System and method for instant issue of personalized financial transaction cards
View Patent ↗In a method for instantly issuing a personalized financial transaction card to a customer a bank employee receives customer information and card information from the customer at a branch location. The card information may include a card personal identification number (PIN) selected by the customer. The operator inputs the customer information and at least some the card information into a data processing terminal at the branch. The customer information and the card information are communicated from the branch across a network to a card services provider. At the card services provider, the PIN is entered into a PIN database and a reference number associated with the customer and a PIN offset is generated. The reference number and at least some of the customer data and card data may be stored in a card file associated with the customer. The reference number is used to retrieve the PIN from the PIN database. The retrieved PIN is then used to apply calculations to the card file. The card file is securely sent from the card services provider across the network to the branch location. Using information from the card file, the financial transaction card is printed for the customer at the branch location. In a preferred embodiment, the personalized card is instantly issued while the customer is present at the branch location.
1. A system for instant issue of financial transaction cards in response to card requests made by customers at one or more branch locations associated with a financial institution, wherein the card requests each include customer information associated with a customer and card information to be associated with a financial transaction card, the system comprising:
card services provider networks;
at least one branch data terminal at each branch location, wherein the branch data terminal:
is effective to receive customer information associated with a card request;
is functionally coupled via a first secure data communications connection to the card services provider networks; and,
is effective to transmit the card request with the customer information and the card information to the card services provider network via the first secure data communications connection, while the customers are present in the branch locations;
a system web service coupled to the branch data terminals, wherein the branch data terminals securely communicate with the card services provider networks through the system web service;
wherein the card services provider networks comprise:
an instant issue server network including an application server;
an instant web service perimeter network to provide an interface between the first secure data communications connection and the instant issue server network, wherein the instant web service perimeter network includes a card services provider web service, and wherein the card services provider web service and system web service are operable to generate one or more user interfaces for display at each branch data terminal for use in requesting a financial transaction card;
a database effective to securely store card information transmitted by the branch data terminal and associated with each card request;
an instant issue print perimeter network coupled to the instant issue server network and including a print server hosting card print application software, wherein in response to a card request the application server is operable to communicate a card print job including an associated card file to the print server, and wherein the print server and card print application software are effective to securely transmit card print commands and card files associated with card requests while the customers are present at the branch locations; and,
a branch card printer network at each branch location that includes:
a security appliance in communication over a second secure data communications connection to the instant issue print perimeter network to securely receive the card print commands and card files from the print server, the security appliance being communicatively isolated from the branch data terminal at the branch location by the card services provider network remote from the branch location; and,
an associated card printer in communication with the security appliance to print personalized financial transaction cards while the customers are present in the branch locations in response to receiving the card print commands and the card files from the security appliance.
2. The system of claim 1 , wherein the system is operative to provide a virtual private network (VPN) tunnel functionally coupled to the system web service, and to the card services provider networks across a public network, and wherein such VPN tunnel is effective to provide encrypted communications between the system web service and the instant web service perimeter network using a second security appliance.
3. The system of claim 2 , wherein the instant issue server network is coupled to the instant web service perimeter network through a third security appliance.
4. The system of claim 3 , wherein the card services provider networks further comprise:
another instant issue server network including the database and another application server to retrieve card data from the database that is requested by application server, wherein said another issue server network is coupled to the instant issue server network through the second security appliance, the instant web service perimeter network, and the third security appliance.
5. The system of claim 3 , wherein the instant issue print perimeter network is connected to the instant issue server network through a fourth security appliance.
6. The system of claim 5 , wherein the print server establishes a persistent connection to the application server.
7. The system of claim 1 , wherein the system is operative to provide a virtual private network (VPN) tunnel functionally coupled to the instant issue print perimeter network and the branch card printer network at each branch location across a public network, and wherein such VPN tunnel is effective to provide encrypted communications between the instant issue print perimeter network and the associated branch card printer network at each branch location using the security appliance and another security appliance.
8. The system of claim 7 , wherein the security appliance of the branch card printer network at each branch location is operative as a dynamic endpoint to initiate and maintain the associated VPN tunnel that is functionally coupled to the instant issue print perimeter network using the another appliance as a static endpoint.
9. The system of claim 1 , wherein the branch card printer of the branch card printer network at each branch location is effective to communicate card print job success or failure messages to the printer server of the instant issue print perimeter network, and the print server is effective to communicate card print job success or failure messages to the application server of the instant issue server network.
10. The system of claim 9 , wherein in response to the communication of card print job success or failure messages by the print server to the application server, the application server is effective to communicate card print success or failure information to a branch bank terminal at the branch location from which a corresponding card print job success or failure message was communicated to the print server.
11. The system of claim 1 , wherein the card services provider networks further comprise:
an instant issue card personalization network coupled to the instant issue server network, and including a hardware-host security module (HSM) to provide cryptographic functions for card data encryption.
12. The system of claim 1 , wherein the card information of each card request includes a personal identification number (PIN) to be associated with a financial transaction card.
13. The system of claim 12 , wherein the at least one branch data terminal at each branch location includes:
a keypad-type data terminal for customer selection of the PIN card information to be associated with a financial transaction card.
14. The system of claim 12 , wherein the database stores the PIN card information associated with each card request.
15. The system of claim 12 , wherein the card services provider networks further comprise:
another instant issue server network including the database and another application server to retrieve card data from the database that is requested by the application server.
16. The system of claim 15 , wherein the system is operative to provide a virtual private network (VPN) tunnel functionally coupled to the system web service, and to the card services provider networks across a public network, and wherein such VPN tunnel is effective to provide encrypted communications between the system web service and the instant web service perimeter network using a second security appliance.
17. The system of claim 16 , wherein the instant issue server network is coupled to the instant web service perimeter network through a third security appliance.
18. The system of claim 17 , wherein said another issue server network is coupled to the instant issue server network through the second security appliance, the instant web service perimeter network, and the third security appliance.
19. The system of claim 18 , wherein the instant issue print perimeter network is connected to the instant issue server network through a fourth security appliance.
20. The system of claim 18 , wherein each card print job and included card file transmitted by the print server to an associated card printer includes card personalization data and card image data.