Money transfer fraud prevention methods and systems

Embodiments of the invention provide a fraud deterrent for retail money transfer or stored value product. In some embodiments, a two dimensional grid of number, letters, characters, and/or symbols can be provided retail packaging or cards that can be used as a second authentication factor in order to redeem funds. In some embodiments, methods and/or systems are also provided that associate control numbers with the grid, create the grid, provide the grid on packaging, and/or use the grid to authenticate a customer.

BACKGROUND

Using a money-transfer system, money can be transferred between two people in two different locations. A money transfer company can have a number of agents that establish a site for money to be sent or received. These agents can be hired by third parties and may not be trained or supervised by the money transfer company. Some of these agents may seek to defraud the money transfer company or its customers. And these agents may also be easy targets for fraudsters.

BRIEF SUMMARY

Embodiments of the invention provide a fraud deterrent for retail money transfers or stored value products. In some embodiments, a two dimensional grid of numbers, letters, characters, and/or symbols can be provided on retail packaging or cards that can be used as an authentication factor (often a secondary factor) in order to redeem funds. In some embodiments, methods and/or systems are also provided that associate control numbers with the grid, create the grid, provide the grid on packaging, and/or use the grid to authenticate a customer. Various other embodiments of the invention are disclosed.

Embodiments of the invention also include a financial product package that includes a financial product, packaging material coupled with the financial product, a control number printed on the financial product package, and an authentication grid printed on the financial product package. The authentication grid can include a plurality of symbols identifiable by row and column identifiers. In some embodiments, the authentication grid can be associated with the control number. In some embodiments, the control number can be secured or hidden.

In some embodiments, the financial product can be a stored value card, a prepaid credit card, a debit card, a money card, a money transfer card, etc. In some embodiments, the financial product is a plastic card. In some embodiments, the control number can be a money transfer control number (MTCN), an account number, a card number, a transfer code. etc.

In some embodiments, the plurality of symbols in the authentication grid are generated from the control number using a cryptographic function, and/or can include characters, symbols, and numbers. In some embodiments, the control number is printed on the packaging material or the financial product. In some embodiments, the authentication grid can be printed on the packaging material or the financial product.

A method is also disclosed that includes receiving a control number; generating a hash value from the control number using a cryptographic function; generating an authentication grid using characters from the hash value; and printing the authentication grid and/or the control number on a financial product package that comprises either or both a financial product and packaging material. In some embodiments, the authentication grid can be a plurality of the characters identifiable by row and column identifiers. In some embodiments, the hash value can be a string of characters.

In some embodiments, the method can also include mapping the characters from the hash value to unique symbols; and generating an authentication grid using the unique symbols mapped from the hash value, wherein the authentication grid includes a plurality of the unique symbols identifiable by row and column identifiers. In some embodiments, the control number can be received from a financial organization through a computer network and/or the control number is received from a computer module or algorithm.

Another method is also disclosed that includes receiving a control number from a consumer; producing a representation of an authentication grid using the control number; identifying a specific row identifier and a specific column identifier; sending to the consumer a request to provide the symbol associated with the specific row identifier and the specific column identifier; receiving a response from the consumer that includes a response symbol; comparing the response symbol with the symbol in the authentication grid associated with the specific row identifier and the specific column identifier; and in the event the response symbol and the symbol in the authentication grid associated with the specific row identifier and the specific column identifier match, authenticate the consumer. In some embodiments, the authentication grid can include a plurality of symbols identifiable by row and column identifiers.

In some embodiments, producing the representation of the authentication grid using the control number can include generating a hash value that includes a string of characters from the control number using a cryptographic function, and generating an authentication grid using the individual characters from the hash value, where the authentication grid includes a plurality of individual characters from the string identifiable by row and column identifiers.

In some embodiments, the control number can be received through a web server and the request to provide the symbol associated with the specific row identifier and the specific column identifier can be sent through the web server. In other embodiments, the control number can be received through an agent computer system and the request to provide the symbol associated with the specific row identifier and the specific column identifier is sent to the agent computer system.

DETAILED DESCRIPTION

Embodiments of the invention provide an authentication grid that can be used to authenticate a consumer. In some embodiments, the authentication grid can be printed on a financial product and/or on the packaging of a financial product. In some embodiments, the authentication grid can be created using a hash value of a cryptographic function of a control number associated with the financial product. That is, the control number, for example, can be used as input to the cryptographic function. In some embodiments the authentication grid can be used to authenticate or validate that a consumer is in possession of either the financial product and/or the packaging from the financial product.

As used herein, the term “financial product” is a physical item that can be purchased by a consumer and used as legal tender. A financial product, for example, can be a stored value card, a prepaid credit card, a money transfer, a money card, a money transfer card (e.g., goCASH), etc.

As used herein, the term “control number” is an identifier that that associates a financial product at a financial institution with a funds. A control number, for example, can include a money transfer control number (MTCN), an account number, a card number, a transfer code, etc.

FIG. 1is a block diagram of system100that can be used to provide an authentication grid according to some embodiments of the invention. System100includes computer system115that is coupled with financial organization computer system110, manufacturing system105, control number database120, and/or customer interface system. Computer system115can provide operational control or coordination amongst the various components. The various blocks shown inFIG. 1that make up system100can be coupled directly to one another as shown in the figure and/or communicatively coupled through a network (e.g., the Internet). In some embodiments all systems and/or devices shown inFIG. 1can be coupled together through network and can communicate with one another.

Manufacturing system105can include a device(s) that manufactures and/or packages a financial product. Manufacturing system105can include a printer that can print packaging graphics include an authentication grid on the packaging of financial products or on the financial product.

Financial organization computer system110can be a computer system associated with any financial institution such as, for example, a bank, a credit union, a money transfer organization, a credit card company, stored value card provider, a retail store, an online store, etc. The financial organization computer system110can provide control numbers provided by the financial organization that are associated with the financial product manufacture or packaged by the manufacturing system.

Control number database120is coupled with computer system115and is used to store control numbers, hashes, hash functions, authentication grids, etc. Any type of computer storage device can be used such as, for example, a server, hard drive, cloud drive, etc.

Consumer interface system125can be coupled with computer system115. The interface can be used to authenticate consumers. Consumer interface system125can act as an intermediary between the consumer and computer system115. Consumer interface system125can include web server130, agent system135, and/or call center system140. Web server130can include a web server(s). Agent system135can include a computer system accessible by an agent of the financial organization. And call center system140can include a computer system accessible by a call center agent.

Computer system115can coordinate the manufacture and/or packaging of a financial product as described below in more detail. This can include, for example, receiving control numbers from financial organization computer system110. Computer system115can create an authentication grid for each control number received from financial organization computer system110. Computer system115can send the control numbers and/or the authentication grids to manufacturing system105so that the control numbers and the authentication grids can be included with the financial product (e.g., as part of the packaging). Computer system115can store the control number, a hash of the control number, a hash key, and/or the authentication grid within control number database120. Computer system115can also coordinate the authentication of a consumer through consumer interface system125. In some embodiments, only the control number is stored in control number database. In other embodiments, the control number is only stored at the financial organization.

Each block in system100can include one or more of the computer systems show inFIG. 9. Moreover system100can be used to implement all or portions of the methods shown inFIGS. 3, 4, 6, and 7. Moreover, blocks can be omitted and/or combined. And additional blocks and/or systems can be added.

FIG. 2shows authentication grid200that is an example of a gird can be used to provide authentication according to some embodiments of the invention. Authentication grid200includes eight rows and eight columns of characters. Each column includes a header row (top row) identifying the column by letter A-H. And each row includes a header column (leftmost column) identifying each row by number 1-8. The 64 characters used to populate authentication grid200can be created applying a 64 bit cryptographic hash function (e.g., SHA-2) to a control number. The authentication grid can be printed on a financial product or the packaging of the financial product. To authenticate a consumer, the consumer can be asked to provide one or more characters from within the authentication grid. For example, the consumer interface system can ask the consumer to identifying a character associated with a row (1-8) and a column (A-H). A correct response(s) shows that the consumer is in possession of the financial product and/or packaging, and provides an increased level of fraud protection.

FIG. 3is a flowchart of method300for creating an authentication grid according to some embodiments of the invention. Method300begins at block305. At block310one or more control numbers are received. These control numbers can be received, for example, at computer system115from financial organization computer system110. In some embodiments, computer system115can create the control numbers. For example, an algorithm, module, routine, method, and/or process can be executed by computer system115in conjunction with method300to produce the control numbers.

At block315a hash can be generated from each control number. For example, the control number can be used as the input for a cryptographic function that outputs a hash value that is a fixed size character string. Any type of cryptographic function can be used; for example, the secure hash algorithm (SHA-0, SHA-1, SHA-2, SHA-3). Various other algorithms are known in the cryptography fields that can also be used without limitation.

At block320an authentication grid can be created (e.g., authentication grid200) using the hash value. In some embodiments, the cryptographic function used in block315can be chosen to produce a hash value with the correct number of characters to populate the entire authentication grid. In other embodiments, the hash value can be repeated throughout the grid if the character string has fewer characters than grid locations or concatenated if the hash value is too long. Regardless, an authentication grid is created from the hash of the control number. Authentication grid200, for example, can be created using the SHA-2 cryptographic function that returns 64 characters.

As shown in grid500inFIG. 5each grid element is numbered in order from left to right and top to bottom. Character string505can be generated, for example, as a hash value using a cryptographic function. Each character from character string505can then be systematically placed in order within grid500to produce authentication grid510. That is, the first character of character string505can be placed in grid element1shown in grid500, the second character of character string505can be placed in grid element2shown in grid500, the third character of character string505can be placed in grid element3shown in grid500, and so on to produce authentication grid510.

Returning toFIG. 3, at block325the authentication grid can be printed on the financial product or on the package of the financial product with or without the control number. Method300can then end at block330.

The blocks shown in method300can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.

FIG. 4is a flowchart of method400for using an authentication grid according to some embodiments of the invention. Method400starts at block405. At block410a control number can be received from a consumer. For example, the control number can be received from a consumer through consumer interface system125. The control number, for example, can be requested for authentication for a money transfer or other financial transaction. The control number, for example, can be requested and/or received through a web interface using web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface.

At block415the control number can be used to create a hash value using the same cryptographic function (and/or including the same keys) as were used to create the authentication grid. This can be done with computer system115using, for example, the cryptographic function and/or keys stored in control number database120. At block420the hash can be used to recreate the authentication grid.

Using the authentication grid, the consumer can be asked to provide a character associated with a specific location on the grid at block425. Using authentication grid200as an example, the consumer can be asked to provide the character found in grid location F6. That is, the character at the intersection of column F and row 6. In this example, the character is “x”. The consumer can be asked to provide this character by referencing the grid location, for example, through a web page hosted by web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface. Various other notations specifying grid locations can be used.

Ideally, the consumer is in possession of the authentication grid printed on the packaging or financial product and can provide the correct response. In the example mentioned above, the consumer can look up the printed character in column F and row 6 of printed authentication grid200, which should be the letter “x”. At block430a response from the consumer can be received by the system. At block435, the received response can be compared with the number in the grid. Thus, in the current example using authentication grid200, if the consumer responds with the character “x” method400proceeds to block440, if anything else is returned then method400proceeds to block445.

In some embodiments, blocks425,430, and435can be repeated any number of times with different grid locations being provided to the consumer to provide further authentication assurance.

In some embodiments, the authentication grid may not be completely recreated in block420. Instead, for example, the hash value along with knowledge of the authentication grid layout can be used to query the consumer. For example, at block425of method400, a random column and row can be requested. The character number in the hash string can be identified based on the size of the grid. For example, grid500shows the character number within a string for each grid location. The consumer's response can be compared with the character from the hash string without creating a grid. As shown in grid500, grid location F4 corresponds to the 30thcharacter in the hash string. And as shown by character string505inFIG. 5, which, in this example, is a hash value, the 30thcharacter is the letter “a”, which is the letter shown at grid location F4 in authentication grid510.

Method400can end at block450. The blocks shown in method400can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.

FIG. 6is a flowchart of method600for creating an authentication grid according to some embodiments of the invention. Method600begins at block605. At block610one or more control numbers are received. These control numbers can be received, for example, at computer system115from financial organization computer system110. At block615an authentication grid can be created with randomly created characters populating each grid location. At block620the authentication grid can be printed on the financial product or on the package of the financial product with or without the control number. At block625the authentication grid can be saved in conjunction with the control number; for example, in control number database120. Alternatively, a string of characters corresponding to the characters populating the authentication grid can be saved in conjunction with the control number. Method600can then end at block630.

The blocks shown in method600can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.

FIG. 7is a flowchart of method700for using an authentication grid according to some embodiments of the invention. Method700starts at block705. At block710a control number can be received from a consumer. For example, the control number can be received from a consumer through consumer interface system125. The control number, for example, can be requested for authentication for a money transfer or other financial transaction. The control number, for example, can be requested and/or received through a web interface using web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface.

At block720the control number can be used to retrieve the authentication grid associated with the control number. In some embodiments, an actual authentication grid may not be retrieved. Instead, a string of characters can be retrieved that map to the elements in the authentication grid. This can be done, for example, with computer system115retrieving the authentication grid (or string of characters or other data) from control number database120.

Using the authentication grid, the consumer can be asked to provide a character associated with a specific location on the grid at block725. Using authentication grid200as an example, the consumer can be asked to provide the character found in grid location F6. That is, the character at the intersection of column F and row 6. In this example, the character is “x”. The consumer can be asked to provide this character, for example, through a web page hosted by web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface.

Ideally, the consumer is in possession of the authentication grid printed on the packaging or financial product and can provide the correct response. In the example mentioned above, the consumer can look up the printed character in column F and row 6 of printed authentication grid200, which should be the letter “x”. At block730a response from the consumer can be received by the system. At block735, the received response can be compared with the number in the grid. Thus, in the current example using authentication grid200, if the consumer responds with the character “x” method700proceeds to block740, if anything else is returned then method700proceeds to block745. Method700can end at block750.

In some embodiments, blocks725,730, and735can be repeated any number of times with different grid locations being provided to the consumer to provide further authentication assurance.

In some embodiments, the authentication grid may not be completely recreated in block720. Instead, for example, a string of characters along with knowledge of the authentication grid layout can be used to query the consumer. At block725of method700, a random column and row can be requested. The character number in the character string associated with the control number can be identified based on the size of the grid. For example, grid500shows the character number within a string for each grid location. The consumer's response can be compared with the character from the string without creating a grid. Assuming now that character string505inFIG. 5is a string of randomly generated characters, grid location F4 corresponds to the 30thcharacter in the hash value. And as shown in character string505ofFIG. 5, the 30thcharacter is the letter “a”, which is the letter shown at grid location F4 in authentication grid510.

The blocks shown in method700can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.

FIG. 8shows examples of authentication grids that can be used to provide authentication according to some embodiments of the invention. Authentication grid800uses symbols, instead of characters, within the grid location. As shown, various types of symbols are used including triangles, smiley faces, stars, telephones, mailboxes, hands, hearts, etc. can be used without limitation. These symbols may be easier to communicate with an agent during authentication than number or letters, especially between individuals with different language backgrounds. The column and row headers, in this example, can still be numbers, while the grid locations are filled with symbols.

Authentication grid800can be created, for example, from random characters produced using a random number generator or from a hash value produced using a cryptographic function as described above. The individual characters returned from either generator or function can be mapped to a symbol using a symbol-to-character coder.

Authentication grid805is an example of an authentication grid that uses symbols for the row and column headers and characters within the grid locations. And authentication810is an example of an authentication grid that uses symbols for the column and row headers as well as within the grid locations.

Authentication grids can include any dimension and/or size. For instance the grid can have any number of rows and/or columns without limitation.

Computer system900, shown inFIG. 9, includes hardware elements that may be electrically coupled via a bus990. The hardware elements may include one or more central processing units910, one or more input devices920(e.g., a mouse, a keyboard, etc.), and one or more output devices930(e.g., a display device, a printer, etc.). Computer system900may also include one or more storage device940. For example, storage device(s)940may be disk drives, optical storage devices, solid-state storage device such as a random access memory (“RAM”) and/or a read-only memory (“ROM”), which can be programmable, flash-updateable and/or the like.

Computer system900may additionally include a computer-readable storage media reader950, a communications system960(e.g., a modem, a network card (wireless or wired), an infra-red communication device, Bluetooth™ device, cellular communication device, etc.), and working memory980, which may include RAM and ROM devices as described above. In some embodiments, computer system900may also include a processing acceleration unit970, which can include a digital signal processor, a special-purpose processor and/or the like.

Computer-readable storage media reader950can further be connected to a computer-readable storage medium, together (and, optionally, in combination with storage device(s)940) comprehensively representing remote, local, fixed, and/or removable storage devices plus storage media for temporarily and/or more permanently containing computer-readable information. Communications system960may permit data to be exchanged with a network, system, computer and/or other component described above.

Computer system900may also comprise software elements, shown as being currently located within a working memory980, including an operating system984and/or other code988. It should be appreciated that alternate embodiments of computer system900may have numerous variations from that described above. For example, customized hardware might also be used and/or particular elements might be implemented in hardware, software (including portable software, such as applets), or both. Furthermore, connection to other computing devices such as network input/output and data acquisition devices may also occur.

Software of computer system900may include code988for implementing any or all of the function of the various elements of the architecture as described herein. For example, software, stored on and/or executed by a system such as computer system900, can provide the functions of the stored value provider subsystem, user subsystem, bill payment subsystem, gateway subsystem, and/or other components of the invention such as those discussed above. Methods implementable by software on some of these components have been discussed above in more detail.

FIG. 10is a flowchart of method1000for creating an authentication grid according to some embodiments of the invention. Method1000begins at block1005. At block1010one or more control numbers are received. These control numbers can be received, for example, at computer system115from financial organization computer system110. At block1015a randomly generated string of characters can be created. At block1020, a grid can be created from the string of characters with one or more characters populating each grid location. At block1025the authentication grid can be printed on the financial product or on the package of the financial product with or without the control number. At block1030the authentication grid and/or the string of characters can be saved in conjunction with the control number; for example, in control number database120. Method1000can then end at block1030.

The blocks shown in method1000can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.

FIG. 11is a flowchart of method100for using an authentication grid according to some embodiments of the invention. Method100starts at block1105. At block1110a control number can be received from a consumer. For example, the control number can be received from a consumer through consumer interface system125. The control number, for example, can be requested for authentication for a money transfer or other financial transaction. The control number, for example, can be requested and/or received through a web interface using web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface.

At block1120the control number can be used to retrieve a string of characters grid associated with the control number. The string of characters can map to the elements in the authentication grid. This can be done, for example, with computer system115retrieving the string of characters from control number database120.

Using the string of characters, the consumer can be asked to provide a character associated with a specific location on the grid at block1125. Using authentication grid200as an example, the consumer can be asked to provide the character found in grid location F6. That is, the character at the intersection of column F and row 6. In this example, the character is “x”. Grid500can be used, for example, to map character numbers to the authentication grid and vice versa. Various other techniques can be used. The consumer can be asked to provide this character, for example, through a web page hosted by web server130, an agent using agent system135, a call center agent using call center system140, or another consumer interface.

Ideally, the consumer is in possession of the authentication grid printed on the packaging or financial product and can provide the correct response. In the example mentioned above, the consumer can look up the printed character in column F and row 6 of printed authentication grid200, which should be the letter “x”. At block1130a response from the consumer can be received by the system. At block1135, the received response can be compared with the number in the grid. Thus, in the current example using authentication grid200, if the consumer responds with the character “x” method1100proceeds to block1140, if anything else is returned then method1100proceeds to block1145. Method1100can end at block1150.

In some embodiments, at block1125of method1100, a random column and row can be requested. The character number in the character string associated with the control number can be identified based on the size of the grid. For example, grid500shows the character number within a string for each grid location. The consumer's response can be compared with the character from the string without creating a grid. Assuming now that character string505inFIG. 5is a string of randomly generated characters, grid location F4 corresponds to the 30thcharacter in the hash value. And as shown in character string505ofFIG. 5, the 30thcharacter is the letter “a”, which is the letter shown at grid location F4 in authentication grid510.

In some embodiments, blocks1125,1130, and1135can be repeated any number of times with different grid locations being provided to the consumer to provide further authentication assurance.

The blocks shown in method1100can be rearranged, blocks can be added, and/or blocks can be deleted without limitation.