WO2014107325A1

WO2014107325A1 - System and method for secure card with on-board verification

Info

Publication number: WO2014107325A1
Application number: PCT/US2013/076554
Authority: WO
Inventors: Jeffrey D. DIMURO
Original assignee: Jpmorgan Chase Bank, N.A.
Priority date: 2013-01-02
Filing date: 2013-12-19
Publication date: 2014-07-10
Also published as: US9646301B2; US20140183258A1; US20150012429A1; US8851370B2

Abstract

Systems and methods for secure cards with on-board verification are disclosed. In one embodiment, a transaction device associated with at least one transaction account may have a substrate comprising a display that displays an account identifier for the transaction account; a sensor that receives authentication information from, a user; a processor that processes the authentication information to verify the authenticity of the user; and a communicator that communicates at least the account information, the communicator including at least one of a magnetic stripe, an electrical interface, and a wireless RF interface. The display may not display the account identifier until the user is authenticated, and the communicator may be inactive to communicate the account information until the user is authenticated.

Description

SYSTEM AND METHOD FOR SECURE CARD WITH ON-BQARD

VERIFICATION

BACKGROUND OF THE INVENTION

1. Field of the Invention

[0001] The present invention generally relates to the secure transaction cards having on-board verification.

2. Description of the Related Art

[0002] Magnetic stripe cards, such as commercial credit cards, debit cards, or transfer funds cards are widely used for payments,, cash advances, or other financial transactions. Data for identifying the customer, such as an account number, a security code, or other identifying data is typically magnetically stored on a magnetic tape or strip embedded into the back side of the card.

[0003] When a transaction is to be performed at a retail store, a customer hands his or her card to an employee of the retail store and the employee then scans the magnetic information into a communication device.

[0004] Smart cards are cards that include a processor coupled to an electrically erasable, programmable, read-only memory (EEPROM), read-only memory (ROM) and random access memory (RAM). These components may^¬ be fabricated onto a single integrated chip compr sing a

miciOprocessing/conti'oIler unit (MPU). The processor executes instructions stored on ROM and temporarily stores data on RAM whereas the EEPROM. is a non-volatile memory used for storing data identifying the uniqueness of a. smart card. A smart card also may include an input/output (I/O) signal interface for transferring various I/O signals between the smart card and an extemal system. The I/O interface may take the form of a contact with the extemal system, or a

I peripheral thereof, for proper transfer of signals. Alternatively, the I/O interface may take the form of a radio frequency (RF) interface for allowing;

communication betwee the smart card and the external system via the transmission and reception of RF signals. The external system may take the form, for example, of a card reader, a merchant's point of sale system, or an automated teller machine.

[0005] Typically, power is supplied to the smart card from the external system when the system communicates with the smart card. This may be accomplished through, the I/O interface. However, this means that a smart card is only powered and its data is accessible only when the smart card is connected to the external system. 0006] One of the widespread uses of smart card technology is as a stored- value card, which contains monetary value in the microchip embedded in the card. For example, each time a consumer uses a chip card in a vending

machine, the amount of the purchase is deducted from the cash balance stored in the microchip on the chip card. One application for such stored- alue chip cards is eliminating the need for people to carry around small coins or bills and speed up the time it takes to consummate small cash transactions. However, most chip cards do not offer built-in displays for viewing the cash balance remaining on the chip card. This reduces the. convenience and ease of use of chip cards.

SUMMARY OF THE INVENTION

[0007] Systems and methods for secure cards with on-board verification are disclosed. In one embodiment, a transaction device associated with at least one transaction account may have a substrate comprising a display that displays an account identifier for the transaction account; a sensor that receives authentication information from a user; a processor that processes the authentication information to verify the authenticity of the user; and a

communicator that communicates at least the account information, the communicator including at least one of a magnetic stripe, an electrical interface, and a wireless RF interface. The display may not display the account identifier until the user is authenticated, and the communicator may be inactive to communicate the account information until the user is authenticated.

[Θ008] In one embodiment, the substrate may he clear or transparent. In. one embodiment, the substrate may incorporate the display,

[0009] In one embodiment, the account identifier may comprise an account number.

[0010] In one embodiment, the transaction accoun may be a credit account, and the account identifier may comprise a credit account number,

[0011] In one embodiment, the authentication information may include a biometric from the user.

[0012] In one embodiment, the transaction device may further comprise an input for receiving data from the user,

[0013] A method of using a transaction card is disclosed. In one embodiment, the method may include (1) receiving, at a transaction card, authentication information from a user; (2) retrieving, from a memory, stored authentication information for the user; (3) a computer processor verifying the authenticity of the user by comparing the authentication information with the stored authentication information; and (4) after the user is verified; (a) displaying on a display an account identifier for a transaction account associated with the user; and (b) activating at least one of a magnetic stripe, an electrical interface, and a wireless RF interface to communicate the account information. [0014] In one embodiment, the account identifier may comprise an account number.

[0015] in one embodiment, the account identifier maybe a credit account, and the account identifier may comprise a credit account number.

[0016] In one embodiment, the authentication information may comprise a biometric from the user,

[0017] In one embodiment, the method may further include receiving, from a point of sale device, transaction data; the computer processor

determining if additional user authentication is necessary; if additional authentication information is necessary, and before the account identifier is displayed on the display and the at least one of a magnetic stripe, an electrical interface, and a wireless RF interface is activated; displaying on the display a request for second authentication information from the user; receiving the second authentication information from the user; the computer processor verifying the second authentication information.

[0018] In one embodiment, die method may further include receiving. from a point of sale device, transaction data; communicating, to an approval authority, the transaction data; receiving, from the approval authority, a requirement for additional authentication; displaying on the display a request for second authentication information from the user; receiving the second authentication information from the user; and the computer processor verifying the second authentication information.

[0019] A method of using a transaction card is disclosed. In one embodiment, the method may include (1) receiving, at a transaction card, authentication information from a user; (2) retrieving, from a memory, stored authentication information for the user; (3) a computer processor verifying the authenticity of the user by comparing the authentication information with the stored authentication information; and (4) after the user is verified: (a) displaying on a display an image of a card associated with the account; and (b) activating at least one of a magnetic stripe, an electrical interface, and a wireless RF interface to communicate the account information,

[0020] in one embodiment, the account identifier may comprise an account number.

[0021] in one embodiment, the account identifier maybe a credit account, and the account identifier may comprise a credit account number.

12} In one embodiment, the authentication information may comprise a biornetric from the user,

BRIEF DESCRIPTION OF THE DRAWINGS

[0023] For a more complete understanding of the present invention, the objects and advantages thereof, reference is now made to the following descriptions taken in connection with the accompanying drawings in which:

[0024] Fig. 1 is a block diagram of a secure transaction card according to one embodiment;

[0025] Fig. 2 is a flowchart depicting a method of using a secure transaction card according to one embodiment;

[0026] Fig. 3 is a flowchart depicting a method of using a secure transaction card according to one embodiment. DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

10027] Several embodiments of the present invention and their advantages may be understood by referring to Figs. 1-3, wherein like reference numerals refer to like elements.

[0028] As described herein, systems and methods for secure cards with on-board verification are disclosed. In one embodiment, a secure card may not display some or all of the card information, such as a primary account number, card holder name, etc. until the user authenticated him herself to the card.

[0029] Referring to Fig. 1, secure card 100 includes substrate 1 10, display 120, and sensor 130. Substrate 110 may be any material that may serve as the structure for secure card 100. In one embodiment, substrate 110 may be a strong, clear material, such as alkali-aluminosilicate sheet glass. An example of such is Coroing®'s Gorilla® glass and Lotus™ glass. In another embodiment, substrate 110 may be a neon-based material, a liquid-based material, a crystal- based material, etc. Any suitable clear material may be used as necessary and/or desired.

[0030] In another embodiment, substrate 110 ma be a non-clear material, including plastics, metals, ceramics, etc, Other suitable materials for substrate 1 1 may be used as necessary and/or desired.

[0031] Secure card 100 may include at least one display 120. in one embodiment, display 120 may be a transparent display, such as a transparent electroluminescent display. An example of such a display is available from Planar Systems, Inc., Hillsboro, Oregon.

[0032] In another embodiment, display 120 may be a flexible display. In one embodiment, flexible ePaper displays and e-Ink displays, such as those available from LG Display Co., Ltd. may be used. Other flexible displays may be used as necessary and/or desired,

[0033] Any suitable display for displaying information to the user may be used as necessary and/or desired.

[0034] Although only one display 120 is illustrated in Fig. 1, it should be recognized that additional displays may be provided as necessary and/or desired. In addition, displays may be provided on the front and back of substrate 110.

[0035] in one embodiment, display 120 may be substantially the same size as substrate 110.

[0036] In one embodiment, display 120 may be active only when secure card 100 is active and/or when secure card 100 is near a point of sale (POS) device.

[0037] Display 120 may display alphanumeric characters, graphics, machine-readable codes (e.g., bar codes, QR codes, etc.), images, video, colors, icons, glyphs, symbols, etc. Any suitable information in any suitable format may be displayed by display 120 as necessary and/or desired,

[0038] In one embodiment, display 120 may be used to customize die look and feel of the card. For example, advertisements, marketing information, etc. may be displayed on display 120. In one embodiment, these advertisements, marketing information, etc. may be provided by the issuer of secure card 100. In another embodiment, advertisements, marketing information, etc. may be provided by partners of the issuer of secure card 100. In another embodiment, these advertisements, marketing information, etc. may be provided by merchant(s) in the geographical location of secure card 100. In another embodiment, display 120 may display social media, such as what others are shopping for, feeds and information from preferred merchants, etc.

[0039] In one embodiment, the cardholder may customize the information provided on display 120, For example, in one embodiment, the cardliolder may set preferences so that every time that secure card 100 is used, account information, such as account balance, remaining credit, minimum payment due date, minimum payment due. etc. may be displayed. In another embodiment, display 120 may display, for example, the most recent five transactions conducted with that account, with the particular secure card, etc. The frequency, type of information displayed, amount of information displayed, etc. may be selected as necessary and/or desired.

[0040] In one embodiment, secure card 100 may be used with multiple issuers, providers, etc. For example, secure card 1.00 may function as a credit, card, a debit card, a private label card, an identification card/device, a membership card, a library card, an access card, a transit card, a rewards/loyalty card, etc. In one embodiment, depending on the use of the secure card, display 120 may change to reflect the appearance of the card being used. For example, if secure card 100 is being used as a Visa card, the issuer's logo and the Visa indicator may be displayed. If secure card 100 is being used, as a private label card, the private label logo may be displayed. If secure card 100 is being used as a membership card, the membership information, photo identification, etc. may be displayed.

[0041] In one embodiment, the type of card that may be active, suggested, defaulted to, etc. may be displayed after the cardholder is properly

authenticated. In another embodiment, the cardholder may be able to select a card to be active. [0042] Secure card 100 may further include sensor 130. in one

embodiment, sensor 130 may be a sensor that receives biometric information from the cardholder. Examples of such sensors include fingerprint sensors, microphones, air defectors (i.e.. for measuring breath parameters), cameras, image capture devices, etc. in another embodiment, sensor 130 may detect and/or receive the cardholder's heart rate, pulse, EKG information, temperature, height, weight, body mass index, thermal energy, DNA, biofhyihrns, etc. Any suitable sensor for receiving any usable biometric or other attribute of the cardholder may be used as necessary and/or desired.

[0043] Secure card 100 may also include input 140. In one embodiment, inpu 140 may be a touch-sensitive keypad, a touch pad, etc. In one

embodiment input 140 may receive a code, such as a PIN, from the cardholder. In anotlier embodiment, input 140 may receive an authorization authentication pattern, sequence, etc. from the cardholder. In still another embodiment, input 140 may receive a signature from the cardholder. In still another embodiment, input 140 may recei ve out-of-band authentication sent to the cai'dholder by, for example, SMS, email, voice, etc. Input 140 may receive any input as necessary and/or desired.

[0044] In one embodiment, secure card 100 ma be used with more than one cardholder /user, and use the input from sensor 130 and/or input 140 to determine the identification of the cardholder/user. In one embodiment, secure card 100 may personalize itself for the identified cardholder/user.

[0045] In one embodiment, secure card 100 may only be used with the cardholder and with authorized users (e.g., family members), The biometrics, identifiers, etc. may be registered for use with secure card 100.

[0046] In another embodiment, secure card 100 may be used with any cardholders of the issuer of secure card 100 or other sponsors of card functions (e.g., identification card, transit card, etc.). Once a cardholder is registered, the cardholder may be able to use any secure card 100 to retrieve his or her personal information.

[0047] In one embodiment, secure card 100 may present a picture, icon, glyph, symbol, color, etc. selected by a user before or after authentication. In one embodiment, the cardholder may scroll through, cycle through, or otherwise select the picture, icon, glyph, symbol, color, etc. that is associated therewith in order to begin the authentication process.

[0048] In another embodiment, secure card 100 may return the

cardholder's associated picture, icon, glyph, symbol, color after authentication as feedback that secure device 100 itself is authentic.

[0049] In one embodiment, secure card 100 may include a magnetic stripe (not shown). The magnetic stripe may not be active until the cardholder is authenticated. In another embodiment, the magnetic stripe ma not be active unless the cardholder is authenticated and/or near a POS device.

[0050] in one embodiment, once activated, the magnetic stripe may remain active for a predetermined amount of time and then may be deactivated. In another embodiment, the magnetic stripe may remain active for a certain number of transactions,

[0051] n one embodiment, the magnetic stripe may be programmable. An example of such a programmable magnetic stripe is disclosed in U.S. Patent No. 6,631 ,849. the disclosure of which is incorporated by reference in its entirety. i 0052_.1 Secure card 100 may include controller 160 that may control display 120, sensor 130, input 140, antenna 150 for RF or wireless

communications, and the magnetic stripe. Secure card 100 may further include a power source (not. shown), such as a battery, solar power cells, thermal energy from the cardholder, etc.

[0053] In one embodiment, controller 160 may comprise a processor and/or an integrated circuit (IC), memory, etc. Any device capable of functioning as a controller may be used as necessary and/or desired.

[0054] In one embodiment, controller 160 may be positioned near the edges of secure card 100. This may be done to maximize the clear or transparent area of secure card 100.

[Θ055] Secure card 100 may include markings including, for example, the cardholder's name, the identity of the issuer, the identity of the card type (e.g.. Visa, MasterCard, American Express), etc. Any markings may be provided as necessary and/or desired.

[0056] Other features, including on/off mechanism 170, electrical contacts 180, etc. may be provided as necessary and/or desired.

[0057] in another embodiment, secure card 100 may include GPS sensor (not shown) for determining a geolocation of secure card 100. In one embodiment, the cardholder may specify geographical areas in which

transactions with secure card 100 should be denied and/or require additional authentication, such as, for example, step-up authentication.

[00S8] In another embodiment, location may be determined in other manners, such as cellular tower identification/triaiigulation, WiFi source identification triangulatlon, user input, POS/merchant communication etc.

[0059] In one embodiment, secure card 100 may include cellular and/or wireless data connectivity. Thus, secure card 100 may be able to communicate with the issuer or other parties. This may be to update card data, active or deactivate the card, update software, perform account/card maintenance, etc. In another embodiment, this may further be to provide, update, or modify advertising, marketing, or other materials/information provided to secure card 100 or displayed by display 120.

[§060] In one embodiment, the functionality of secure card 100 may be incorporated into a POS device, in another embodiment, the cardholder may dock, connect, or otherwise connect secure card 100 with a POS device in order to conduct a transaction. In one embodiment, secure card 100 may detect the presence of the POS device, activate itself, and allow the user to communicate with the POS device in any suitable manner.

[0061] In one embodiment, a cardholder may he presented with a "loaner" secure card 100 in the event that he or she lost, forgot, etc, his or her secure card. The card may function in the same manner after the cardholder is authenticated.

[0062] Referring to Fig. 2, a method for using a secure card with on-board verification is provided.

[0063] In step 2.10, the cardholder activates the secure card. This may be accomplished by using an on/off mechanism, such as a switch, button, etc, in another embodiment, the cardholder may depress a sensor or other input device. In still another embodiment, the cardholder may approach a RF-enabled device, such as a POS device, terminal, turnstile, etc, in still another embodiment, the cardholder could swipe a magnetic stripe of the card, "dip" the card into a card reader, contact electrical contacts for the card with electrical contacts of a terminal, etc. In another embodiment, the secure card may be activated by shaking the card. In still, another embodiment, the secure card may be activated by detecting thermal energy of the cardholder (e.g. when the cardholder touches or picks up the card). In still another embodiment, the secure card could be activated by "bumping" or other near field communications. Any suitable mechanism for activating the secure card may be used as necessary and/or desired.

[0064] In step 220, the display may prompt the user for authentication. In one embodiment, the display may prompt the cardholder to submit a biometric using a sensor thai may be provided on the card. For example, the card may instruct the cardholder to "Place finger on the sensor' or a message that is appropriate for the biometric that is to be collected or detected.

[0065] In one embodiment, if a code, PIN, password, etc. is to be collected, the display may instruct the cardholder to "Enter PIN" or "Enter Code" as appropriate,

[0066] In. step 230, the cardholder may comply with the instructions provided on the display.

[0067] in step 240, the secure card may validate the data entered in step 230. This may be performed using a processor, IC, etc. within the card.

[0068] In step 250, if the data is validated, the display may display a card number, such as a primary account number, and other data (e.g., expiration date, CVV, etc) necessary to conduct the transaction. In one embodiment, the display may display account information (e.g.. credit limit, balance, etc.). In another embodiment, the display may display multiple cards.

[0069] In another embodiment, the display may d play an icon, picture of a user, symbol, glyph, etc. instead or in addition to an account number.

[0070] In one embodiment, other communication mechanisms, such as the magnetic stripe, electrical contacts, F antenna, etc. may be activated to conduct the transaction. In one embodiment, the cardholder may determine which, if any, of these communication mechanisms to activate.

[0071] In one embodiment, the magnetic snipe data may be programmed or decrypted for use. In one embodiment, the magnetic stripe may be deprogrammed for a certain amount of time (e.g.. 30 seconds), number of transactions/swipes (e.g., 1 swipe), etc.

[0072] in step 260, the transaction may be completed.

[0073] In step 270, the display may display information regarding the transaction for the user. For example, the display may display the amount of the transaction, credit limit information, etc. Other information that may be displayed may include the credi used, credit remaining, date of minimum payment due, amount of minimum payment due, last transaction data, etc. The information displayed may be selected by the issuer, cardholder, etc. In one embodiment, the information may be graphically represented (e.g., bar graph, thermometer, etc.) as necessary and/or desired.

[0074] In one embodiment, the display may provide other metrics, such as monthly spending versus budget, etc. In one embodiment, the display may provide information regarding any rewards or loyalty points earned. In one embodiment, the user could also be provided as an out-of-band message, such as a text message, an email message, a voice message, etc.

[0075] If, in step 240, the data is not validated, access to the card may be denied in step 280. In one embodiment, the cardholder may be given a limited number of attempts until the card is locked. In one embodiment, the card may automatically be erased if the cardholder fails to provide validated data. In another embodiment the data may appear to be authorized, but the card may cause an alert to be sent to the authorities. [0076] In one embodiment, if the data is not validated, the secure card may record the data, such as a bionietric, and provide that data to the authorities, in another embodiment, the secure card may take a picture of the user, and/or may communicate with a camera in a point of sale device, at a merchant location, etc. to take a picture and/or record a video of the user.

[0077] in another embodiment, the secure card may "self-destruct" by, for example,, erasing its contents and rendering itself at least partially unusable , if the data is not validated.

[0078] in another embodiment, the secure card may make a noise, emi a shock, etc., if the data is not validated,

[0079] In one embodiment, additional verification may be required for transactions. For example., inherently risky transactions, such as high dollar items, foreign transactions, etc, may require additionai verification. In another embodiment, transactions that, may invoke fraud warnings may require additional verification. And, in still another embodiment, transactions that are abnormal for the cardholder— for example, transactions that are inconsistent with a cardholder's purchase history, spending patterns, location, etc. may require additional verification.

[0080] In one embodiment, the cardholder may set a "whitelist" of merchants, geographical areas, dates of card use, times of card use, etc. with which transactions may be exempt from additional verification, in another embodiment, the cardholder may set a "blacklist" of merchants, geographical areas, dates of card use, times of card use, etc, with which transactions should be denied and/or require additional verification even if they do not meet other standards for additional verification. [0081] in one embodiment, the additional information may be provided to the cardholder in a separate transmission, such as to a registered mobile device (e.g., by text message, voice, email, etc.),

[0082] In another embodiment, the additional information may be the submission of a code, PIN, additional biornetric, etc,

[0083] The number and type of transactions that require additional authentication may consider user mconvenieiice and risk factors. Moreover, the additional authentication may be local (i.e., by card) or may be done in conjunction with the issuer over a network,.

[0084] In one embodiment, the type of additional information requested (e.g., code from a separate communication, additional biometric, PIN, password, etc.) may be selected randomly, may rotate, may be selected based on the dollar value of the transaction, may be based on the location of the transaction and/or the secure card, may be based on the merchant/vendor, may be based on the types of goods/services purchased, may be based on spending patterns/habits, etc.

[0085] in one embodiment, different levels of authentication and/or verification may be required for different types of cards. For example, the verification required for a personal card may be different from that required for a corporate card.

[ΘΘ86] In one embodiment, the cardholder may designate subordinate accounts that may also be used with the same secure card. For example, a cardholder may designate a subordinate account for his child. The transaction may be conducted using the same account number as the primary account number, but may be subject to restrictions, such as certain merchant category codes, spending limits, geographical restrictions, etc. [0087] Referring to Fig. 3, a method for using a secure card with on-board verification and additional authentication is provided.

[0088] Steps 310 - 350 may be similar to steps 210 - 250, described above. Note that step 345 may be similar to step 280, above.

[0089] in step 355, the card may provide card information to a POS device, terminal, etc. In one embodiment, the card information ma be provided to an on-line retailer.

[ΘΘ90] In step 360, the transact on authorizes such as the issuer of the card, may determine if additional authentication is required. If, no additional authorization is required, the transaction may be conducted in step 365, and additional information may be displayed in step 370, which may be similar to step 270, above.

[009 i] If additional authentication is required, in step 375, additional authentication information may be provided and/or requested.

[0092] In one embodiment, the transaction authorize.!' may provide an out- of-band message (e.g., a text message, email, voice message, etc.) to a registered device of a cardholder. The transaction atithorizer may request that the cardholder provide, for example, a code in that message, to the secure card..

[0093] In another embodiment, the transaction authorizer may re uest that the cardholder provide a second biometric. In one embodirneiit, the request may^¬ be displayed on the secure card,

[0094] In another embodiment, the transaction authorizer may request that the cardholder provide a PIN, password, etc. in one embodiment, the request may be displayed on the secure card. [0 95J In step 380, if the additional authentication is successful, the transaction may be conducted in step 365 as described above.

[0096] If the additional authentication is not successful, the transaction may be denied in step 385.

[0097] In one embodiment, the secure card may pre-se!ect a card for the user based on Information received from, a POS device, terminal, reader, etc. For example, after a secure card is powered on, activated, or even when the display is not active, the secure card may determine the type of merchant, terminal, reader, etc. that it may be used. with. In one embodiment, it may receive information from a POS device, in another embodiment, it may use GPS, WiFi or cellular tri angulation, etc, to determine its location. It may further determine an identity of a potential merchant based on this information.

[0098] The controller may then select a recommended account to display to conduct a transaction, or it may select a recommended, identification card to display. For example, the controller may select the account with the greatest rewards points, lowest interest rate, etc. and display that for the user. As another example, if the controller determines that it is a public library, it may display the cardholder's library card. The controller may present an option to the cardholder to use one or more reward/loyalty points, coupons (e.g.,

Croupous), if available, to conduct the transaction,

[0099] In one embodiment, the cardholder may set default accounts to display. In another embodiment, the cardholder may set locations for using those accounts.

Ϊ_.001Θ0] Examples card selection are disclosed in U.S. Patent Nos.

7,413, 113 and 7,644,859, the disclosures of which are incorporated, by reference, in their entireties. [OOIOI] in one embodiment, the account number for the secure card may be periodically changed without replacing the card. For example, every other year, the issuer may change the card number and provide this information to the card, When a cliarge is made with the new account number, the user may be informed of the new number.

[00102] In one embodiment, the issuer (or account provider) may push a new account number and/or certificate to the secure card. In another

embodiment, the issuer (or account provider) may push an algorithm to the secure card, and the integrated circuit may execute the algorithm to generate an account number.

[001033 Any suitable period for changing the account number may be used as necessary and or desired.

[00104] in one embodiment, a card number may be provided for recuning charges with a single merchant For example, a cardholder may request a card number to be used with a certain merchant. If charges are received from a merchant other than the designated merchant, the charges will be declined, and the card will be considered to have been compromised.

[001053 i one embodiment, a user may request a one-time use account number for use in certain transactions. For example, if the user is conducting a transaction with a merchant with which he or she does not want to share the account number, the user may request and have displayed a number that may be used for one transaction. Following completion of the transaction, the account number may no longer be available for use.

[00106] In one embodiment, the account number may be a "synthetic value" rather than a card number. In another embodiment, it may be an encrypted value. In still another embodiment, it may be a scrambled value. In still another embodiment, it may be a tokenized value based on a random number generator. Any other sort of suitable account number may be used as necessary and or desired.

[0Θ1Θ7] Hereinafter, general aspects of implementation of the systems and methods of the invention will be described. ij The system of the invention or portions of the system of the invention may be in the form of a " rocessing machine," such as a general purpose computer, for example. As used herein, the term "processmg niachine" is to be understood to include at least one processor that uses at least one memory. The at least one memory stores a set of instructions. The instructions may be either permanently or temporarily stored in the memory or memories of the processing machine. The processor executes the instructions tiiai are stored in the memory or memories in order to process data. The set of instructions may include various instructions that perform a particular task or tasks, such as those tasks described above. Such a set of instructions for performing a particular task may be characterized as a program, software program, or simply software.

As noted above, the processmg machine executes the instructions that are stored in the memory or memories to process data. This processing of data may be in response to commands by a user or users of the processing machine, in response to previous processing, in response to a request by another processmg machine and/or any other input, for example,

[00110] As noted above, the processing machine used to implement the invention may be a general purpose computer. However, the processmg niachine described above may also utilize any of a wide variety of other technologies including a special purpose computer, a computer system including, for example, a microcomputer, mini-computer or mainframe, a programmed microprocessor, a micro- controller, a peripheral integrated circuit element, a CSiC (Customer Specific Integrated Circuit) or ASIC (Application Specific Integrated Circuit) or oilier integrated circuit, a logic circuit, a digital signal processor, a programmable logic device such as a FPGA, PLD, PLA or PAL, or any other device or arrangement of devices that is capable of implementing the steps of the processes of the invention.

[00111] The processing machine used to implement the invention may utilize a suitable operating system. Thus, embodiments of the invention may include a processin machine running the iOS operating system, the OS X operating system, the Android, operating system, the Microsoft Windows™ 8 operating system, Microsoft Windows™ 7 operating system, the Microsoft Windows™ Vista™ operating system, the Microsoft Windows™ XP™ operating system, the Microsoft Windows™ NT™ operating system, the Windows™ 2000 operating system, the Unix operating system, the Linux operating system, the Xenix operating system, the IBM AIX™ operating system, the Hewlett-Packard UX™ operating system, the Novell Netware™ operating system, the Sun Microsystems Solaris™ operating system, the OS/2™ operating system, the BeOS™ operating system, the Macintosh operating system, the Apache operating system, an OpenStep™ operating system or another operating system or platform.

[00112] it is appreciated that in order to practice the method of the invention as described above, it is not necessary that the processors and/or the memories of the processing machine be physically located in the same geographical place. That is, each of the processors and the memories used by the processing machine may be located in geograpliicaily distinct locations and connected so as to communicate in any suitable manner. Additionally, it is appreciated that each of the processor and/or the memory may be composed of different physical pieces of equipment . Accordingly, it is not necessary that the processor be one single piece of equipment in one location and that the memor be another single piece of equipment in another location. That is, it is contemplated that the processor may be two pieces of equipment in two different physical locations. The two distinct pieces of equipment may be connected in any suitable manner. Additionally, the memory may include two or more portions of memory in two or more physical locations,

[Θ0113] To explain further, processing, as described above, is performed by various components and various memories. However, it is appreciated that the processing performed by two distinct components as described above may. in accordance with a further embodiment of the invention, be performed by a single component. Further, the processing performed by one distinct component as described above may be performed by two distinct components. In a similar manner, the memory storage performed by two distinct memory portions as described above may, in accordance with a further embodiment of the invention, be performed by a single memory portion. Further, the memory storage performed by one distinct memory portion as described above may be performed by two memory portions.

[001 J4] Further, various technologies may be used, to provide

communication between the various processors and/or memories, as well as to allow the processors and/or the memories of the mvention to communicate with any other entity; i.e., so as to obtain further instructions or to access and use remote memory stores, for example. Such technologies used to provide such communication might include a network, the Internet, Intranet Extranet, LAN, an Ethernet, wireless communication via cell tower or satellite, or any client server system that provides communication, for example. Such

communications technologies may use any suitable protocol such as TCP/IP, UDP, or OSL for example. [00115] As described above, a set of instructions may be used in the processing of the invention. The set of instructions may be in the form of a program or software. The software may be in the form of system software or application software, for example. The software might also be in the form of a collection of separate programs, a program module within a larger program, or a portion of a program module, for example. The software used might also include modular programming in the form of object oriented programming. The software tells the processing machine what to do with the data being processed.

[00116] Further, it is appreciated that the instructions or set of instructions used in the implementation and operation of the invention may be in a suitable form such that th processing machine may read the instructions. For example, the instructions that form a program may be in the form of a suitable

programming language, which is converted to machine language or object code to allow the processor or processors to read the instructions. That is, written lines of programming code or source code, in a particular programming language, are converted to machine language using a compiler, assembler or interpreter. The machine language is binary coded machine instructions that are specific to a particular type of processing machine, i.e., to a particular type of computer, for example. The computer understands the machine language,

[00117] Any suitable programming language may be used in accordance with the various embodiments of the invention. Illustratively, the programming language used may include assembly language, Ada. APL, Basic, C, C++, COBOL, dBase, Forth, Fortran, Java, Modula-2, Pascal, Prolog, REXX, Visual Basic, and/or JavaScript for example. Further, it is not necessary that a single type of instruction or single programming language be utilized in conjunction with the operation of the system and method of the invention. Rather, any number of different programming languages may be utilized as is necessary and/or desirable. [00118] Also, the instructions and/or data used in the practice of the invention may utilize any compression or encryption technique or algorithm, as may he desired. An encryption module might he used to encrypt data. Further, files or other data may be decrypted using a suitable decryption module, for example.

[00119] As described above, the invention may illustratively be embodied in the form of a processing machine, including a computer or computer system, for example, that includes at least one memory. It is to be appreciated that the set of instructions, i.e., the software for example, that enables the computer operating system to perform the operations described above may be contained on any of a wide variety of media or medium, as desired. Further, the data th t is processed by the set of instructions might also be contained on any of a wide variety of media or medium. That is, the particular medium, i.e., the memory in the processing machine, utilized to hold the set of instructions and/or the data used in the inventio may take on any of a variety of physical forms or transmissions, for example, illustratively, the medium may be in the form of paper, paper transparencies, a compact disk, a DVD, an integrated circuit, a hard disk, a floppy disk:, an optical disk, a magnetic tape, a RAM, a ROM, a PROM, an EPROM, a wire, a cable, a fiber, a communications channel, a satellite transmission, a memory card, a SIM card, or other remote transmission, as well as any other medium or source of data that may be read by the processors of the invention.

[00120] Further, the memory or memories used in the processing machine that implements the invention may be in any of a wide variety of forms to allow the memory to hold instructions, data, or other information, as is desired. Thus, the memory might be in the form of a database to hold data. The database might use any desired arrangement of files such as a fiat file arrangement or a relational database arrangement, for example. [ΘΘ12Ι] In the system and method of the invention, a variety of "user interfaces" may be utilized to allow a user to interface with the processing machine or machines that are used to implement the invention. As used herein, a user interface includes any hardware, software, or combination of hardware and software used by the processing machine that allows a user to interact with the processing machine. A user interface may be in the form of a dialogue screen for example. A user interface may also include any of a mouse, touch screen, keyboard, keypad, voice reader, voice recognizer, dialogue screen, menu box, list, checkbox, toggle switch, a pushbutton or any other device that allows a user to receive information regarding the operation of the processing machine as it processes a set of instructions and/or provides the processing machine with information. Accordingly, the user interface is any device that provides communication between a user and a processing machine. The information provided by the user to the processing machine through the user interface may be in the form of a command, a selection of data, or some other input, for example.

[00122] As discussed above, a user interface is utilized by the processing machine that performs a set of instructions such that the processing machine processes data for a user. The user interface is typically used by the processing machine for interacting with a user either to convey information or receive information from the user. However, it should be appreciated that in

accordance with some embodiments of the system and method of the invention, it is not necessary that a human user actually interact with a user interface used by the processing machine of the invention. Rather, it is also contemplated that the user interface of the invention might interact, i.e., convey and receive information, with another processing machine, rather than a human user.

Accordingly, the other processing machine might be characterized as a user. Further, it is contemplated that a user interface utilized in the system and method of the invention may interact partially with, another processing machine or processing machines, while also interacting partially with a huma user.

[00123] it will be readily understood by those persons skilled in the art that the present invention is susceptible to broad utility and application. Many embodiments and adaptations of the present invention other than those herein described, as well as many variations, modifications and equivalent

arrangements, will be apparent from or reasonably suggested by the present invention and foregoing description thereof, without departing from the substance or scope of the invention.

[00124] Accordingly, while the present invention has been described here in detail in relation to its exemplary embodiments, it is to be understood. ^'that this disclosure is only iliusu'ative and exemplary of the present invention and is made to provide an enabling disclosure of the invention. Accordingly, the foregoing disclosure is not intended to be construed or to limit the present invention or otherwise to- exclude any other such embodiments, adaptations, variations, modifications or equivalent arrangements.

Claims

I claim:

1. A transaction device associated with at least one transaction account, comprising:

a substrate comprising;

a display that displays an account identifier for the transaction account;

a sensor that receives authentication information from a user;

a processor that processes the authentication information to verify the authenticity of the user; and

a communicator that communicates at least the account information, the communicator including at least one of a magnetic stripe, an electrical interface, and a wireless RF interface;

wherein the display does not display die account identifier until the user is authenticated; and

the communicator is inactive to conimunicate the account information until the user is authenticated.

2. The transaction device of claim 1, wherein the substrate is clear.

3. The transaction device of claim 1, wherein the substrate,

incorporates the display.

4. The transaction device of claim l_s wherein the display is

transparent.

5. The transaction device of claim 1, wherein the account identifier comprises an account number.

6. The transaction device of claim 1, wherein the transaction account is a credit account, and the account identifier comprises a credit account number.

7. The transaction device of claim 1, wherein the authentication information comprises a biometric from the user.

8. The transaction device of claim 1, further comprising;

an input for receiving data from the user.

9. A method of using a transaction card, comprising;

receiving, at a transaction card, authentication information from a user; retrieving, from a memory, stored authentication information for the user; a computer processor verifying the authenticity of the user by comparing the authentication information with the stored authentication information; and after the user is verified:

displaying on a display an account identifier for a transaction account associated with the user; and

activating at least one of a magnetic stripe, an electrical interface, and a wireless F interface to communicate the account information.

10. The method of claim 9, wherein the account identifier comprises an account number.

11. The method of claim 9, wherein the account is a credit account, and the account identifier comprises a credit account number. 12, The method of claim 9, wherein the authentication information comprises a biometric from the user,

13, The method of claim 10, further comprising:

receiving, from a point of sale device, transaction data;

the computer processor determining if additional user authentication is necessary;

if additional authentication information is necessary, and before the account identifier is displayed on the display and the at least one of a magnetic stripe, an electrical interface, and a wireless RF interface is activated:

displaying on the display a request for second authentication information from the user;

receiving the second authentication information from the user; and the computer processor verifying the second authentication information.

14, The method of claim 10, further comprising:

receiving, from a point of sale device, transaction data:

communicating, to an approval authority, the transaction data;

receiving, from the approval authority, a requirement for additional authentication;

receiving die second authentication information from the user; and the computer processor verifying the second authentication information.

15. The method of claim 14, further comprising: communicating the authentication information to a third art}' if the authentication information does not match the stored authentication

information.

16. The method of claim 14. further comprising:

recording an image or video of the user if the authentication information does not match the stored authentication information.

17. The method of claim 14, further comprising:

transmitting, to a point of sale device, a request to record an image or video of the user if the authentication information does not match the stored authentication information. 8. The method of claim 14, further comprising:

disabling the transaction device if the authentication information does not match the stored authentication information

19. A method of using a transaction card, comprising:

determining at least one transaction account associated with the authenticated user;

displaying on a display an account identifier for the at least one transaction account associated with the user; and activating at least one of a magnetic stripe, an electrical interface, and a wireless RF interface to communicate the account information to a point of sale device.

20. The method of claim 1 , wherein the account identifier is one of an account number, a glyph, an image, a color, an image, and a symbol.