Metrics systems and methods for token transactions
View Patent ↗Systems and methods for monitoring token access transactions are provided. In one embodiment, the invention provides receiving transaction records for a plurality of bank card transactions, wherein the transaction records include transaction information and infrastructure information; determining whether a reportable event has occurred based on the transaction information with the transaction records; and providing an alert representing the reportable event.
1. A method of evaluating bank card transactions, comprising:
receiving transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of bank card information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a computing system evaluating the transaction information and physical infrastructure information received with the transaction records and determining whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
providing an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
2. The method of claim 1 , wherein for a given point of sale terminal used in a transaction, the physical infrastructure information comprises an identification of the given point of sale terminal.
3. The method of claim 2 , wherein the identification of the point of sale terminal comprises a terminal ID.
4. The method of claim 2 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
5. The method of claim 1 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
6. The method of claim 1 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
7. The method of claim 1 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
8. The method of claim 5 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
9. The method of claim 6 , wherein the alert is sent to a merchant identified with the given point of sale terminal or to an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
10. The method of claim 1 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
11. The method of claim 1 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
12. The method of claim 11 , wherein the transaction information includes a counter value.
13. The method of claim 12 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
14. The method of claim 12 , wherein the counter value is used to encrypt at least a portion of the transaction data.
15. The method of claim 11 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
16. The method of claim 11 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
17. The method of claim 1 , wherein the transaction information comprises location information used to determine a location of a point of sale terminal used in the transaction.
18. The method of claim 17 , further comprising the step of comparing the location information with a predetermined location of the point of sale terminal to determine the validity of the transaction.
19. The method of claim 17 , further comprising the step of comparing the location information for a presented bank card with other transactions for the same bank card to identify possible fraudulent activity.
20. The method of claim 17 , further comprising the step of comparing the location information for a presented bank card with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
21. The method of claim 1 , wherein the transaction information comprises time-stamp information.
22. The method of claim 1 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an encrypting mode.
23. The method of claim 1 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an authenticating mode.
24. The method of claim 1 , wherein the alert comprises a report indicating a quantity of replay attacks.
25. The method of claim 1 , wherein the alert comprises a report indicating a quantity of transactions on a compromised point of sale terminal.
26. The method of claim 1 , wherein the bank card comprises a magnetic stripe card, a smart card or other token.
27. A server system for evaluating bank card transactions, comprising:
a processor configured to execute a plurality of instructions;
a data storage device coupled to the processor and configured to store the plurality of instructions;
a first module configured to receive transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of token information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a second module configured to evaluate the transaction information and physical infrastructure information received with the transaction records and to determine whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
a third module configured to provide an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the modules comprise hardware coupled to the processor or computer usable storage medium having computer program code stored thereon and configured to cause the processor to perform the recited function, or a combination thereof; and
wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
28. The system of claim 27 , wherein for a given point of sale terminal, the physical information comprises an identification of the given point of sale terminal for a transaction.
29. The system of claim 28 , wherein the identification of the point of sale terminal comprises a terminal ID.
30. The system of claim 28 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
31. The system of claim 27 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
32. The system of claim 31 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
33. The system of claim 27 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
34. The system of claim 31 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
35. The system of claim 32 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the group of transactions or to the an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
36. The system of claim 27 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
37. The system of claim 27 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
38. The system of claim 37 , wherein the transaction information includes a counter value.
39. The system of claim 38 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
40. The system of claim 39 , wherein the counter value is used to encrypt at least a portion of the transaction data.
41. The system of claim 37 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
42. The system of claim 37 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
43. The system of claim 27 , wherein the transaction information comprises location information used to determine a location of a terminal used in the transaction.
44. The system of claim 43 , wherein the location information is compared with a predetermined location of the terminal to determine the validity of the transaction.
45. The system of claim 43 , wherein the location information for a presented bank card is compared with other transactions for the same bank card to identify possible fraudulent activity.
46. The system of claim 43 , wherein the location information for a presented bank card is compared with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
47. The system of claim 27 , wherein the transaction information comprises time-stamp information.
48. The system of claim 27 , wherein the alert comprises data indicating whether a given terminal is operating in an encrypting mode.
49. The system of claim 27 , wherein the alert comprises data indicating whether a given terminal is operating in an authenticating mode.
50. The system of claim 27 , wherein the alert comprises a report indicating a quantity of replay attacks.
51. The system of claim 27 , wherein the alert comprises a report indicating a quantity of transactions on a compromised terminal.
52. The method of claim 5 , wherein the alert is sent to an acquiring bank of the merchant used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
53. The method of claim 7 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
54. The method of claim 27 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, and the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank of the encrypting status of the merchant's point of sale terminal.
55. The method of claim 33 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
56. A method of evaluating bank card transactions, comprising:
receiving transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of bank card information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a computing system evaluating the transaction information and physical infrastructure information received with the transaction records and determining whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
providing an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
57. The method of claim 56 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
58. The method of claim 56 , wherein for a given point of sale terminal used in a transaction, the physical infrastructure information comprises an identification of the given point of sale terminal.
59. The method of claim 58 , wherein the identification of the point of sale terminal comprises a terminal ID.
60. The method of claim 58 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
61. The method of claim 56 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
62. The method of claim 56 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
63. The method of claim 56 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
64. The method of claim 61 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
65. The method of claim 62 , wherein the alert is sent to a merchant identified with the given point of sale terminal or to an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
66. The method of claim 56 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
67. The method of claim 56 , wherein the transaction information further comprises a counter value.
68. The method of claim 67 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
69. The method of claim 67 , wherein the counter value is used to encrypt at least a portion of the transaction data.
70. The method of claim 56 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
71. The method of claim 56 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
72. The method of claim 56 , wherein the transaction information further comprises location information used to determine a location of a point of sale terminal used in the transaction.
73. The method of claim 72 , further comprising the step of comparing the location information with a predetermined location of the point of sale terminal to determine the validity of the transaction.
74. The method of claim 72 , further comprising the step of comparing the location information for a presented bank card with other transactions for the same bank card to identify possible fraudulent activity.
75. The method of claim 72 , further comprising the step of comparing the location information for a presented bank card with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
76. The method of claim 56 , wherein the transaction information further comprises time-stamp information.
77. The method of claim 56 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an encrypting mode.
78. The method of claim 56 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an authenticating mode.
79. The method of claim 56 , wherein the alert comprises a report indicating a quantity of replay attacks.
80. The method of claim 56 , wherein the alert comprises a report indicating a quantity of transactions on a compromised point of sale terminal.
81. The method of claim 56 , wherein the bank card comprises a magnetic stripe card, a smart card or other token.
82. A server system for evaluating bank card transactions, comprising:
a processor configured to execute a plurality of instructions;
a data storage device coupled to the processor and configured to store the plurality of instructions;
a first module configured to receive transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of token information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a second module configured to evaluate the transaction information and physical infrastructure information received with the transaction records and to determine whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
a third module configured to provide an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the modules comprise hardware coupled to the processor or computer usable storage medium having computer program code stored thereon and configured to cause the processor to perform the recited function, or a combination thereof; and wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
83. The system of claim 82 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
84. The system of claim 82 , wherein for a given point of sale terminal, the physical information comprises an identification of the given point of sale terminal for a transaction.
85. The system of claim 83 , wherein the identification of the point of sale terminal comprises a terminal ID.
86. The system of claim 83 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
87. The system of claim 82 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
88. The system of claim 87 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
89. The system of claim 82 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
90. The system of claim 87 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
91. The system of claim 88 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the group of transactions or to the an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
92. The system of claim 82 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
93. The system of claim 82 , wherein the transaction information includes a counter value.
94. The system of claim 83 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
95. The system of claim 94 , wherein the counter value is used to encrypt at least a portion of the transaction data.
96. The system of claim 82 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
97. The system of claim 82 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
98. The system of claim 82 , wherein the transaction information comprises location information used to determine a location of a terminal used in the transaction.
99. The system of claim 98 , wherein the location information is compared with a predetermined location of the terminal to determine the validity of the transaction.
100. The system of claim 98 , wherein the location information for a presented bank card is compared with other transactions for the same bank card to identify possible fraudulent activity.
101. The system of claim 98 , wherein the location information for a presented bank card is compared with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
102. The system of claim 82 , wherein the transaction information comprises time-stamp information.
103. The system of claim 82 , wherein the alert comprises data indicating whether a given terminal is operating in an encrypting mode.
104. The system of claim 82 , wherein the alert comprises data indicating whether a given terminal is operating in an authenticating mode.
105. The system of claim 82 , wherein the alert comprises a report indicating a quantity of replay attacks.
106. The system of claim 82 , wherein the alert comprises a report indicating a quantity of transactions on a compromised terminal.
107. The method of claim 61 , wherein the alert is sent to an acquiring bank of the merchant used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
108. The method of claim 63 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
109. The method of claim 82 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, and the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank of the encrypting status of the merchant's point of sale terminal.
110. The method of claim 98 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
111. A method of evaluating bank card transactions, comprising:
receiving transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of bank card information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a computing system evaluating the transaction information and physical infrastructure information received with the transaction records and determining whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
providing an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the transaction information comprises location information used to determine a location of a point of sale terminal used in the transaction.
112. The method of claim 111 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
113. The method of claim 111 , wherein for a given point of sale terminal used in a transaction, the physical infrastructure information comprises an identification of the given point of sale terminal.
114. The method of claim 113 , wherein the identification of the point of sale terminal comprises a terminal ID.
115. The method of claim 113 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
116. The method of claim 111 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
117. The method of claim 111 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
118. The method of claim 111 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
119. The method of claim 116 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
120. The method of claim 117 , wherein the alert is sent to a merchant identified with the given point of sale terminal or to an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
121. The method of claim 111 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
122. The method of claim 111 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
123. The method of claim 122 , wherein the transaction information includes a counter value.
124. The method of claim 123 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
125. The method of claim 123 , wherein the counter value is used to encrypt at least a portion of the transaction data.
126. The method of claim 122 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
127. The method of claim 122 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
128. The method of claim 111 , further comprising the step of comparing the location information with a predetermined location of the point of sale terminal to determine the validity of the transaction.
129. The method of claim 111 , further comprising the step of comparing the location information for a presented bank card with other transactions for the same bank card to identify possible fraudulent activity.
130. The method of claim 111 , further comprising the step of comparing the location information for a presented bank card with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
131. The method of claim 111 , wherein the transaction information comprises time-stamp information.
132. The method of claim 111 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an encrypting mode.
133. The method of claim 111 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an authenticating mode.
134. The method of claim 111 , wherein the alert comprises a report indicating a quantity of replay attacks.
135. The method of claim 111 , wherein the alert comprises a report indicating a quantity of transactions on a compromised point of sale terminal.
136. The method of claim 111 , wherein the bank card comprises a magnetic stripe card, a smart card or other token.
137. A server system for evaluating bank card transactions, comprising:
a processor configured to execute a plurality of instructions;
a data storage device coupled to the processor and configured to store the plurality of instructions;
a first module configured to receive transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of token information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a second module configured to evaluate the transaction information and physical infrastructure information received with the transaction records and to determine whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
a third module configured to provide an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the modules comprise hardware coupled to the processor or computer usable storage medium having computer program code stored thereon and configured to cause the processor to perform the recited function, or a combination thereof; and wherein the transaction information comprises location information used to determine a location of a terminal used in the transaction.
138. The system of claim 137 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
139. The system of claim 137 , wherein for a given point of sale terminal, the physical information comprises an identification of the given point of sale terminal for a transaction.
140. The system of claim 139 , wherein the identification of the point of sale terminal comprises a terminal ID.
141. The system of claim 139 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
142. The system of claim 137 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
143. The system of claim 142 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
144. The system of claim 137 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
145. The system of claim 142 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
146. The system of claim 143 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the group of transactions or to the an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
147. The system of claim 137 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
148. The system of claim 137 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
149. The system of claim 148 , wherein the transaction information includes a counter value.
150. The system of claim 149 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
151. The system of claim 150 , wherein the counter value is used to encrypt at least a portion of the transaction data.
152. The system of claim 148 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
153. The system of claim 148 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
154. The system of claim 137 , wherein the location information is compared with a predetermined location of the terminal to determine the validity of the transaction.
155. The system of claim 137 , wherein the location information for a presented bank card is compared with other transactions for the same bank card to identify possible fraudulent activity.
156. The system of claim 137 , wherein the location information for a presented bank card is compared with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
157. The system of claim 137 , wherein the transaction information comprises time-stamp information.
158. The system of claim 137 , wherein the alert comprises data indicating whether a given terminal is operating in an encrypting mode.
159. The system of claim 137 , wherein the alert comprises data indicating whether a given terminal is operating in an authenticating mode.
160. The system of claim 137 , wherein the alert comprises a report indicating a quantity of replay attacks.
161. The system of claim 137 , wherein the alert comprises a report indicating a quantity of transactions on a compromised terminal.
162. The method of claim 116 , wherein the alert is sent to an acquiring bank of the merchant used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
163. The method of claim 118 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
164. The method of claim 137 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, and the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank of the encrypting status of the merchant's point of sale terminal.
165. The method of claim 144 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
166. A method of evaluating bank card transactions, comprising:
receiving transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of bank card information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a computing system evaluating the transaction information and physical infrastructure information received with the transaction records and determining whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
providing an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein for a given point of sale terminal used in a transaction, the physical infrastructure information comprises an identification of the given point of sale terminal.
167. The method of claim 166 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
168. The method of claim 166 , wherein the identification of the point of sale terminal comprises a terminal ID.
169. The method of claim 166 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
170. The method of claim 166 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
171. The method of claim 166 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
172. The method of claim 166 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
173. The method of claim 170 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
174. The method of claim 171 , wherein the alert is sent to a merchant identified with the given point of sale terminal or to an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
175. The method of claim 166 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
176. The method of claim 166 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
177. The method of claim 176 , wherein the transaction information includes a counter value.
178. The method of claim 177 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
179. The method of claim 177 , wherein the counter value is used to encrypt at least a portion of the transaction data.
180. The method of claim 176 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
181. The method of claim 176 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
182. The method of claim 166 , wherein the transaction information comprises location information used to determine a location of a point of sale terminal used in the transaction.
183. The method of claim 182 , further comprising the step of comparing the location information with a predetermined location of the point of sale terminal to determine the validity of the transaction.
184. The method of claim 182 , further comprising the step of comparing the location information for a presented bank card with other transactions for the same bank card to identify possible fraudulent activity.
185. The method of claim 182 , further comprising the step of comparing the location information for a presented bank card with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
186. The method of claim 166 , wherein the transaction information comprises time-stamp information.
187. The method of claim 166 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an encrypting mode.
188. The method of claim 166 , wherein the alert comprises data indicating whether a given point of sale terminal is operating in an authenticating mode.
189. The method of claim 166 , wherein the alert comprises a report indicating a quantity of replay attacks.
190. The method of claim 166 , wherein the alert comprises a report indicating a quantity of transactions on a compromised point of sale terminal.
191. The method of claim 166 , wherein the bank card comprises a magnetic stripe card, a smart card or other token.
192. A server system for evaluating bank card transactions, comprising:
a processor configured to execute a plurality of instructions;
a data storage device coupled to the processor and configured to store the plurality of instructions;
a first module configured to receive transaction records for a plurality of bank card transactions conducted at point of sale terminals, wherein the transaction records include transaction information and physical infrastructure information, the transaction information comprising at least one of token information, transaction amount, and transaction date for the transactions, and the physical infrastructure information comprising information regarding an operating condition of a given point of sale terminal used in a transaction;
a second module configured to evaluate the transaction information and physical infrastructure information received with the transaction records and to determine whether a reportable event has occurred based on the operating condition of the given point of sale terminal; and
a third module configured to provide an alert representing the reportable event if the computing system determines a reportable event has occurred based on the operating condition of the given point of sale terminal;
wherein the modules comprise hardware coupled to the processor or computer usable storage medium having computer program code stored thereon and configured to cause the processor to perform the recited function, or a combination thereof; and wherein for a given point of sale terminal, the physical information comprises an identification of the given point of sale terminal for a transaction.
193. The system of claim 192 , wherein the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, an encrypting status of a component at the given point of sale terminal, a count of bank card swipes at the given point of sale terminal, or a count of bank cards rejected at the given point of sale terminal.
194. The system of claim 192 , wherein the identification of the point of sale terminal comprises a terminal ID.
195. The system of claim 192 , wherein the identification of the point of sale terminal comprises a serial number of the terminal.
196. The system of claim 192 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a given transaction.
197. The system of claim 196 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises information indicating whether the given point of sale terminal has encrypted some or all of the transaction information in a group of transactions.
198. The system of claim 192 , wherein the transaction records include authentication information identifying authenticity of the bank card used in a bank card transaction.
199. The system of claim 196 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the given transaction or to the issuing bank of the bank card used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
200. The system of claim 197 , wherein the alert is sent to a merchant identified with the given point of sale terminal used in the group of transactions or to the an issuing bank of a bank card used in one or more transactions in the group of transactions, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
201. The system of claim 192 , wherein the alert comprises an email message generated and sent to a designated holder of a bank card used in a bank card transaction upon occurrence of the bank card transaction.
202. The system of claim 192 , wherein the transaction information comprises information used to determine whether a bank card is being used in multiple duplicate bank card transactions.
203. The system of claim 202 , wherein the transaction information includes a counter value.
204. The system of claim 203 , wherein the counter value is a value of a counter at a point of sale terminal at which the bank card is presented for the transaction, and wherein the counter is incremented upon execution of a predetermined quantity of transactions.
205. The system of claim 204 , wherein the counter value is used to encrypt at least a portion of the transaction data.
206. The system of claim 202 , wherein the alert is sent to an issuing bank of the bank card used in the multiple duplicate transactions.
207. The system of claim 202 , wherein the alert is sent to an authorized holder of the bank card used in the multiple duplicate transactions.
208. The system of claim 192 , wherein the transaction information comprises location information used to determine a location of a terminal used in the transaction.
209. The system of claim 208 , wherein the location information is compared with a predetermined location of the terminal to determine the validity of the transaction.
210. The system of claim 208 , wherein the location information for a presented bank card is compared with other transactions for the same bank card to identify possible fraudulent activity.
211. The system of claim 208 , wherein the location information for a presented bank card is compared with location and time-stamp information for other transactions for the same bank card to identify possible fraudulent activity.
212. The system of claim 192 , wherein the transaction information comprises time-stamp information.
213. The system of claim 192 , wherein the alert comprises data indicating whether a given terminal is operating in an encrypting mode.
214. The system of claim 192 , wherein the alert comprises data indicating whether a given terminal is operating in an authenticating mode.
215. The system of claim 192 , wherein the alert comprises a report indicating a quantity of replay attacks.
216. The system of claim 192 , wherein the alert comprises a report indicating a quantity of transactions on a compromised terminal.
217. The method of claim 170 , wherein the alert is sent to an acquiring bank of the merchant used in the given transaction, the alert indicating whether the terminal has encrypted some or all of the transaction information in the given transaction.
218. The method of claim 172 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.
219. The method of claim 192 , wherein for a given point of sale terminal used in a transaction, the information regarding the operating condition of the given point of sale terminal comprises an encrypting status of the given point of sale terminal, and the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank of the encrypting status of the merchant's point of sale terminal.
220. The method of claim 198 , wherein the alert is sent to an acquiring bank of the merchant used in the transaction, informing the acquiring bank that a skimmed or otherwise unauthenticated token was presented for a transaction.