[0001] This invention relates to money boxes which include electronic circuits, particularly communications and processor circuits.

[0002] A traditional money box is a tool to allow children to save cash, and thereby to teach them the benefits of saving. It is a container with a slot into which money can be inserted. The traditional "piggy bank" is one example. Most money boxes also allow the money to be retrieved, though with greater difficulty.

[0003] In recent years, a number of money boxes which include communications and processor circuits have been disclosed. US4673368A discloses a money box which recognises and counts inserted coins.

[0004] US2008/0293019A discloses a money box in the form of a dummy ATM connectable to a computer. The child user can create dummy accounts on the computer, and monitor deposits and withdrawals of cash into the dummy ATM.

[0005] US6454570A (and equivalent EP1050867B) discloses a money box in the shape of a "piggy bank" which, however, also allows money to be freely withdrawn via an orifice locate below the tail of the pig. Positive reinforcing feedback is given for deposits, and negative feedback for withdrawals. The objective of the invention is to allow children to learn to manipulate a bank account. Accordingly, deposits and withdrawals of coins from the piggy bank itself are tracked by circuitry in the piggy bank, and reported to a bank, where a dummy account for the child is located. These are tracked as if they were deposits and withdrawals from the dummy bank account, and realistic statements are issued periodically. However, as stated in US7387237A, the child never submits the cash to the bank, and the bank account is not an actual account which could be used for payments and deposits.

[0006] US5252811A discloses a system with multiple, shared, cash deposit machines which recognise and count inserted coins and bills; identify each deposit with a specific depositor account; and report each deposited amount to a remote computer. When each saver's account reaches a certain level, the remote computer buys a savings bond, and debits the recorded account balance. The contents of the box are periodically emptied and collected by a courier.

[0007] WO2009/076280A discloses a money box integrated into a friendly monster toy, with a money counter and a computer interface to connect to the user's personal computer to allow the user to play games, as well as tracking savings goals. The computer can also communicate with an actual bank account and display the bank account total or the money box cash total. The box can be unlocked at a bank or by a parent.

[0008] US7387237B discloses a money box in the shape of a piggy bank which is linked to a user's computer. The computer itself is linked to an online bank account. The money container within can only be opened by and at the bank. The computer keeps count of deposited coins and reports to the bank. Interest is earned on the deposited coins as if they were in the bank account, provided the user periodically empties them at the bank.

[0009] The present invention proposes various improvements over this prior art. One particular problem is security. A bank cannot rely on cash as being deposited, unless the deposit device is secure (as are the cash deposit machines in US5252811A). However, a piggy bank for children is inherently the property of the child rather than the bank and, accordingly, the cash may never be deposited with the bank. Monitoring remote cash in a piggy bank thus poses a security problem for the bank. On the other hand, giving a child access to a real bank account poses a security problem for the child or their parents. Thus, in much of the prior art above, children are permitted access only to dummy bank accounts, simulated on a local or a remote computer. Additionally, however, where the computer is a local computer, the child is often unable to, or disinterested in, setting up and running a program merely to simulate banking.

[0010] In one preferred aspect, the present invention provides a money box device which can output data received from a remote bank.

[0011] In another preferred aspect, the present invention provides a money box device which is in bidirectional contact with a remote bank (preferably wirelessly), directly rather than with a local PC.

[0012] In another aspect, the present invention provides a money box device which can accept electronic deposits as well as (or even instead of) cash deposits.

[0013] In a yet-further aspect, the present invention provides a money box device with a communications device and programs allowing it to be configured via a user interface on a separate programmable device such as a smart phone.

[0014] Generally, embodiments provide an interactive money box device, where children will be able to interact with their online bank account, as well as use the device to physically save and count coins and notes, which also communicates with a range of application-based phone or tablet computer devices including those using iOS™, Android™, Windows™ and Blackberry™ apps. [0015] Other preferred embodiments together with attendant advantages will be apparent from the following description and claims. These and other aspects and embodiments will now be disclosed, by way of example only, with reference to the accompanying drawings in which:

Figure la is a perspective view from the front, top right-hand corner of the device of a first embodiment; and

Figure lb is a corresponding perspective view from the rear, bottom left-hand corner; Figure 2 is a block diagram indicating the electronic components of the device of the first embodiment;

Figure 3 is a diagram illustrating the computer program components present in the device of the first embodiment;

Figure 4 is a block diagram indicating the connection of the device with other computers via a communications network;

Figure 5 is a flow diagram illustrating the process performed on P2P payment of money to the user of the deviceof the first embodiment;

Figure 6 is a flow diagram illustrating the process performed on contactless payment of money to the user of the device;

Figure 7 is a flow diagram illustrating the process performed on cash deposit by the user of the device; and

Figure 8 is a flow diagram illustrating the process performed on reconciliation of account levels, Figure 8a being the process performed at the money box device and Figure 8b that performed at the bank.

[0016] A first preferred embodiment will now be disclosed. This embodiment allows remote electronic peer-to-peer (P2P) payments and close-range contactless radio-frequency identification (RFID) payments, also known as Near-Field Communications (NFC) payments.

[0017] In P2P payment systems (i.e. those involving a money payment between remote sender and recipient parties, as distinct from a point of sale (POS) transaction), the sender identifies the recipient by a unique proxy identifier (ID). The recipient associates his or her receiving bank account with the proxy ID and is therefore able to receive the P2P payment. Alternatively, where the recipient does not have a bank account or wishes to receive the payment in cash, some method is necessary to authenticate and authorize the recipient. Examples of current electronic P2P systems include the PopMoney™ system from CashEdge Inc. and the QuickPay™ system from JP Morgan Chase. [0018] Known electronic P2P payment systems may allow the sender to initiate a payment by means of a mobile device, such as a smartphone; this is convenient for users not only because of the general convenience and availability of smartphones, but also because these already store contact details such as mobile numbers which may be used as unique identifiers of P2P recipients. GB2497077 (and corresponding International Application PCT/GB2011/052367), incorporated in its entirety by reference, discloses the Barclays® P2P payment system known as "Pingit"™, and in particular the methods of registration and activation of users. In that system (and indeed other P2P payment systems), after registration and activation, a proxy identifier (specifically a mobile phone number) is identified with the name of a user and with a bank account associated with that user.

[0019] In the field of POS transactions, it is known to provide contactless credit cards and debit cards, key fobs, smartcards or other devices (including mobile phones) that use RFID for making secure payments. The embedded chip and antenna enable consumers to wave their card or fob over a reader at the point of sale rather than entering or swiping the card in the slot, to make low-value payments (for example, of up to £20). The card must be located close to the reader: ISO/IEC standard 14443 allows for contactless smart card communications at distances up to 10 cm.

[0020] Referring to Figures la and lb, a money box device 1 comprises a cubic container 2 with a slot 4 on its top face, dimensioned to be large enough to accept the largest denomination coin in the coin set of the country concerned. On its front face is a display panel 6, made up of an array of discrete LEDs 8a, 8b ... On its rear face are a USB port 10 and a power socket 12. On its underside is a cover 14 covering a container 16 for batteries 18 (e.g. 3 "AA" batteries"). The interior of the device 1 below the slot 4 is a cavity for containing coins and/or banknotes, which are directed therein from the slot along a money path. A lockable door (not shown) allows money to be removed when unlocked.

[0021] Referring to Figure 2, the electronic components of the device 1 comprise, located in the money path downstream of the slot 4, a coin and/or banknote sensor module 1012 which generates signals from the coin and supplies these via a communications bus 1006 to a processor 1004.

[0022] The sensor module 1012 contains one or multiple sensors which may be optical, inductive, capacitative, acoustic, or other suitable sensors, as are known in the field of coin and banknote detection and available within apparatus from vendors such as MEI Inc, National Rejectors Inc, Japan Cash Machines and others. [0023] Also connected to the processor 1004 is an accelero meter module 1014, generating a signal enabling the processor 1004 to detect when the device 1 is shaken or inverted.

[0024] The processor 1004 is connected via the bus 1006 to primary memory (e.g. RAM) 1008 and secondary memory (e.g. Flash or EPROM) 1010, the former used for transitory calculations and the latter storing relatively static data such as the operations programs in accordance with which the processor 1004 operates, the current cash balance held in the device 1, and the current and reference data such as IP addresses and reference values for coin and/or banknote validation. It drives the display panel 6 via the bus 1006. The processor is preferably a custom- built RISC processor incorporating a core, such as the AVR™ 8-bit RISC microcontrollers available from Atmel of Norway, integrated with memory and other devices in a single IC 1000.

[0025] A communications interface circuit 1024 is coupled to communicate with the USB port 10, and with a WiFi transceiver 1016 and a RFID module 1018. The former is connectable to a local WiFi network as discussed below and the latter is arranged to sense contactless credit or debit cards used with a bank account, and/or mobile phones arranged for contactless payment.

[0026] Referring to Figure 3, the main software components present in the device are illustrated. A configuration controller program 2002 selects the format of the display, selecting a balance display mode 2022, a target display mode 2024, a control display mode 2026 and a charge-up display mode 2028. The display is generated by display controller software 2010.

[0027] Sensor controller software 2006 interprets the sensor output signals, indicating which type of money has been inserted. A money counter routine 2004 adds the newly-detected money to the current balance which is stored in EPROM 2016.

[0028] Public Key Infrastructure (PKI) encryption module 2008 is implemented as programmed hardware, and encrypts and decrypts messages sent to or received from the WiFi transceiver 1016, which is controlled by WiFi controller software 2012 capable of using TCP/IP or other protocols to send messages via the internet. Finally, operating system and other software 2014 to effect basic control of the processor 1004 is provided.

[0029] Referring to Figure 4, in a system within which the invention may be used, a mobile device 21 communicating over a mobile network 23 with a mobile gateway 24. In some embodiments, the mobile device may run a novel mobile P2P payment application 22. The mobile device 21 is of a type that is known per se, such as an iPhone™, Blackberry™ or Android™ smartphone. The mobile device need not have a voice telephony function. It will be appreciated that the mobile device 21 is merely an example of a potentially large number of mobile devices operable within the system. [0030] The mobile gateway 24 interfaces with an ATM switch 5 for communication with an ATM 6 running a novel ATM P2P application 6a, using for example the BASE24 protocol. The ATM switch 5 and the ATM 6 are of a type that is known per se in ATM networks and need not be described further.

[0031] The mobile gateway 24 also manages a registration database 27 to record the mapping of proxy IDs, such as mobile numbers, email addresses or social network identities, to mobile devices 21, as described in the above-referenced GB2497077A. The registration database 27 stores details of the mobile devices 21, such as IMEI numbers. The mobile gateway 24 also records receive-only registrations from the ATM 6.

[0032] The mobile gateway 24 communicates with the mobile P2P payment application 22 using a data interchange protocol such as JSON (JavaScript Object Notation) over a wireless data connection such as GPRS, EDGE or 3G. The mobile gateway 24 is also able to send short messages to the mobile device 21 using for example SMS.

[0033] The mobile gateway 24 also communicates with core accounting systems 28 and a payments gateway 29, for implementation of the sending of payments from sender to recipient accounts. The core accounting systems 28 are of a type that is known per se, and need not be described further.

[0034] The payments gateway 29 is of a type generally known per se, save as additionally described herein. It stores a communications program for managing communications with the money box 1, the functions of which are described below. It is in communication with the Internet 25 so as to be able to send messages to and receive messages from the money box device 1, via a wireless local area network (LAN) provided by a WiFi router 26 located at the home of the user. Remote P2P payment in

[0035] Figure 5 illustrates the process performed on payment of money to the user of the money box device 1 from a remote paying party using a P2P device (for example, payment by a grandparent on a child's birthday). In this embodiment, the money box device 1 has previously been associated with a mobile telephone number, and a bank account for the device user, together with the name of the device user, in the registration database 7. Accordingly, rather than sending SMS messages to a paid party mobile telephone, the messages generated by the mobile gateway 4 are sent via the internet 25 to the money box device 1 as encrypted emails. [0036] In other respects the payment process is generally conventional and as described in the above-referenced GB2497077A. To initiate the payment, the paying party accesses the registered mobile P2P application 22 (step 2102) by entering a passcode. If the passcode is correct, the user is prompted to enter the mobile number of the recipient (as a proxy ID), the amount of the payment, and optionally a message to the recipient (step 2104). Alternatively, if the mobile P2P application 22 is able to access a contact list stored on the mobile device 21, the sender may select the recipient from the contact list.

[0037] The mobile P2P application 22 then sends (step 2106) the proxy ID to the mobile gateway 24, which looks up the recipient proxy ID in the registration database 27 (step 2108) and sends (step 2110) a registration indication message to the mobile P2P application 22 including the recipient's name.

[0038] The mobile P2P application 22 displays a message asking the paying party to confirm the P2P payment, and quoting the recipient's name. If the paying party confirms the P2P payment, (step 2112) the mobile P2P application sends a payment instruction message to the mobile gateway 24 (step 2114) and displays a confirmation message to the paying party.

[0039] The payment instruction message is digitally signed by the mobile P2P application 22, using a key or code. This key or code may be generated when the P2P payment application 22 is activated, and access to the key or code is secured using the passcode required to access the mobile P2P application 22.

[0040] If the payment is successfully made to recipient's account, the mobile gateway 24 sends a payment confirmation SMS to the mobile device 21, including the name of the recipient, which is displayed to the paying party (step 2116). Where the payment is confirmed but cannot be made until a future date, such as the following day, the future payment date may be included in the payment confirmation message.

[0041] The mobile gateway 24 processes the payment to the recipient owner of the money box device 1 using the bank account details registered against the recipient's proxy ID in the registration database 27 (step 2118). It also generates a payment message for the recipient indicating the amount paid, the name of the sender, and the message entered. The message is passed to the payment gateway 29 which sends it as an email to the money box device 1 (step 2120), encrypted under the unique public encryption key associated with the money box.

[0042] At the money box device 1, on receipt and decryption of the message using its unique private decryption key, the display controller 2010 causes the LEDs 18 to flash to indicate an incoming payment, then generates a scrolling display saying "[name of sender] has sent you [amount] [followed by message, if any]". For example, "Uncle Bill has sent you £5, Happy Birthday Jill." Exactly the same procedure is followed where other types of payment to the user's account are associated with a message. For example, a mobile banking application used on a payphone or computer may allow input of an associated message to a money box 1, and counter staff at a local bank may ask a customer whether they wish to input a message for transmission to a money box 1.

Local contactless payment in

[0043] Referring to Figure 6, in this embodiment, the money box device is configured to act as a POS merchant terminal accepting payments from a contactless credit or debit card (or a RFID- enabled mobile phone). The amount to be accepted is configured in advance. It may either be a fixed "pocket money" amount, or may be specified at the time of payment.

[0044] To configure the amount, a smartphone, a tablet computer or a personal computer is used as a configuration control device (a smartphone 31 is shown in Figure 4), connecting to the money box device 1 either via the wireless LAN provided by the WiFi router 26 (as shown in Figure 4), or via the USB port 10. An application ("app") 32 on the smartphone 31 generates menus and exchanges messages with the configuration controller program 2002 on the money box device 1 (step 2202). This provides a level of security, in that only devices registered on the LAN can control the money box 1. The app 32 allows the user to configure various aspects of the operation of the money box 1, including setting balance enquiry security as discussed below. The app 32 is typically on the computer or phone of the parent or guardian of the child user, so that the money box 1 operates under parameters set by parental control.

[0045] The app 32 prompts the control device owner (the paying party) to select between balance mode (invoking routine 2022), target mode (invoking routine 2024), display mode (invoking routine 2026), or charge-up mode (invoking routine 2028) (step 2204). The control device signals the selection to the money box device 1 (step 2206), and accordingly the configuration controller program 2002 selects (step 2208) the appropriate routine (in this case, 2028).

[0046] The app 32 offers the paying party an option to set the paid amount for the next transaction, and/or to set or modify a default payment amount for all future transactions. The paying party enters the desired amount and the app 32 transmits it to the configuration controller program 2002 which passes it to the charge up routine 2028 where it is stored to be used at the next transaction (collectively, step 2210). [0047] When the RFID sensor indicates the presence of a local contactless payment device (e.g. credit or debit card) within a few centimetres (step 2212), the charge up routine 2028 debits the device by the stored payment amount (step 2214). At the money box device 1, the display controller 2010 causes the LEDs 18 to flash to indicate an incoming payment, then generates a scrolling display indicating the amount in a message such as "Your account has been topped up by [amount] ^' " (step 2216).

[0048] The charge-up routine 2028 then creates a payment message for transmission to the payments gateway 29, containing the payment details from the contactless payment device and the identity of the money box device 1, which is encrypted by the encryption routine 2008, addressed to the IP address of the payments gateway 29 and transmitted via WiFi to the internet router and thence to the payments gateway 29 (step 2218). The payments gateway 29 then creates a payment debiting the payer account and crediting the user balance associated with the money box device 1 (step 2220). A message updating the new account balance is sent to the money box (step 2222).

[0049] In a further embodiment, the money box 1 includes a slot (not shown) to receive a contactless RFID payment card. The card is intended to allow a child to spend small amounts of money. It may have a payment limit (for example £20 or £5). The card slot provides a convenient storage place for the child's payment card. The RFID module 1018 includes an RFID writer arranged in the card slot, capable of writing credit to the child's payment card. When an RFID payment is made as described above whilst a payment card is detected within the card slot, rather than transmitting the payment to the child's bank account, the money box 1 credits the child's payment card within the slot. Thus, where the child has a payment card and where the parent is in agreement, the child's pocket money may be credited to the child's payment card for spending on low value items such as candy or beverages.

[0050] In this further embodiment, the money box 1 is also capable of reporting the balance held on the payment card to the bank computer, and of displaying the balance, and/or a total savings amount which includes the payment card balance as well as cash and bank account balances. Local cash payment in

[0051] Finally, the owner of the money box device 1 (or anyone else) can deposit cash into it. To do so, he or she inserts a coin (or, mutatis mutandis, a banknote) into the slot 4 (step 2302). The coin sensor 1012 detects the denomination of the coins (step 2304) and adds the value to a temporarily accumulated sum of coins already inserted (step 2306). The money counter 2004 waits a predetermined interval after the insertion of each item of money (step 2308). After timeout of the interval, the accumulated total value represented by the denomination(s) of the deposited coin(s) is added to the local balance stored in the balance EPROM 2016 within secondary memory 1010 (step 2310). The money box device then displays a message such as "You deposited [accumulated amount]. Your total cash is now [new local total]."

Balance reconciliation and update

[0052] Referring to Figure 8a, when the local credit balance value, stored in EPROM 2016, is altered by the money counter 2004 after a local cash deposit is made to the money box device 1 (step 2402), according to this embodiment, a balance update enquiry message is generated and transmitted (step 2408, performed in the same manner as described above) to the payments gateway 29. Should the money box 1 not be in contact with the internet (due to a router failure for example), this operation is performed when contact with the network is reacquired.

[0053] Likewise, referring to Figure 8b, when a P2P payment is made as described above (or when any other conventional deposit such as a cheque payment is made into the user's bank account), the balance of the bank account held within the core accounting systems 28 is increased accordingly. On each such change to an account which is associated, in the registration database 27, with a money box device 1 (step 2502), the payments gateway 29 sends an encrypted balance update message to the money box device 1 via the internet 25. The bank may also periodically interrogate the money box, for example monthly (step 2504) in response to which interrogation (step 2406) the money box proceeds to step 2408.

[0054] The user can also initiate a balance enquiry from the money box device 1, conveniently by simply lifting and lightly shaking the device (as a child would to assess the number of coins in a piggy bank). On detection of such a user request by shaking of the accelerometer 1014 within the money box 1 (step 2404), the money counter 2004 generates a balance enquiry message which is encrypted and sent via WiFi as described above (step 2408). The device may also permit other triggers for a balance enquiry. In this embodiment, to protect the user's bank balance information from unauthorised queries, a secure trigger is used, such as holding or swiping a predetermined RFID card (a credit or debit card associated with the money box user or their parent or guardian, for example) over the device. Such cards are inherently associated with the user. For other triggers, the configuration app 32 offers an option to apply security - for example, to require the accelerometer 1014 to detect a specific sequence of shaking so that the money box 1 will only generate a balance query message on detection of that sequence.

[0055] At the user's bank, when a message is received from the money box (step 2508) an encrypted response message is generated containing the current bank balance, and transmitted back to the money box device 1 (step 2510).

[0056] As a result, on receipt (step 2410), the money box device 1 is able to store in EPROM 2016 both a local total amount of cash deposited, and an account balance as held at the user's bank account, and to calculate a total savings amount for display as discussed below. Thus, whenever there is a change to the account balance, or the local cash balance, or whenever the user wishes, the bank transmits the current balance to the money box. It is not necessary for the money box to transmit the cash balance to the bank computer in all embodiments.

[0057] Conveniently, when a balance message is sent to the money box 1 in response to a user generated request as described above, any payment messages sent since the last user generated request are also re-transmitted, e,g, "REPEAT: [Uncle Bill has sent you £5, Happy Birthday Jill]" Thus, if the user of the money box 1 was not present when the message was last sent, they can see it.

[0058] The money counter 2004 may be used to track the state of fullness of the money box device 1, by adding volume units associated with each type of money item input into the device to a running volume total or (if it is a weight sensor) simply by detecting when the weight passes a threshold. Alternatively, a separate sensor for detecting a likely full condition may be included. In either case, when the money box device approaches a full state, or on some other predetermined condition such as the end of each month (step 2412), the money counter 2004 causes the display controller 2010 to display a "Reconcile now" message (step 2414).

[0059] The user can then bring the money box device 1 to his or her local bank branch or post office where cashier staff unlock and empty the device, count the deposited contents, and accept them as a deposit into the associated bank account. They then re-lock the device 1. The local balance is then set to zero.

Balance and target displays

[0060] According to this embodiment, the money box device 1 is arranged to add together the locally stored cash balance and the balance received from the bank, to generate a savings total which is displayed in a total display mode selected by the display mode routine 2026 in response to a balance enquiry. In addition to displaying the total, the display mode routine 2026 may provide a more detailed mode displays indicating how the total is calculated, for example, "You have saved [local] in cash + [bank balance] at the bank, so your total savings are: [total]".

[0061] In this embodiment, the device 1 also sets and stores a savings target amount under control of a target routine 2024. The child can choose a savings target from a list that has been prepared by the parent using a mobile device 31 as a control device as disclosed above.

[0062] The target routine 2024 causes the display controller 2010 to display a "thermometer", slider, clockface or other scalar indicator device to show how much money the child has in the bank, and in the moneybox, against their savings target and how much more they need to save. It also generates a notification when the target is reached - for example, flashing or generating a siren noise.

[0063] Another tool in the target routine 2024 is used to set a rate of savings - for example to show the child that if they save £1 per week towards their selected target, it will take x weeks to save up for it. They could experiment by varying the numbers: varying the target, savings amount and length of time required.

Computer Systems

[0064] The entities described herein, such as the mobile gateway, may be implemented by conventional computer systems, as disclosed for example by reference to Figure 10 of the above-mentioned GB2497077A. Embodiments of the present invention may be implemented as programmable code for execution by such computer systems. After reading this description, it will become apparent to a person skilled in the art how to implement the invention using other computer systems and/or computer architectures.

[0065] Such systems include one or more processors, communication infrastructure, a main memory, preferably random access memory (RAM), and possibly a secondary memory which may include, for example, a hard disk drive and/or a removable storage drive, representing a floppy disk drive, a magnetic tape drive, an optical disk drive, etc. They also include a communication interface such as a modem, a network interface (such as an Ethernet card), a communication port, a Personal Computer Memory Card International Association (PCMCIA) slot and card, etc. Software and data transferred via the communication interface are in the form of signals, which may be electronic, electromagnetic, optical, or other signals

[0066] The terms "computer program medium" and "computer usable medium" are used generally to refer to media such as removable storage drive, a hard disk installed in hard disk drive, and signals. These computer program products are means for providing software to the computer system. However, these terms may also include signals (such as electrical, optical or electromagnetic signals) that embody the computer program disclosed herein.

Alternative Embodiments

[0067] The above embodiments are described by way of example, and alternative embodiments which may become apparent to the skilled person on reading the above description may nevertheless fall within the scope of the claims.

[0068] Computers may be implemented as control logic in hardware, firmware, or software or any combination thereof.

[0069] Rather than using WiFi wireless communications, other suitable protocols such as Bluetooth™ or Zigbee™ may be employed. The device may be provided with a SIM card and phone chipset, so as to be able to communicate like a mobile telephone (though without requiring voice communications capability), allowing messages to be sent as text/SMS messages rather than via the Internet as discussed above.

[0070] Rather than being cubic, the money box may be in the traditional "piggy bank" shape, or may reflect the shape of a character or animal, or otherwise resemble a toy. Power options include; mains powered, battery powered, rechargeable battery or USB.

[0071] It is possible optionally to add a camera, calculator, mini keyboard or other input device to enhance the customer experience when interacting with the main bank account.

[0072] The display may be a Light Emitting Diode (LED) or Thin-film Transistor (TFT) display screen, allowing account balances, messages and other information to be made visible, and/or ultrabright LEDs included inside the device allowing the device to flash as a notification when activity takes place. Additonally or alternatively, it may glow, and change colour to indicate events or activity. It could additionally show links to games, or other matter. Higher deposited amounts may bring in-game rewards, such as opening higher levels, or gaining points, or more generally reward points such as Nectar™ points which can be spent or used to achieve a discount. When dormant, the display may show a clockface, and/or may provide a nightlight. Additionally or alternatively, the box may include a tactile feedback device to cause it to vibrate on occurrence of some event or activity, and to generate a buzz giving an audio notification. More sophisticated audio feedback may be given by a sound generator. For the visually impaired, a speech-to-text synthesiser or other audio output device may be provided for use in addition to or instead of the display, to read out any displayed messages. [0073] The display could also be a touch screen, allowing a user to enter a PIN code, to allow transmission of a balance enquiry message, or for other control functions. Additional security input mechanisms could be provided, such as voice or speech recognition, fingerprint swipe sensing and so on. Rather than a shaking sequence, where a lockable door is provided, the lock may detect a sequence of clockwise and anticlockwise key rotations.

[0074] Rather than routing locally made RFID payments to the child's payment card if present, as described above, in other embodiments the payment may be remitted to the child's bank account and a reverse payment from the bank account to the child's payment card may then be executed. Thus, if the child's payment card is not present, it can be credited when next presented. Storing credit within the child's bank account rather than locally in the money box 1 offers some protection against malfunction, loss, theft or destruction of the money box.

[0075] The configuration application may allow the parent to combine features of these embodiments, for example crediting the first £5 of any deposit to the child's card and remitting any remaining amount to the child's bank account, to encourage a balance between saving and spending.

[0076] It would be possible, though less preferable, to dispense with the separate contactless card and allow the money box 1 itself to function as a contactless payment card. Though harder to transport than a card, the money box 1 is also harder to lose.

[0077] The use of a mobile number as a proxy P2P ID is advantageous, as it allows the verification or activation codes to be pushed to the mobile via a different communication channel than that used by the mobile P2P payment application. However, it need not correspond to any actual telephone device and could therefore be a virtual number. An alternative proxy ID such as an email address or social networking identity could also be used to identify a recipient of a P2P payment.