Method and system for controlling access to a financial account

• US 9,965,757 B2
• Filed: 04/29/2011
• Issued: 05/08/2018
• Est. Priority Date: 06/07/2010
• Status: Active Grant

• Current Assignee: Iami Authentications Inc.
• Original Assignee: Iami Authentications Inc.
• Inventors: Bhinder, Mick M.
• Primary Examiner(s): Khattar, Rajesh
• Application Number:
  US13/097,255
• Publication Number:
  US 20110302083A1
• Time in Patent Office: 2,566 Days
• Field of Search: 705 35- 45
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Abstract

A computer implemented system and method for controlling access to a financial account, the system comprising: one or more memories for storing information and at least one set of instructions, and one or more processors for receiving the financial account information at an access terminal, wherein the access terminal collects access data; identifying a destination account from the financial account information; sending an authorization request to a mobile device linked to the destination account, wherein the authorization request comprises a variable amount of the access data; receiving a response to the authorization request from the mobile device; and controlling access to the financial account at the access terminal based on the response. In some embodiments, the system and method may be further configured to store the response in the destination account. In other embodiments, the financial account is used for payment in a sales transaction, and the access is a request for payment from the financial account.

Claims

1. A method for managing access to a financial account over a communications network, the method comprising:

receiving, at a financial account access computer server over the communications network, transaction data in respect of a transaction initiated at an access terminal from one of the access terminal and an access processing network, the access processing network comprising one or more computing platforms for processing transactions, the financial account access computer server comprising a processor and an account database that stores user account data related to one or more financial accounts and account type data related to one or more account types, wherein each account type is assigned a different subset of data fields from a set of data fields defined for the transaction data, wherein the processor;

identifies a user account at the financial account access computer server using the received transaction data, the user account being linked to a user of the financial account access computer server with authority to release funds from the financial account;

identifies an account type of the user account by parsing the user account data stored in the account database in respect of the identified user account;

determines, from the account database, a subset of data fields assigned to the identified account type;

selects a subset of transaction data from the received transaction data according to the determined subset of data fields;

generates an authorization request message with the selected subset of transaction data;

transmits the authorization request message to a mobile device identified by the user account, the authorization request message causing a display on the mobile device to prompt an access response from the user;

receives the access response from the user via the mobile device; and

transmits the access response to an the access processing network over the communications network, wherein the access response activates the access processing network to complete an authorization process in respect of the financial account to control access to the financial account based on the access response, wherein the authorization process involves;

a first-level authorization process determinative at least based on the transaction data, the access response activating the access processing network to conduct the first-level authorization process, the first-level authorization process involving;

operating the access processing network to obtain authorization for the transaction from a transaction processing institution associated with the financial account, the transaction processing institution determining whether to authorize the transaction using the transaction data; and

a second-level authorization process determinative based on the access response received from the mobile device, the second-level authorization process involving;

operating the access processing network to determine from the access response whether to grant access to the financial account; and

in response to determining that the access response grants access to the financial account, indicate the second-level authorization process grants access to the financial account.

2. The method of claim 1, wherein the access response activates the access processing network to:

in response to determining the access response grants access to the financial account, grant access to the financial account if the first-level authorization grants access to the financial account and if the first-level authorization denies access to the financial account, deny access to the financial account, otherwise, operate in accordance with the access response.

3. The method of claim 1, wherein the processor initiates a communication link with the access processing network for transmitting the access response in response to receiving the access response from the mobile device.

4. The method of claim 1, wherein:

the transaction data comprises an indicator file representing the user account at the financial account access computer server for the user; and

identifying the user account at the financial account access computer server using the received transaction data comprises deriving a user account identifier from the indicator file.

5. The method of claim 4, wherein the indicator file comprises a hash value representing the user account identifier of the user account.

6. The method of claim 1, wherein identifying the user account at the financial account access computer server using the received transaction data comprises:

deriving a user account identifier of the user account by comparing at least a portion of the received transaction data with the stored user account data.

7. The method of claim 1, wherein the access response comprises one of an approval message indicating the user has granted access to the financial account for completing the transaction, a denial message indicating the user has denied access to the financial account for completing the transaction, and an access lock message indicating the user has blocked access to the financial account.

8. The method of claim 1, wherein the authorization request message comprises one or more of:

an approval option for receiving a user input indicating the user has granted access to the financial account for completing the transaction, a denial option for receiving a user input indicating the user has denied access to the financial account for completing the transaction, an access lock option for receiving a user input indicating the user has blocked access to the financial account, and a contact option for receiving a user input triggering a communication link between the user and a financial institution providing the financial account.

9. The method of claim 1, wherein the access response comprises a biometric authentication input received from the user via the mobile device.

17. The method of claim 1, wherein the financial account comprises one of (i) a monetary valued account issued by a financial institution and (ii) a credit bureau account.

18. The method of claim 1, wherein the access terminal comprises one of a point-of-sale terminal, an Automated Teller Machine (ATM) terminal, a computer terminal, and a networked computing device.

19. The method of claim 1, wherein transmitting the authorization request message to the mobile device comprises:

operating the processor to transmit the authorization request via a push network, the push network acting as an open network connection between the mobile device and the financial account access system.

20. The method of claim 19, wherein the financial account access system comprises the push network.

21. The method of claim 1, wherein the account type comprises one of a personal consumer account type, a business manager account type, a merchant account type and a supplementary account type.

22. The method of claim 21, wherein, in response to determining the account type of the user account comprises the supplementary account type:

transmitting the authorization request message to the mobile device identified by the user account comprises;

transmitting a first authorization request message to a primary mobile device identified by a primary account of the user account; and

transmitting a second authorization request message to the mobile device identified by the user account; and

receiving the access response from the user comprises receiving a primary access response from the primary mobile device and a supplementary access response from the mobile device.

23. The method of claim 1, wherein identifying the user account at the financial account access computer server comprises:

operating the access terminal to identify the user account; and

transmitting an indicator file representing the user account to the financial account access computer server.

24. The method of claim 23, wherein the indicator file comprises a hash value representing a user account identifier of the user account.

25. The method of claim 1, wherein in response to the access processing network granting access to the financial account, the method comprises:

transmitting an access granted indicator to the transaction processing institution via the communications network, wherein the access granted indicator activates the transaction processing institution to release funds from the financial account.

26. The method of claim 1, wherein transmitting the access response to the access processing network over the communications network comprises:

receiving, at the financial account access computer server, the access response; and

operating the processor to transmit the access response to the access processing network.

27. The method of claim 1, wherein the access processing network is triggered to perform the second-level authorization process in response to the first-level authorization process granting access to the financial account.

28. The method of claim 1, wherein the transaction processing institution comprises one or more of an acquiring institution, a payment card network, and an issuing institution.

10. A financial account access computer system for managing access to a financial account over a communications network, the system comprising:

an account database that stores user account data related to one or more financial accounts and account type data related to one or more account types, wherein each account type is assigned a different subset of data fields from a set of data fields; and

a processor operable to;

receive transaction data in respect of a transaction initiated at an access terminal over the communications network from one of the access terminal and an access processing network, the access processing network comprising one or more computing platforms for processing transactions, the transaction data comprising a set of data fields;

identify a user account using the received transaction data, the user account being linked to a user with authority to release funds from the financial account;

identify an account type of the user account by parsing the user account data stored in the account database in respect of the identified user account;

determine, from the account database, a subset of data fields assigned to the identified account type;

select a subset of transaction data from the transaction data according to the determined subset of data fields;

generate an authorization request message with the selected subset of transaction data;

transmit the authorization request message to a mobile device identified by the user account, the authorization request message causing a display on the mobile device to prompt an access response from the user;

receive the access response from the user via the mobile device; and

transmit the access response to an the access processing network over the communications network, wherein the access response activates the access processing network to complete an authorization process in respect of the financial account to control access to the financial account based on the access response, wherein the authorization process involves;

a first-level authorization process determinative at least based on the transaction data, the access response activating the access processing network to conduct the first-level authorization process, the first-level authorization process involving;

operating the access processing network to obtain authorization for the transaction from a transaction processing institution associated with the financial account, the transaction processing institution determining whether to authorize the transaction using the transaction data; and

a second-level authorization process determinative based on the access response received from the mobile device, the second-level authorization process involving;

operating the access processing network to determine from the access response whether to grant access to the financial account; and

in response to determining that the access response grants access to the financial account, indicate the second-level authorization process grants access to the financial account.

11. The system of claim 10, wherein the access response activates the access processing network to:

in response to determining the access response grants access to the financial account, grant access to the financial account if the first-level authorization grants access to the financial account and if the first-level authorization denies access to the financial account, deny access to the financial account, otherwise, operate in accordance with the access response.

12. The system of claim 10, wherein the processor initiates a communication link with the access processing network for transmitting the access response in response to receiving the access response from the mobile device.

13. The system of claim 10, wherein:

the transaction data comprises an indicator file representing the user account for the user; and

the processor derives a user account identifier from the indicator file for identifying the user account.

14. The system of claim 10, wherein the processor:

derives a user account identifier of the user account by comparing at least a portion of the received transaction data with the stored user account data.

15. The system of claim 10, wherein the authorization request message comprises one or more of:

an approval option for receiving a user input indicating the user has granted access to the financial account for completing the transaction, a denial option for receiving a user input indicating the user has denied access to the financial account for completing the transaction, an access lock option for receiving a user input indicating the user has blocked access to the financial account, and a contact option for receiving a user input triggering a communication link between the user and a financial institution providing the financial account.

16. The system of claim 10, wherein the access response comprises a biometric authentication input received from the user via the mobile device.

29. The system of claim 10, wherein the processor is operated to transmit the authorization request via a push network, the push network acting as an open network connection between the mobile device and the system.

30. The system of claim 29 further comprises the push network.

31. The system of claim 10, wherein the processor operates the access terminal to:

identify the user account; and

transmit an indicator file representing the user account to the system.

32. The system of claim 31, wherein the indicator file comprises a hash value representing a user account identifier of the user account.

33. The system of claim 10, wherein the transaction processing institution comprises one or more of an acquiring institution, a payment card network, and an issuing institution.