# US 11,308,499 B2 · Fraud detection in self-service terminal

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,308,499 B2
- Document ID: US11308499B2
- Status: Granted
- Kind: B2
- Application number: 16/705,383
- Filed: 2019-12-06
- Published: 2020-04-09
- Granted: 2022-04-19
- Earliest claimed: 2014-03-31
- Assignees: NCR Corporation
- Applicants: NCR Corporation
- Inventors: Kevin Horgan; Gordon D. Chisholm; Campbell Benn
- Web page: https://patentgrep.com/patent/US11308499B2

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/1085: {involving automatic teller machines [ATMs]}
- G07F 19/203: {Dispensing operations within ATMs (dispensing in general G07D11/00)}
- G07F 19/207: {Surveillance aspects at ATMs}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

A method includes monitoring patterns of commands provided by a self-service terminal controller, identifying potential fraud in the monitored patterns of commands, and suspending operation of a dispenser of the self-service terminal responsive to the identification of potential fraud.

## Claims

### Claim 1

A Self-Service Terminal (SST), comprising:
a controller comprising at least one processor and a memory, the processor executes authentication commands and issues dispense commands associated with requested transactions being processed, wherein the controller is coupled to a dispenser and a data entry pad;
the data entry pad to receive authentication information from a customer, wherein the authentication information is processed by the controller with the authentication commands; and
the dispenser comprises the at least one processor to dispense media, wherein the at least one processor that is configured to:
monitor the authentication commands executing on the controller;
monitor the dispense commands issued from the controller;
generate a pattern of the monitored authentication and dispense commands against each requested transaction;
compare the generated pattern to known patterns corresponding to potential fraud; and
place the dispenser in a suspend mode when the generated pattern matches a known pattern corresponding to the potential fraud.

### Claim 2 (depends on 1)

The SST of claim 1 wherein one pattern of the potential fraud comprises a number of the dispense commands within an identified time period.

### Claim 3 (depends on 1)

The SST of claim 1 wherein the number of the dispense commands comprises n, and the identified time period is n times an average transaction time, wherein n is greater than or equal to 4.

### Claim 4 (depends on 1)

The SST of claim 1 wherein one pattern of the potential fraud comprises a number of consecutive dispense commands associated with a same account number.

### Claim 5 (depends on 1)

The SST of claim 1 wherein one pattern of the potential fraud comprises a pattern of multiple dispense commands without corresponding cardholder authentication commands.