Patent Grant
11734673
The present application generally relates to physical cards having stored card data, and more particularly to location-specific physical cards for limited card reading at authorized locations.
Physical “cards” or other small objects may be utilized to store data, such as magnetic stripes or EMV chips on credit, debit, or identification cards, as well as radio frequency identification (RFID) token or fob devices. These cards and other objects may be scanned by readers to obtain the data on these objects, which may be utilized to pay for purchases, identify a user, or perform another process. However, physical cards are increasingly a concern for risk and fraud. Fraudsters may steal not only the physical representation of the card but may also use “skimmers” or other devices that may read the card data when the card is inserted to a machine, which allows the fraudster to copy or clone the card. Moreover, employers that wish to provide certain cards to their employees may be reluctant to do so where the card does not have increased protection from misuse. Risk analysis teams for card issuers may review where and when a card was scanned or used, but this measure only prevents fraud after the card has been scanned. Moreover, where the card may be utilized within a similar geo-location, the fraud may go unnoticed by those card issuers.
Embodiments of the present disclosure and their advantages are best understood by referring to the detailed description that follows. It should be appreciated that like reference numerals are used to identify like elements illustrated in one or more of the figures, wherein showings therein are for purposes of illustrating embodiments of the present disclosure and not for purposes of limiting the same.
Provided are methods utilized for a physical card having one or more location detection modules for location-specific card reading. Systems suitable for practicing methods of the present disclosure are also provided.
A physical card may be limited to being read and used at specific locations based on an on-card location detection module or component, such as a Global Positioning Satellite (GPS) or other Global Navigation Satellite System (GNSS) processor chip that can detect a location of the physical card. The physical card may correspond to a payment card (e.g., credit, debit, or gift card that may be linked to stored funds or an account), an identification card, an access card, or other readable card that stores data. This stored data may include funding source details, such as an account number, authorization data or token, stored funds identification, user identification, authorization details, and the like. Generally, physical data cards are readable by card readers through connection to the card readers (e.g., either physically or wirelessly within a range), which allows for receipt and use of the card data by the reader. These readers may be coupled to point-of-sale (POS) or merchant devices that further interact with one or more backend card processors and/or use the data by the device. These physical data cards may include an EMV chip, magnetic stripe, RFID chip, USB or Micro-USB connector, SD or Micro-SD chip, or the like that allows for data reading by a card reader at a location. However, to prevent unauthorized uses of the payment card, such as by reading the card data at unauthorized locations (e.g., when a card has been stolen by a fraudster or utilized by a user for unauthorized purchases), access to the card data may be limited so as to be read only during authorized scenarios and locations. For example, a workplace, employer, supervisor, or other user or entity may wish to provide a payment card to employees of the organization. However, that supervising entity may wish to limit the card to only being used at authorized restaurants or authorized suppliers (e.g., workplace supply companies) so that employees don't spend funds on unauthorized items. Other types of cards may also function similarly, such as identification or authorization cards that authenticate a user or their identity (e.g., age, address, etc.). Cards may also provide access to areas or items, such as door key cards and/or computer access cards.
Thus, in order to limit reading of physical cards by unauthorized card readers, such as those located at unauthorized locations for card reading and use, the card may include a location detection module or chip, such as a GPS chip, that is configured to only allow the card to be read when the location detection chip detects that a location of the card is at an authorized location approved for card reading and use of the stored data on the card with the card reader and/or connected devices/servers. The location detection chip includes an authorization module (e.g., a module having a microprocessor, logic device, or other processor that may be coupled to a memory) and a location detection component or detector (e.g., GPS detector), where the location detection component is configured to determine the physical location of the card. The location detection component may determine the location of the card by querying a server, satellite, or other network device for the current location or detecting the location using such components and/or networks. This may correspond to a passive chip that requires power from an external power connector and supply to detect the location. The authorization module of the location detection chip is further connected or coupled to a memory, where the memory stores authorized location data. The authorized location data may correspond to latitude, longitude, or other GPS coordinates, and may correspond to specific coordinates, generalized coordinates, and/or geo-fenced areas for sets of coordinates. The authorized location data may also include names or identifiers of authorized locations. The authorized locations may be a single location or multiple locations. The authorization module may execute one or more operations (e.g., using the microprocessor, logic device, or other processor) to determine if the detected location data matches the stored location data in the memory.
In other embodiments, different types of location detection chips may be used. For example, rather than utilizing a GPS component as described above, the location detection chip may correspond to a communication module that is capable of connecting with other nearby transceivers to request a location, receive an identifier, or request data identifying the transceiver and/or location. For example, a passive Bluetooth, Bluetooth Low Energy (BLE), RFID, or other antenna or receiver may be activated by receiving power and thereafter send or receive data. Similarly, an authorization module, in this embodiment, may include authorization information, such as information that includes authorized identifiers of locations or transceivers. Thus, the location detection component may utilize the communication module to receive identifiers, location data, or other data being broadcast by one or more nearby transceivers, and further the authorization module of the location detection component may compare the received location information to the information stored in memory to determine whether the card is authorized to be used in the specific location. In other embodiments, a biometric module may also be used to only allow certain users to utilize the payment card where the payment card may be distributed or passed between users. For example, a fingerprint scanner may correspond to the mechanism to limit the use of the payment card.
When using a physical card (e.g., a payment or identification card), the card is inserted into a card reader. In order to activate the card and provide location-specific card reading of the physical card, the card includes one or more power connections, components, or other connectors that provide power to the processors, chips and other components of the card. The physical card may not include a separate power supply, such as a battery or rechargeable power source. Thus, a power connector of the card may serve to provide the card with power from an external power supply, such as an induction power source (e.g., through magnetic field emissions) or a direct electrical connection. Where two or more power connectors may be used, one or more of those may be used to directly provide power to the location detection chip for use in detecting whether a location of the card is an authorized location. One or more other ones of the power connectors (e.g., those other ones not directly connected to the location detection chip) may then be connected to a gate or other signal and/or power gateway, such as a diode or transistor. This gate may block, allow, or otherwise “gate” power to a card chip of the card that is associated with a memory storing the card's data (e.g., payment or financial data, authorization or authentication information, etc.). The gate may provide power to the card chip based on a signal received from the location detection chip, such as a signal from the location detection chip based on detection of the card at an authorized location or power sent through the location detection chip based on detection at the authorized location. For example, the gate may correspond to an AND gate, diode, or transistor (e.g., one having a logical conjunction decision-making component) where power from one connector and a signal or power from the location detection chip may both be required for the gate to transmit power to the card chip for the card's memory (e.g., by allowing power to flow through to the card chip) so the card chip can read the card's data from the memory and output that data.
In some embodiments, a single power connector may instead be used that provides power directly to the location detection chip to activate and power the location detection chip for location detection, wireless communications, and processing at authorized locations. For example, a power connection connected to a single power connector may split into two power connections, with one line connecting to a gate and the other line connecting (and provide power) to the location detection chip. In this example, if the location detection chip determines that the location of the card is an authorized location, a signal may be sent to the gate to allow power to flow through to the card's logic device (or card chip). In another example, rather than the power connection splitting, a single power connection may connect into the location detection chip, with the location detection chip serving as both as a module to determine whether to allow power to flow to the card's logic device (or card chip) and also as a gate that physically allows or disallows the flow of power to the card's logic device. Thus, the card may include a gate connected to multiple power connections through the external power supply (e.g., two connectors, where one is connected to the location detection component that only provides power or a signal to the gate based on a detected authorized location) or a single connector that connects to the location detection chip and the card chip, where the location detection chip allows power to flow to the card chip based on detecting an authorized location of the card.
Thereafter, if power is allowed to flow to the card chip by the gate and/or location detection chip, the card chip may receive the power and activate to perform one or more operations. The card chip on the card may correspond to a logic device (e.g., processing device, microcontroller, processor, application specific integrated circuit (ASIC), field programmable gate array (FPGA), memory storage device, memory reader, or other device or combinations of devices), which may be configured to read the same or a different memory of the card for the card-specific data. This card-specific data may correspond to payment or financial data stored on the card and used to process transactions. The card-specific data may also include other types of data, such as access, identification, authorization, or authentication data used with other types of processes. For example, the physical card may also be utilized for identification or authorization of the user or may provide access to a location. The card chip then retrieves the card data from the memory for use with the reader.
The card that is inserted to or otherwise read by the reader includes one or more output components configured to output the card data and/or make the card data readable for reading and receipt by the card reader. For example, where the card chip corresponds to an EMV card chip, the card may be inserted to an EMV card reader. The EMV chip may only be read when the EMV chip receives power. Thus, the output components, contacts, or other output mechanism of the EMV chip may only provide the card data to the reader when powered. In other embodiments, the output component may correspond to a component within, separate from, and/or connected to the card chip, such as a programmable magnetic card strip, a RFID antenna, a USB or Micro-USB connector, an SD or Micro-SD chip, or other component that allows for transmission of the card data to the reader, port, or other connection when the card chip is powered. This data is output in response to the location detection chip of the card detecting that the card is at an authorized location, and therefore is only output by the card chip based on detecting the authorized location. The reader may then receive the card data and may process the card data, which may utilize a POS or other merchant device, a network, and/or a backend card processor. Thus, the card only provides card data in response to being located at an authorized location and prevents fraud or misuse of physical cards by fraudsters or other users for unintended purposes. This provides more controlled data output and serves to minimize abuse associated with these cards.
System 100 includes a payment card 110, a card reader 120, and a transaction processor 130 in communication over a network 140. Payment card 110 may be utilized by a user to perform one or more operations requiring data on the payment card, such as providing a payment for transaction processing at a location. Payment card 110 may be configured to determine if the location is an authorized location. If so, payment card 110 may allow the card data to be read by card reader 120. Card reader 120 may then interact with transaction processor over network 140 to complete the data processing based on the provided card data. Note that payment card 110 does not have to be used for payments. It can include any type of data or correspond to any type of card used to provide sensitive data, e.g., data that is not publicly available. For example, payment card 110 can correspond to an identification card, an insurance card, an access card, a rewards or loyalty card, and the like. As such, data contained in payment card 110 may include account numbers, access codes, personal identification data, and the like.
Payment card 110, card reader 120, and transaction processor 130 may each include one or more processors, memories, and other appropriate components for executing instructions such as program code and/or data stored on one or more computer readable mediums to implement the various applications, data, and steps described herein. For example, such instructions may be stored in one or more computer readable media such as memories or data storage devices internal and/or external to various components of system 100, and/or accessible over network 140.
Payment card 110 may be implemented as a physical card or device that provides card data stored to payment card 110 in response to meeting one or more conditions, such as detection of payment card 110 at an authorized location. Although only one card is shown, a plurality of cards may function similarly and/or be connected to provide the functionalities described herein. Payment card 110 of
Location detection module 112 may correspond to one or more software modules and associated hardware components of payment card 110 to detect a location of payment card 110 and determine if the location is an authorized location. In this regard, location detection module 112 may correspond to specialized hardware and/or software to receive power from a power connector of payment card 110 that connects to an external power source, such as an induction coil or electrical connection. Location detection module 112 may determine whether payment card 110 is located at an authorized location by determining or receiving location information, such as GPS coordinates or a broadcast identifier by a nearby wireless transceiver and match that data to authorized location-based data stored in memory 116. Thus, memory 116 may correspond to one or more physical non-transitory memories that stores authorized location data for payment card 110, such as coordinates for allowed locations of use of payment card 110, geo-fences for those locations, and/or identifiers for transceivers broadcasting those identifiers at allowed locations. If the location is an authorized location where use of payment card 110 is allowed, location detection module 112 may send a signal or power to card chip 114. In some embodiments, payment card 110 further includes one or more power connectors and/or gates that may correspond to a logic device, such as one having an AND logical conjunction gate through a diode or transceiver.
Once card chip 114 receives power from location detection module 112 and/or the gate that allows power to pass based on fulfilling a logical condition, card chip 114 may read or access memory 116 to receive the card data. The card data may correspond to credit card data, bank account data, or other funding source data, as a payment instrument when providing payment information including digital wallet data associated with an account with a payment provider, such as transaction processor 130. This may include a digital token identifying the account and/or digital wallet. Memory 116 may also or instead store other data, including authentication, authorization, identification, or other card data specifically associated with payment card 110. In some embodiments, memory 114 may correspond to a plurality of separate memories, where different independent physical non-transitory memories store the authorized location data and the card data. Once the card data is retrieved based on the provided power to card chip 114, card chip 114 may then output the card data to card reader 120.
Card reader 120 may be implemented using any appropriate hardware and software configured for wired and/or wireless communication with payment card 110, and/or transaction processor 130 for processing card data provided by payment card 110 when payment card 110 detects that it is located at an authorized location. Card reader 120 may correspond to a point-of-sale (POS) device or other physical merchant device that allows input of payment card 110, including connectable, attachable, or wireless card readers that may be in communication with the physical merchant device. In various embodiments, card reader 120 may be implemented as a personal computer (PC), a smart phone, laptop/tablet computer, wristwatch with appropriate computer hardware resources, other type of wearable computing device, and/or other types of computing devices capable of transmitting and/or receiving data. Although only one reader is shown, a plurality of readers may function similarly.
In some embodiments, card reader 120 and/or the connected device may receive transaction data for a transaction to be processed using payment card data stored to payment card 110. Once the items have been finalized for purchase by the user, a total may be calculated, and a transaction may be engaged with the user of payment card 110 to complete payment for the selected items, for example, through card data or other information from payment card 110. Payment card 110 may be inserted to or used with card reader 120, where card reader 120 reads the card data from payment card 110 when provided by payment card 110. This may occur (e.g., payment card 110 may make the card data available for reading) when payment card 110 detects that it is located at an authorized location. Thus, the merchant may request and receive payment covering the selected items from the user from payment card 110. Card reader 120 or the associated device may then communicate with transaction processor 130 to process the transaction. Card reader 120 and/or the associated device may alert the merchant when payment for the transaction for the item(s) is completed and may provide a transaction history to the user and/or the associated device for generating a receipt to the user associated with payment card 110. Card reader 120 may include a power supply or source that provides power to payment card 110 through power connections of payment card 110 with location detection chips and processors of payment card 110. Card reader 120 may also correspond to other readers configured to process the card data from payment card 110, such as access card readers, identity card readers, and the like. In such embodiments, card reader 120 may be a standalone device or a device connected to another processor that may authorize and/or use the data from payment card 110 to provide access, identity confirmation, or other process or service.
Transaction processor 130 may be maintained, for example, by an online service provider, which may provide transaction processing services for transactions for items using card data from payment card 110, which may be read by card reader 120 when payment card 110 detects a location of payment card 110 when used with card reader 120 and determines that location is an authorized location. In this regard, transaction processor 130 includes one or more processing applications which may be configured to interact with payment card 110, card reader 120, and/or another device/server to facilitate communications and transactions between users and merchants using payment card 110. In one example, transaction processor 130 may be provided by PAYPAL®, Inc. of San Jose, Calif., USA. However, in other embodiments, transaction processor 130 may be maintained by or include another type of service provider.
Transaction processor 130 of
Transaction processing application 132 may correspond to one or more processes to execute modules and associated specialized hardware of transaction processor 130 to process a transaction for item(s) with card reader 120, which may be based on reading card data from payment card 110. In this regard, transaction processing application 132 may correspond to specialized hardware and/or software used by a user associated with payment card 110 to establish a payment account with transaction processing application 132 by providing personal and/or financial information to transaction processor 130 and selecting authentication credentials. In various embodiments, the financial information may include payment instrument information, such as account/card numbers and information. The account may be used to send and receive payments. The payment account may be accessed and/or used through a browser application and/or dedicated payment application. Additionally, the account and/or a digital wallet established by the user may be linked to payment card 110, for example, by storing data necessary to perform transaction processing with payment card 110. Transaction processing application 132 may further store data for authorized locations for payment card 110, which may be set by an owner, supervisor, or other entity that controls payment card 110 and may use or provide payment card 110 for use by others in one or more transactions. Thus, transaction processing application 132 may be used to establish, setup, and issue payment card 110 to one or more users.
Once a transaction is generated and card data is read from payment card 110, transaction processing application 132 may be used to process a transaction based on the transaction data and the card data from payment card 110. Transaction processing application 132 may receive the transaction data and the card data and may process the transaction by issuing a payment to the account of the merchant associated with card reader 120. Transaction processing application 132 may therefore receive a payment request from card reader 120 for the transaction data, which may include identifiers, tokens, or other data used for transaction processing by identifying an account of payment card 110 used to transfer funds to an account associated with card reader 120. In some embodiments, transaction processing application 132 may further provide fraud detection services associated with payment card 110. For example, payment card 110 may detect that it is located at a valid location based on authorized location data stored to payment card 110. However, payment card 110 (or another card) may correspond to a cloned card that fraudulently obtains and utilizes the data for payment card 110. In such embodiments, payment card 110 may be scanned at a first location and a second location. Based on the timestamps of the scans, distance between the first and second locations, and other risk data, one or more of the transactions may be refused as indicating fraud. For example, the second location may be located a significant distance from the first location, where the two scans are within a short time, indicating fraud as payment card 110 would be unlikely to be located at both those locations over that time period. However, if the transaction is valid, transaction processing application 132 may process a payment and may provide a transaction history to the account associated with payment card 110 and/or card reader 120, as well as direct data for output on card reader 120, for transaction authorization, approval, or denial.
In various embodiments, transaction processor 130 includes other applications 134 as may be desired in particular embodiments to provide features to transaction processor 130. For example, other applications 134 may include security applications for implementing server-side security features, programmatic client applications for interfacing with appropriate application programming interfaces (APIs) over network 140, or other types of applications. Other applications 134 may contain software programs, executable by a processor, including a graphical user interface (GUI), configured to provide an interface to the user when accessing transaction processor 130, where the user or other users may interact with the GUI to more easily view and communicate information. In various embodiments, other applications 134 may include additional connection and/or communication applications, which may be utilized to communicate information to over network 140.
Additionally, transaction processor 130 includes database 136. Database 136 may store various identifiers associated with payment card 110. Database 136 may also store account data, including payment instruments and authentication credentials, as well as transaction processing histories and data for processed transactions. Database 136 may store received data associated with a user, such as tracked data of the user so that correlations between locations and activities may be generated. In some embodiments, one or more authorized locations for payment card 110 may be stored to database 136. Additionally, database 136 may store transaction data provided when payment card 110 is used.
In various embodiments, transaction processor 130 includes at least one network interface component 138 adapted to communicate with payment card 110, card reader 120, and/or another device/server for a merchant over network 140. In various embodiments, network interface component 138 may comprise a DSL (e.g., Digital Subscriber Line) modem, a PSTN (Public Switched Telephone Network) modem, an Ethernet device, a broadband device, a satellite device and/or various other types of wired and/or wireless network communication devices including microwave, radio frequency (RF), and infrared (IR) communication devices.
Network 140 may be implemented as a single network or a combination of multiple networks. For example, in various embodiments, network 140 may include the Internet or one or more intranets, landline networks, wireless networks, and/or other appropriate types of networks. Thus, network 140 may correspond to small scale communication networks, such as a private or local area network, or a larger scale network, such as a wide area network or the Internet, accessible by the various components of system 100.
For example, system 200a includes a payment card 1000 having two power connections to an external power supply, such as an induction or electric power source, shown as a power point 1002a and a power point 1002b, which may form conductive points to receive or generate power through the electrical or magnetic power source. Although two power points are shows that connected to the external power source to generate and/or receive electrical power for payment card 1000, a single power point may also be utilized or multiple additional power points. For example, power point 1002a and power point 1002b may be the same or multiple different power points that provide electrical power from an external point to payment card 1000.
Power point 1002a forms a connection to a GPS chip 1004 through a connection 1014a while power point 1002b forms a connection directly to a gate 1016 through a connection 1014b. GPS chip 1004 corresponds to a location detection module that may limit the reading of card data from payment card 110 by detecting location-specific data for a current location of payment card 110 when power is received from power point 1002a via connection 1014a. When GPS chip 1004 receives power, it activates and/or executes a process to detect a current location of payment card 110. This may be done utilizing a GPS network or other location detection system to detect coordinates, identifiers, or other information for a current geo-location of payment card 110. However, other modules may also be utilized, including short range communication antennas and transceivers configured to receive a locally broadcast identifier by a nearby device. GPS chip 1004 then reads memory 1006 storing coordinates for enabled geo-locations or other location-specific data, such as identifiers for the location or nearby devices.
If a match between the detected data by GPS chip 1004 occurs with the stored data in memory 1006, GPS chip 1004 may issue a signal or provide power via a connection 1014c to gate 1016. As shown in system 200a, when coordinates match, a signal or power provides a binary 1 signal from GPS chip 1004 to gate 1016, where this signal or power provides information or a biasing signal to gate 1016 when payment card 110 is located at a valid and authorized location, which is input to a first input of gate 1016. However, if a match is not determined from the detected data to the stored data, then gate 1016 detects a binary 0 signal, which corresponds to the lack of the match. Moreover, when power point 1002b receives power from the external source or supply, a signal or power is provided directly to gate 1016 via connection 1014b, where gate 1016 then detects a binary 1 signal at a second input of gate 1016. Chart 1018 shows the output of gate 1016 based on the received signals and/or power at the two inputs to gate 1016. For example, where a binary 0 is received at one or both of the inputs, gate 1016 provides no output power (e.g., acts as a Boolean AND logical switch). However, where GPS chip 1004 detects a match and an authorized location, and power is further detected and provided at connector 1002b, then gate 1016 provides an output signal and/or power indicating a match and therefore allows use of payment card 110 by enabling data to be read from payment card 110.
Thereafter, gate 1016 provides power through a connection 1014d to a logic device 1008 of payment card 110. Logic device 1008 may correspond to a power-up logic device, microprocessor, or other processor that activates when receiving power or signaling from gate 1016. Logic device 1008 is connected to a memory 1010 (e.g., one or more physical non-transitory memories, such as magnetic tape, any other magnetic medium, any other optical medium, RAM, PROM, EEPROM, FLASH-EEPROM, any other memory chip) that stores card data for payment card 110 that is usable by card reader 120, such as to process a transaction. In some embodiments, memory 1010 may be the same memory as memory 1006 and both authorized location data and card data may be stored to a single memory on payment card 110. Logic device 1008 may then read the card data from memory 1010 and may output the card data via connection 1014e to an output 1012 that can be read by card reader 120. In some embodiments, logic device 1008, memory 1010, and output 1012 may all correspond to the same chip, unit, or package, such as an EMV card chip. In such embodiments, data may be output directly from the single package of the EMV chip when receiving power. Output 1012 may also correspond to various types of other data output mechanisms, including programmable magnetic card stripes, NFC or RFID components, and other types of output ports or mechanisms. In such embodiments, logic device 1008, memory 1010, and/or output 1012 may be one or more separate components. For example, logic device 1008 and memory 1010 may form a card chip that outputs data through output 1012 when receiving power from gate 1016.
System 200a may also include a payment card 110 discussed in reference to system 100 of
For example, power point 1002a is shown in system 200a's payment card 110 that may correspond to an induction coil for receiving power via induction and magnetic fields or through a direct electric connection. This power may be received when payment card 110 is entered into, tapped, or otherwise engaged with a card reader for reading data stored to the card, such as payment card data necessary to process a transaction. However, in order to limit the reading of the card data to certain locations, payment card 110 includes connections 1014a-e that provide a connection to transmit power and/or signals from power point 1002a (received from the external source or supply) to a GPS chip 1004, a logic device 1008, and an output 1012 only when payment card is at those certain locations. For example, connection 1014a serves to provide power directly from power point 1002a to GPS chip 1004, which activates GPS chip 1004 and allows GPS chip 1004 to determine a location of payment card 110 using a GPS system and detector. GPS chip 1004 may correspond to a passive chip that interacts with a GPS coordinate detection system to detect GPS coordinates and the like. However, other location detection chips or components may also be used, including wireless transceivers that receive identifiers for nearby wireless transceivers. In some embodiments, power point 1012 may instead include further connections, where the connections may split from power point 1002 to other components of payment card 110. For example, connections may split from power point 1102 to GPS chip 1004 and a gate, where power is provided directly from the single point of contact or power (e.g., an electrical contact point, induction coil, or the like) to multiple components of payment card 110. This may allow for power to be provided from a single contact point to both GPS chip 1004 and a gate, where GPS chip 1004 may then signal the gate to allow power to flow to logic device 1008.
Once powered and a location is determined, GPS chip 1004 may then read memory 1006 to determine if the location matches an authorized location and/or identifier. If no match is found, then GPS chip 1004 may not provide power or a signal to logic device 1008 as payment card 110 is not located at an authorized location. However, if the location, identifier, or other detected data is found in and/or matches data from memory 1006, the GPS chip 1004 may provide the power or signal to logic device 1008 via connection 1014c/d, which activates logic device 1008. Logic device 1008 may correspond to some logic device, such as a microprocessor, integrated circuit (IC), or other processor on payment card 1008 that may read memory 1010 when it receives the signal or power and retrieves data stored to memory 1010. The data stored to memory 1010 may correspond to a card data specific to payment card 110, which may include payment card, account, gift balance, authentication, access, authorization, and/or identification data. In some embodiments, memory 1006 may by the same memory as memory 1010 and store both the authorized location or identifier data for payment card 110 and the card data for logic device 1008, and may be physical non-transitory memories, such as magnetic tape, any other magnetic medium, any other optical medium, RAM, PROM, EEPROM, FLASH-EEPROM, any other memory chip. Once the card data is read from memory 1010, logic device 1008 may output the card data through output 1012 via connection 1014e, where the output 1012 may correspond to a data connection for reading and transmitting data. Thereafter, output 1012 may be read by card reader 120, which may then process the card data. In some embodiments, logic device 1008, memory 1010, and output 1008 may all correspond to the same card chip, such as an EMV chip that may reside in the same package. However, in other embodiments, logic device, memory 1010, and/or output 1008 may be separate, such as when output 1008 corresponds to a programmable magnetic strip or stripe, an RFID or NFC antenna, or other output mechanism that is separate from a single card chip.
Payment card 110 includes a memory 116 having data for use in providing stored card data based on detecting a location of payment card 110 is an authorized location where use of payment card 110 is allowed. In this regard, memory 116 includes detected location data 2000, which may correspond to location coordinates, identifiers, other location information, received identifiers, device identification data, or other information that may be specifically detected or received at a location. Using detected location data 2000 with stored authorized locations 2002 (e.g., coordinates, geo-fences, or location identifiers for authorized location and/or device identifiers, wireless broadcast identifiers, or other device identification data for authorized devices in proximity to or connected to payment card 110) to perform a location matching result 2004 by a processor. Location matching result 2004 may correspond to an authorization to release or allow card data 2008 to be read. Thus, a power transmission request 2006 may be generated for location matching result 2004 that provides power to the processor to allow reading and transmission of card data 2008. If power transmission request 2006 sends power to the processor, card data 2008 is output by the processor using a reader component of payment card 110, where allowed reading request 2010 for the processor causes an output 2012 of card data 2008.
Transaction processor 130 executes transaction processing application 132 used to process a transaction using data from payment card 110 when payment card allows the data to be read at an authorized location, where transaction processing application 132 corresponds generally to the processes discussed in reference to system 100. In this regard, transaction processing application 132 corresponds to an application that processes electronic transactions for merchant devices that request transaction processing for transactions using card data 2008. Transaction processing application 132 therefore receives a transaction processing request 2100 for a transaction 2102. Transaction 2102 includes transaction data 2104 for the transaction (e.g., items, transaction identifier, amount, receiving account, etc.). Transaction 2102 further includes card data 2008 for payment card 110 and may result in a processing result 2106 (e.g., authorization for payment or declining payment). Transaction processing application 132 further includes card authorizations 2108 for payment card 110, which includes authorized locations 2002 that may be used to generate payment card 110 and store authorized locations 2002 to payment card 110.
At step 402 of flowchart 400, power is received to a payment card from an external card reader or other external device. The power may be received by a connector or other connective component that allows for the external power source to provide power to components of the payment card. This may include using an induction coil or a direct electrical connection to power the payment card's components. A single power connection or multiple power connections may be used by the card. Once the power is received by the payment card's power connection, at step 404, the power is provided to a location detection module. Where a single power connection is used, the power is provided directly to the location detection module, which serves as a gate to providing power to a card chip that outputs card data when the card chip receives power. However, where multiple power connections are used, such as two connections, one connection powers the location detection module. The second power connection provides power to a separate gate, such as diode, transistor, or other logic device. This separate gate may operate as an AND switch or other logical conjunction that only outputs a binary 1 or a TRUE condition and allows power to flow if the gate receives power and/or signals to all of the input connectors (e.g., two separate input connectors, where power may flow to one connector directly and a second connector may act as a gate to allow power through when that connection receives a signal or power from the location detection module).
At step 406 of flowchart 400, the location detection module of the payment card determines the location is an authorized location. The location detection module may perform an operation to determine or receive location-specific data for the current location of the payment card, such as GPS coordinates. The location detection module may further be coupled to a memory so that the location detection module may determine if the location-specific data matches stored data for authorized locations and/or location-based data for the payment card. This authorization data therefore only allows the payment card to be read when the location-specific data matches the stored data in the memory. If the detected location-specific data does not match the stored data, then at step 408, no data is provided or output by the payment card and flowchart 400 ends. Thus, the payment card cannot be read, and no data is output. This prevents the payment card from being read at unauthorized locations and thereby assists in preventing fraud or misuse of the payment card.
However, if the location of the payment card corresponds to an authorized location for use of the payment card, then at step 410, power is provided to the card chip. As previously discussed, in the embodiment with a single power connection, the power is provided by the location detection module to the card chip directly, such as if the location detection module serves as a power gate or is coupled to a power gate to the card chip to allow power through when the location of the payment card is an authorized location. However, where two or more power connections are used, a signal or power from the location detection component may be transmitted to the separate gate, such as the diode, transistor, or other logic switch, so that the gate allows power to flow to the card chip from the other power connection.
In some embodiments, the card chip may correspond to an EMV chip, which may be powered and allow card data to be read or output by the EMV card chip in response to the power. In further embodiments, the card chip may include a logic device, microprocessor, processor or the like, where the card data is read by the processor of the card chip. For example, when the processor is powered, an operation may be executed to read a memory of the payment card. The memory may correspond to a non-transitory physical memory that includes the card data, such as payment information, payment card data, authorization or authentication information, and/or access data to allow access to a specific area. The memory may be the same or different from the memory storing the authorized location-based data. The card chip then outputs the card data, at step 412. Outputting the card data may include making the card data available through a card component that can be read (e.g., an EMV chip, programmable magnetic stripe, etc.) or outputting the card data through another connector or transmission component (e.g., a port, transmitter, or the like).
Computer system 500 includes a bus 502 or other communication mechanism for communicating information data, signals, and information between various components of computer system 500. Components include an input/output (I/O) component 504 that processes a user action, such as selecting keys from a keypad/keyboard, selecting one or more buttons, image, or links, and/or moving one or more images, etc., and sends a corresponding signal to bus 502. I/O component 504 may also include an output component, such as a display 511 and a cursor control 513 (such as a keyboard, keypad, mouse, etc.). An optional audio input/output component 505 may also be included to allow a user to use voice for inputting information by converting audio signals. Audio I/O component 505 may allow the user to hear audio. A transceiver or network interface 506 transmits and receives signals between computer system 500 and other devices, such as another communication device, service device, or a service provider server via network 140. In one embodiment, the transmission is wireless, although other transmission mediums and methods may also be suitable. One or more processors 512, which can be a micro-controller, digital signal processor (DSP), or other processing component, processes these various signals, such as for display on computer system 500 or transmission to other devices via a communication link 518. Processor(s) 512 may also control transmission of information, such as cookies or IP addresses, to other devices.
Components of computer system 500 also include a system memory component 514 (e.g., RAM), a static storage component 516 (e.g., ROM), and/or a disk drive 517. Computer system 500 performs specific operations by processor(s) 512 and other components by executing one or more sequences of instructions contained in system memory component 514. Logic may be encoded in a computer readable medium, which may refer to any medium that participates in providing instructions to processor(s) 512 for execution. Such a medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. In various embodiments, non-volatile media includes optical or magnetic disks, volatile media includes dynamic memory, such as system memory component 514, and transmission media includes coaxial cables, copper wire, and fiber optics, including wires that comprise bus 502. In one embodiment, the logic is encoded in non-transitory computer readable medium. In one example, transmission media may take the form of acoustic or light waves, such as those generated during radio wave, optical, and infrared data communications.
Some common forms of computer readable media includes, for example, floppy disk, flexible disk, hard disk, magnetic tape, any other magnetic medium, CD-ROM, any other optical medium, punch cards, paper tape, any other physical medium with patterns of holes, RAM, PROM, EEPROM, FLASH-EEPROM, any other memory chip or cartridge, or any other medium from which a computer is adapted to read.
In various embodiments of the present disclosure, execution of instruction sequences to practice the present disclosure may be performed by computer system 500. In various other embodiments of the present disclosure, a plurality of computer systems 500 coupled by communication link 518 to the network (e.g., such as a LAN, WLAN, PTSN, and/or various other wired or wireless networks, including telecommunications, mobile, and cellular phone networks) may perform instruction sequences to practice the present disclosure in coordination with one another.
Where applicable, various embodiments provided by the present disclosure may be implemented using hardware, software, or combinations of hardware and software. Also, where applicable, the various hardware components and/or software components set forth herein may be combined into composite components comprising software, hardware, and/or both without departing from the spirit of the present disclosure. Where applicable, the various hardware components and/or software components set forth herein may be separated into sub-components comprising software, hardware, or both without departing from the scope of the present disclosure. In addition, where applicable, it is contemplated that software components may be implemented as hardware components and vice-versa.
Software, in accordance with the present disclosure, such as program code and/or data, may be stored on one or more computer readable mediums. It is also contemplated that software identified herein may be implemented using one or more general purpose or specific purpose computers and/or computer systems, networked and/or otherwise. Where applicable, the ordering of various steps described herein may be changed, combined into composite steps, and/or separated into sub-steps to provide features described herein.
The foregoing disclosure is not intended to limit the present disclosure to the precise forms or particular fields of use disclosed. As such, it is contemplated that various alternate embodiments and/or modifications to the present disclosure, whether explicitly described or implied herein, are possible in light of the disclosure. Having thus described embodiments of the present disclosure, persons of ordinary skill in the art will recognize that changes may be made in form and detail without departing from the scope of the present disclosure. Thus, the present disclosure is limited only by the claims.
This application is a continuation of U.S. application Ser. No. 16/714,648 filed Dec. 13, 2019 which is incorporated herein by reference in its entirety.
| Number | Name | Date | Kind |
|---|---|---|---|
| 6791398 | Lin et al. | Sep 2004 | B1 |
| 7533408 | Arnouse | May 2009 | B1 |
| 7588180 | Carmichael et al. | Sep 2009 | B1 |
| 9959540 | Todasco | May 2018 | B2 |
| 11100493 | Singh | Aug 2021 | B2 |
| 20110131128 | Vaananen | Jun 2011 | A1 |
| Number | Date | Country | |
|---|---|---|---|
| 20220058618 A1 | Feb 2022 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 16714648 | Dec 2019 | US |
| Child | 17408916 | US |
