# US 11,113,679 B2 · Method and system for cardless use of an automated teller machine (ATM)

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,113,679 B2
- Document ID: US11113679B2
- Status: Granted
- Kind: B2
- Application number: 16/584,165
- Filed: 2019-09-26
- Published: 2020-01-16
- Granted: 2021-09-07
- Earliest claimed: 2015-10-29
- Assignees: Mastercard International Incorporated
- Applicants: Mastercard International Incorporated
- Inventors: Adarsh Recriwal; Amit Gupta; Dhruv Akhauri
- Web page: https://patentgrep.com/patent/US11113679B2

## CPC

- G06Q 20/1085: {involving automatic teller machines [ATMs]}
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/40145: {Biometric identity checks}
- G07F 19/20: {Automatic teller machines [ATMs]}
- H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A computer-implemented method for cardless use of an automated teller machine (ATM) is provided. The method includes receiving as an input, a user-identified ATM that the user wishes to use. The method also includes generating and transmitting a one-time password (OTP) for the user to enter at the identified ATM. The method further includes receiving and verifying the OTP entered into the ATM, and on successful verification, authorizing access to services available through the ATM, without use of a card.

## Claims

### Claim 1

A computer-implemented method for cardless use of an automated teller machine (ATM) by a user, the method implemented using a computer system comprising a server, the server including at least one processor in communication with a database, the database storing a user profile of the user and stored ATM information, the stored ATM information identifying a plurality of ATMs, the method comprising:
receiving, by the server from a user device of the user, a request to log on to a computer application, the request including at least one security feature submitted by the user;
granting, by the server, access by the user device to the computer application in response to verifying that the submitted at least one security feature matches at least one profile security feature stored in the user profile;
receiving, by the server, ATM information submitted by the user device via the computer application, the ATM information identifying a candidate ATM, wherein the candidate ATM is not associated in the database with the user profile;
identifying, by the server, the candidate ATM by comparing the submitted ATM information to the stored ATM information;
receiving, by the server from the user device of the user, a control element indicating a request for a cardless service type of a plurality of cardless service types to be accessed at the candidate ATM;
determining, by the server, that the user is authorized to access the cardless service type of the plurality of cardless service types at the candidate ATM based on the control element;
generating and transmitting, by the server to the user device, a first onetime password (OTP) for the user to enter at the candidate ATM in response to determining that the user is authorized to access the cardless service type of the plurality of cardless service types at the candidate ATM;
receiving, by the server, a second OTP entered into the candidate ATM;
verifying, by the server, that the first OTP matches the second OTP; and
in response to the verification, authorizing, by the server, access by the user to at least one service associated with the cardless service type of the plurality of cardless service types available through the candidate ATM, without use of a card.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the at least one security feature includes at least one of a password, a PIN, or a biometric.

### Claim 3 (depends on 1)

The method according to claim 1, wherein the ATM information includes at least one of geolocation information of a user device associated with the user, an ATM ID code, a building name, a street name, a post code, a barcode, or a QR code.

### Claim 4 (depends on 1)

The method according to claim 1, wherein verifying that the first OTP entered into the candidate ATM matches the second OTP further comprises comparing the first OTP to the second OTP within the database.

### Claim 5 (depends on 1)

The method according to claim 1, further comprising:
determining, by the server, that the user is authorized to access the at least one service available through the candidate ATM, without use of a card; and
instructing, by the server, the candidate ATM to provide access to the user to the at least one service.

### Claim 6 (depends on 1)

The method according to claim 1, further comprising:
receiving, by the server from the user device via the computer application, a request to access at least another cardless service type of the plurality of cardless service types available through the candidate ATM;
determining, by the server, that the user is not authorized to access the at least another cardless service type of the plurality of cardless service types without use of a card; and
instructing the candidate ATM, by the server, to refuse access to the user to the at least another cardless service type of the plurality of service types.

### Claim 7

A computer system for cardless use of an automated teller machine (ATM) by a user, the computer system comprising a server, the server including at least one processor in communication with a database, the database storing a user profile of the user and stored ATM information, the stored ATM information identifying a plurality of ATMs, the computer system configured to:
receive, from a user device of the user, a request to log on to a computer application, the request including at least one security feature submitted by the user;
grant access by the user device to the computer application in response to verifying that the submitted at least one security feature matches at least one profile security feature stored in the user profile;
receive ATM information submitted by the user device via the computer application, the ATM information identifying a candidate ATM, wherein the candidate ATM is not associated in the database with the user profile;
identify the candidate ATM by comparing the submitted ATM information to the stored ATM information;
receive, from the user device of the user, a control element indicating a request for a cardless service type of a plurality of cardless service types to be accessed at the candidate ATM;
determine that the user is authorized to access the cardless service type of the plurality of cardless service types at the candidate ATM based on the control element;
generate and transmit, to the user device, a first one-time password (OTP) for the user to enter at the candidate ATM; receive a second OTP entered into the candidate ATM in response to determining that the user is authorized to access the cardless service type of the plurality of cardless service types at the candidate ATM;
verify that the first OTP matches the second OTP; and
in response to the verification, authorize access by the user to at least one service associated with the cardless service type of the plurality of cardless service types available through the candidate ATM, without use of a card.

### Claim 8 (depends on 7)

The computer system according to claim 7, wherein the at least one security feature includes at least one of a password, a PIN, or a biometric.

### Claim 9 (depends on 7)

The computer system according to claim 7, wherein the ATM information includes at least one of geolocation information of a user device associated with the user, an ATM ID code, a building name, a street name, a post code, a barcode, or a QR code.

### Claim 10 (depends on 7)

The computer system according to claim 7, wherein verifying that the first OTP entered into the candidate ATM matches the second OTP further comprises comparing the first OTP to the second OTP within the database.

### Claim 11 (depends on 7)

The computer system according to claim 7, further configured to:
determine that the user is authorized to access the at least one service available through the candidate ATM, without use of a card; and
instruct the candidate ATM to provide access to the user to the at least one service.

### Claim 12 (depends on 7)

The computer system according to claim 7, further configured to:
receive, from the user device via the computer application, a request to access at least another cardless service type of the plurality of cardless service types available through the candidate ATM;
determine that the user is not authorized to access the at least another cardless service type of the plurality of cardless service types without use of a card; and
instruct the candidate ATM to refuse access to the user to the at least another cardless service type of the plurality of cardless service types.

### Claim 13

At least one non-transitory computer-readable storage media having computer-executable instructions embodied thereon for cardless use of an automated teller machine (ATM) by a user, wherein when executed by at least one processor, the processor at a server of a computer system and in communication with a database, the database storing a user profile of the user and stored ATM information, the stored ATM information identifying a plurality of ATMs, the computer-executable instructions cause the processor to:
receive, from a user device of the user, a request to log on to a computer application, the request including at least one security feature submitted by the user;
grant access by the user device to the computer application in response to verifying that the submitted at least one security feature matches at least one profile security feature stored in the user profile;
receive ATM information submitted by the user device via the computer application, the ATM information identifying a candidate ATM, wherein the candidate ATM is not associated in the database with the user profile;
identify the candidate ATM by comparing the submitted ATM information to the stored ATM information;
receive, from the user device of the user, a control element indicating a request for a cardless service type of a plurality of cardless service types to be accessed at the candidate ATM;
determine that the user is authorized to access the cardless service type of the plurality of cardless service types at the candidate ATM based on the control element;
generate and transmit, to the user device, a first one-time password (OTP) for the user to enter at the candidate ATM in response to determining that the user is authorized to access the cardless service type of plurality of cardless service types at the candidate ATM;
receive a second OTP entered into the candidate ATM;
verify that the first OTP matches the second OTP; and
in response to the verification, authorize access by the user to at least one service associated with the cardless service type of the plurality of cardless service types available through the candidate ATM, without use of a card.

### Claim 14 (depends on 13)

The at least one computer-readable storage media according to claim 13, wherein the at least one security feature includes at least one of a password, a PIN, or a biometric.

### Claim 15 (depends on 13)

The at least one computer-readable storage media according to claim 13, wherein the ATM information includes at least one of geolocation information of a user device associated with the user, an ATM ID code, a building name, a street name, a post code, a barcode, or a QR code.

### Claim 16 (depends on 13)

The at least one computer-readable storage media according to claim 13, wherein verifying that the first OTP entered into the candidate ATM matches the second OTP further comprises comparing the first OTP to the second OTP within the database.

### Claim 17 (depends on 13)

The at least one computer-readable storage media according to claim 13, wherein the computer-executable instructions further cause the processor to:
determine that the user is authorized to access the at least one cardless service type of the plurality of cardless service types available through the candidate ATM, without use of a card; and
instruct the candidate ATM to provide access to the user to the at least one cardless service type of the plurality of cardless service types.