Detecting an attempted theft of information stored in an RFID-enabled card

• US 10,796,030 B2
• Filed: 10/27/2016
• Issued: 10/06/2020
• Est. Priority Date: 10/27/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Albertson, Chad M., Campbell, Eric J., Ollerich, Nicholas J., Steffen, Christopher W.
• Primary Examiner(s): Edwards, Linglan E
• Assistant Examiner(s): Carey, Forrest L
• Application Number:
  US15/335,562
• Publication Number:
  US 20180121686A1
• Time in Patent Office: 1,440 Days
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06K 19/005 the record carrier comprising an arrangement to facilitate insertion into a holding device, e.g. an arrangement that makes the record carrier fit into an etui or a casing ticket holders A45C11/18
• CPC Class Codes: G06K 19/07327 Passive means, e.g. Faraday cages Faraday-type protection of electric circuits in general H05K9/00

Abstract

Detecting an attempted theft of information stored in an RFID-enabled card, including: receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information; determining, by the theft detection module, that the RFID-enabled card information is mock card information, wherein mock card information is provided to an RFID reader by an RFID tag exterior to an RFID shield of an RFID-enabled card security enclosure responsive to an RFID request directed at the security enclosure; and responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

Claims

1. A method of detecting an attempted theft of information stored in a Radio Frequency Identification (‘

RFID’

)-enabled card, the method comprising,

by computer program instructions executed by a computer processor;

receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information;

determining, by the theft detection module, that the RFID-enabled card information is mock card information corresponding to an RFID-enabled card security enclosure that is not valid RFID-enabled card information for an RFID-enabled card contained inside an RFID shield of the RFID-enabled card security enclosure, wherein the mock card information is modified at regular intervals to include updated information that is based on a timestamp, wherein the mock card information is provided to an RFID reader by an RFID tag disposed between an exterior of the security enclosure and the RFID shield responsive to an RFID request directed at the security enclosure, wherein the mock card information provided to the RFID reader responsive to the RFID request directed at the security enclosure includes updated timestamp information corresponding to a time period of an attempted theft of the RFID-enabled card information; and

responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

2. The method of claim 1 wherein:

receiving, by the theft detection module from a user of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

3. The method of claim 1 further comprising:

receiving, by the theft detection module from a manufacturer of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

4. The method of claim 1 further comprising:

the mock card information comprises mock credit card information; and

the transaction request comprises a request to perform a purchase using the mock credit card information.

5. The method of claim 1 wherein:

the mock card information comprises mock security card information; and

the transaction request comprises a request for access to a secured object.

6. The method of claim 1 wherein:

the mock card information comprises mock user identification information; and

the transaction request comprises a request for user authentication.

7. The method of claim 1, wherein:

the transaction request comprises an online transaction request; and

the security actions further comprise capturing an IP (‘

Internet Protocol’

) address of a user from which the transaction request originated.

8. The method of claim 1, wherein:

the transaction request originated from a transaction initiated with a physical card; and

the security actions include capturing a physical location of a user from which the transaction request originated.

9. The method of claim 8, wherein the security action further includes:

capturing one or more images at the physical location from which the transaction request originated.

10. The method of claim 1, wherein the security actions further comprise notifying a user of the RFID-enabled card security enclosure.

11. The method of claim 1, wherein the security actions further comprise notifying law enforcement of an attempted use of the mock card information.

12. The method of claim 1, wherein the security actions further comprise securing one or more RFID-enabled cards enclosed within the RFID-enabled card security enclosure.

13. An apparatus for detecting an attempted theft of information stored in a Radio Frequency Identification (‘

RFID’

)-enabled card, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of;

receiving, by a theft detection module, a transaction request, the transaction request including RFID-enabled card information;

determining, by the theft detection module, that the RFID-enabled card information is mock card information corresponding to an RFID-enabled card security enclosure that is not valid RFID-enabled card information for an RFID-enabled card contained inside an RFID shield of the RFID-enabled card security enclosure, wherein the mock card information is modified at regular intervals to include updated information that is based on a timestamp, wherein the mock card information is provided to an RFID reader by an RFID tag disposed between an exterior of the security enclosure and the RFID shield responsive to an RFID request directed at the security enclosure, wherein the mock card information provided to the RFID reader responsive to the RFID request directed at the security enclosure includes updated timestamp information corresponding to a time period of an attempted theft of the RFID-enabled card information; and

responsive to determining that the RFID-enabled card information is mock card information, initiating, by the theft detection module, one or more security actions.

14. The apparatus of claim 13 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

receiving, by the theft detection module from a user of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

15. The apparatus of claim 13 further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:

receiving, by the theft detection module from a manufacturer of the RFID-enabled card security enclosure, a request to register the mock card information with the theft detection module; and

registering, by the theft detection module, the mock card information.

16. The apparatus of claim 13 wherein:

the mock card information comprises mock credit card information; and

the transaction request comprises a request to perform a purchase using the mock credit card information.

17. The apparatus of claim 13 wherein:

the mock card information comprises mock security card information; and

the transaction request comprises a request for access to a secured object.

18. The apparatus of claim 13 wherein:

the mock card information comprises mock user identification information; and

the transaction request comprises a request for user authentication.