Self-service terminal limited access personal identification number (“PIN”)

A method for operating an electronic self-service device is provided. The method may include using an electronic receiver module to receive electronic data from the self-service device. The electronic data may include information regarding a limited access personal identification number (“PIN”). The method may further include using an electronic computational module to test the PIN using a plurality of algorithms. The testing preferably determines whether the PIN corresponds to one of a plurality of stored PIN offset values. The method may also include identifying an algorithm that obtains a correspondence between the PIN and one of the plurality of stored PIN offset values. The method may further include using an electronic transmitter to transmit a signal corresponding to the algorithm used to obtain the correspondence and receiving an electronic authorization message that comprises instructions. The instructions may provide limited access authorization information.

FIELD OF TECHNOLOGY

Aspects of the disclosure relate to providing apparatus and methods for improving self-service devices such as Automatic Teller Machines (“ATMs”), cash recyclers, and self-service kiosks.

BACKGROUND OF THE INVENTION

Self-service devices such as Automatic Teller Machines (“ATMs”), cash recyclers, and self-service kiosks are typically operated by a user in a two-step method. First, the user inserts a banking card, transaction card or other object (referred to collectively herein as a “bank card”) that contains information identifying a user account. Then, the user enters a typically four-digit Personal Identification Number (“PIN”). The self-service device then compares the identification information on the bank card or other object to the received PIN. If the PIN corresponds to a predetermined secure code associated with the identification information, such as a PIN offset value, the user is provided full access to his or her accounts.

One drawback associated with the aforementioned, substantially ubiquitous, system is that the system is susceptible to fraud. For example, if a thief watches a user enter his or her four-digit PIN, and then manages to misappropriate the user's bank card, the user's entire bank account(s) may be exposed to trespass by the thief.

It would be desirable, therefore, to provide apparatus and methods that allow a user to access his or her accounts without exposing substantial the entire scope of his or her financial accounts to trespass.

SUMMARY OF THE INVENTION

An electronic self-service device is provided. The self-service device includes a receiver module configured to receive an input. The input includes information including a personal identification number (“PIN”). The self-service device also includes a processor module configured to determine whether predetermined limited access information corresponds to the received PIN. The self-service device includes a transmitter module. When the limited access information corresponds to the received PIN, the transmitter module is configured to communicate the limited access information to a central server. The receiver is configured to receive limited access instructions from the central server. The limited access instructions provide access to a predetermined portion of a user's accounts. The predetermined portion is less than the entirety of the user's accounts.

DETAILED DESCRIPTION OF THE INVENTION

Apparatus and methods for improving fraud protection in self-service devices such as Automatic Teller Machines (“ATMs”), cash recyclers, and self-service kiosks are provided. Fraud protection according to the invention may include reducing user account exposure to fraud, conversion, theft or any other misappropriation.

An ATM for use with apparatus and methods according to the invention may be made up of one or more of the following devices or other suitable devices: a CPU (which may control user interface mechanisms, transaction devices, and communication with a central server), a magnetic card reader (to identify the card being used), a PIN pad, a cryptoprocessor, a display, function keys (usually in close proximity to the display) and/or a touchscreen, a printer (to provide a transaction record to a customer), a vault (to store portions of the machinery requiring restricted access), and a housing. In certain ATMs, a smart card reader (that reads a chip instead of a magnetic strip) and bill validation technology may also be implemented. A further feature of an ATM for use with systems and methods according to the invention may include printing each transaction to a roll paper journal that is stored inside the ATM.

The apparatus and methods may be scalable, for example, to cover all or a portion of the fleet of ATMs that run on a platform such as that available under the trademark APTRA platform, which is available from the NCR Corporation, Dayton, Ohio.

A limited access PIN according to the invention may preferably allow different, and preferably custom, functionality and/or limits, etc. from a conventional PIN. For example, whereas a conventional PIN provides access to the totality of a user's accounts with a bank or other financial institution, a limited access PIN according to the invention preferably provides some predetermined quantum of access less than full access.

The quantum may be expressed in terms of a limitation on the amount of funds available to a user, as determined by a user-defined and/or system-set parameter that corresponds to the PIN. The quantum may be expressed in terms of a time limitation on the PIN—i.e., the PIN may only provide access for a certain predetermined duration and expire thereafter. The quantum may be expressed in terms of a geographic limitation—i.e., the PIN may only provide access in a predetermined region. The quantum also may be expressed in terms of a time-based use limitation—i.e., the PIN may be valid for a predetermined time following the first use of the PIN—or some other suitably determined time factor.

It should be noted that systems and methods according to the invention may require various software and/or hardware PIN authentication enhancements. Such enhancements may preferably obtain different software responses which correspond to the entered PIN. Accordingly, when a predetermined PIN is entered following a card swipe, systems and methods according to the invention may send one or more different software and/or hardware responses. Such systems and methods may require that multiple offset values be stored on the bank card.

In alternative embodiments of the invention, the self-service device itself may include multiple PIN decoding algorithms in order to match a PIN with predetermined limited access information. Preferably, systems and methods according to the invention may be implemented such that communication with a central server does not include actual PIN information but rather some value that corresponds to the limited access associated with the limited access PIN.

Certain embodiments of the invention may involve a “panic” PIN. Such a PIN may send a message to a central server that a user senses danger and requires immediate assistance. Such a server may include software/hardware that is sensitive to the entry of such a PIN. Such software/hardware may be stored and/or co-located with other authorization software/hardware.

In other embodiments of the invention, a “security violation alert” PIN may also be used. Upon receipt and identification of such a security violation alert PIN, a self-service device may send a communication to appropriate authorities with an embedded message that identifies the present user as a fraud. In one exemplary circumstance, a rightful bank card owner is robbed and forced to disclose his or her PIN information. The rightful owner discloses his security violation alert PIN to the assailant. Then the robber swipes the card at a self-service device and enters the security violation alert PIN.

Thereafter, in one embodiment of the invention, the self-service device may provide limited bank account access to the robber—e.g., the robber may be allowed to withdraw a limited sum. Following receipt of the security violation alert PIN, the self-service device may be configured to substantially simultaneously send an alert message to the appropriate authorities. In some embodiments of the invention, the self-service may invoke a timing device that serves to slow down the actions of the self-service device in order to allow additional time for the travel and arrival of the appropriate authorities.

In certain embodiments of the invention, each member of a predetermined group—e.g., employees of a business and/or members of a family—may be issued an individual PIN. In such embodiments, systems and methods can track bank card activity, and the usage of accounts corresponding thereto, by person because each person is identifiable by his or her uniquely-issued PIN.

In some embodiments of the invention, online banking portals may include various levels of access. Such access may depend upon which PIN may be entered. Accordingly, certain members of a group may be allowed full access. Others may be allowed limited access. The level of access of a user may correspond to the user's preferably uniquely-issued PIN. In similar embodiments, the PIN may combined with a bank card such that, when a user attempts to use his or her bank card at an ATM, and enters his uniquely-issued PIN, a limited access banking portal may be provided to the user. In certain embodiments, a user may be notified of updates to certain PINs on a periodic basis. Such PINs may include various types of limited access PINs as described herein.

In certain embodiments of the invention that utilize a funds-limitation quantum, certain, preferably preselected, members of a group may be able to limit use of a bank card for certain other members of the group. For example, a parent may be able to give his or her bank card to a child and provide the child with a PIN that will limit the ability of the child to withdraw funds. Such a limitation may be funds-based—e.g., the child may be able to use the PIN to withdraw only some amount less than two hundred dollars.

In some embodiments of the invention, a PIN may be provided that is “disposable” —i.e. following a predetermined number of uses, the PIN ceases to validate access into the user's account(s). It should be noted that this embodiment, as well as any of the other embodiments of the invention described herein, may be combined with one or more of the other embodiments. For example, a disposable PIN may be combined with a funds-limited PIN such that a single PIN may provide only one-time access for a limited amount of funds—e.g., two hundred dollars.

Apparatus and methods that are used to determine and transmit the various parameters of limited PIN access may utilize Base24—a software application available from ACI Worldwide Corp., Omaha, Nebr. under the trademark BASE24—that runs on the server and that is typically used for ATM connectivity—or any other application that runs on a server that communicates with the ATMs.

Many self-service devices are networked with other self-service devices. A group of networked self-service devices may be served by one or more servers. Apparatus and methods according to the invention may preferably be applicable to numerous self-service devices across a communications network. Accordingly, if a PIN access is limited by a predetermined quantum stored at a central server or limited in some other fashion, then the PIN should preferably be limited at each of the self-service devices that utilize the information in the server.

As will be appreciated by one of skill in the art, the invention described herein may be embodied in whole or in part as a method, a data processing system, or a computer program product. Accordingly, the invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software, hardware and any other suitable approach or apparatus.

Furthermore, such aspects may take the form of a computer program product stored by one or more computer-readable storage media having computer-readable program code, or instructions, embodied in or on the storage media. Any suitable computer readable storage media may be utilized, including hard disks, CD-ROMs, optical storage devices, magnetic storage devices, and/or any combination thereof. In addition, various signals representing data or events as described herein may be transferred between a source and a destination in the form of electromagnetic waves traveling through signal-conducting media such as metal wires, optical fibers, and/or wireless transmission media (e.g., air and/or space).

FIG. 1is a block diagram that illustrates a generic computing device101(alternatively referred to herein as a “server”) that may be used according to an illustrative embodiment of the invention. The computer server101may have a processor103for controlling overall operation of the server and its associated components, including RAM105, ROM107, input/output module109, and memory125.

Input/output (“I/O”) module109may include a microphone, keypad, touch screen, and/or stylus through which a user of device101may provide input, and may also include one or more of a speaker for providing audio output and a video display device for providing textual, audiovisual and/or graphical output. Software may be stored within memory125and/or storage to provide instructions to processor103for enabling server101to perform various functions. For example, memory125may store software used by server101, such as an operating system117, application programs119, and an associated database121. Alternatively, some or all of server101computer executable instructions may be embodied in hardware or firmware (not shown).

Server101may operate in a networked environment supporting connections to one or more remote computers, such as terminals141and151. Terminals141and151may be personal computers or servers that include many or all of the elements described above relative to server101. The network connections depicted inFIG. 1include a local area network (LAN)125and a wide area network (WAN)129, but may also include other networks. When used in a LAN networking environment, computer101is connected to LAN125through a network interface or adapter123. When used in a WAN networking environment, server101may include a modem127or other means for establishing communications over WAN129, such as Internet131. It will be appreciated that the network connections shown are illustrative and other means of establishing a communications link between the computers may be used. The existence of any of various well-known protocols such as TCP/IP, Ethernet, FTP, HTTP and the like is presumed, and the system can be operated in a client-server configuration to permit a user to retrieve web pages from a web-based server. Any of various conventional web browsers can be used to display and manipulate data on web pages.

Additionally, application program119, which may be used by server101, may include computer executable instructions for invoking user functionality related to communication.

Computing device101and/or terminals141or151may also be mobile terminals including various other components, such as a battery, speaker, and antennas (not shown).

Terminal151and/or terminal141may be portable devices such as a laptop, cell phone, Blackberry™, or any other suitable device for storing, transmitting and/or transporting relevant information.

Any information described above in connection with database121, and any other suitable information, may be stored in memory125.

One or more of applications119may include one or more algorithms that may be used to receive and parse limited access PINs, panic PINs, security violation alert PINs and/or any other suitable tasks related to limited access self-service device PIN implementation.

Monitor202may exchange visual and or audio information with a customer. Keypad204may include alphanumeric keys214for the customer to enter numerical and textual data. Keypad204may include control keys216. In some embodiments, control keys216may be used to communicate control information, such as instructions, to self-service device200. Keypad204may include soft keys. Soft keys218may have functions that are dictated by programming and are presented to the customer using information that may be displayed on monitor202.

Card reader port206may be the front end of any suitable card reader. The card reader may read magnetically encoded information on transaction instruments such as bank cards. In some embodiments, self-service device200may include a contactless chip reader, a wireless transceiver or any other suitable interface for exchanging transaction information with a transaction instrument. The transaction instrument may be a chip, an RFID tag, a smart card, a PDA, a telephone or any other suitable device.

In some embodiments, self-service device200may include a biometric sensor (not shown). The biometric sensor may identify a customer based on a feature, such as an anatomical feature, of the customer. For example, the biometric sensor may be configured to identify the customer based on all or part of a face, a fingerprint, an iris, a retina a hand or any other suitable anatomical feature. The biometric sensor may identify the customer based on a behavioral feature such as a signature, a voice, a gait or any other suitable behavioral feature.

In some embodiments of the invention, the biometric sensor may be used alone, or in combination with a PIN and/or bank card, as a limited access device. In such embodiments, the biometric sensor may act to identify a user such that limited access features according to the invention may be implemented. Further, such a device may be used in combination with some or all of the other embodiments described in this application.

Document acceptor208may accept any suitable documents. For example, document acceptor208may accept envelopes, deposit forms, bills, checks or any other suitable documents. In some embodiments, document acceptor208may feed into a scanner that digitizes the documents for image-based transaction processing.

It should be noted that a limited access PIN according to the invention may or may not limit the ability of a user to deposit documents in self-service device200. In certain embodiments, a limited access PIN may limit certain types of document deposits but not others. In other embodiments, a limited access PIN may prevent any deposits and only allow withdrawals.

Item dispenser210may dispense items. For example, item dispenser210may dispense bills. In some embodiments of the invention, dispenser210may be limited to dispensing certain amounts of funds, and/or certain sizes of bills. Such limitations may be user-defined and/or system set. In other embodiments, the limited access pin may set local limits on dispensing funds, as described elsewhere in this specification.

Security screen212may visually screen a surveillance device (not shown). The surveillance device may provide video information about individuals that are present near the self-service device and the conditions there.

FIG. 3shows illustrative self-service device300. Self-service device300may have one or more of the features of self-service device200(shown inFIG. 2). Self-service device300may include housing302. Self-service device300may include vault304. Vault304may contain items (not shown). Item handling mechanism306may be present in vault304. Item handling mechanism306may store, arrange, dispense and/or otherwise handle items for dispensing from self-service device200. For example, item handling mechanism306may include conveyors (not shown) for positioning and repositioning items for dispensing by dispenser308through item port310. Items (not shown) in item handling mechanism306may be contained in item cartridges312. For example, when the items are bills, item cartridges312may be cash cartridges.

Item handling mechanism306may include item counter314. Item counter314may count items prior to dispensing by dispenser308.

Self-service device300may include LCD display316and a keypad (not shown) for customer interaction. Card reader318may be present for receiving transaction information from the customer via a suitable transaction instrument. Self-service device300may include receipt printer and dispenser module320. Receipt printer and dispenser module320may provide the customer with a record of a transaction. CPU320may control customer I/O, dispensing processes, which may include initialization, actuation, dispensing and any other suitable processes, receipt printing and dispensing, transaction channel communications and any other suitable processes. The transaction channel communications may be performed using modem324, which may be any suitable communication device. Modem324may communicate with a local or regional network router (not shown). Service monitor326may be provided for a service technician to exchange information and instructions with CPU322.

FIG. 4shows control system400for controlling a self-service device such as300(shown inFIG. 3). System400is controlled by CPU402. CPU402exchanges transaction information with electronic communication network N via modem404, which is in communication with router R. CPU402may receive transaction information from a customer via monitor406, keypad408, card reader410and deposit acceptor412. CPU402may dispense bills through bill dispenser414.

In certain embodiments of the invention, CPU402may receive transaction information from keypad408and/or card reader410that corresponds to a limited access PIN according to the invention. In such circumstances, CPU402may preferably communicate such information to network N via modem404, which is in communication with router R.

It should be noted that prior to communicating with the network via router R, CPU402typically verifies the PIN received from the user with a PIN offset value stored on the magnetic stripe, or other storage mechanism, on the bank card. The PIN offset value typically corresponds to the input user PIN but is “offset” by some predetermined value (or using a predetermined algorithm) in order to prevent fraudulent use of the bank card by a third party. Thus, if a third party were to obtain the bank card, the third party could not obtain the user PIN number without knowing a code that the self-service device used to match the PIN and the PIN offset value.

In systems and methods according to the invention, a bank card according to the invention may preferably store multiple offset values. Each of the offset values may preferably correspond to a predetermined limited access PIN. In addition, at least one of the offset values may correspond to a full access PIN.

When the self-service device matches an input PIN with one of the limited access PINs, the self-service device may preferably communicate, to a self-service device operations module, that the limited access PIN information had been received at the self-service device. In response to receipt of the limited access PIN information, the module may use the information to transmit limited access instructions to the self-service device. In such embodiments, it can be understood that the bank card may preferably store multiple offset values.

In other embodiments of the invention, a CPU, such as CPU402may be in communication with a memory (not shown) on the self-service device400. Such a memory may store multiple codes for matching the PIN with an offset value on the bank card.

FIG. 5shows illustrative transaction information network500. Transaction information network500may include electronic communication network502. Network502may be in part a LAN or WLAN, a WAN or WLAN or any other suitable network. Network502or portions thereof may be cabled, wired, optical fibered or wireless.

Self-service devices such as ATMs504may communicate via electronic communication network502with self-service device operations module506. Self-service device operations module506may include one or more devices shown inFIG. 1. A remote user may use self-service device operations module506to monitor, control and/or intervene in one or more processes of ATMs504. Such actions may correspond to one or more of the various limited access PIN implementations described herein.

FIG. 6shows illustrative portions of communication system600for exchanging transaction information between ATM602and financial institution transactional platform604. ATM602may be an ATM such as300(shown inFIG. 3). Transactional platform604may be any suitable device for settlement and clearing of transactions. For example, platform604may be a financial institution mainframe.

Command lines in transactional information from ATM602may be executed at line handler protocol layer606. Device handler608may handle routing decisions based on transactional information requirements for authorization, settlement, clearance, transactional networks and issuing financial institutions.

In certain implementations according to the invention, such authorization may include limited access PIN authorization. Such limited PIN authorization may also be executed at line handler protocol layer606.

Authorization requests may then be processed by auth-process module610. Auth-process module610may then provide transactional information to host interface612for communication with platform604. In limited access PIN embodiments according to the invention, such transaction information may be further processed by host interface612and communicated to main frame604.

Supervisory module614may receive diagnostic data from line handler606, device handler608, auth-process module610, or any other suitable source. The diagnostic data may be used to manage ATM602. The diagnostic data may be provided to a self-service operations module such as506(shown inFIG. 5).

Processes in accordance with the principles of the invention may include one or more features of the process illustrated inFIGS. 7-9. For the sake of illustration, the steps of the process illustrated inFIG. 7-9will be described as being performed by a “system.” The “system” may include one or more of the features of the apparatus that are shown inFIGS. 1-6and/or any other suitable device or approach. The “system” may be provided by an entity. The entity may be an individual, an organization or any other suitable entity.

FIG. 7shows elements of an illustrative hybrid device/process in accordance with the principles of the invention.FIG. 7shows a self-service device702. Self-service device702may be an ATM, a self-service kiosk, a cash recycler or another suitable self-service device (referred to collectively herein as a “self-service device”).

The network accessibility704of device702preferably requires a secure network connection and further requires user authentication. Such network accessibility704may provide a connection to remote central self service device data storage706.

Such accessibility, together with ATM data transmission, may preferably be used to implement embodiments of limited access PIN information.

Limited access PIN information transferred to self-service device706may set forth guidelines for the current transaction. Such guidelines may control the accessibility and release of data from self-service device702. Such unique guidelines and/or instructions may preferably correspond to limited access PIN information706.

FIG. 8shows an illustrative flow diagram of one embodiment of a method implemented on a self-service device according to the invention. Step802shows receiving a swipe of a bank card. Step804shows receiving limited access PIN information. Step806shows authenticating PIN information—i.e., matching PIN information to one of a plurality of limited access PINs stored on the card.

In certain embodiments of the invention, each of the limited access PINs may also include a limited access class identifier. Such an identifier may preferably include information relating to the quantum of limitation on the access of the card and/or parameters of limitation. Such an identifier may include information regarding the level of restriction of funds accessible using such card.

As described above, the limited access PIN may be identified by matching one of a plurality of offset values stored on the card, and then sending the information based on the matched PIN to an electronic communications network (“ECN”).

In these or other methods, a limited access identifier may be transmitted to the appropriate location, whether a self-service device operations module, a main frame, or some other suitable location, via the ECN.

Step808shows transmitting selected PIN information to a self-service device operations module and/or main frame via an ECN (seeFIGS. 5 and 6). As noted herein, the selected PIN information preferably does not include information regarding the actual PIN but rather the limited access characteristics relating to the PIN as well as PIN authorization information. Step810shows, in response to transmission of selected PIN information, receiving limited access self-service device instructions from the self-service device operations module and/or main frame via the ECN.

FIG. 9shows an illustrative flow diagram of another method of implementing a limited access PIN according to the invention. Step902shows receiving a swipe of a bank card.

Step904shows receiving limited access PIN information. Step906shows authenticating the PIN information—i.e., matching PIN information to one of a plurality of algorithms to determine whether the PIN is a limited access PINs. Such a method may be implemented by testing various algorithmic decoding mechanisms. In such an embodiment, the PIN may be associated with a particular limited-access quantum via the identification of the algorithmic decoding mechanism that converted the PIN information to a predetermined PIN offset value.

Once the algorithmic decoding mechanism is obtained, the algorithmic decoding mechanism information, which is referred to as “selected PIN information” in step908, may be transmitted to a self-service device operations module or main frame via an ECN, as shown in step908, in order to identify the limited access characteristics associated with the PIN.

Finally, in response to transmission of algorithmic decoding mechanism information, the self-service device may receive access information from the ECN and/or the main frame, as shown in step908. Preferably, in the scenarios implemented by the invention, PIN information is typically not transmitted outside of the self service device.

One of ordinary skill in the art will appreciate that the elements shown and described herein may be performed in other than the recited order and that one or more elements illustrated may be optional. The methods of the above-referenced embodiments may involve the use of any suitable elements, elements, computer-executable instructions, or computer-readable data structures. In this regard, other embodiments are disclosed herein as well that can be partially or wholly implemented on a computer-readable medium, for example, by storing computer-executable instructions or modules or by utilizing computer-readable data structures.

Thus, a self-service terminal with mechanism(s) for making deposits and for permitting withdrawals as well as methods for operating said terminal in response to receipt of a limited access PIN have been provided. Persons skilled in the art will appreciate that the present invention can be practiced by other than the described embodiments, which are presented for purposes of illustration rather than of limitation. The present invention is limited only by the claims that follow.