Transaction dependent on ATM receiving user input of the security code sent during transaction to account'S designated mobile phone

• US 7,946,480 B2
• Filed: 09/04/2009
• Issued: 05/24/2011
• Est. Priority Date: 04/17/1998
• Status: Expired due to Fees

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Douglass, Mark A., Blackson, Dale H., Enright, Jeffery M., Ramachandran, Natarajan, Graef, H. Thomas, Block, James, Zaugg, Matthew R., Miller, Willis
• Primary Examiner(s): St. Cyr, Daniel
• Application Number:
  US12/584,491
• Publication Number:
  US 20100059587A1
• Time in Patent Office: 627 Days
• Field of Search: 235/379, 235/380, 235/382
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs

Abstract

An automated banking machine operates to cause financial transfers responsive to data read from data bearing records. The machine includes a card reader that reads card data from a card of a machine user. The card data is linked in a data store to both a customer'"'"'s financial account and a cell phone assigned to that customer. In response to the user'"'"'s transaction request, contact data for the assigned cell phone is determined from the data store using the read card data. A transaction security code is then sent to that cell phone. The transaction is allowed to proceed only if the user inputs the sent security code to the machine within a predetermined amount of time. Transaction allowance may also be based on a real time determination that the assigned cell phone is physically located proximate the machine.

Claims

1. Apparatus comprising:

a self-service automated machine including;

at least one reader,

wherein the at least one reader is operative to read user data,

a cash dispenser,

wherein the cash dispenser is operative to cause cash stored in the machine to be physically dispensed from the machine,

wherein the machine is associated with at least one computer,

wherein the at least one computer is in operative connection with the the at least one reader, and the cash dispenser,

wherein the at least one computer is programmed to carry out a cash dispense transaction,

wherein the at least one computer is operative during the cash dispense transaction to;

cause user data corresponding to user identification data to be read through operation of the at least one reader,

receive a user request for the cash dispense transaction,

cause responsive at least in part to the user data being read and the user request being received, at least one message to be sent to at least one mobile phone that is associated in at least one data store with the user identification data,

 

wherein the at least one message includes security data,

receive subsequent to causing the at least one message to be sent, user input, and

cause responsive at least in part to a determination that the user input includes data related to the security data, cash to be dispensed from the machine through operation of the cash dispenser,

wherein the at least one computer is operative to cause a financial account to be assessed a value associated with cash dispensed.

2. The apparatus according to claim 1

wherein the at least one computer is programmed to cause a security code pertaining to a machine user session that includes the cash dispense transaction, to be sent to a customer mobile phone that is linked with the user identification data in the at least one data store,

wherein the at least one computer is operative to allow the machine user to carry out the cash dispense transaction following receipt by the at least one computer of the security code from the machine user during the machine user session.

3. The apparatus according to claim 1 wherein the machine further includes at least one user input device, wherein the at least one user input device is operative to receive data input by a user of the machine, wherein the at least one user input device is in operative connection with the at least one computer,

wherein the at least one computer is operative to cause the at least one message sent to the at least one mobile phone to include transaction security data,

wherein the at least one computer is operative to allow the dispense of cash responsive at least in part to a determination that the transaction security data has a predetermined relationship to data received in the user input through the at least one user input device.

4. The apparatus according to claim 3 wherein the transaction security data includes a code, wherein the code includes at least one random portion, and wherein the at least one computer is operative to allow the cash dispense responsive at least in part to the data received in the user input corresponding to the code.

5. The apparatus according to claim 4 wherein the code comprises a transaction authorization code, wherein the machine includes a display device, and wherein the at least one computer is operative to cause the display device to output at least one message indicating that the transaction authorization code is being sent to the machine user'"'"'s designated mobile phone.

6. The apparatus according to claim 3 wherein the at least one user input device includes an image capture device, and wherein the transaction security data includes at least one image.

7. The apparatus according to claim 3 wherein the at least one user input device includes a bar code reader, and wherein the transaction security data includes a bar code.

8. The apparatus according to claim 3

wherein the at least one computer is operative to send at least one transaction message to a transaction host remotely located from the machine,

wherein the at least one computer is operative prior to receipt of the user input by the machine, to send at least one server message to a server remotely located from the machine and other than the host,

wherein the at least one server message includes data corresponding to at least a portion of the user data read through operation of the at least one reader,

wherein the at least one server message is operative to cause the at least one message to be sent to the at least one mobile phone.

9. The apparatus according to claim 8 and further comprising the server and the host.

10. The apparatus according to claim 8

wherein the at least one computer is operative after sending the at least one server message, to receive from the server at least one return message including server data,

wherein the at least one computer is operative to determine whether the transaction security data and the server data have a predetermined relationship,

wherein the at least one computer is operative responsive at least in part to a positive determination, to send at least one transaction request message to the host.

11. The apparatus according to claim 10

wherein the at least one computer is operative after sending the at least one transaction request message, to receive from the host at least one transaction authorization message,

wherein the at least one computer causes the cash dispenser to operate responsive at least in part to receiving the at least one transaction authorization message.

12. The apparatus according to claim 8 and further comprising:

the server,

wherein the server is operative responsive at least in part to receipt of the at least one server message to determine whether the data corresponding to at least a portion of the user data corresponds to a predetermined notification network address stored in at least one data store in operative connection with the server,

wherein the network address corresponds to the mobile phone,

wherein the server is operative responsive at least in part to the determination to cause the at least one message to be sent to the mobile phone.

13. The apparatus according to claim 12 wherein the server is operative to generate a code having at least a random portion, and wherein the server is operative to include data corresponding to the code in the at least one message sent to the mobile phone.

14. The apparatus according to claim 13

wherein the server is operative after generating the code, to cause at least one return message to be sent to the at least one computer,

wherein the at least one return message includes server data having a predetermined relationship with the code,

wherein the at least one computer is operative responsive at least in part to receiving the server data, to determine that the data received in the user input has the predetermined relationship with the code,

wherein the at least one computer is operative responsive at least in part to the determination, to cause at least one transaction authorization request message to be sent to the host,

wherein the at least one computer is operative receive the at least one transaction authorization message in response to sending the at least one transaction authorization request message.

15. The apparatus according to claim 3

wherein the at least one computer is operative receive the transaction security data from a machine user through the at least one user input device,

wherein the at least one computer is operative responsive at least in part to receipt of the transaction security data, to send to a user authorizing server, at least one user authorization request message that includes the transaction security data.

16. The apparatus according to claim 15 and further comprising the server,

wherein the server is operative to determine that the transaction security data received in the at least one user authorization request message, corresponds to the transaction security data sent to the at least one mobile phone,

wherein the server is operative responsive at least in part to the determination to cause at least one transaction confirmed-by-user message to be sent to the at least one computer,

wherein the at least one computer is operative responsive at least in part to receiving the at least one transaction confirmed-by-user message, to send at least one transaction authorization request message to a transaction host.

17. The apparatus according to claim 1

wherein the at least one reader includes at least one of a card reader and a biometric reader,

wherein the self-service automated machine comprises an automated banking machine,

wherein the automated banking machine includes the at least one computer,

wherein the automated banking machine is operative to cause financial transfers responsive at least in part to user data read by the at least one reader,

wherein the automated banking machine is operative to carry out a cash withdrawal transaction.

18. Apparatus comprising:

a cash dispensing automated banking machine operative to cause financial transfers responsive at least in part to data bearing records,

wherein the machine includes;

a cash dispenser,

at least one input device,

at least one reader device, wherein the at least one reader device includes a card reader,

at least one computer,

wherein the at least one computer is in operative connection with the cash dispenser, the at least one input device, and the at least one reader device,

wherein the at least one computer is programmed to carry out a cash dispensing transaction,

wherein the at least one computer in a first stage of the transaction causes the at least one reader device to obtain user identifying data from a user of the machine,

wherein the at least one computer in a second stage of the transaction sends at least one message that is operative to cause

 

cell phone contact data to be obtained from at least one data store that associates the cell phone contact data with the user identifying data, and

 

at least one message including a security code to be sent to a user cell phone corresponding to the cell phone contact data,

wherein the at least one computer in a third stage of the transaction receives user input through the at least one input device,

wherein the at least one computer in a fourth stage of the transaction causes the cash dispenser to dispense cash, based on the received user input corresponding to the security code.

19. Apparatus comprising:

a self-service automated machine including a cash dispenser and at least one user input device, wherein the cash dispenser is operative to cause cash to be physically dispensed from the machine, wherein the at least one user input device includes at least one reader device,

wherein the machine is associated with at least one computer, wherein the at least one computer is in operative connection with the cash dispenser and the at least one user input device,

wherein the at least one computer,

responsive at least in part to receiving through the at least one user input device

user identifying data corresponding to an authorized user mobile phone, and

a cash withdrawal transaction request,

is operative to further receive through the at least one user input device, further data which corresponds to a transaction security code sent to the authorized user mobile phone subsequent to the request,

wherein the at least one computer operates to allow the cash withdrawal transaction corresponding to the request to be carried out, responsive at least in part to receiving the further data.

20. Apparatus comprising:

an automated banking machine system including;

an automated banking machine,

at least one computer programmed to cause the machine to carry out a cash dispense transaction,

wherein the at least one computer is operative during the transaction responsive at least in part to the machine obtaining account identifying data from a machine user, to cause a computer-created transaction authorization code that is specifically associated with the transaction to be sent to a mobile phone of a holder of an account that is associated with the account identifying data,

wherein the at least one computer is operative subsequently during the transaction responsive at least in part to the machine receiving the transaction authorization code from the machine user within a predetermined time period, to cause a cash dispenser of the machine to physically dispense cash from the machine.