Security for connected devices

A method includes: receiving, by a computer device and from an automated teller machine, a personal identification number that is associated with an account; determining, by the computer device, that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determining, by the computer device and as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmitting, by the computer device, a command to perform the disablement action.

BACKGROUND

Aspects of the present invention relate generally to security of connected device and, more particularly, to disabling devices associated with an account upon receipt of a disablement code.

Many transactions, including cash withdrawal, are performed at an automated teller machine (ATM). In some cases, a smart phone or smart watch are used to perform these transactions without requiring a debit card or other card.

SUMMARY

In a first aspect of the invention, there is a computer-implemented method including: receiving, by a computer device and from an automated teller machine, a personal identification number that is associated with an account; determining, by the computer device, that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determining, by the computer device and as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmitting, by the computer device, a command to perform the disablement action.

In another aspect of the invention, there is a computer program product including one or more computer readable storage media having program instructions collectively stored on the one or more computer readable storage media. The program instructions are executable to: receive, from an automated teller machine, a personal identification number that is associated with an account; determine that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determine, as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmit a command to perform the disablement action.

In another aspect of the invention, there is system including a processor, a computer readable memory, one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media. The program instructions are executable to: receive, from an automated teller machine, a personal identification number that is associated with an account; determine that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determine, as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmit a command to perform the disablement action.

DETAILED DESCRIPTION

Aspects of the present invention relate generally to security of connected device and, more particularly, to disabling devices associated with an account upon receipt of a disablement code. According to aspects of the invention a security module receives a disablement personal identification number (PIN) from an ATM. In embodiments, the security module determines at least one disablement action to be performed by a device other than the ATM. In this manner, implementations of the invention help prevent the unauthorized use of devices used to access, or in the vicinity of, the ATM.

In embodiments, there is a computer-implemented process for managing security of a connected device, the computer-implemented process including: in response to receiving, from the connected device, a predetermined disablement personal identification number (PIN) associated with a first transaction on a first device and different from a predetermined enablement (PIN), initiating the first transaction on the first device including validating and a determining whether the disablement PIN was used; in response to a determination the disablement PIN was used, requesting a disablement account transaction to identify a set of predetermined commands, stored in a repository, and associated with the disablement PIN; sending the set of predetermined commands identified to a disablement command processor; executing the set of predetermined commands identified, by the disablement command processor connecting with at least one disablement application processing service and at least one alerting service; in response to the at least one disablement application processing service and the at least one alerting service executing the set of predetermined commands identified, receiving results of the disablement account transaction on the first device; and in response to receiving the results of the disablement account transaction on the first device, displaying a predetermined message associated with the first transaction on the first device.

Embodiments of the invention provide improved cardless ATM operation to address the technical problem of unauthorized use of devices used in implementing cardless ATM operation. Implementations of the invention provide new functionality enabling the disablement of devices used in the implementation of cardless ATM operation and/or in the vicinity of carless ATM operation. The technical problem of disabling devices used in implementing cardless ATM operation arises solely in the realm of computer technology and is addressed in embodiments of the invention by sending electronic disablement commands to such devices.

It should be understood that, to the extent implementations of the invention collect, store, or employ personal information provided by, or obtained from, individuals, such information shall be used in accordance with all applicable laws concerning protection of personal information. Additionally, the collection, storage, and use of such information may be subject to consent of the individual to such activity, for example, through “opt-in” or “opt-out” processes as may be appropriate for the situation and type of information. Storage and use of personal information may be in an appropriately secure manner reflective of the type of information, for example, through various encryption and anonymization techniques for particularly sensitive information.

Implementations of the invention may include a computer system/server12ofFIG.1in which one or more of the program modules42are configured to perform (or cause the computer system/server12to perform) one of more functions of the device disablement96ofFIG.3. For example, the one or more of the program modules42may be configured to: receive, from an automated teller machine, a personal identification number that is associated with an account; determine that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different; determine, as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine; and transmit a command to perform the disablement action.

Many financial institutions are innovating with cardless ATM capabilities that allow consumers to withdraw cash using mobile devices instead of plastic cards to authenticate themselves and initiate transactions. In some cases, the procedure to be followed in a cardless ATM transaction is simply: open the mobile application; enter a personal identification number (PIN); select the amount of cash to withdraw; and scan a quick response (QR) code on the ATM screen.

A problem associated with some cardless ATM transactions in that to use a cardless ATM, a user needs to use their smartphone or other smart device. As a result, in a case of an unauthorized user, the unauthorized user is often able to take the smart device as well as the cash withdrawn. Embodiments of the invention disable the smart device as well as other devices to deter theft of the smart device and the other devices.

Embodiments provide an advanced personal security system for Internet of Things (IoT) devices. Embodiments utilize a disablement PIN. A user that has access to an account will have two types of PINs associated with their account: an activation PIN; and a disablement PIN. In a case of a robbery attempt by an unauthorized user at the ATM, the user enters (or gives it to the unauthorized user) the disablement PIN. In response to the system receiving the disablement PIN, the system will execute disablement commands that are applicable to IoT devices and/or other devices associated with the user. An advantage of embodiments is that the system interacts with not only a user's smart phone or other smart device used to access the account through the ATM, but with other devices selected by the user. For example, a user's automobile can be disabled as a result of entry of the disablement PIN.

FIG.4shows a block diagram of an exemplary environment in accordance with aspects of the invention. In embodiments, the environment includes a computer device100such as, for example, computer system/server12inFIG.1, that communicates over one or more networks200such as, for example, cloud computing environment50ofFIG.2. In this example, computer device100includes security module110comprising, for example, one or more of program modules42inFIG.1, and a storage device190such as, for example, storage system34inFIG.1. Computer device100may include additional or fewer modules than those shown inFIG.4. In embodiments, separate modules may be integrated into a single module. Additionally, or alternatively, a single module may be implemented as multiple modules. Moreover, the quantity of devices and/or networks in the environment is not limited to what is shown inFIG.4. In practice, the environment may include additional devices and/or networks; fewer devices and/or networks; different devices and/or networks; or differently arranged devices and/or networks than illustrated inFIG.4.

FIG.4shows security module110including a disablement PIN configuration module120, for example, one or more of program modules42inFIG.1, which is an application utilized by a user to configure a disablement PIN account. Disablement PIN configuration module120interfaces with PIN disablement setup services140to allow a user to select what devices are disabled, and what alerts are to be given, as a result of entry of the disablement PIN. In other embodiments, disablement PIN configuration module120is separate from security module110. For example, in embodiments, disablement PIN configuration module120is a part of a financial institutions PIN procedure when a user sets up or revises PIN(s) associated with a particular account. Notice of account transaction130, which is a notice of an account transaction, is received by security module110as a trigger for initiation of the processes performed by security module110. PIN disablement setup services module140, for example, one or more of program modules42inFIG.1, is utilized by disablement PIN configuration module120to associate disablement PINs and commands with existing bank accounts. A disablement command processor160directs processing of disablement commands by one or more disablement application programming interface (API) services, and any alerting registered by the user in disablement PIN configuration module120.

FIG.4shows an ATM405through which the user requests, for example, a cash withdrawal using a mobile device410such as, for example, a smart phone or a smart watch.FIG.4shows, in this example, four databases accessed by security module110. In embodiments, account configuration database420contains information regarding the configuration of the user's accounts including, for example, account number, account owner, account co-owner, and authorized users. In embodiments, account transaction database425contains information regarding user's accounts including, for example, account number, account balance, and account transaction history. In embodiments, account PIN database430contains information regarding the user's account PINs including, for example, account number, account PIN, disablement PIN(s). In embodiments, disablement PIN database435contains information regarding the user's disablement PIN(s) including, for example, one or more disablement PINs for one or more of the user's accounts, operation (including disablement) command rules for each disablement PIN, and alert rules for each disablement PIN. In embodiments, one account has multiple disablement PINs, each having different operation command rules and/or alert rules. For example, in an embodiment, a first disablement PIN for account A disables a smart phone, a smart watch, and an automobile, and sends an alert to mobile phone number X. In that same embodiment, a second disablement PIN for account A disables only the automobile, and sends an alert to mobile phone numbers X and Y. Depending on who the particular user is and the particular situation in when the disablement PIN is used, different disablements/alerts are desirable.

In embodiments, the cash withdrawal is permitted to proceed even though a disablement PIN is entered into ATM405by the user. In embodiments, this is desirable to delay alerting the unauthorized user of the disablement of smart phone442and/or other devices by allowing the ATM to distribute the cash.

InFIG.4, four examples of disablement services enacted by security module110are shown. In embodiments, security module110determines what disablement services to enact by checking the information in disablement PIN database435, as described above. In embodiments, disablement API service—smart phone440receives a command from disablement command processor160to disable smart phone442. In embodiments, smart phone442is the mobile device410shown inFIG.4. For example, a user uses mobile device410to access a bank account through ATM405. However, in embodiments, smart phone442is a smart phone other than mobile device410. For example, smart phone442is a smart phone used by a family member of the user of mobile device410who with the user of mobile device410when the user accesses a bank account through ATM405. In embodiments, it is desirable to disable the family member's smart phone so that it will be of no use to an unauthorized user who may be inclined to take smart phone442. In embodiments, disablement API service—smart watch445receives a command from disablement command processor160to disable smart watch447. In embodiments, disablement API service—smart car450receives a command from disablement command processor160to disable smart car452. In embodiments, disablement alert service455receives a command from disablement command processor160to display and/or sound an audible alert457by email, short message service (SMS), and/or some other alert method. In embodiments, the alert is sent to electronic devices possessed by people who should be alerted to the event causing the entry of the disablement PIN. In embodiments, if it is desirable, the alert is sent to one or more of smart phone442, smart watch447, smart car452, and other electronic devices. In embodiments, security module110transmits the commands over a Bluetooth connection.

FIG.5shows a flow chart of an exemplary method in accordance with aspects of the invention. Steps of the method may be carried out in the environment ofFIG.4and are described with reference to elements depicted inFIG.4.

At step505, a PIN is utilized at an ATM, such as, for example, ATM405inFIG.4. For example, a user gives a disablement PIN to an unauthorized user and the unauthorized user enters the disablement PIN (not realizing it is a disablement PIN) into the ATM (or into a smart phone for activation of the ATM).

At step510, an account transaction is triggered by entry of the PIN at step505. At step515, security module110, for example, determines whether the PIN entered at step505is an activation PIN or a disablement PIN. If, at step515, security module110determines that the PIN entered at step505is an activation PIN, then processing proceeds to step520where the ATM, for example ATM405, performs normal ATM processing. At step525, security module110sends the results of the transaction to the ATM so that the ATM can display an appropriate message. In embodiments, as a result of an activation PIN being used, normal ATM transaction messages are displayed as a part of the normal ATM processing at step520. After step525, processing continues to step550, where processing ends.

If, at515, security module110determines that the PIN entered at505is a disablement PIN, then processing proceeds to step530where, for example, disablement command processor160inFIG.4determines what commands are to be configured for processing based on the disablement PIN received and the account associated with the disablement PIN. At step535, disablement command processor160inFIG.4, for example, executes the particular disablement commands and alerts associated with the disablement PIN and the account. At step540, one disablement or alert API service such as, for example, services440,445,450,455inFIG.4, receives the command from, for example, disablement command processor160. At step545, security module110determines if more commands are to be executed. If at step545, security module110determines that no more commands are to be executed, processing proceeds to step525where one or more messages are returned to the ATM for display. In embodiments, the messages returned to the ATM at step525include no messages that alert the unauthorized user that any disablements or alerts have been activated. In embodiments, the transaction, for example a cash withdrawal, is authorized and executed in an effort to not agitate the unauthorized user. If at step545, security module110determines that more commands are to be executed, processing returns to step535and the process is repeated until all commands are executed.

Embodiments trigger a plurality of action on IoT devices based on the disablement PIN entered. Examples of actions include: disabling a device (such as, for example, a smart watch) so that it will not boot up until connected to an authorized device; encrypt data on a device; delete data on a device; completely shut down and immobilize (“brick”) a device. In embodiments, the system (that is running on the ATM or on a cloud service connected to the ATM), sends a command to the device using any available method like Bluetooth, or by the use of an application loaded on the user IoT device.

Embodiments activate pervasive global positioning system (GPS) on a device, for example, a smart watch or smart phone, so that the device sends location information even when the device is turned off. Embodiments send alerts to one or more predetermined contacts including location and/or images from the ATM (still pictures or video feeds). Embodiments (that are running on the ATM or on a cloud service connected to the ATM), send the location of the ATM plus the images/videos to one or more persons registered by the user with the bank (or other institution holding the account) using one or more communication channels (applications, email, SMS, and or other communication channels).

Embodiments send a command to an autonomous or other vehicle API requesting to disable the vehicle or a portion of the vehicle (to prevent it from being stolen or used by the unauthorized user). In embodiments, the system executes a physical action if allowed by the vehicle hardware such as, for example, venting the air form the tires to make them flat.

In embodiments, the above described actions are modified based on the location of the ATM. For example, if in a particular geographic location, the system will never issue a command to make the tires flat, while in another geographic location, the system will encrypt, but not disable, all devices.

FIG.6shows a flowchart of an exemplary method in accordance with aspects of the present invention. Steps of the method may be carried out in the environment ofFIG.4and are described with reference to elements depicted inFIG.4.

At step605, the system receives, by a computer device and from an automated teller machine, a personal identification number that is associated with an account. In embodiments, and as described with respect toFIG.4, security module110receives from ATM405a personal identification number that is associated with an account.

At step610, the system determines that the personal identification number is a disablement personal identification number that is associated with the account, the account having an activation personal identification number, the disablement personal identification number and the activation personal identification number being different. In embodiments, and as described with respect toFIG.4, security module110determines that the personal identification number received from ATM405is a disablement personal identification number that is associated with the account by comparing it to account PIN database430.

At step615, the system determines, by the computer device and as a result of receiving the disablement personal identification number, at least one disablement action to be performed by a device other than the automated teller machine. In embodiments, and as described with respect toFIG.4, security module110determines, as a result of receiving the disablement personal identification number from ATM405, that disablement API service-smart phone440is to be performed on smart phone442.

At step620, the system authorizes, by the computer device and as a result of receiving the disablement personal identification number, withdrawal of cash from the account at the automated teller machine. In embodiments, and as described with respect toFIG.4, security module110authorizes, as a result of receiving the disablement personal identification number from ATM405, a withdrawal of cash from the account at ATM405.

At step625, the system transmits a command to perform the disablement action. In embodiments, and as described with respect toFIG.4, security module110transmits a command to disablement API service-smart phone440to perform the disablement of smart phone442.

At step630, the system transmits an alert message to an electronic device other than the automated teller machine indicating that the disablement personal identification number has been used. In embodiments, and as described with respect toFIG.4, security module110transmits an alert email to a computer through disablement alert service455, the alert message indicating that the disablement personal identification number has been used.