a position of said mobile terminal and said transaction device making the transaction using the updated location of said mobile terminal and the time of said location;

mark said transaction as suspicious if said distance is greater than a predetermined threshold;

emit an alert to said owner of said card, if said transaction is marked as suspicious; and

process said transaction, even if said transaction is marked as “

suspicious”

.

2. A non-transitory computer-readable medium comprising program code instructions for implementing a method for securing a transaction, wherein an electronic card is paired with at least one mobile terminal, wherein at least one remote banking organization in charge of managing transactions involving said card has previously recorded an identifier of said mobile terminal among data relating to the owner of said card, when the program is executed on a bank server, wherein the method comprises:

recording a location of said mobile terminal and a time of said location;

receiving from each of at least some of a plurality of respective transaction devices at least one signal sent by the respective transaction device in response to the mobile terminal being in proximity to the respective transaction device and a communication being initiated between the mobile terminal and the respective transaction device, the at least one signal including a message containing said identifier of said mobile terminal, an identifier of said transaction device, time information, at least one bank reference information element, and at least one addressing information element designating said at least one remote banking organization, wherein the time information enables the banking server to determine the time of said location when said mobile terminal is in proximity to said respective transaction device, said plurality of transaction devices comprising a transaction device making the transaction involving the electronic card and other transaction devices not making the transaction;

updating the location of said mobile terminal and the time of said location for said mobile terminal in response to the signals received from the respective transaction devices, including those transaction devices not making the transaction;

receiving information regarding the transaction involving said electronic card from the transaction device making the transaction during a time when communication with the mobile terminal is unavailable;

determining a distance between a position of said mobile terminal and said transaction device making the transaction using the updated location of said mobile terminal and the time of said location;

marking said transaction as suspicious if said distance is greater than a predetermined threshold;

emitting an alert to the attention of said owner of said card, if said transaction is marked as suspicious; and

processing said transaction, even if said transaction is marked as “

suspicious”

.

3. A method for securing a transaction by an electronic card, wherein said electronic card is paired with at least one mobile terminal, wherein at least one remote banking organization in charge of managing transactions involving said card has previously recorded an identifier of said mobile terminal among data relating to the owner of said card, and wherein said method includes the following acts:

recording, by a control server of said at least one banking organization, a location of said mobile terminal and a time of said location;

performing the following acts for each of at least some of a plurality of respective transaction devices, in response to the mobile terminal being in proximity to the respective transaction device, wherein the plurality of transaction devices comprises a transaction device making the transaction involving the electronic card and other transaction devices not making the transaction;

initiating a communication between the mobile terminal and the respective transaction device;

transmitting, by said mobile terminal, at least one first signal including a message containing said identifier of said mobile terminal, at least one bank reference information element, and at least one addressing information element designating said at least one remote banking organization;

receiving, by the respective transaction device near said mobile terminal, said first signal;

transmitting, by said transaction device, a second signal to said banking organization, the second signal including the identifier of said mobile terminal, an identifier of the respective transaction device, time information, at least one bank reference information element, and the at least one addressing information element designating the at least one remote banking organization;

receiving the second signal, by the control server of said at least one banking organization, wherein the time information enables the control server to determine the time of said location when said mobile terminal is in proximity to said respective transaction device; and

updating the location of said mobile terminal and the time of said location for said mobile terminal in response to the received second signal;

receiving, by the control server, information regarding the transaction involving said electronic card from the transaction device making the transaction during a time when communication with the mobile terminal is unavailable;

determining, by the control server, a distance between a position of said mobile terminal and said transaction device making the transaction using the updated location of said mobile terminal and the time of said location;

marking said transaction as “

suspicious”

if said distance is greater than a predetermined threshold; and

emitting an alert by said banking organization to said owner of said card, if said transaction is marked as “

suspicious”

,

processing said transaction, even if said transaction is marked as “

suspicious”

.

4. The method for securing a transaction according to claim 3, wherein said predetermined threshold is dependent on the time that has passed since said recorded time of said location of the mobile terminal.

5. The method for securing a transaction according to claim 3, wherein said first signal is transmitted according to a communication technique belonging to the group including:

“

Bluetooth”

technology;

“

Wi-Fi”

technology;

“

RFID”

technology;

“

NFC”

(“

Near Field Communication”

) technology;

infrared technology.