# US 2013/0254101 A1 · Payment device policy management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2013/0254101 A1
- Document ID: US20130254101A1
- Status: Published application
- Kind: A1
- Application number: 13/781,801
- Filed: 2013-03-01
- Published: 2013-09-26
- Earliest claimed: 2012-03-22
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Anne Louise Bolgert; Richard Jay Cohen; Randolph Michael Forlenza; Raghuraman Kalyanaraman
- Web page: https://patentgrep.com/patent/US20130254101A1

## CPC

- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A method enables user-directed, selective control of payment transactions for a user's payment device by enabling a payment device user to create and manage self-defined policies on how a particular payment device (tangible or intangible) may be used. This approach enables the end user, as opposed to the financial or commercial institution, to control transactions with respect to the account. Thus, for example, using a display interface, the account holder can control factors such as: allowed or disallowed vendors, a number of charges, timing of charges, a charge frequency, types of purchases allowed, and the amount charged. This fine-grained, device-specific control mechanism enables account holders to protect financial assets against fraudulent or improper activity. The approach provides a policy management system by which user-directed options for selectively controlling and restricting payment transactions may be realized, thereby providing better security and more customized account control.

## Claims

### Claim 1

A method for user-directed, selective control of payment transactions, comprising:
upon receipt of a request, providing a permitted user access to a user interface associated with a policy management system, the policy management system having a hardware element;
receiving, via one or more display screens associated with the user interface, configuration data by which the permitted user defines a user-specific, payment device-specific transaction policy; and
enforcing the user-specific, payment device-specific transaction policy with respect to particular transaction account associated with the user.

### Claim 2 (depends on 1)

The method as described in claim 1 wherein the configuration data limits transactions to a first user-specified set of vendors, or disallows transactions with respect to a second user-specified set of vendors.

### Claim 3 (depends on 1)

The method as described in claim 1 wherein the configuration data limits transactions to a first user-specified set of categories, or disallows transactions with respect to a second user-specified set of categories.

### Claim 4 (depends on 1)

The method as described in claim 1 wherein the configuration data limits transactions to a first user-specified set of geographic locations, or disallows transactions with respect to a second user-specified set of geographic locations.

### Claim 5 (depends on 1)

The method as described in claim 1 wherein the configuration data limits a total amount per transaction.

### Claim 6 (depends on 1)

The method as described in claim 1 wherein the configuration data limits a number of transactions per vendor, optionally over a configurable period of time.

### Claim 7 (depends on 1)

The method as described in claim 1 wherein the configuration data limits transactions to a one-time purchase or transaction amount, optionally within a configurable period of time.

### Claim 8 (depends on 1)

The method as described in claim 1 wherein the configuration data defines a vendor-specific transaction policy.