Granted Patent B2

US 10,275,747 · App. 15/014,757 · Granted Apr 30, 2019

Abstract

Claims (30)

1. A system for instant issue of financial transaction cards in response to card requests made by customers at one or more branch locations associated with a financial institution, wherein the card requests each include customer information associated with a customer and card information to be associated with a financial transaction card, the system comprising:

card services provider networks;

at least one branch data terminal at each branch location, wherein the branch data terminal:

is effective to receive customer information associated with a card request;

is functionally coupled via a first secure data communications connection to the card services provider networks and

is effective to transmit the card request with the customer information and the card information to the card services provider network via the first secure data communications connection, while the customers are present in the branch locations;

wherein the card services provider networks comprise:

an instant issue server network including an application server;

a database effective to securely store card information transmitted by the branch data terminal and associated with each card request;

an instant issue print perimeter network coupled to the instant issue server network and including a print server hosting card print application software, wherein in response to a card request the application server is operable to communicate a card print job including an associated card file to the print server, and wherein the print server and card print application software are effective to securely transmit card print commands and card files associated with card requests while the customers are present at the branch locations; and

a branch card printer network at each branch location that includes:

a security appliance in bidirectional communication over a second secure data communications connection to the instant issue print perimeter network to securely receive the card print commands and card files from the print server, the security appliance being communicatively isolated from the branch data terminal at the branch location by the card services provider network remote from the branch location, and

an associated card printer in-communication with the security appliance to print personalized financial transaction cards while the customers are present in the branch locations in response to receiving the card print commands and the card files from the security appliance.

2. The system of claim 1 , wherein the card printer at each branch location is effective to electronically communicate card print job success and failure messages to the card services provider print server over the second secure communications connection.

3. The system of claim 2 , wherein the card services provider networks are further effective to communicate card print success and failure information based on the card print job success and failure messages from the branch card printer to the branch data terminal at the branch location from which the corresponding card print job success or failure message was communicated to the card services provider print server.

4. The system of claim 1 , wherein the security appliance of the branch card printer network is only operable for communication with the card print application software over the second secure data communications connection on a public network.

5. The system of claim 1 , wherein the card services provider networks include an instant web service perimeter network to provide an interface between the first secure data communications connection and the instant issue server network, and further comprising:

a system web service coupled to the branch data terminals, wherein the branch data terminals securely communicate with the card services provider networks through the system web service, wherein the system is operative to provide a virtual private network (VPN) tunnel functionally coupled to the system web service, and to the card services provider networks across a public network, and wherein such VPN tunnel is effective to provide encrypted communications between the system web service and the instant web service perimeter network using a second security appliance.

6. The system of claim 5 , wherein the instant web service perimeter network includes a card services provider web service, and wherein the card services provider web service and system web service are operable to generate one or more user interfaces for display at each branch data terminal for use in requesting a financial transaction card.

7. The system of claim 5 , wherein the instant issue server network is coupled to the instant web service perimeter network through a third security appliance, wherein the instant issue print perimeter network is connected to the instant issue server network through a fourth security appliance.

8. The system of claim 7 , wherein the print server establishes a persistent connection to the application server.

9. The system of claim 7 , wherein another issue server network is coupled to the instant issue server network through the first security appliance, the instant web serve perimeter network and the third security appliance.

10. The system of claim 1 , wherein the system is operative to provide a virtual private network (VPN) tunnel functionally coupled to the instant issue print perimeter network and the branch card printer network at each branch location across a public network, and wherein such VPN tunnel is effective to provide encrypted communications between the instant issue print perimeter network and the associated branch card printer network at each branch location using the security appliance and another security appliance.

11. The system of claim 10 , wherein the security appliance of the branch card printer network at each branch location is operative as a dynamic endpoint to initiate and maintain the associated VPN tunnel that is functionally coupled to the instant issue print perimeter network using the another appliance as a static endpoint.

12. The system of claim 10 wherein the branch card printer of the branch card printer network at each branch location is effective to communicate card print job success or failure messages to the printer server of the instant issue print perimeter network, and the print server is effective to communicate card print job success or failure messages to the application server of the instant issue server network.

13. The system of claim 12 wherein, in response to the communication of card print job success or failure messages by the print server to the application server the application server is effective to communicate card print success or failure information to a branch bank terminal at the branch location from which a corresponding card print job success or failure message was communicated to the print server.

14. The system of claim 1 , wherein each card print job and included card file transmitted by the card printer server to an associated card printer includes card personalization data and card image data.

15. The system of claim 1 wherein, in response to a card request received at application server software associated with the database generates a reference number that is stored in an associated card data file, and wherein the reference number is used by the hardware-host security module to retrieve the associated PIN card information for use in applying calculations to the associated card data file.

16. The system of claim 1 , wherein the card services provider networks further comprise:

another instant issue server network including another application server to retrieve card data from database that is requested by application server.

Assignments (12)