Contacts for misdirected payments and user authentication

Patent metadata

Field	Value
Publication number	US-10810569-B2
Application number	US-201715419940-A
Country	US
Kind code	B2
Filing date	Jan 30, 2017
Priority date	Jan 30, 2017
Publication date	Oct 20, 2020
Grant date	Oct 20, 2020

Abstract

Disclosed herein are systems and methods for processing a payment request that use mobile devices to have money transferred. These mobile devices are capable of running a payment transfer application that facilitates a transfer of money. A user can then execute the payment transfer application using a mobile device to send money, through a payment processing system that runs the payment transfer application, to a recipient account. One or more techniques authenticate a user of the mobile device by multi factor authentication prior to processing requests for money transfer initiated by the user.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer, a plurality of hash values representing a plurality of contact records stored in a mobile device associated with a user, wherein the mobile device generates each hash value in the plurality of hash values for each contact record stored on the mobile device according to a hash function, wherein the computer does not receive the plurality of contact records in a plaintext format;
storing, by the computer into a database, the hash values representing the contact records, wherein the hash values representing the contact records are associated with a user record of the user stored in the database, and wherein the user record contains a history of one or more payment requests indicating a recipient hash value associated with each payment request in the history of payment requests;
receiving, by the computer, a payment request from a payment application executing on the mobile device, the payment request containing a recipient-user identifier for the payment request;
generating, by the computer, a new recipient hash value based upon the recipient-user identifier in the payment request received from the mobile device;
determining, by the computer, that the new recipient hash value does not match any of the hash values representing the plurality of contact records;
determining, by the computer, that the new recipient hash value does not match any of the recipient hash values associated with the payment requests in the history of payment requests; and
upon the computer determining that the new recipient hash value does not match the hash values representing the contact records and does not match the history of payment requests:
identifying, by the computer, a plurality of hash values associated with a plurality of contacts of a recipient user associated with the recipient-user identifier received from a device of the recipient user, wherein each hash value associated with a contact of the plurality of contacts of the recipient user identifies a user of a payment service;
computing, by the computer, a similarity score for each hash value associated with a contact of the recipient user, wherein the similarity score for each hash value is based upon a comparison of the hash value with the plurality of hash values representing the contact records associated with the user record in the database; and
upon the computer determining that the similarity score satisfies a threshold value, authorizing, by the computer, the payment request.

2. The method according to claim 1 , wherein authorizing the payment request comprises:
executing, by the computer, a payment transaction associated with the payment request, wherein the computer transmits to a system of record server a message indicating approval of the payment transaction.

3. A method comprising:
receiving, by a computer, a plurality of hash values representing a plurality of contact records stored in a mobile device associated with a user;
storing, by the computer into a database, the plurality of hash values representing the plurality of contact records;
receiving, by the computer, a payment request from a payment application executing on the mobile device, the payment request containing a recipient-user identifier for the payment request;
generating, by the computer, a new recipient hash value based upon the recipient-user identifier for the payment request;
determining, by the computer, that the new recipient hash value does not match any hash value of the plurality of hash values representing the plurality of contact records;
determining, by the computer, that the new recipient hash value does not match any recipient hash values of a plurality of recipient hash values associated with a history of payment requests; and
upon the computer determining that the new recipient hash value does not match the hash values representing the contact records and does not match the recipient hash values associated with the history of payment requests:
identifying, by the computer, a plurality of hash values associated with a plurality of contacts of a recipient user associated with the recipient-user identifier, wherein each hash value identifies a user of a payment service;
computing, by the computer, a similarity score for each hash value associated with a contact of the recipient user, wherein the similarity score for each hash value is based upon a comparison of the hash value with the plurality of hash values representing the plurality of contact records stored in the mobile device associated with the user; and
upon the computer determining that the similarity score satisfies a threshold value, authorizing, by the computer, the payment request.

4. The method according to claim 3 , wherein the mobile device generates each hash value in the plurality of hash values for each contact record stored in the mobile device according to a hash function.

5. The method according to claim 3 , wherein the computer does not receive the plurality of contact records in a plaintext format.

6. The method according to claim 3 , wherein the plurality of hash values is associated with a user record of the user stored in the database.

7. The method according to claim 6 , wherein the user record contains a history of payment requests, each payment request indicating a recipient hash value associated with the payment request.

8. The method according to claim 3 , wherein authorizing the payment request comprises:
executing, by the computer, a payment transaction associated with the payment request, wherein the computer transmits to a system of record server a message indicating approval of the payment transaction.

9. The method according to claim 3 , wherein a mobile device associated with a recipient user generates the recipient hash value corresponding to the recipient user in the plurality of recipient hash values associated with the history of payment requests.

10. A computer-readable non-transitory storage medium storing instructions that, when executed by a server, cause the server to execute operations comprising:
receiving a plurality of hash values representing a plurality of contact records stored in a mobile device associated with a user;
storing into a database the plurality of hash values representing the plurality of contact records;
receiving a payment request from a payment application executing on the mobile device, the payment request containing a recipient-user identifier for the payment request;

generating a new recipient hash value based upon the recipient-user identifier for the payment request;
determining that the new recipient hash value does not match any hash value of the plurality of hash values representing the plurality of contact records;
determining that the new recipient hash value does not match any recipient hash values of a plurality of recipient hash values associated with a history of payment requests;
upon determining that the new recipient hash value does not match the hash values representing the contact records and does not match the recipient hash values associated with the history of payment requests:
identifying a plurality of hash values associated with a plurality of contacts of a recipient user associated with the recipient-user identifier, wherein each hash value identifies a user of a payment service;
computing a similarity score for each hash value associated with a contact of the recipient user, wherein the similarity score for each hash value is based upon a comparison of the hash value with the plurality of hash values representing the plurality of contact records stored in the mobile device associated with the user; and
upon determining that the similari

Assignees

• Square Inc

Inventors

• Grassadonia Brian
• Omojola Ayokunle
• Moring Michael
• Andersen Robert
• Perito Daniele
• Stipech Kristopher

Classifications

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title

• G06Q20/325

  using wireless networks · CPC title

• G06Q20/322 Primary

  Aspects of commerce using mobile devices [M-devices] · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/42

  Confirmation, e.g. check or permission by the legal debtor of payment · CPC title