# US 10,873,585 B2 · System for detecting unauthorized access via card characteristic verification > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,873,585 B2 - Document ID: US10873585B2 - Status: Granted - Kind: B2 - Application number: 16/105,414 - Filed: 2018-08-20 - Published: 2020-02-20 - Granted: 2020-12-22 - Earliest claimed: 2018-08-20 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Charles Russell Kendall; Heather Roseann Dolan; Therese H. Willis - Web page: https://patentgrep.com/patent/US10873585B2 ## CPC - H04L 63/102: {Entity profiles} - G06Q 20/401: {Transaction verification} - G06Q 20/409: {Device specific authentication in transaction processing} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - G06Q 20/105: {involving programming of a portable memory device, e.g. IC cards, "electronic purses"} - G06Q 20/1085: {involving automatic teller machines [ATMs]} - G06Q 20/4018: {using the card verification value [CVV] associated with the card} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Embodiments of the present invention provide a system for detecting unauthorized access via card characteristic verification. The present invention is configured to identify initiation of a resource distribution event via a resource distribution card at a resource distribution device, identify one or more characteristics of the resource distribution card, determine a first user associated with the resource distribution card based on the one or more characteristics, determine that the resource distribution card of the first user is associated with an issuing entity associated with a resource account of the first user based on the one or more characteristics, and authorize and process the resource distribution event based on determining that the resource distribution card is associated with the issuing entity associated with the resource account associated with the first user. ## Claims ### Claim 1 A system for detecting unauthorized access via card characteristic verification, the system comprising: at least one non-transitory storage device; and at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to: identify initiation of a resource distribution event via a resource distribution card at a resource distribution device; identify one or more characteristics of the resource distribution card; determine a first user associated with the resource distribution card based on the one or more characteristics; determine that the resource distribution card of the first user is not associated with an issuing entity associated with a resource account of the first user based on the one or more characteristics; and transmit control signals to cause the resource distribution device to reprogram the resource distribution card. ### Claim 2 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to identify the one or more characteristics of the resource distribution card by transmitting control signals to the resource distribution device to capture the one or more characteristics via one or more components of the resource distribution device. ### Claim 3 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to determine that the resource distribution card of the first user is associated with the issuing entity associated with the resource account of the first user based on determining that the one or more characteristics of the resource distribution card do not match a system of record. ### Claim 4 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to: in response to determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account, transmit first set of control signals to cause the resource distribution device to capture a first image of the resource distribution card. ### Claim 5 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to: identify that a second user initiated the resource distribution event at the resource distribution device via the resource distribution card of the first user based on determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account; and transmit second set of control signals to the resource distribution device to capture a second image of the second user. ### Claim 6 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to transmit the control signals to cause the resource distribution device to reprogram the resource distribution card by replacing an existing application in a chip of the resource distribution card with a different application. ### Claim 7 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to transmit the control signals to cause the resource distribution device to reprogram the resource distribution card by replacing an existing token in a chip of the resource distribution card with a different token. ### Claim 8 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to: in response to determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account, transmit a notification to at least one other resource distribution devices and at least one entity system, wherein the notification comprises information associated with the resource distribution card used for initiating the resource distribution event. ### Claim 9 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to identify the one or more characteristics of the resource distribution card by determining one or more of a first weight, Card Verification Value (CVV), a three dimensional code, a secure token, information in one or more tracks, front image, and back image of the resource distribution card. ### Claim 10 A computer program product for detecting unauthorized access via card characteristic verification, the computer program product comprising a non-transitory computer-readable storage medium having computer-executable instructions for causing a computer processor to perform the steps of: identifying initiation of a resource distribution event via a resource distribution card at a resource distribution device; identifying one or more characteristics of the resource distribution card; determining a first user associated with the resource distribution card based on the one or more characteristics; determining that the resource distribution card of the first user is not associated with an issuing entity associated with a resource account of the first user based on the one or more characteristics; and transmitting control signals to cause the resource distribution device to reprogram the resource distribution card. ### Claim 11 (depends on 10) The computer program product of claim 10, wherein the computer-executable instructions further cause the computer processor to perform the step of identifying the one or more characteristics of the resource distribution card by transmitting control signals to the resource distribution device to capture the one or more characteristics via one or more components of the resource distribution device. ### Claim 12 (depends on 10) The computer program product of claim 10, wherein the computer-executable instructions further cause the computer processor to perform the step of determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account of the first user based on determining that the one or more characteristics of the resource distribution card do not match a system of record. ### Claim 13 (depends on 10) The computer program product of claim 10, wherein the computer-executable instructions further cause the computer processor to perform the steps of: in response to determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account, transmitting first set of control signals to cause the resource distribution device to capture a first image of the resource distribution card. ### Claim 14 (depends on 10) The computer program product of claim 10, wherein the computer-executable instructions further cause the computer processor to perform the steps of: identifying that a second user initiated the resource distribution event at the resource distribution device via the resource distribution card of the first user based on determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account; and transmitting second set of control signals to the resource distribution device to capture a second image of the second user. ### Claim 15 A computerized method for detecting unauthorized access via card characteristic verification, the method comprising: identifying initiation of a resource distribution event via a resource distribution card at a resource distribution device; identifying one or more characteristics of the resource distribution card; determining a first user associated with the resource distribution card based on the one or more characteristics; determining that the resource distribution card of the first user is not associated with an issuing entity associated with a resource account of the first user based on the one or more characteristics; and transmitting control signals to cause the resource distribution device to reprogram the resource distribution card. ### Claim 16 (depends on 15) The computerized method of claim 15, wherein identifying the one or more characteristics of the resource distribution card comprises transmitting control signals to the resource distribution device to capture the one or more characteristics via one or more components of the resource distribution device. ### Claim 17 (depends on 15) The computerized method of claim 15, wherein the computerized method further comprises: in response to determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account, transmitting first set of control signals to cause the resource distribution device to capture a first image of the resource distribution card. ### Claim 18 (depends on 15) The computerized method of claim 15, wherein the computerized method further comprises: identifying that a second user initiated the resource distribution event at the resource distribution device via the resource distribution card of the first user based on determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account; and transmitting second set of control signals to the resource distribution device to capture a second image of the second user. ### Claim 19 (depends on 15) The computerized method of claim 15, wherein determining that the resource distribution card of the first user is not associated with the issuing entity associated with the resource account of the first user is based on determining that the one or more characteristics of the resource distribution card do not match a system of record.