System and method for device fraud prevention

Patent metadata

Field	Value
Publication number	US-10798582-B2
Application number	US-202016750840-A
Country	US
Kind code	B2
Filing date	Jan 23, 2020
Priority date	Nov 30, 2016
Publication date	Oct 6, 2020
Grant date	Oct 6, 2020

Abstract

Users may enroll one or more devices based on device information and a resource information associated with a resource. Such information and identifiers may be tokenized according to a hash algorithm to generate an enrolled user token. This enrolled user token may be utilized to verify communications and status changes of the user device. In response to a change of status of the user, similar information as that used to generate the enrolled user token, or at least a portion thereof, may be gathered from the user device and subjected to the same hash algorithm to generate a current user token. The current user token and the enrolled user token may be compared to determine if the user device is a spoofed device.

First claim

What is claimed is:

1. A method comprising:
receiving, with a server, status change information indicative of a status change associated with a user device;
in response to receiving the status change information, electronically requesting, with the server, a current user token from the user device;
in response to receiving the current user token from the user device, electronically determining, with the server, whether a difference between the current user token and an enrolled user token is within a predefined threshold by comparing the current user token to the enrolled user token; and
in response to determining that the difference between the current user token and the enrolled user token is not within the predefined threshold, controlling a remote server to disregard communications from the user device until the difference between the current user token and the enrolled user token is determined to be within the predefined threshold.

2. The method of claim 1 , wherein the enrolled user token is based on registered user device information that is associated with the user device and registered resource information that is associated with a resource of a user associated with the user device.

3. The method of claim 2 , wherein the registered user device information includes registration information selected from a group consisting of:
a registered International Mobile Subscriber Identity (IMSI) of the user device,
a registered Integrated Circuit Card Identification (IC-CID) of a circuit included in the user device,
a registered International Mobile Equipment Identity (IMEI) of the user device, and
a registered Mobile Station International Subscriber Directory Number (MSISDN) associated with the user device.

4. The method of claim 3 , wherein the current user token is based on one or more of current user device information, current resource information, and a hash procedure.

5. The method of claim 4 , wherein the current user device information includes information selected from a second group consisting of:
a current International Mobile Subscriber Identity (IMSI) of the user device,
a current Integrated Circuit Card Identification (IC-CID) of a circuit included in the user device,
a current International Mobile Equipment Identity (IMEI) of the user device, and
a current Mobile Station International Subscriber Directory Number (MSISDN) associated with the user device.

6. The method of claim 4 , wherein the hash procedure is a one-way hash algorithm.

7. The method of claim 1 , wherein the status change information is a user device location change communication generated by a location monitor service.

8. The method of claim 1 , wherein the status change information is a mobile payment request from the user device.

9. A system comprising:
a user device; and
a server configured to
receive status change information indicative of a status change associated with the user device,
in response to receiving the status change information, electronically request a current user token from the user device,
in response to receiving the current user token from the user device, electronically determine whether a difference between the current user token and an enrolled user token is within a predefined threshold by comparing the current user token to the enrolled user token, and
in response to determining that the difference between the current user token and the enrolled user token is not within the predefined threshold, control a remote server to disregard communications from the user device until the difference between the current user token and the enrolled user token is determined to be within the predefined threshold.

10. The system of claim 9 , wherein the enrolled user token is based on registered user device information that is associated with the user device and registered resource information that is associated with a resource of a user associated with the user device.

11. The system of claim 10 , wherein the registered user device information includes registration information selected from a group consisting of:
a registered International Mobile Subscriber Identity (IMSI) of the user device,
a registered Integrated Circuit Card Identification (IC-CID) of a circuit included in the user device,
a registered International Mobile Equipment Identity (IMEI) of the user device, and
a registered Mobile Station International Subscriber Directory Number (MSISDN) associated with the user device.

12. The system of claim 11 , wherein the current user token is based on one or more of current user device information, current resource information, and a hash procedure.

13. The system of claim 12 , wherein the current user device information includes information selected from a second group consisting of:
a current International Mobile Subscriber Identity (IMSI) of the user device,
a current Integrated Circuit Card Identification (IC-CID) of a circuit included in the user device,
a current International Mobile Equipment Identity (IMEI) of the user device, and
a current Mobile Station International Subscriber Directory Number (MSISDN) associated with the user device.

14. The system of claim 12 , wherein the hash procedure is a one-way hash algorithm.

15. The system of claim 9 , wherein the status change information is a user device location change communication generated by a location monitor service.

16. The system of claim 9 , wherein the status change information is a mobile payment request from the user device.

17. A non-transitory computer-readable storage medium having computer readable instructions that, when executed by an electronic processor, causes the electronic processor to perform a set of operations comprising:
receiving status change information indicative of a status change associated with a user device;
in response to receiving a status change information, electronically requesting a current user token from the user device;
in response to receiving the current user token from the user device, electronically determining whether a difference between the current user token and an enrolled user token is within a predefined threshold by comparing the current user token to the enrolled user token; and
in response to determining that the difference between the current user token and the enrolled user token is not within the predefined threshold, controlling a remote server to disregard communications from the user device until the difference between the current user token and the enrolled user token is determined to be within the predefined threshold.

18. The non-transitory computer-readable medium of claim 17 , wherein the enrolled user token is based on registered user device information that is associated with the user device and registered resource information that is associated with a resource of a user associated with the user device.

19. The non-transitory computer-readable medium of claim 18 , wherein the registered user device information includes registration information selected from a group consisting of:
a registered International Mobile Subscriber Identity (IMSI) of the user device,
a registered Integrated Circuit Card Identification (IC-CID) of a circuit included in the user device,
a registered International Mobile Equipment Identity (IMEI) of the user device, and
a registered Mobile Station International Subscriber Directory Number (MSISDN) associated with the user device.

20. The non-transitory computer-readable medium of claim 19 , wherein the current user token is

Assignees

• Mastercard International Inc

Inventors

• Unnerstall Rick
• Hively Corey M

Classifications

• H04W12/64

  using geofenced areas · CPC title

• H04W12/72

  Subscriber identity · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W4/02

  Services making use of location information · CPC title

• H04W12/12 Primary

  Detection or prevention of fraud · CPC title