Secure card not present transactions using chip-enabled cards
Techniques are described for performing secure card not present (CNP) transactions using integrated circuit chip-enabled cards. The techniques include continually or periodically tracking a location of a user's card by a user computing device, e.g., a “smart” phone, and storing a log of datasets relating to the location of the user's card at a server device. Based on the tracking, the user computing device may alert the user via a push notification or other message when the user's card is not within a preset range of the user computing device. In addition, an authentication server determines a location of a purchaser computing device attempting to perform a CNP transaction using the user's card information, and compares the location of the purchaser computing device with a most recent location of the user's card retrieved from the log of datasets to determine whether to approve the CNP transaction.
1. A user computing device comprising:
a memory configured to store data; and
one or more processors in communication with the memory and configured to:
determine a geographical location of the user computing device;
send an interrogating electromagnetic signal having a preset range from the user computing device;
determine that a chip-enabled card is not within the preset range from the user computing device based on not receiving a response electromagnetic signal from the chip-enabled card after a predetermined amount of time; and
present, via a user interface device of the user computing device, a notification indicating that the chip-enabled card is not within the preset range from the user computing device.
2. The user computing device of claim 1 , wherein the one or more processors are configured to:
generate a dataset including only a time stamp and the geographical location of the user computing device; and
send the dataset to a server device associated with a card-issuing entity of the chip-enabled card.
3. The user computing device of claim 2 , wherein the geographical location of the user computing device is a first geographical location of the user computing device, the interrogating electromagnetic signal is a first interrogating electromagnetic signal, the response electromagnetic signal is a first response electromagnetic signal, and the dataset is a first dataset, and wherein the one or more processors are configured to:
determine a second geographical location of the user computing device;
send a second interrogating electromagnetic signal having the preset range from the user computing device;
determine that the chip-enabled card is within the preset range from the user computing device based on receipt of a second response electromagnetic signal from the chip-enabled card including identifying information of the chip-enabled card;
generate a second dataset including a time stamp, the second geographical location of the user computing device, and the identifying information of the chip-enabled card; and
send the second dataset to the server device associated with the card-issuing entity of the chip-enabled card.
4. The user computing device of claim 1 , wherein the one or more processors are configured to determine whether the chip-enabled card is within the preset range from the user computing device continuously.
5. The user computing device of claim 4 , wherein the geographical location of the user computing device is a first geographical location of the user computing device, the interrogating electromagnetic signal is a first interrogating electromagnetic signal, the response electromagnetic signal is a first response electromagnetic signal, and wherein, to continuously determine whether the chip-enabled card is within the preset range from the user computing device, the one or more processors are configured to:
after determining the first geographical location of the user computing device, determine a second geographical location of the user computing device; and
in response to determining that a difference between the second geographical location of the user computing device and the first geographical location of the user computing device is greater than a preset threshold distance:
send a second interrogating electromagnetic signal having the preset range from the user computing device; and
determine whether the chip-enabled card is within the preset range from the user computing device based on whether a second response electromagnetic signal is received from the chip-enabled card.
6. The user computing device of claim 1 , wherein the one or more processors are configured to send the interrogating electromagnetic signal in response to movement of the user computing device.
7. The user computing device of claim 6 , wherein the one or more processors are configured to send the interrogating electromagnetic signal when the movement is indicative of walking.
8. The user computing device of claim 6 , wherein the one or more processors are configured to send the interrogating electromagnetic signal when the movement is indicative of being within a moving vehicle.
9. The user computing device of claim 1 , wherein the one or more processors are configured to send the interrogating electromagnetic signal periodically based on a predetermined time interval.
10. A computer-implemented method comprising:
determining, by a user computing device, a geographical location of the user computing device;
sending, from the user computing device, an interrogating electromagnetic signal having a preset range from the user computing device;
determining, based on not receiving a response electromagnetic signal from the chip-enabled card after a predetermined amount of time, that the chip-enabled card is not within the preset range from the user computing device; and
presenting, via a user interface device of the user computing device, a notification indicating that the chip-enabled card is not within the preset range from the user computing device.
11. The computer-implemented method of claim 10 , the method further comprising:
generating a dataset including only a time stamp and the geographical location of the user computing device; and
sending, from the user computing device to a server device associated with a card-issuing entity of the chip-enabled card, the dataset.
12. The computer-implemented method of claim 11 , wherein the geographical location of the user computing device is a first geographical location of the user computing device, the interrogating electromagnetic signal is a first interrogating electromagnetic signal, the response electromagnetic signal is a first response electromagnetic signal, and the dataset is a first dataset, the method further comprising:
determining a second geographical location of the user computing device;
sending, from the user computing device, a second interrogating electromagnetic signal having the preset range from the user computing device;
determining, based on receipt of a second response electromagnetic signal from the chip-enabled card including identifying information of the chip-enabled card, that the chip-enabled card is within the preset range from the user computing device;
generating a second dataset including a time stamp, the second geographical location of the user computing device, and the identifying information of the chip-enabled card; and
sending, from the user computing device and to the server device associated with the card-issuing entity of the chip-enabled card, the second dataset.
13. The computer-implemented method of claim 10 , the method further comprising determining whether the chip-enabled card is within the preset range from the user computing device continuously.
14. The computer-implemented method of claim 13 , wherein the geographical location of the user computing device is a first geographical location of the user computing device, the interrogating electromagnetic signal is a first interrogating electromagnetic signal, the response electromagnetic signal is a first response electromagnetic signal, and wherein, to continuously determine whether the chip-enabled card is within the preset range from the user computing device, the method further comprising:
after determining the first geographical location of the user computing device, determining a second geographical location of the user computing device; and
in response to determining that a difference between the second geographical location of the user computing device and the first geographical location of the user computing device is greater than a preset threshold distance:
sending a second interrogating electromagnetic signal having the preset range from the user computing device; and
determining whether the chip-enabled card is within the preset range from the user computing device based on whether a second response electromagnetic signal is received from the chip-enabled card.
15. The computer-implemented method of claim 10 , the method further comprising sending the interrogating electromagnetic signal based on movement of the user computing device.
16. The computer-implemented method of claim 10 , the method further comprising sending the interrogating electromagnetic signal periodically based on a predetermined time interval.
17. The computer-implemented method of claim 10 , the method further comprising:
receiving, via the user interface device of the user computing device, a selection of a frequency at which to determine whether the chip-enabled card is within the preset range from the user computing device; and
determining whether the chip-enabled card is within the preset range from the user computing device based on the selection.
18. The computer-implemented method of claim 10 , wherein the geographical location of the user computing device is a first geographical location of the user computing device and the interrogating electromagnetic signal is a first interrogating electromagnetic signal, the method further comprising:
receiving, via the user interface device of the user computing device, a security setting;
determining a second geographical location of the user computing device,
when first and second geographical locations are greater than a threshold distance apart, sending, from the user computing device, a second interrogating electromagnetic signal, the threshold distance being determined by the security setting.