# US 10,504,118 B2 · Systems and methods to enhance security in transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,504,118 B2
- Document ID: US10504118B2
- Status: Granted
- Kind: B2
- Application number: 15/453,401
- Filed: 2017-03-08
- Published: 2017-06-22
- Granted: 2019-12-10
- Earliest claimed: 2012-08-01
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: Joseph Bjorn Ovick; Mark Carlson; Ryan Hagey; Margaret Reid; Patrick Stan; Patrick Wright; Krishna Prasad Koganti; Glenn Powell
- Web page: https://patentgrep.com/patent/US10504118B2

## CPC

- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/1085: {involving automatic teller machines [ATMs]}
- G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR}
- G06Q 20/29: {characterised by micropayments}
- G06Q 20/387: {Payment using discounts or coupons (relating to marketing G06Q30/02)}
- G06Q 30/0238: at point-of-sale [POS]
- G06V 40/166: {using acquisition arrangements}
- G06V 40/172: {Classification, e.g. identification}
- G07F 19/207: {Surveillance aspects at ATMs}
- G07G 3/003: {Anti-theft control (theft alarms G08B13/00)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- G07G: REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS

## Abstract

A system includes a digital camera coupled with or integrated within a transaction terminal to capture an image during authorization of a transaction initiated at the transaction terminal. The system further includes a portal configured to receive the image and transmit the image to a communication reference associated with the account information of an account in which the transaction is made, based on a security preference associated with the account information. The image may be optionally analyzed to detect fraudulent use of the account.

## Claims

### Claim 1

A transactional terminal, comprising:
an input device;
a digital camera on the transaction terminal;
a communication device coupled in an electronic payment processing network that connects separate computers for payment processing in the electronic payment processing network;
at least one processor coupled to the input device, the digital camera and the communication device; and
a memory storing instructions, which when executed by the at least one processor, cause the transaction terminal to:
receive, using the input device, from an account identification device, account information identifying a payment account associated with an authorized user, the account identification device controlled by a customer;
transmit, using the communication device, into the electronic payment processing network, an authorization request for a transaction of a payment made using the account information;
receive, using the communication device, from the electronic payment processing network, an authorization response for the transaction identified by the authorization request associated with the payment account, wherein the authorization request includes an indication of whether or not to cause the digital camera to capture an image of the customer using the account identification device at the transaction terminal to make the payment during the transaction;
determine, according to the indication provided in the authorization response, whether or not to use the digital camera to capture an image of the customer using the account identification device at the transaction terminal to make the payment during the transaction; and
in response to a determination, at the transaction terminal, that the authorization response requires an image of the customer, execute instructions to cause the digital camera to automatically capture a facial image of the customer using the account identification device to make the payment during the transaction at the transaction terminal;
retrieve a communication reference from the authorization response;
generate a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;
transmit the notification to a user device associated with the authorized user and identified by the communication reference retrieved from the authorization response; and
in response to receiving a communication from the user device, decline the transaction.

### Claim 2 (depends on 1)

The transaction terminal of claim 1, wherein the communication reference is pre-associated with the payment account in the electronic payment processing network.

### Claim 3 (depends on 2)

The transaction terminal of claim 2, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.

### Claim 4 (depends on 3)

The transaction terminal of claim 3, wherein the user device uploads the facial image of the user, received in the notification, to a portal coupled with a data warehouse that stores the facial image of the user with a record of the transaction.

### Claim 5 (depends on 4)

The transaction terminal of claim 4, wherein the record is generated for the transaction by a transaction handler of the electronic payment processing network in providing the authorization response.

### Claim 6 (depends on 5)

The transaction terminal of claim 5, wherein in response to the authorization request, the transaction handler:
retrieves, from the data warehouse coupled with the transaction handler, a security preference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and
generates, in the authorization response, the indication of whether or not to capture an image of the user who is using the account identification device at the transaction terminal to make the payment.

### Claim 7 (depends on 6)

The transaction terminal of claim 6, wherein in response to the authorization request and a determination that the security preference requires an image of the user who is using the account identification device at the transaction terminal to make the payment, the transaction handler:
retrieves, from the data warehouse coupled with the transaction handler, the communication reference that is stored in the data warehouse in association with the payment account identified by the authorization request; and
provides, in the authorization response, the communication reference.

### Claim 8 (depends on 5)

The transaction terminal of claim 5, wherein the separate computers include:
transaction terminals, including the transaction terminal, that in response to receiving account identifiers of payment accounts, generate transactions of payments in the electronic payment processing network;
first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;
second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and
the transaction handler connecting the first computers and the second computers in the electronic payment processing network.

### Claim 9 (depends on 1)

The transaction terminal of claim 1, wherein the instructions are further configured to instruct the at least one processor to present a facial image to a cashier at the transaction terminal.

### Claim 10

A computing apparatus, comprising:
a transaction handler on an electronic payment processing network connecting separate from computers for payment processing in the electronic payment processing network;
a data warehouse storing:
a communication reference in association with account information of a payment account in the electronic payment processing network; and
a security preference in association with the account information of the payment account; and
a portal coupled with the transaction handler and communicating using a communication channel outside the electronic payment processing network;
wherein the transaction handler receives, via the electronic payment processing network from a transaction terminal, an authorization request for a transaction of a payment in the payment account;
wherein in response to the authorization request, the transaction handler:
provides in an authorization response for the transaction, based on the security preference, an indication of whether or not to capture an image of a customer using an account identification device at the transaction terminal to make the payment; and
transmits, via the electronic payment processing network, the authorization response to the transaction terminal; and
wherein, in response to the authorization response, the transaction terminal:
determines, according to the indication provided in the authorization response, whether or not to use a digital camera to capture an image of the customer using the payment account at the transaction terminal to make the payment; and
in response to a determination, at the transaction terminal, that the authorization response requires an image of the customer, executes instructions to cause the digital camera to automatically capture a facial image of the customer using the payment account to make the payment during the transaction at the transaction terminal;
retrieves a communication reference from the authorization response;
generates a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;
transmits the notification to a user device associated with an authorized user and identified by the communication reference retrieved from the authorization response; and
in response to receiving a communication from the user device, decline the transaction.

### Claim 11 (depends on 10)

The computing apparatus of claim 10, wherein the communication reference is pre-associated with the payment account in the electronic payment processing network before the transaction.

### Claim 12 (depends on 11)

The computing apparatus of claim 11, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.

### Claim 13 (depends on 12)

The computing apparatus of claim 12, wherein the user device uploads the facial image of the user received in the notification, to the portal coupled with the data warehouse that stores the facial image of the user with a record of the transaction.

### Claim 14 (depends on 13)

The computing apparatus of claim 13, wherein the record is generated for the transaction by the transaction handler of the electronic payment processing network in providing the authorization response.

### Claim 15 (depends on 14)

The computing apparatus of claim 14, wherein in response to the authorization request, the transaction handler:
retrieves, from the data warehouse coupled with the transaction handler, the security preference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and
generates, in the authorization response, the indication of whether or not to capture an image of the user who is using the payment account at the transaction terminal to make the payment.

### Claim 16 (depends on 15)

The computing apparatus of claim 15, wherein in response to the authorization request and a determination that the security preference requires an image of the user who is using the account identification device at the transaction terminal to make the payment, the transaction handler:
retrieves, from the data warehouse coupled with the transaction handler, the communication reference that is stored in the data warehouse in associating with the payment account identified by the authorization request; and
provides, by the transaction handler, the communication reference in the authorization response to the authorization request.

### Claim 17 (depends on 14)

The computing apparatus of claim 14, wherein the separate computers include:
transaction terminals, including the transaction terminal, that in response to receiving account identifiers of payment accounts, generate transactions of payments in the electronic payment processing network;
first computers controlling the payment accounts from which the payments are made in the electronic payment processing network;
second computers controlling merchant accounts associated with the transaction terminals in which the payments are received via the electronic payment processing network; and
the transaction handler connecting the first computers and the second computers in the electronic payment processing network.

### Claim 18 (depends on 10)

The computing apparatus of claim 10, wherein the transaction terminal further presents the facial image to a cashier at the transaction terminal.

### Claim 19

A method implemented in a transaction terminal, the method comprising:
receiving, using an input device of the transaction terminal from an account identification device, account information identifying a payment account associated with an authorized user, the account identification device controlled by a customer;
transmitting, using a communication device of the transaction terminal, into an electronic payment processing network, an authorization request for a transaction of a payment made using the account information, wherein the electronic payment processing network connects separate computers for payment processing in the electronic payment processing network;
receiving, using the communication device, from the electronic payment processing network, an authorization response for the transaction identified by the authorization request in the payment account, wherein the authorization request has an indication of whether or not to capture an image of customer using the account identification device at the transaction terminal to make the payment;
determining, according to the indication provided in the authorization response, whether or not to use a digital camera on the transaction terminal to capture an image of customer using the account identification device at the transaction terminal to make the payment during the transaction; and
in response to a determination that the authorization response requires an image of the customer, executing instructions to cause the digital camera to capture a facial image of the customer using the account identification device to make the payment during the transaction at the transaction terminal;
retrieving a communication reference from the authorization response;
generating a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;
transmitting the notification to a user device associated with the authorized user and identified by the communication reference retrieved from the authorization response; and
in response to receiving a communication from the user device, decline the transaction.

### Claim 20 (depends on 19)

The method of claim 19, wherein the user device identified by the communication reference is a mobile phone of an account holder of the payment account.