WO2003077077A2

WO2003077077A2 - Pin-less card transaction using user image

Info

Publication number: WO2003077077A2
Application number: PCT/US2003/007238
Authority: WO
Inventors: Kirk Sanford
Original assignee: Global Cash Access
Priority date: 2002-03-06
Filing date: 2003-03-06
Publication date: 2003-09-18
Also published as: AU2003218052A1; WO2003077077A3; AU2003218052A8

Abstract

A system and method for PIN-less card transactions is provided where a request is received for a transaction (A). An image of a user is retrieved (B) which is then matched to a profile (C). The profile may include other identifying information (D, E), which is also verified.

Description

CREDIT CARD TRANSACTION WITHOUT USING A PIN WITH AUTOMATED CASHIER MACHINE

CROSS-REFERENCE TO RELATED APPLICATIONS [0001] This application claims benefit of U.S. Provisional Patent Application No. 60/362,467, filed March 6, 2002. The U.S. Provisional Patent Application is herein incorporated by reference in its entirety for all purposes.

BACKGROUND OF THE INVENTION Field of the Invention [0002] The present invention relates to money distribution, and more specifically, to a method and apparatus for providing money in a PIN-less credit card transaction.

Description of the Prior Art

[0003] Banking institutions offer several alternatives for patrons to withdraw money from a patron's bank account. For example, a patron can personally visit the institution's cashier or an agent of the institution and withdraw money by showing an ID and/or other personal information. Personally visiting the institution's agent or cashier offers a reliable means for a patron to withdraw money. However, repeatedly visiting a cashier or agent can be inconvenient and time-consuming. [0004] Automated teller machines (ATMs) offer a convenient alternative to withdrawing money from an institution's cashier or agent. In order for a patron to use an ATM machine, the patron must have an issued ATM card and a PIN (Personal Identification Number). The patron can then insert the ATM card into the ATM machine, enter their PLN, and withdraw money from the ATM. Thus, patrons can quickly access their accounts from ATMs. A patron can also use a PIN-based credit card at the ATM, but many patrons do not know their PIN number and therefore are not currently being serviced.

[0005] Using ATMs can also cause problems, such as the unauthorized use of a patron's ATM card. Any person possessing the patron's ATM card and PIN can access and withdraw money from the patron's account. Thus, a patron is susceptible to fraud from stolen ATM cards and from manufactured ATM cards. Additionally, banking institutions are also affected by ATM fraud. Patrons inevitably dispute the unauthorized use of their ATM cards resulting in expensive investigation costs for the institution and costly refunds in some cases. SUMMARY OF THE INVENTION [0006] One embodiment of the present invention provides a system and method for PIN-less credit card transactions. An automated cashier machine (ACM) is provided that offers a secure and convenient way for users to access cash from their card without using a PIN. A request for a PIN-less card transaction is received. An identifying image of a user is taken and an amount for withdraw is received. If the amount for withdrawal is approved, the ACM verifies the identifying image of the user to an image of the user in a profile. In one embodiment, the identifying image is verified using facial biometrics. If the identifying image is verified, the amount for withdrawal is dispersed.

[0007] By verifying a user's image using facial biometrics, transactions may be conducted without using a pin. Additionally, verifying the user's image prevents stolen PIN numbers from being used to illegally withdraw money from the user's account. [0008] In one embodiment, a method for conducting a PIN-less card transaction using a profile of a user at a cashier machine is provided. The method includes receiving a request for the PIN-less card transaction at the cashier machine, taking an identifying image of the user, obtaining a request for a withdrawal amount, verifying the identifying image with the profile of the user and either approving or disapproving the request based upon the verification, and dispensing the amount for withdrawal to the user if the request was approved.

[0009] In another embodiment, a method for conducting a PIN-less card transaction using a profile of a user at a cashier machine includes: receiving a request for the PIN-less card transaction at the cashier machine, taking an identifying image of the user, obtaining a withdrawal amount, requesting authorization for the amount of withdrawal, if the authorization request is approved, verifying the identifying image with the profile of the user and either approving or disapproving the request based upon the verification; and dispensing the amount for withdrawal to the user if the request was approved. [0010] A further understanding of the major advantages of the invention herein may be realized by reference to the remaining portions of the specification in conjunction with the attached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS [0011] Fig. 1 illustrates a simplified block diagram for facilitating a PIN-less credit card transaction according to one embodiment; [0012] Fig. 2 illustrates a method for performing a PIN-less credit card transaction according to one embodiment; and

[0013] Fig. 3 illustrates a method of enrollment according to one embodiment.

DESCRIPTION OF SPECIFIC EXEMPLARY EMBODIMENTS

[0014] In Fig. 1, a system 10 for providing a credit card transaction without using a PIN is shown according to one embodiment of the present invention. In the embodiment, system 10 includes an automated cashier machine (ACM) 12, a cashier system 14, a financial institution 16, a server 20, and an ACM computer system 18. [0015] System 10 is linked together via a communication conduit or channel. The communication channel may be wireless, telephonic, or any other communication system. Additionally, the channel may be via the global internetwork of networks generally referred to as the Internet. A communication channel may also be a combination of communication types. ACM 12, cashier system 14, financial institution 16, and ACM computer system 18 are preferably coupled directly and/or indirectly to each other through the server 20. Also, it will be apparent to one skilled in the art that there may be one server, multiple servers, or no servers.

[0016] Automated cashier machine 12 is capable of taking a picture of a person, and dispensing money. In one embodiment, ACM 12 includes a card reader, a picture taking device, a display device, an input device, and a cash dispenser. In a specific embodiment, the card reader may be a magnetic strip reader capable of reading cards with a magnetic strip such as, for example, ATM cards, credit cards, debit cards, or smart cards. A picture-taking device may be any device capable of taking a picture such as a digital camera, traditional camera, or Internet web camera. Input device may be a touch screen or keypad. In one embodiment, a request for a PIN-less transaction may be inputted through the input device without requiring the reading of a card. In another embodiment, cashier machine 12 is an ATM machine capable of taking a picture of a person.

[0017] Server 20 is capable of receiving and forwarding cqmmunications to and from components of system 10. In one embodiment, server 20 is a web server. [0018] ACM computer system 18 may be any system capable of verifying the picture taken by ACM 12. In one embodiment, ACM computer system 18 includes a processor. The processor may be, for example, a computer, workstation, mainframe, pocket PC, personal digital assistant, etc. The processor also preferably includes or is in communication with a verification process 22 and database 24. Verification process 22 may be a software- implemented process that communicates with database 24 in order to verify that the picture taken by ACM 12 matches a picture in database 24. The picture may be part of a profile that is verified. A profile may include an image of the user or a corresponding entry representing the image that is used to verify the picture taken by ACM 12. Additionally, a profile may include identifying information that uniquely identifies the user, such as a date of birth, driver's license number, passport number, social security number, credit card number, and BIN number of the credit card. Verification process 22 may use any aspects of the profile in authorizing a transaction. For example, verification process 22 may verify just the picture of the user or verify the picture and the social security number of the user. [0019] In one embodiment, verification process 22 may employ an algorithm based on facial biometrics. In a specific embodiment, facial biometrics mapping using a sophisticated algorithm based on Principal Component Analysis (PCA) by Viisage Technology Inc. is used. The PCA uses software that translates the characteristics of the face of the user into a unique set of numbers, which can be referred to as an Eigenface. The Eigenface is sent to the verification process 22, which compares the unique set of numbers to a pre-existing profile or Eigenface for the user in the database 24. A match of the user's image or Eigenface to the user's profile associated with the card number is conducted. Also, a person of skill in the art will appreciate other methods of verifying a user's identifying image. [0020] Also, a person of skill in the art will appreciate other methods of verifying a user's identifying image. For example, in another specific embodiment, facial biometrics mapping using Visionics Corp. Facelt« product may be used. The product maps an individual's identity into a complex mathematical formula called a faceprint. Local Feature Analysis (LFA) is used to represent facial images in terms of local statistically derived building blocks. LFA then compares faceprints and verifies a user's picture. Other methods of verification known in the art may also be used, such as iris, voice signature, and fingerprint technology. [0021] Verification process 22 also may query database 24 to validate a user's credit card number associated with the picture to a card number associated with the user's picture in the database. Additionally, verification process 22 may query database 24 to verify other aspects of identifying information in the profile. [0022] Cashier system 14 may be any system capable of enrolling a user into ACM computer system 18. In one embodiment, cashier system 14 includes a card reader and computer. The card reader may be the same as the card reader of ACM 12. The computer may be any computing device capable of communicating with ACM computer system 18 to enroll the user in ACM computer system 18. The cashier system may also include a human operator to facilitate enrolling the user in ACM computer system 18.

[0023] Financial institution 16 may be any institution capable of authorizing a transaction requested by the user. Institution 16 is preferably the issuer of the card the user is using. [0024] Referring to Fig. 2, a method for conducting a PIN-less credit card transaction is provided according to one embodiment. The PIN-less credit card transaction may be used to withdraw cash or any item of value, such as a money order, check, travelers check, credit from an institution, gaming chips, etc., from ACM 12. In step S200, a user is provided with a main menu screen and selects a choice for conducting a PIN-less credit card transaction on ACM 12. The user may begin the process by inserting or swiping a credit card into the credit card reader. Also, the user may touch the input screen, choose the PIN-less credit card function, and enter a credit card account number.

[0025] In step S202, ACM 12 determines if the credit card account number of the user is enrolled to use the PIN-less credit card system. In determining if the user is enrolled, ACM 12 may communicate with ACM computer system 18 to look up the user's credit card number. Also, ACM 12 may include a database that may be used to determine if the user is enrolled. If the card is not enrolled, the user is enrolled in a process hereinafter described. [0026] If the card is enrolled, ACM 12 displays a message that an image of the user must be taken to continue with the transaction and an identifying image is taken once the user agrees in step S204. In a specific embodiment, a legal disclosure is also displayed on ACM 12 informing the user that biometrics is being used. In one embodiment, the image is taken an mapped using facial biometrics.

[0027] In step S208, consent for using a signature on file may be obtained. In step S210, the user is prompted to enter a withdrawal amount. Once an amount is entered, the user is appraised of any service fees that will be charged and the user acknowledges acceptance of the service fees in step S212.

[0028] In step S214, the transaction is sent for pre-authorization to the financial institution. In a specific embodiment, the authorization request may use an Address Verification System (AVS) to help validate the users address. [0029] If the attempted authorization is not approved, the customer is notified that the transaction was not authorized in step S218.

[0030] If the attempted authorization is approved, the process verifies that the identifying image was taken in step S219. In one embodiment, facial biometrics is used to verify the identifying image that was taken to a user profile on record. If the identifying image was verified, the process may verify other requirements in one embodiment in step S220. For example, the process may determine if a valid signature is on file, and if the customer ID is valid. If any of the other requirements fail, the user is printed out a receipt and given instructions to proceed to the cashier for re-enrollment in step S226. It will be understood that other ways of approving the PIN-less credit card transaction may be included. For example, the process may validate additional information in the profile of the user, such as a social security number, driver license's number, etc.

[0031] In step S228, the process determines if the withdrawal amount is greater than the cash limit of ACM 12. If so, the user is printed out a receipt and given instructions to proceed to the cashier to collect the withdrawal amount in step S233. If not, the withdrawal amount is dispensed and a receipt is printed in step S230.

[0032] If the user desires another transaction, the process reverts back to step S210. If the user exits, the process is completed and returns to step S200. [0033] In step S232, if the card is not enrolled, the user is notified that a picture must be taken for enrollment. In step S234, a picture of the customer is taken. The picture may be taken by methods as described above. In step S236, the user is prompted to enter a withdrawal amount. Once an amount is entered, the user is appraised of any service fees that will be charged and the user acknowledges acceptance of the service fees in step S238. [0034] In step S240, the transaction is sent for pre-authorization to the financial institution. In a specific embodiment, the authorization request may use an Address Verification System (AVS) to help validate the users address.

[0035] In step S242, the process determines if the transaction is authorized. [0036] If the attempted authorization is not approved, the customer is notified that the transaction was not authorized in step S244. [0037] If the attempted authorization is approved, a receipt is printed and the customer is given instructions to proceed to cashier system 14 to complete enrollment, hereinafter described in step S246. In a specific embodiment, the user proceeds to a casino cashier. The user may then be dispensed the money for the transaction a,t the casino cage upon showing of a valid identification, such as a driver's license, etc. [0038] Figure 3 illustrates an enrollment process according to one embodiment. An example of an enrollment process for creating a profile in database 24 will now be described. The enrollment process is preferably only done once. However, exceptions, such as when an ID or credit card has expired, when the identity of the cardholder does not match the card, or when a proper digitized signature was not obtained may require the enrollment process to be repeated.

[0039] In step A, the cashier requests a valid form of identification and the credit card used in the PIN-less credit card transaction from the user. For example, a valid form of ID may be a current official government document, such as a passport, driver's license, or military ID that bears the cardholder's signature and has a photograph of the cardholder. The cashier preferably verifies information on the credit card. For example, the cashier preferably verifies that a valid date is embossed on the card and that the date of the transaction is on or after the valid date embossed on the card. Additionally, the date of transaction must be on or before an expiration date embossed on the card. Further, the cashier system may communicate with the ACM 12 or ACM computer system 18 to receive the credit card number used in the above described transaction. The card number embossed on the front of the card preferably matched the number received from the credit card read at the ACM 12. [0040] In step B, the cashier swipes or key enters the credit card through the card reader on the PC and preferably enters the last four digits of the card number to validate the magnetic strip card. The cashier's PC then communicates to ACM computer system 18 either directly or through server 20 to receive the user's image and any other relevant data associated with the original transaction from ACM database 24. In another embodiment, the cashier system 14 may communicate and receive the credit card information and image from ACM 12 directly. The cashier then preferably matches the user's image that is displayed on the PC screen to the ID presented and/or to the user in step C. In step D, the cashier preferably enters relevant identification information into the PC. For example, information entered may be (a) a description of the ID including any serial number, expiration date, and jurisdiction of issue; (b) the name of the cardholder on the ID (which preferably is the same as the name embossed or encoded on the card); and (c) the address and telephone number of the cardholder. In step E, the cashier may also enter the BIN, which is a four-digit, pre-printed number found above the embossed card number. The entered information is then be stored in database 24. [0041] Once all the information is entered, an instrument (or receipt) is printed and the user signs the instrument in step F. In one embodiment, the instrument may be a negotiable instrument, such as a money order or check or receipt. The signature on the back of the credit card and ID is then matched to the user's signature on the instrument. Also, a digital signature is obtained on the digital signature pad to record a digitized signature of the user. If the signatures match, the cashier clearly imprints the embossment of the card in step H. If the signature does not match the user's signature on the credit card or ID, the enrollment process is abandoned and the user must be re-enrolled.

[0042] If all the above steps are successfully completed, the ACM enrollment is complete in step I. After enrollment is complete, the customer will be able to use the ACM to conduct PIN-less credit card transactions on all future transactions, provided of course that the ID, credit card, and user image are valid.

[0043] Using the ACM for PIN-less credit card transactions reduces fraudulent use of credit cards. For example, fraud for stolen ED's and credit cards and manufactured ID's and credit cards is reduced. A thief with a stolen credit card cannot use an ACM because the identifying image will not match an image of the user in the database. Additionally, thieves will be discouraged from stealing credit cards and/or using ACMs because thieves will likely wish to avoid having an identifying image captured. Further, because fraudulent use of credit cards is reduced, disputes between cardholders and the credit card issuers are reduced. [0044] The above description is illustrative but not restrictive. Many variations of the invention will become apparent to those skilled in the art upon review of this disclosure. The scope of the invention should, therefore, be determined not with reference to the above description, but instead should be determined with reference to the appended claims along with their full scope or equivalents.

Claims

WHAT IS CLAIMED IS:

1. A method for conducting a PIN-less card transaction using a profile of a user at a cashier machine, the method comprising: receiving a request for the PIN-less card transaction at the cashier machine; taking an identifying image of the user; obtaining a request for a withdrawal amount; verifying the identifying image with the profile of the user and either approving or disapproving the request based upon the verification; and dispensing the amount for withdrawal to the user if the request was approved.

2. The method of claim 1 , wherein the identifying image of the user is a picture of the user.

3. The method of claim 1 , wherein the profile comprises a picture of the user.

4. The method of claim 1, wherein the profile includes identifying information.

5. The method of claim 4, wherein the identifying information comprises at least one of a driver's license number, at least part of a social security number, a BIN number, a passport number, and a credit card number.

6. The method of claim 4, further comprising requesting identifying information from the user.

7. The method of claim 6, further comprising verifying the requested identifying information with the profile identifying information.

8. The method of claim 1, wherein verifying the image comprises using facial biometrics to verify the image.

9. The method of claim 1, further comprising creating the profile for the user.

10. The method of claim 9, wherein creating the profile comprises: requesting a valid form of identification from the user, wherein the identification comprises a signature of the user and an image of the user; verifying the identifying image to the image on the valid form of identification;

11. The method of claim 10, wherein creating the profile comprises: providing an instrument if the image on the valid form of identification is verified; and obtaining a signature on the instrument.

12. The method of claim 1, further comprising providing instructions to the user if the verification is disapproved.

13. The method of claim 12, wherein the instructions to the user comprise telling the user to proceed to a cashier to create the profile.

14. The method of claim 1, wherein the amount for withdrawal comprises cash.

15. The method of claim 1, wherein the amount for withdrawal comprises an item of value.

16. The method of claim 1 , wherein receiving the request for the PIN-less transaction comprises receiving a credit card account number.

17. A method for conducting a PIN-less card transaction using a profile of a user at a cashier machine, the method comprising: receiving a request for the PIN-less card transaction at the cashier machine; taking an identifying image of the user; obtaining a withdrawal amount; requesting authorization for the amount of withdrawal; if the authorization request is approved, verifying the identifying image with the profile of the user and either approving or disapproving the request based upon the verification; and dispensing the amount for withdrawal to the user if the request was approved.

18. The method of claim 17, wherein the identifying image of the user is a picture of the user.

19. The method of claim 17, wherein the profile comprises a picture of the user.

20. The method of claim 17, wherein the profile includes identifying information.

21. The method of claim 20, wherein the profile identifying information comprises at least one of a driver's license number, at least part of a social security number, a BIN number, a passport number, and a credit card number.

22. The method of claim 20, further comprising receiving identifying information from the user.

23. The method of claim 22, further comprising verifying the received identifying information with the profile identifying information.

24. The method of claim 17, wherein verifying the image comprises using facial biometrics to verify the image.

25. The method of claim 17, further comprising providing instructions to the user if the verification is disapproved.

26. The method of claim 25, wherein the instructions to the user comprise telling the user to proceed to a cashier to create the profile.

27. The method of claim 17, wherein the amount for withdrawal comprises cash.

28. The method of claim 17, wherein the amount for withdrawal comprises an item of value.

29. The method of claim 17, wherein receiving the request for the PIN-less transaction comprises receiving a credit card account number.

30. A system for conducting a PIN-less card transaction for an amount for withdrawal using a profile for a user comprising: an automated cashier machine (ACM) configured to receive a request for the PIN-less transaction and take an identifying image of the user; an ACM computer system configured to verify the identifying image to the profile of the user and approve or disapprove the request based upon the verification, wherein the ACM is configured to dispense the amount for withdrawal if the transaction is approved.

31. The system of claim 30, wherein the ACM computer system comprises a verification process.

32. The method of claim 31, wherein the verification process uses biometric analysis to verify the identifying image to the profile of the user.

33. The system of claim 30, wherein the ACM computer system comprises a database, wherein the database stores the profile of the user.

34. The system of claim 30, wherein the profile comprises a picture of the user.

35. The system of claim 30, wherein the profile includes identifying information.

36. The system of claim 35, wherein the identifying information comprises at least one of a driver's license number, at least part of a social security number, a BIN number, a passport number, and a credit card number.

37. The system of claim 35, wherein the ACM computer system comprises a verification process, wherein the verification process verifies the identifying information for the user.

38. The system of claim 30, wherein the amount for withdrawal comprises cash.

39. The system of claim 30, wherein the amount for withdrawal comprises an item of value.