Real-time security verification for banking cards

• US 8,615,465 B2
• Filed: 07/08/2008
• Issued: 12/24/2013
• Est. Priority Date: 07/08/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Boutcher, David C., Harney, Raymond K., Munroe, Steven J., Scheel, Jeffrey J.
• Primary Examiner(s): Lemieux, Jessica
• Application Number:
  US12/168,964
• Publication Number:
  US 20100006641A1
• Time in Patent Office: 1,995 Days
• Field of Search: 705/39
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

Embodiments of the invention provide a means for verifying that a person using a bank card at a point-of-sale merchant location is in fact a person authorized to use the bank card. In one embodiment of the invention, verification may involve communicating with the mobile device 103 associated with the person authorized to use the bank card. The person authorized to use the bank card may be required to send verification data to the bank card verification system via the mobile device to confirm a purchase. The bank card verification system may not authorize the purchase if the proper verification data is not received from the mobile device. In another embodiment, the bank card verification system may be configured to determine a proximity of the mobile device to the merchant point-of-sale location to verify the purchase.

Claims

1. A method for authorizing purchases made with a bank card using a mobile device, comprising:

receiving a request for a security response, wherein the request is received in response to an attempt to use the bank card to complete a purchase; and

in response to the request for a security response;

determining, by operation of one or more computer processors, whether the bank card is within a predefined distance from the mobile device estimating a distance between the bank card and the mobile device based on a signal exchanged between the mobile device and circuitry within the bank card;

providing a first security response to authorize the purchase upon determining that the bank card is within the predefined distance from the mobile device; and

providing a second security response to reject the purchase upon determining that the bank card is not within the predefined distance from the mobile device.

2. The method of claim 1, wherein providing the first security response comprises providing a first security code to authorize the purchase, and providing the second security response comprises providing a second security code to reject the purchase.

3. The method of claim 1, wherein providing the first security response comprises performing a scan of a user of the mobile device using a bio sensor.

4. The method of claim 3, wherein the scan comprises any one of:

a fingerprint scan;

facial scan; and

retinal scan.

5. The method of claim 1, further comprising:

determining whether the mobile device is within a predefined distance from a location where the purchase is being attempted;

providing the first security response upon determining that the mobile device is within the predefined distance from the location; and

providing the second security response upon determining that the mobile device is not within the predefined distance from the location.

6. The method of claim 1, wherein the bank card is one of a credit card and a debit card.

7. The method of claim 1, wherein the mobile device is a cellular phone.

8. A computer readable storage medium comprising a program product, which, when executed by a processor is configured to perform an operation for authorizing purchases made with a bank card using a mobile device, comprising:

receiving a request for a security response, wherein the request is received in response to an attempt to use the bank card to complete a purchase; and

in response to the request for a security response;

determining whether the bank card is within a predefined distance from the mobile device by estimating a distance between the bank card and the mobile device based on a signal exchanged between the mobile device and circuitry within the bank card;

providing a first security response to authorize the purchase upon determining that the bank card is within the predefined distance from the mobile device; and

providing a second security response to reject the purchase upon determining that the bank card is not within the predefined distance from the mobile device.

9. The computer readable storage medium of claim 8, wherein providing the first security response comprises providing a first security code to authorize the purchase, and providing the second security response comprises providing a second security code to reject the purchase.

10. The computer readable storage medium of claim 8, wherein providing the first security response comprises performing a scan of a user of the mobile device using a bio sensor.

11. The computer readable storage medium of claim 10, wherein the scan comprises any one of:

a fingerprint scan;

facial scan; and

retinal scan.

12. The computer readable storage medium of claim 8, wherein the operation further comprises:

determining whether the mobile device is within a predefined distance from a location where the purchase is being attempted;

providing the first security response upon determining that the mobile device is within the predefined distance from the location; and

providing the second security response upon determining that the mobile device is not within the predefined distance from the location.

13. The computer readable storage medium of claim 8, wherein the mobile device is a cellular phone.

14. The computer readable storage medium of claim 8, wherein the bank card is one of a credit card and a debit card.

15. A system, comprising at least one server, and at least one mobile device associated with a person authorized to use a bank card, wherein the mobile device is configured to:

receive a request for a security response from the server, wherein the request is received in response to an attempt to use the bank card to complete a purchase; and

in response to the request for the security response;

determine whether the bank card is within a predefined distance from the mobile device by estimating a distance between the bank card and the mobile device based on a signal exchanged between the mobile device and circuitry within the bank card;

provide a first security response to the server to authorize the purchase upon determining that the bank card is within the predefined distance from the mobile device; and

provide a second security response to the server to reject the purchase upon determining that the bank card is not within the predefined distance from the mobile device.

16. The system of claim 15, wherein the mobile device is configured to provide the first security response by providing a first security code to authorize the purchase, and providing the second security response comprises providing a second security code to reject the purchase.

17. The system of claim 15, wherein the mobile device is configured to provide the first security response by performing a scan of a user of the mobile device using a bio sensor.

18. The system of claim 17, wherein the scan comprises any one of:

a fingerprint scan;

facial scan; and

retinal scan.

19. The system of claim 15, wherein the mobile device is configured to:

determine whether the mobile device is within a predefined distance from a location where the purchase is being attempted;

provide the first security response upon determining that the mobile device is within the predefined distance from the location; and

provide the second security response upon determining that the mobile device is not within the predefined distance from the location.

20. The system of claim 15, wherein the mobile device is a cellular phone.

21. The system of claim 15, wherein the bank card comprises a radio frequency emitter and the mobile device comprises a radio frequency detector, wherein the radio frequency detector is configured to determine a distance between the bank card and the mobile device based on radio signals received from the emitter.