Early Warning Services, LLC

Aaron Bartrim

Eric Woodward

Lou Anne Alexander

Paul Finch

Betty Chan-Bauza

Rodger R Desai

Mark A Pender

James R Mortensen

Hal Granoff

Ryan Riveland

Matt Brown

Chris Cunningham

A method being implemented via execution of computing instructions configured to run at one or more processors and stored at one or more non-transitory computer-readable media. The method can include receiving, at a transaction system being situated along a proxy communication channel extending from a point-of-sale terminal of a first entity to a mobile wallet provider, an encrypted transaction code. The encrypted transaction code can be generated and sent to the point-of-sale terminal by a mobile device that runs a mobile application associated with the mobile wallet provider. The mobile device receives from a point-of-sale terminal an identifier of the first entity, a transaction amount of a transaction, and a transaction identifier for the transaction, receives an authorization from a user of the mobile device for the transaction while the user is at the point-of-sale terminal, and determines that the mobile device is unable to communicate with the mobile wallet provider. The encrypted transaction code includes a preauthorization from the user to pay the first entity for the transaction amount from a first account of the user maintained by a first financial institution. The method also can include sending the encrypted transaction code through the proxy communication channel to the mobile wallet provider, to cause the mobile wallet provider to decrypt the encrypted transaction code and verify the preauthorization from the user. The method additionally can include receiving, from the first financial institution, a request comprising the identifier of the first entity. The method further can include determining an account identifier of a second account of the first entity maintained by a second financial institution based on the identifier of the first entity. The method additionally can include sending the account identifier of the second account to the first financial institution. The method further can include receiving, from the first financial institution, payment information regarding a payment to be made to the second account from the first account for the transaction. The method additionally can include sending the payment information to the second financial institution, to cause the point-of-sale terminal to receive a notification in real-time while the user remains at the point-of-sale terminal. Other embodiments are described.

Secure transactions with offline device

A method being implemented via execution of computing instructions configured to run at one or more processors and stored at one or more non-transitory computer-readable media. The method can include receiving a preauthorization code at a mobile device while the mobile device is in data communication with a mobile wallet provider. The preauthorization code can include a preauthorization amount, an expiration time, and a digital signature. The method also can include storing the preauthorization code in the mobile device. The method additionally can include receiving, at the mobile device, an authorization from a user of the mobile device for a transaction having a transaction amount while the user is at a point-of-sale terminal of a first entity. The method further can include determining that the mobile device is unable to communicate with the mobile wallet provider. The method additionally can include verifying that the transaction amount is less than or equal to the preauthorization amount. The method further can include, while the mobile device is unable to communicate with the mobile wallet provider, providing a transaction code from the mobile device to the point-of-sale terminal to cause the first entity to send the transaction amount and the preauthorization code to a transaction system, and to cause the transaction system to send an approval for the transaction in real-time while the user remains at the point-of-sale terminal of the first entity. The transaction code can include the preauthorization code, a transaction identifier, and the transaction amount. Other embodiments are described.

A method including receiving an inquiry from a provider to authenticate a provisioning of an account to a mobile wallet. The method also can include determining device ownership information for a mobile device that operates the mobile wallet, account ownership information for the account, device risk information associated with the mobile device, and account risk information associated with the account. The method additionally can include determining an ownership correlation between the device ownership information and the account ownership information. The method further can include generating a fraud risk level by applying business rules and one or more statistical modeling techniques. The method additionally can include providing a response to the provider based on the fraud risk level. Other embodiments are provided.

Authentication and fraud prevention in provisioning a mobile wallet

A method including receiving a request from a provider to perform a provisioning of an account to a mobile wallet operating on a mobile device. The method also can include sending an inquiry to a risk determination system to authenticate the provisioning of the account to the mobile wallet. The risk determination system can generate a fraud risk level by applying business rules and one or more statistical modeling techniques. The method additionally can include receiving from the risk determination system a response based on the fraud risk level. The method further can include determining whether to proceed with the provisioning of the account to the mobile wallet based at least in part on the response received from the risk determination system. The method additionally can include providing a token to the provider in response to the request to perform the provisioning of the account to the mobile wallet when the fraud risk level is below a predetermined threshold. Other embodiments are provided.

A method being implemented via execution of computing instructions configured to run at one or more processors and stored at one or more non-transitory computer-readable media. The method can include receiving a transaction amount and a preauthorization code from a first entity. The preauthorization code can include a preauthorization amount, an expiration time, and a digital signature. The transaction amount is for a transaction authorized by a user of a mobile device at a point-of-sale terminal of the first entity. The transaction amount is less than or equal to the preauthorization amount. The mobile device received the preauthorization code and stored the preauthorization code in the mobile device while the mobile device was in data communication with a mobile wallet provider. The mobile device provided a transaction code to the point-of-sale terminal while the mobile device was unable to communicate with the mobile wallet provider. The transaction code includes the preauthorization code, a transaction identifier for the transaction, and the transaction amount. The method also can include verifying the preauthorization code using the digital signature of the preauthorization code. The method additionally can include sending an approval for the transaction to the first entity in real-time while the user remains at the point-of-sale terminal of the first entity. Other embodiments are described.

A method being implemented via execution of computing instructions configured to run at one or more processors and stored at one or more non-transitory computer-readable media. The method can include receiving, at a mobile device from a point-of-sale terminal of a first entity, an identifier of the first entity, a transaction amount for a transaction, and a transaction identifier for the transaction. The method also can include receiving an authorization from a user of the mobile device for the transaction while the user is at the point-of-sale terminal, the mobile device running a mobile application that is associated with a mobile wallet provider. The method additionally can include determining that the mobile device is unable to communicate with the mobile wallet provider. The method further can include generating an encrypted transaction code. The encrypted transaction code can include a preauthorization from the user to pay the first entity for the transaction amount from a first account of the user maintained by a first financial institution. The method additionally can include sending the encrypted transaction code from the mobile device to the point-of-sale terminal to cause the encrypted transaction code to be sent through a proxy communication channel extending from the point-of-sale terminal, through a transaction system, to the mobile wallet provider, to cause the mobile wallet provider to decrypt the encrypted transaction code and verify the preauthorization from the user, to cause the first financial institution to retrieve from the transaction system an account identifier of a second account of the first entity maintained by a second financial institution based on the identifier of the first entity and send to the transaction system payment information regarding a payment to be made to the second account from the first account for the transaction, to cause the payment information to be routed through the transaction system to the second financial institution, and to cause the point-of-sale terminal to receive a notification of the payment for the transaction in real-time while the user remains at the point-of-sale terminal. Other embodiments are described.

A method including receiving a request from a mobile wallet operating on a mobile device to perform a provisioning of an account to the mobile wallet. The method also can include generating account information about the account. The method additionally can include generating device information about the mobile device. The method further can include sending an inquiry to a risk determination system to authenticate the provisioning of the account to the mobile wallet. The risk determination system can generate a fraud risk level by applying business rules and one or more statistical modeling techniques. The method additionally can include receiving from the risk determination system a first response based on the fraud risk level. The method further can include determining whether to proceed with the provisioning of the account to the mobile wallet or to perform an additional verification based at least in part on the first response received from the risk determination system. The method additionally can include sending a second response to the mobile wallet in response to the request to perform the provisioning of the account to the mobile wallet. Other embodiments are provided.

A method including receiving, at a mobile device being used by a consumer, a transaction code from a point-of-sale terminal at a store of a merchant. The transaction code can include a merchant public identifier being associated with the merchant, a payment amount for one or more items to be purchased from the merchant by the consumer in a transaction, a transaction identifier for the transaction, and a digital signature. The method also can include verifying the digital signature for the transaction code. The method additionally can include sending, from the mobile device, a request to pay the merchant for the payment amount from a first account of the consumer maintained by a first financial institution, such that the first financial institution, upon receiving the request to pay, retrieves from a transaction system an account identifier of a second account of the merchant maintained by a second financial institution based on the merchant public identifier, such that the first financial institution sends to the transaction system payment information regarding a payment to be made to the second account from the first account, such that the payment information is routed through the transaction system to the second financial institution, and such that the point-of-sale terminal receives a notification of payment for the transaction in real-time while the consumer remains at the store of the merchant. The transaction system can be maintained by an entity that is different from the merchant, the first financial institution, and the second financial institution. The payment information can include the transaction identifier, the account identifier of the second account, and the payment amount. Other embodiments are provided.

Secure real-time transactions

A method including receiving, at a transaction system from a first entity, a request including a merchant public identifier associated with a merchant. The transaction system can be in data communication with a first financial institution that maintains a first account of a consumer and a second financial institution that maintains a second account of the merchant. The transaction system can be maintained by an entity that is different from the merchant, the first financial institution, and the second financial institution. The consumer can use a mobile device at a store of the merchant to pay for one or more items in a transaction. The mobile device can receive a transaction code from a point-of-sale terminal at the store. The transaction code can include a transaction identifier, a payment amount for the transaction, the merchant public identifier, and a digital signature. The transaction code can be verified by the mobile device using the digital signature of the transaction code. The method also can include determining, at the transaction system, an account identifier of the second account based on the merchant public identifier using a merchant account database. The method additionally can include sending the account identifier to the first financial institution. The method further can include receiving, at the transaction system from the first financial institution, payment information regarding a payment to be made to the second account from the first account. The method additionally can include sending, from the transaction system to the second financial institution, the payment information, such that the point-of-sale terminal receives a notification of payment for the transaction in real-time while the consumer remains at the store of the merchant. The payment information can include the account identifier of the second account, the payment amount, and the transaction identifier. Other embodiments are provided.

A method including determining, at a point-of-sale terminal at a store of a merchant, a payment amount for one or more items to be purchased from the merchant by a consumer in a transaction. The method also can include generating a transaction code including a merchant public identifier, the payment amount, a transaction identifier for the transaction, and a digital signature. The method additionally can include providing the transaction code to a mobile device being used by the consumer, such that the mobile device verifies the digital signature and sends a request to pay the merchant for the payment amount from a first account of the consumer maintained by a first financial institution, such that the first financial institution, upon receiving the request to pay, retrieves from a transaction system an account identifier of a second account of the merchant maintained by a second financial institution based on the merchant public identifier, and such that the first financial institution sends to the transaction system payment information regarding a payment to be made to the second account from the first account. The transaction system can be maintained by an entity that is different from the merchant, the first financial institution, and the second financial institution. The payment information can be routed through the transaction system to the second financial institution. The payment information can include the transaction identifier, the account identifier of the second account, and the payment amount. The method further can include receiving, at the point-of-sale terminal, a notification of payment for the transaction in real-time while the consumer remains at the store of the merchant. Other embodiments are provided.

The security of a transaction conducted at a mobile device, using a one-time password to authenticate the mobile device user, is enhanced by requiring that the mobile device also be authenticated by providing a valid mobile device ID. A security server that provides the one-time password to the mobile device also provides a hyperlink that, when selected, causes a mobile device ID, such as an IMSI, to be retrieved from a SIM in the mobile device The retrieved mobile device ID is then sent to the security server. A database associated with the security server stores valid mobile device IDs, and compares the retrieved mobile device ID from the mobile device to the valid mobile device ID for that mobile device stored in the database. In alternative embodiments, the mobile device is authenticated without the use of a one-time password. In some cases the mobile device ID may be a phone number returned in an HTTP message header from the mobile device, and it is compared to a mobile device ID maintained by a bank or other entity managing the transaction.

System and method for authentication of a mobile device

A mobile phone number that is been provided by a customer during enrollment is verified for use. SS7 protocol data associated with the mobile phone number is collected and evaluated, and if the condition of the subscriber account associated with the phone number has changed or is inconsistent with the circumstances surrounding the enrollment of the phone number, the phone number is designated as one that is not to be called.

System and method for mobile number verification

A mobile phone number that is been provided by a customer during enrollment is verified for use. SS7 protocol data associated with the mobile phone number is collected and evaluated, and if the condition of the subscriber account associated with phone number has changed or is inconsistent with the circumstances surrounding the enrollment of the phone number, the phone number is designated as one that is not to be called.

Growing community of inventors

Scottsdale, AZ, United States of America

Aaron Bartrim