Completing risk analysis using push communications

Patent metadata

Field	Value
Publication number	US-11068897-B2
Application number	US-201715850509-A
Country	US
Kind code	B2
Filing date	Dec 21, 2017
Priority date	Dec 21, 2017
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

A system is configured to perform operations that include receiving first device information corresponding to a consumer device of a _Sonsumer, where the first device information is collected by a merchant application of a merchant in response to a payment transaction request being initiated between the consumer and the merchant. The operations further include determining that the first device information fails to satisfy a risk analysis threshold for performing a risk analysis process and in response, transmitting a push communication to the consumer device. The push communication includes instructions that cause the consumer device to automatically transmit, to the system, second device information corresponding to the consumer device. Additionally, the operations include based on the second device information, executing the risk analysis process with respect to the payment transaction request.

First claim

What is claimed is:

1. A system, comprising:
one or more hardware processors; and
a memory storing computer-executable instructions, that in response to execution by the one or more hardware processors, causes the system to perform operations comprising:
receiving, by a payment provider, first device information corresponding to a consumer device of a consumer, the first device information being collected by a first mobile application executing on the consumer device in response to a payment transaction request being initiated between the consumer and a merchant;
detecting that the first device information lacks one or more pieces of information needed to satisfy a risk analysis threshold for performing a risk analysis process;
determining, based on the detecting, that the first mobile application has not properly integrated or interfaced with an Application Programming Interface (API) provided by the payment provider;
in response to the determining, transmitting a push communication to a second mobile application of the payment provider, the second mobile application executing on the consumer device as a background process, the push communication including instructions that cause the second mobile application to automatically transmit, to the system, second device information corresponding to the consumer device, wherein the second device information includes the one or more pieces of information missing in the first device information;
based on the second device information, executing the risk analysis process with respect to the payment transaction request; and
processing the payment transaction request in response to determining, based on the executing the risk analysis process, that a risk level associated with the payment transaction request satisfies a risk threshold.

2. The system of claim 1 , wherein the first device information is a subset of the second device information.

3. The system of claim 1 , wherein the detecting that the first device information lacks the one or more pieces of information further comprises:
determining one or more categories of information included in the first device information; and
comparing the one or more categories of information with a set of risk information categories that includes the one or more pieces of information;
wherein detecting that the first device information does not include the one or more pieces of information is based on the comparing.

4. The system of claim 1 , wherein the first mobile application comprises a merchant application.

5. The system of claim 1 , wherein the push communication comprises a flag or data element indicating to an operating system of the consumer device that the push communication should not be displayed on the consumer device.

6. The system of claim 1 , wherein the detecting that the first device information lacks one or more pieces of information comprises detecting that the first device information includes corrupted or unreadable versions of the one or more pieces of information.

7. The system of claim 1 , wherein the second device information comprises information selected from the group consisting of location information associated with the consumer device, a phone number, an International Mobile Equipment Identity, manufacturer information, brand information, model information, a network detected by the consumer device, and another device detected by the consumer device.

8. The system of claim 1 , wherein the second mobile application comprises a payment provider application.

9. The system of claim 1 , wherein the operations further comprise:
transmitting one or more push communications to one or more additional consumer devices corresponding to the consumer, the one or more push communications causing the one or more additional consumer devices to transmit, to the system, respective device information associated with the one or more additional consumer devices.

10. The system of claim 9 , wherein the risk analysis process is executed based on the respective device information.

11. A method, comprising:
receiving, by a payment provider server of a payment provider, a request to initiate a payment transaction between a merchant and a consumer;
receiving, from a merchant application that runs on a consumer device of the consumer, first device information corresponding to the consumer device;
determining, based on detecting that the first device information lacks one or more pieces of risk criteria information, that the merchant application is not properly communicating with an Application Programming Interface (API) of the payment provider;
in response to the determining identifying a plurality of consumer devices that store respective instances of a payment provider application, the payment provider application being different from the merchant application;
transmitting a respective push communication as a background process to each of the plurality of consumer devices, the respective push communication causing each respective instance of the payment provider application to collect second device information of a corresponding consumer device of the plurality of consumer devices;
receiving the collected second device information and determining that the collected second device information includes the one or more pieces of risk criteria information;
executing a risk analysis process using the collected second device information to determine a risk level associated with the request to initiate the payment transaction; and
processing the request based on results of the risk analysis process.

12. The method of claim 11 , wherein the detecting that the first device information lacks the one or more pieces of risk criteria information comprises:
detecting that the first device information is missing the one or more pieces of risk criteria information.

13. The method of claim 12 , wherein the collected second device information comprises: location information associated with the corresponding consumer device of the plurality of consumer devices, a phone number, an International Mobile Equipment Identity, manufacturer information, brand information, model information, a network detected by the corresponding consumer device of the plurality of consumer devices, or another device detected by the corresponding consumer device of the plurality of consumer devices.

14. The method of claim 11 , wherein the detecting that the first device information lacks the one or more pieces of risk criteria information comprises:
detecting that one or more portions of the first device information are unreadable.

15. The method of claim 11 , wherein the respective push communication includes a push communication that causes a first instance of the payment provider application to collect first device information of a first consumer device of the plurality of consumer devices without causing the first consumer device to display an indication corresponding to the push communication.

16. The method of claim 15 , wherein the push communication is transmitted to the first consumer device via a push notification protocol compatible with an operating system executed by the first consumer device, the push communication including a flag or a data element instructing the operating system not to display the push communication on the consumer device.

17. A non-transitory computer readable medium storing computer-executable instructions that in response to execution by one or more hardware processors, causes a payment provider system to perform operations comprising:
receiving first device information corres

Assignees

• Paypal Inc

Inventors

• O'Toole Christopher Diebold
• Luk Bryant Genepang
• Ziaja Jason
• Warman Shaun
• Das Ananya

Classifications

• G06Q30/06 Primary

  Buying, selling or leasing transactions · CPC title

• H04L67/55

  Push-based network services · CPC title

• G06Q20/02

  involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06Q20/10

  specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems · CPC title