Identity-based transaction processing

Patent metadata

Field	Value
Publication number	US-12014374-B2
Application number	US-202217705753-A
Country	US
Kind code	B2
Filing date	Mar 28, 2022
Priority date	Feb 15, 2019
Publication date	Jun 18, 2024
Grant date	Jun 18, 2024

Abstract

Methods and systems disclosed herein related to analyzing the risk of an identity-based transaction and offering the identity-based transaction to a risk exchange. An identity-based transaction may be a transaction that is initiated with a digital identity, and an assertions model manager may provide assertions about the digital identity for completing the identity-based transaction. The assertions model manager may use the assertions and information about the identity-based transaction to analyze transaction risk. A risk score for the identity-based transaction can be calculated, and then the identity-based transaction may be offered on a risk exchange.

First claim

What is claimed is:

1. A method comprising:
receiving, at an assertions computer comprising a processor and an assertions model database coupled to the processor, the assertions model database comprising a plurality of different assertion models for a user with respect to different resource providers via a communications network, an authorization request message for an identity-based transaction, the authorization request message comprising a resource provider identifier identifying a resource provider, and an identifier of a digital identity of the user;
determining an assertions model in the plurality of different assertion models based on the resource provider identifier and the digital identity, the assertions model comprising a set of assertions that are secure facts about the user and that are specific to the resource provider;
determining a set of accounts associated with the user based on the digital identity of the user, and one or more assertions of the set of assertions;
calculating a risk score associated with the identity-based transaction using the assertions in the set of assertions; and
performing processing of the identity-based transaction based on the risk score and using an account in the set of accounts,
wherein determining the set of accounts associated with the user based on the digital identity comprises:
retrieving account assertions associated with the digital identity, and
wherein calculating the risk score comprises:
determining a strength score for the set of assertions; and
calculating the risk score with the strength score and information about the identity-based transaction.

2. The method of claim 1 , wherein processing comprises:
determining, from the resource provider identifier, a resource provider type;
determining, from the identity-based transaction and the set of assertions, a transaction type; and
adding the identity-based transaction into a transaction pool of similar transactions based on the resource provider type and the transaction type.

3. The method of claim 2 , wherein processing further comprises:
calculating a value associated with the transaction pool of similar transactions.

4. The method of claim 3 , wherein processing further comprises: offering the transaction pool of similar transactions based on the calculated value.

5. The method of claim 1 , wherein processing comprises:
authenticating the identity-based transaction.

6. The method of claim 1 , further comprising:
retrieving historical transaction information associated with the set of accounts from a database.

7. The method of claim 1 , further comprising:
retrieving historical transaction information associated with the set of accounts from a database; and
calculating the risk score associated with the identity-based transaction based on the historical transaction information associated with the set of accounts.

8. The method of claim 1 , wherein the resource provider is a liquor store and the resource provider identifier identifies the liquor store, and wherein the set of assertions comprises an assertion that the user is over 21 years old, and wherein the user is 26 years old.

9. The method of claim 8 , wherein the set of assertions comprises an assertion that the user has over a predetermined amount of money in the account of the set of accounts, and wherein the user has an amount more than the predetermined amount of money in the account.

10. An assertions computer comprising:
a processor;
an assertions model database comprising a plurality of different assertion models for a user with respect to different resource providers; and
a computer readable medium comprising code, executable by the processor, for implementing a method comprising:
receiving an authorization request message for an identity-based transaction, the authorization request message comprising a resource provider identifier identifying a resource provider, and an identifier of a digital identity of the user via a communications network;
determining an assertions model in the plurality of different assertion models based on the resource provider identifier and the digital identity of the user, the assertions model comprising a set of assertions that are secure facts about the user and that are specific to the resource provider;
determining a set of accounts associated with the user based on the digital identity of the user, and one or more assertions of the set of assertions;
calculating a risk score associated with the identity-based transaction using the assertions in the set of assertions; and
performing processing of the identity-based transaction based on the risk score and using an account in the set of accounts,
wherein determining the set of accounts associated with the user based on the digital identity comprises:
retrieving account assertions associated with the digital identity, and
wherein calculating the risk score comprises:
determining a strength score for the set of assertions; and
calculating the risk score with the strength score and information about the identity-based transaction.

11. The assertions computer of claim 10 , wherein processing comprises:
determining, from the resource provider identifier, a resource provider type;
determining, from the identity-based transaction and the set of assertions, a transaction type; and
adding the identity-based transaction into a transaction pool of similar transactions based on the resource provider type and the transaction type.

12. The assertions computer of claim 11 , wherein processing further comprises:
calculating a value associated with the transaction pool of similar transactions.

13. The assertions computer of claim 12 , wherein processing further comprises:
offering the transaction pool of similar transactions based on the calculated value.

14. The assertions computer of claim 10 , wherein processing comprises:
authenticating the identity-based transaction.

15. The assertions computer of claim 10 , the method further comprising:
retrieving historical transaction information associated with the set of accounts from a database.

16. The assertions computer of claim 10 , the method further comprising:
retrieving historical transaction information associated with the set of accounts from a database; and
calculating the risk score associated with the identity-based transaction based on the historical transaction information associated with the set of accounts.

Assignees

• Visa Int Service Ass

Inventors

• Bankston Michael
• Friend Erik
• Wald Jerry

Classifications

• H04L9/006

  involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/3271

  using challenge-response · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title