Fraud reduction system for transactions

Patent metadata

Field	Value
Publication number	US-10460382-B2
Application number	US-201816115375-A
Country	US
Kind code	B2
Filing date	Aug 28, 2018
Priority date	Feb 8, 2010
Publication date	Oct 29, 2019
Grant date	Oct 29, 2019

Abstract

A system, apparatus, and method for reducing fraud in payment or other transactions by providing issuers with a warning that a transaction being processed for authorization is potentially fraudulent. In some embodiments, the present invention processes data obtained from a consumer authentication process that is used in card not present (CNP) transactions to determine characteristics or indicia of fraud from previous transactions. The characteristics or indicia of fraud can be used to generate a set of fraud detection rules or another form of fraud assessment model. A proposed transaction can then be evaluated for potential fraud using the fraud assessment model.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
in response to a request, from a merchant computer, to perform a fraud assessment process for a payment account that is being used to conduct a payment transaction prior to initiation of authorization processing for the payment transaction:
receiving, by an access control server and from a risk management engine, an early warning message for the payment transaction in an authentication request message prior to generation of an authorization request message by the access control server, wherein the risk management engine generates the early warning message based at least in part on the fraud assessment using rules generated from authentication history data, the authentication history data comprising an archive of authentication operations performed or attempted using an authentication protocol that requires a user to provide an authentication credential prior to the authorization processing; and
transmitting, by the access control server to the merchant computer associated with the payment transaction, a decline message for the authentication request message based at least in part on the early warning message.

2. The computer-implemented method of claim 1 , wherein generating the rules comprises applying a linear regression model to generate the rules.

3. The computer-implemented method of claim 1 , wherein the fraud assessment process comprises one or more of a velocity check, a limit check, or a geo-location check.

4. The computer-implemented method of claim 1 , wherein the access control server is operated by an issuer of the payment account.

5. The computer-implemented method of claim 1 , wherein the request to perform the fraud assessment is in response to receipt of a verify enrollment request by a directory server.

6. The computer-implemented method of claim 1 , wherein the early warning message also prevents, by the access control server, generation of a payer authentication request and a response message and transmitted for the payment transaction.

7. The computer-implemented method of claim 1 , wherein an authentication history server stores the authentication history data.

8. The computer-implemented method of claim 7 , further comprising identifying, by the risk management engine, authentication process characteristics common to confirmed fraudulent transactions in the authentication history data.

9. The computer-implemented method of claim 8 , wherein generating the rules is further based at least in part on the authentication process characteristics.

10. The computer-implemented method of claim 1 , wherein receiving the early warning message is further based at least in part a determination that a risk of the payment transaction exceeds a specified threshold and is suspected of being fraudulent, the risk based at least in part on the fraud assessment process for the payment transaction.

11. The computer-implemented method of claim 1 , wherein the authentication credential includes a password.

12. The computer-implemented method of claim 1 , wherein the authentication protocol is based on a 3D secure protocol.

13. An apparatus for reducing fraud in transactions, comprising:
a processor programmed to execute a set of instructions;
a memory coupled to the processor for storing the set of instructions; and
the set of instructions stored in the memory, wherein when executed by the processor the apparatus reduces fraud in the transactions in response to a request, from a merchant computer, to perform a fraud assessment process for a payment account that is being used to conduct a payment transaction prior to initiation of authorization processing for the payment transaction by:
receiving, by the apparatus and from a risk management engine, an early warning message for the payment transaction in an authentication request message prior to generation of an authorization request message by the access control server, wherein the risk management engine generates the early warning message based at least in part on the fraud assessment using rules generated from authentication history data, the authentication history data comprising an archive of authentication operations performed or attempted using an authentication protocol that requires a user to provide an authentication credential prior to the authorization processing; and
transmitting, by the apparatus to the merchant computer associated with the payment transaction, a decline message for the authentication request message based at least in part on the early warning message.

14. The apparatus of claim 13 , wherein generating the rules comprises applying a linear regression model to generate the rules.

15. The apparatus of claim 13 , wherein the fraud assessment process comprises one or more of a velocity check, a limit check, or a geo-location check.

16. The apparatus of claim 13 , wherein the apparatus is operated by an issuer of the payment account.

17. The apparatus of claim 13 , wherein an authentication history server stores the authentication history data.

18. The apparatus of claim 17 , further comprising identifying, by the risk management engine, authentication process characteristics common to confirmed fraudulent transactions in the authentication history data.

19. An access control server, comprising:
a processor programmed to execute a set of instructions;
a memory coupled to the processor for storing the set of instructions; and
the set of instructions stored in the memory, wherein when executed by the programmed processor implements a method comprising:
in response to a request, from a merchant computer, to perform a fraud assessment process for a payment account that is being used to conduct a payment transaction prior to initiation of authorization processing for the payment transaction:
receiving, by an access control server and from a risk management engine, an early warning message for the payment transaction in an authentication request message prior to generation of an authorization request message by the access control server, wherein the risk management engine generates the early warning message based at least in part on the fraud assessment using rules generated from authentication history data, the authentication history data comprising an archive of authentication operations performed or attempted using an authentication protocol that requires a user to provide an authentication credential prior to the authorization processing; and
transmitting, by the access control server to the merchant computer associated with the payment transaction, a decline message for the authentication request message based at least in part on the early warning message.

20. The access control server of claim 19 , wherein receiving the early warning message is further based at least in part a determination that a risk of the payment transaction exceeds a specified threshold and is suspected of being fraudulent, the risk based at least in part on the fraud assessment process for the payment transaction.

Assignees

• Visa Int Service Ass

Inventors

• Dominguez Benedicto Hernandez

Classifications

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q40/00 Primary

  Finance; Insurance; Tax strategies; Processing of corporate or income taxes · CPC title