Patent Application
20230034821
Individuals typically use a debit or credit card for executing transactions. When a card is lost, the individual's funds may be subject to fraudulent activity if the card is obtained by an unauthorized person. Typically, a card is not able to sense the identity of a person carrying the card.
It would be desirable, therefore, to provide apparatus and methods for securing a transaction.
Apparatus and methods for securing a transaction are provided. The apparatus may include a transaction instrument. The transaction instrument may include a first microprocessor. The transaction instrument may include a second microprocessor. The transaction instrument may be configured to exchange transaction data. The transaction data may be exchanged to effect a transaction by engagement of the first microprocessor with a transacting party. The apparatus may include a sensor. The sensor may be mounted on the instrument. The sensor may be configured to sense an environmental parameter. The sensor may be electrical communication with the second microprocessor. The apparatus may run real-time pattern model analysis using a distributed model. In the distributed model, heavy processing may be performed at the pattern registration platform, and light processing may be performed on on-board processors on the transaction instrument.
The objects and advantages of the invention will be apparent upon consideration of the following detailed description, taken in conjunction with the accompanying drawings, in which like reference characters refer to like parts throughout, and in which:
The leftmost digit (e.g., “L”) of a three-digit reference numeral (e.g., “LRR”), and the two leftmost digits (e.g., “LL”) of a four-digit reference numeral (e.g., “LLRR”), generally identify the first figure in which a part is called-out.
Apparatus and methods for securing a transaction are provided. The apparatus may include a transaction instrument. The transaction instrument may include one or more microprocessors. The transaction instrument may be configured to exchange transaction data to effect a transaction by engagement of the first microprocessor with a transacting party. The apparatus may include a sensor. The sensor may be configured to sense an environmental parameter. The sensor may be electrical communication with the second microprocessor.
The apparatus may run analysis using a distributed model. In the distributed model, heavy processing may be performed at the pattern registration platform, and light processing may be performed on on-board processors on the transaction instrument.
Table 1 lists illustrative transaction instruments
Table 2 lists illustrative transaction information.
Table 3 lists illustrative sensor types.
Table 4 lists illustrative environmental parameters.
Environmental quantities may be derived from environmental parameters. For example, speed may be derived from location and time. Body and body part motions may be derived from mass, acceleration and time. Mass of a body or body part may be estimated. The mass may be provided by the user. Elevation may be derived from pressure.
The environmental parameters may be associated with one or more behaviors of the user. lists illustrative behaviors.
Table 5 lists illustrative environmental parameters.
The second microprocessor may be configured to derive from the parameter a pattern. The second microprocessor may be configured to encode the pattern in a has that may be referred to as an “observed” hash. The second microprocessor may be configured to initiate an augmented authentication. The transaction may be a transaction that requires an authentication that may be referred to as a “basic” authentication. The basic authentication may be an authentication that is not included in the augmented authentication.
The transaction instrument may be configured to interact with a transaction terminal. The transaction instrument may be configured to exchange transaction information with the transaction terminal. The transaction terminal may include an interface for communication between transacting parties.
Table 6 lists illustrative transaction terminals.
The second microprocessor may be the first microprocessor.
The second microprocessor may be configured to perform a comparison of the observed hash to a stored hash. The second microprocessor may be configured to identify a mis-match between the observed hash and the stored hash. The second microprocessor may be configured to initiate the augmented authentication only because of the mis-match.
The apparatus may include a pattern registration platform. The pattern registration platform may be remote from the instrument. The pattern registration platform may be configured to perform a comparison of the observed hash to a stored hash. The pattern registration platform may be configured to identify a mis-match between the observed hash and the stored hash. The pattern registration platform may be configured to initiate the augmented authentication only because of the mis-match.
The environmental parameter may correspond to motion of the instrument.
The first microprocessor may perform the transaction. The second microprocessor may derive the pattern. A transacting party may communicate to the first microprocessor a request corresponding to the augmented authentication.
Table 7 lists illustrative transacting parties.
The methods may include a method for securing the transaction.
The methods may include sensing, on a transaction instrument configured to exchange transaction data to effect a transaction, an environmental parameter. The methods may include deriving from the parameter a pattern. The methods may include deriving from a combination of parameters a pattern. The methods may include encoding the pattern in an a hash that may be referred to as an “observed” hash. The methods may include performing a comparison of the observed hash to a stored hash. The methods may include, based on the comparison, initiating an augmented authentication. The transaction may be a transaction that requires an authentication that may be referred to as a “basic” authentication. The basic authentication may be an authentication that is not included in the augmented authentication. The comparison may result in a mis-match between the observed hash and the stored hash. The initiating may be an initiating that occurs only because of the mis-match.
The transaction instrument may execute the performing.
The methods may include transmitting the observed hash to a remote pattern registration platform. The remote pattern registration platform may execute the performing. The augmented authentication may be performed before the basic authentication.
The augmented authentication may be readied prior to the transaction.
The deriving may be a first deriving. The methods may include, after the first deriving, executing a second deriving. The methods may include, after conclusion of the first deriving, executing the second deriving. The methods may include, after conclusion of the first deriving, executing the comparison.
The methods may include setting a time interval between the first deriving and the second deriving. The pattern may be based on a time-series of signals output by a sensor on the instrument. The signals may correspond to a load on the instrument. The load may include a momentum load. The load may include an inertial load. The load may include a thermal load. The load may include a pressure load. The load may include an optical load. The load may include a vibrational load.
The pattern may be based on a transformation of the time-series. The transformation may include a derivative of the time-series. The derivative may be a temporal derivative. The derivative may be a spatial derivative.
The transformation may be based on a relationship between the time series and force, momentum, kinetic energy, thermal energy, or any other suitable quantity.
The methods may include communicating, from a pattern registration platform to a user, over the internet an instruction to perform an act. The methods may include sensing, on a transaction instrument configured to exchange transaction data to effect a transaction, an environmental parameter responsive to the act. The methods may include deriving from the parameter a pattern. The methods may include encoding the pattern in an observed hash. The methods may include transmitting to the platform the observed hash.
The methods may include communicating, from the pattern registration platform to the user, over the internet a supplemental instruction to perform a supplemental act. The methods may include:
(a) sensing, on the transaction instrument, a supplemental environmental parameter responsive to the supplemental act;
(b) deriving from the parameter a supplemental pattern;
(c) encoding the pattern in a supplemental observed hash; and
(d) transmitting to the platform the supplemental observed hash.
The methods may include repeating steps a-d until the platform holds a library that includes the observed hash and the supplemental observed hashes.
I/O module 109 may include a microphone, keypad, touchscreen and/or stylus through which a user of server 101 may provide input, and may also include one or both of a speaker for providing audio output and a video display device for providing textual, audiovisual and/or graphical output. Software may be stored within memory 115 and/or other storage (not shown) to provide instructions to processor 103 for enabling server 101 to perform various functions. For example, memory 115 may store software used by server 101, such as an operating system 117, application programs 119, and an associated database 111. Alternatively, some or all of computer executable instructions of server 101 may be embodied in hardware or firmware (not shown).
Server 101 may operate in a networked environment supporting connections to one or more remote computers, such as terminals 141 and 151. Terminals 141 and 151 may be personal computers or servers that include many or all of the elements described above relative to server 101. The network connections depicted in
When used in a LAN networking environment, server 101 is connected to LAN 125 through a network interface or adapter 113.
When used in a WAN networking environment, server 101 may include a modem 127 or other means for establishing communications over WAN 129, such as Internet 131.
It will be appreciated that the network connections shown are illustrative and other means of establishing a communications link between the computers may be used. The existence of any of various well-known protocols such as TCP/IP, Ethernet, FTP, HTTP and the like is presumed, and the system may be operated in a client-server configuration to permit a user to retrieve web pages from a web-based server. Any of various conventional web browsers may be used to display and manipulate data on web pages.
Additionally, application program 119, which may be used by server 101, may include computer executable instructions for invoking user functionality related to communication, such as email, short message service (SMS), and voice input and speech recognition applications.
Computing server 101 and/or terminals 141 or 151 may also be mobile terminals including various other components, such as a battery, speaker, and antennas (not shown). Terminal 151 and/or terminal 141 may be portable devices such as a laptop, tablet, smartphone or any other suitable device for receiving, storing, transmitting and/or displaying relevant information.
Any information described above in connection with database 111, and any other suitable information, may be stored in memory 115. One or more of applications 119 may include one or more algorithms that may be used to perform the functions of one or more of a transaction instrument, a sensor, or a pattern registration platform, and perform any other suitable tasks.
The apparatus and methods may be operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well-known computing systems, environments, and/or configurations that may be suitable for use with the invention include, but are not limited to, personal computers, server computers, hand-held or laptop devices, tablets, mobile phones and/or other personal digital assistants (“PDAs”), multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
The apparatus and methods may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The invention may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
Apparatus 200 may be a computing machine. Apparatus 200 may include one or more features of the apparatus that is shown in
Apparatus 200 may include chip module 202, which may include one or more integrated circuits, and which may include logic configured to perform any other suitable logical operations.
Apparatus 200 may include one or more of the following components: I/O circuitry 204, which may include a transmitter device and a receiver device and may interface with fiber optic cable, coaxial cable, telephone lines, wireless devices, PHY layer hardware, a keypad/display control device or any other suitable encoded media or devices; peripheral devices 206, which may include counter timers, real-time timers, power-on reset generators or any other suitable peripheral devices; logical processing device 208, which may solve equations and perform other methods described herein; and machine-readable memory 210.
Machine-readable memory 210 may be configured to store in machine-readable data structures associated with patterns, pattern hashes, or augmented authorization, and any other suitable information or data structures.
Components 202, 204, 206, 208 and 210 may be coupled together by a system bus or other interconnections 212 and may be present on one or more circuit boards such as 220. In some embodiments, the components may be integrated into a single chip.
The chip may be silicon-based.
In storing mode 308, transaction instrument 302 may transmit, wirelessly or through contact, to pattern registration platform 306, hash values corresponding to patterns generated by behaviors of authorized user UA while authorized user UA is in possession of transaction instrument 302.
The wireless or contact communication may include a mobile terminal intermediate transaction instrument 302 and pattern registration platform 306. The wireless or contact communication may include a non-mobile terminal intermediate transaction instrument 302 and pattern registration platform 306. The non-mobile terminal may include transaction device 304. Transaction instrument 302 may include machine readable memory to store hash values until a communication channel becomes available.
In monitoring mode 310, transaction instrument 302 may transmit, wirelessly or through contact, to pattern registration platform 306, hash values corresponding to patterns generated by behaviors of authorized user UA while authorized user UA is in possession of transaction instrument 302. In monitoring mode 310, transaction instrument 302 may transmit, wirelessly or through contact, to pattern registration platform 306, hash values corresponding to patterns generated by behaviors of unauthorized user Uu while unauthorized user Uu is in possession of transaction instrument 302.
Pattern registration platform 306 may be in communication with transaction device 304. If a user presents transaction instrument 302 to transaction device 304, transaction device 304 may request from pattern registration platform 306 augmented authorization to perform a transaction. If in monitoring mode 310, pattern registration platform 306 detects a pattern that does not correspond to a pattern stored during storing mode 308, pattern registration platform 306 may deny augmented authorization.
During period t0-t1, user UA may perform a series of behaviors. Transaction instrument 302 may sense one or more patterns such as patterns P1, P2, P3, . . . ,PN. Transaction instrument 302 may convert each of the patterns into a hash value, such as corresponding hash values hash 1, hash 2, hash 3, . . . , hash N. Transaction instrument 302 may communicate the N hash values to pattern registration platform 306. Pattern registration platform 306 may store the N hash values as an array HS of stored hash values.
User UA may set transaction instrument 302 to monitor mode 310. In one or both of periods t1-t2 or t3-t4, transaction instrument 302 may sense one or more patterns such as first observed pattern PO1. First observed pattern PO1 may be inherently linked to the identity of user UA, because it corresponds to the behavior of user UA.
Transaction instrument 302 may transmit to pattern registration platform 306 first observed hash value HO1, which may correspond to first observed pattern PO1. Pattern registration platform 306 may perform a comparison and recognize that first observed hash value HO1 is a member of array HS (HO1∈HS). Pattern registration platform 306 may thus grant to transaction device 304 augmented authorization.
Transaction instrument 302 may transmit to pattern registration platform 306 second observed hash value HO2, which may correspond to second observed pattern PO2. Pattern registration platform 306 may perform a comparison and recognize that second observed hash value HO1 is not a member of array HS (HO2∉HS). Pattern registration platform 306 may thus deny to transaction device 304 augmented authorization.
A pattern may be defined based on a single behavior and a single location. A pattern may be defined based on a single behavior and multiple locations. A pattern may be defined based on multiple behaviors and a single location. A pattern may be defined based on a multiple behaviors and multiple locations.
For each pattern Pq, transaction instrument 602 may generate a hash value Hq. Hash values Hq may be transmitted to pattern registration platform 806.
Pattern registration platform 806 may include model processor 808. Pattern registration platform 806 may include pattern store 810. Pattern store 810 may store the hash value. Model processor 810 may invert a hash tag into a pattern data set. The pattern data set may include behavior components. Model processor 810 may perform comparisons between patterns.
Mobile terminal 812 may include a user interface for transaction instrument 602. Mobile terminal 812 may provide communication between transaction instrument 602 and pattern registration platform 806.
Apparatus may omit features shown and/or described in connection with illustrative apparatus. Embodiments may include features that are neither shown nor described in connection with the illustrative apparatus. Features of illustrative apparatus may be combined. For example, an illustrative embodiment may include features shown in connection with another illustrative embodiment.
For the sake of illustration, the steps of the illustrated processes may be described as being performed by a “system.” A “system” may include one or more of the features of the apparatus and schemae that are shown in
The steps of methods may be performed in an order other than the order shown and/or described herein. Embodiments may omit steps shown and/or described in connection with illustrative methods. Embodiments may include steps that are neither shown nor described in connection with illustrative methods.
Illustrative method steps may be combined. For example, an illustrative process may include steps shown in connection with another illustrative process.
At step 904, the transaction instrument may convert the pattern into a one-way hash value.
At step 906, the transaction instrument transmits hash value representing pattern in real time to pattern registration platform, which may match patterns in real time
At step 908, the pattern registration platform may determine whether the transaction instrument is in possession of the UA based on a match between an observed hash value and stored hash value.
At step 910, if an observed hash value does not match a stored hash value, the pattern registration platform may determine that an unauthorized user UU is in possession of the transaction instrument.
At step 912, the system may set and may store a flag requiring augmented authentication of a user before execution of a transaction using the transaction instrument at a transaction device.
At step 914, a mobile terminal may identify a mis-match between observed and stored pattern, and may communicate the mismatch to the pattern registration platform.
As will be appreciated by one of skill in the art, the invention described herein may be embodied in whole or in part as a method, a data processing system, or a computer program product. Accordingly, the invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software, hardware and any other suitable approach or apparatus.
Thus, methods and apparatus for securing a transaction have been provided. Persons skilled in the art will appreciate that the present invention may be practiced by other than the described embodiments, which are presented for purposes of illustration rather than of limitation.
