Systems and methods to enhance security in transactions

• US 10,504,118 B2
• Filed: 03/08/2017
• Issued: 12/10/2019
• Est. Priority Date: 08/01/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Ovick, Joseph Bjorn, Carlson, Mark, Hagey, Ryan, Reid, Margaret, Stan, Patrick, Wright, Patrick, Koganti, Krishna Prasad, Powell, Glenn
• Primary Examiner(s): Obaid, Fateh M
• Application Number:
  US15/453,401
• Publication Number:
  US 20170178143A1
• Time in Patent Office: 1,007 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/29 characterised by micropayments
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 30/0238 at point-of-sale [POS]
• CPC Class Codes: G06V 40/166 using acquisition arrangements
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07G 3/003 Anti-theft control theft alarms G08B13/00

Abstract

A system includes a digital camera coupled with or integrated within a transaction terminal to capture an image during authorization of a transaction initiated at the transaction terminal. The system further includes a portal configured to receive the image and transmit the image to a communication reference associated with the account information of an account in which the transaction is made, based on a security preference associated with the account information. The image may be optionally analyzed to detect fraudulent use of the account.

Claims

1. A transactional terminal, comprising:

an input device;

a digital camera on the transaction terminal;

a communication device coupled in an electronic payment processing network that connects separate computers for payment processing in the electronic payment processing network;

at least one processor coupled to the input device, the digital camera and the communication device; and

a memory storing instructions, which when executed by the at least one processor, cause the transaction terminal to;

receive, using the input device, from an account identification device, account information identifying a payment account associated with an authorized user, the account identification device controlled by a customer;

transmit, using the communication device, into the electronic payment processing network, an authorization request for a transaction of a payment made using the account information;

receive, using the communication device, from the electronic payment processing network, an authorization response for the transaction identified by the authorization request associated with the payment account, wherein the authorization request includes an indication of whether or not to cause the digital camera to capture an image of the customer using the account identification device at the transaction terminal to make the payment during the transaction;

determine, according to the indication provided in the authorization response, whether or not to use the digital camera to capture an image of the customer using the account identification device at the transaction terminal to make the payment during the transaction; and

in response to a determination, at the transaction terminal, that the authorization response requires an image of the customer, execute instructions to cause the digital camera to automatically capture a facial image of the customer using the account identification device to make the payment during the transaction at the transaction terminal;

retrieve a communication reference from the authorization response;

generate a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;

transmit the notification to a user device associated with the authorized user and identified by the communication reference retrieved from the authorization response; and

in response to receiving a communication from the user device, decline the transaction.

2. The transaction terminal of claim 1, wherein the communication reference is pre-associated with the payment account in the electronic payment processing network.

3. The transaction terminal of claim 2, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.

4. The transaction terminal of claim 3, wherein the user device uploads the facial image of the user, received in the notification, to a portal coupled with a data warehouse that stores the facial image of the user with a record of the transaction.

5. The transaction terminal of claim 4, wherein the record is generated for the transaction by a transaction handler of the electronic payment processing network in providing the authorization response.

6. The transaction terminal of claim 5, wherein in response to the authorization request, the transaction handler:

retrieves, from the data warehouse coupled with the transaction handler, a security preference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and

generates, in the authorization response, the indication of whether or not to capture an image of the user who is using the account identification device at the transaction terminal to make the payment.

7. The transaction terminal of claim 6, wherein in response to the authorization request and a determination that the security preference requires an image of the user who is using the account identification device at the transaction terminal to make the payment, the transaction handler:

retrieves, from the data warehouse coupled with the transaction handler, the communication reference that is stored in the data warehouse in association with the payment account identified by the authorization request; and

provides, in the authorization response, the communication reference.

8. The transaction terminal of claim 5, wherein the separate computers include:

transaction terminals, including the transaction terminal, that in response to receiving account identifiers of payment accounts, generate transactions of payments in the electronic payment processing network;

first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;

second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and

the transaction handler connecting the first computers and the second computers in the electronic payment processing network.

9. The transaction terminal of claim 1, wherein the instructions are further configured to instruct the at least one processor to present a facial image to a cashier at the transaction terminal.

10. A computing apparatus, comprising:

a transaction handler on an electronic payment processing network connecting separate from computers for payment processing in the electronic payment processing network;

a data warehouse storing;

a communication reference in association with account information of a payment account in the electronic payment processing network; and

a security preference in association with the account information of the payment account; and

a portal coupled with the transaction handler and communicating using a communication channel outside the electronic payment processing network;

wherein the transaction handler receives, via the electronic payment processing network from a transaction terminal, an authorization request for a transaction of a payment in the payment account;

wherein in response to the authorization request, the transaction handler;

provides in an authorization response for the transaction, based on the security preference, an indication of whether or not to capture an image of a customer using an account identification device at the transaction terminal to make the payment; and

transmits, via the electronic payment processing network, the authorization response to the transaction terminal; and

wherein, in response to the authorization response, the transaction terminal;

determines, according to the indication provided in the authorization response, whether or not to use a digital camera to capture an image of the customer using the payment account at the transaction terminal to make the payment; and

in response to a determination, at the transaction terminal, that the authorization response requires an image of the customer, executes instructions to cause the digital camera to automatically capture a facial image of the customer using the payment account to make the payment during the transaction at the transaction terminal;

retrieves a communication reference from the authorization response;

generates a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;

transmits the notification to a user device associated with an authorized user and identified by the communication reference retrieved from the authorization response; and

in response to receiving a communication from the user device, decline the transaction.

11. The computing apparatus of claim 10, wherein the communication reference is pre-associated with the payment account in the electronic payment processing network before the transaction.

12. The computing apparatus of claim 11, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.

13. The computing apparatus of claim 12, wherein the user device uploads the facial image of the user received in the notification, to the portal coupled with the data warehouse that stores the facial image of the user with a record of the transaction.

14. The computing apparatus of claim 13, wherein the record is generated for the transaction by the transaction handler of the electronic payment processing network in providing the authorization response.

15. The computing apparatus of claim 14, wherein in response to the authorization request, the transaction handler:

retrieves, from the data warehouse coupled with the transaction handler, the security preference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and

generates, in the authorization response, the indication of whether or not to capture an image of the user who is using the payment account at the transaction terminal to make the payment.

16. The computing apparatus of claim 15, wherein in response to the authorization request and a determination that the security preference requires an image of the user who is using the account identification device at the transaction terminal to make the payment, the transaction handler:

retrieves, from the data warehouse coupled with the transaction handler, the communication reference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and

provides, by the transaction handler, the communication reference in the authorization response to the authorization request.

17. The computing apparatus of claim 14, wherein the separate computers include:

transaction terminals, including the transaction terminal, that in response to receiving account identifiers of payment accounts, generate transactions of payments in the electronic payment processing network;

first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;

second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and

the transaction handler connecting the first computers and the second computers in the electronic payment processing network.

18. The computing apparatus of claim 10, wherein the transaction terminal further presents the facial image to a cashier at the transaction terminal.

19. A method implemented in a transaction terminal, the method comprising:

receiving, using an input device of the transaction terminal from an account identification device, account information identifying a payment account associated with an authorized user, the account identification device controlled by a customer;

transmitting, using a communication device of the transaction terminal, into an electronic payment processing network, an authorization request for a transaction of a payment made using the account information, wherein the electronic payment processing network connects separate computers for payment processing in the electronic payment processing network;

receiving, using the communication device, from the electronic payment processing network, an authorization response for the transaction identified by the authorization request in the payment account, wherein the authorization request has an indication of whether or not to capture an image of customer using the account identification device at the transaction terminal to make the payment;

determining, according to the indication provided in the authorization response, whether or not to use a digital camera on the transaction terminal to capture an image of customer using the account identification device at the transaction terminal to make the payment during the transaction; and

in response to a determination that the authorization response requires an image of the customer, executing instructions to cause the digital camera to capture a facial image of the customer using the account identification device to make the payment during the transaction at the transaction terminal;

retrieving a communication reference from the authorization response;

generating a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;

transmitting the notification to a user device associated with the authorized user and identified by the communication reference retrieved from the authorization response; and

in response to receiving a communication from the user device, decline the transaction.

20. The method of claim 19, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.