Systems and methods for risk based decisioning

Patent metadata

Field	Value
Publication number	US-9600819-B2
Application number	US-201514640701-A
Country	US
Kind code	B2
Filing date	Mar 6, 2015
Priority date	Mar 6, 2015
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

A method and system for creating an assurance level based on authentication data attributes using a computer device coupled to a database are provided. The method includes receiving an authorization request associated with the financial transaction from the sender, the authorization request including a fraud risk assessment of the financial transaction determined by the sender using an authentication response received from the computer device by the sender, the authorization request including one or more reason codes associated with the sender fraud risk assessment. The method further includes transmitting the received authorization request to an issuer associated with the cardholder.

First claim

The invention claimed is:

1. A computer-implemented method for creating an assurance level based on authentication data attributes electronically captured by a merchant computing device, the method implemented using a computer device coupled to a memory device, the method comprising:
receiving, from a sender, an authentication request message associated with a financial transaction initiated by a cardholder, wherein the authentication request message includes authentication data attributes relating to the cardholder's interaction with the merchant computing device;
performing an authentication routine for authenticating the cardholder as the actual cardholder using the authentication data attributes;
transmitting an authentication response to the sender including results of the authentication routine;
receiving an authorization request message associated with the financial transaction from the sender, the authorization request message including a fraud risk assessment of the financial transaction determined using the authentication response, the authorization request message including one or more reason codes associated with fraud risk assessment; and
transmitting the received authorization request message to an issuer associated with the cardholder.

2. The computer-based method of claim 1 , further comprising generating an authentication response based on a correlating at least some of the authentication data attributes with previously authenticated cardholder data.

3. The computer-based method of claim 1 , further comprising:
performing the authentication routine based on correlating a device identifier of a device used by the cardholder to interact with a website associated with the merchant to a primary account number (PAN) associated with an account of the cardholder.

4. The computer-based method of claim 1 , wherein the information relating to a cardholder interaction with the sender comprises information relating to the cardholder navigating a webpage of the merchant.

5. The computer-based method of claim 1 , wherein the historical transaction data of the cardholder includes an indication of a longevity of the account of the cardholder.

6. The computer-based method of claim 1 , wherein the fraud risk assessment is determined using an age of a cardholder profile with the merchant, wherein the age of the cardholder profile indicates a last update of the cardholder profile with the merchant.

7. The computer-based method of claim 1 , further comprising:
receiving at least one of an authorization approval and an authorization denial from the issuer, the at least one of the authorization approval and the authorization denial based at least in part on the fraud risk assessment by the sender; and
transmitting the received at least one of the authorization approval and the authorization denial to the sender.

8. The computer-based method of claim 1 , wherein the one or more reason codes include an indication of at least one of a longevity of the account of the cardholder, a time period since the profile of the cardholder has been updated, and a similarity of non-financial transaction interactions with the sender.

9. The computer-based method of claim 1 , further comprising receiving a message from the sender relating to the financial transaction prior to receiving the authorization request message associated with the financial transaction, the message including a predefined sender confidence level data field that includes a fraud assessment of the financial transaction by the sender.

10. The computer-based method of claim 1 , wherein the historical transaction data of the cardholder relates to a longevity of an account of the cardholder.

11. The computer-based method of claim 1 , wherein the fraud risk assessment by the sender comprises determining an amount of time since an update of a profile of the cardholder with the sender.

12. The computer-based method of claim 1 , further comprising:
receiving at least one of an authorization approval message and an authorization denial message from the issuer, the at least one of the authorization approval message and the authorization denial message based at least in part on the fraud risk assessment determined by at least one of the sender and the merchant; and
transmitting the received at least one of the authorization approval message and the authorization denial message to the sender.

13. The computer-based method of claim 1 , wherein the sender and the merchant are the same.

14. A risk-based decisioning system for creating an assurance level based on authentication data attributes electronically captured by a merchant computer device, said system comprising the merchant computer device coupled to a payment network, said merchant computer device configured to:
transmit an authentication request message to the payment network when a cardholder interacting with a merchant website is attempting to perform activities inconsistent with at least one of a transaction history of the cardholder and a profile of the cardholder;
receive, from the payment network, an authentication response that indicates a trustworthiness of the cardholder;
perform a secondary authentication evaluation that generates the merchant assessment of the trustworthiness of the cardholder based on the secondary authentication evaluation, wherein the secondary authentication evaluation is based at least partially upon the authentication response received from the payment network;
transmit an authorization request message onto the payment network if the generated merchant assessment of trustworthiness indicates the cardholder is trustworthy;
receive an authorization approval or denial based at least partially on the generated merchant assessment of trustworthiness; and
complete a financial transaction based on the received authorization approval or denial.

15. The risk-based decisioning system of claim 14 , wherein said merchant computer device is further configured to determine from interactions between the cardholder and the merchant website whether the cardholder is attempting to perform activities inconsistent with at least one of a transaction history of the cardholder and a profile of the cardholder.

16. The risk-based decisioning system of claim 14 , wherein said secondary authentication evaluation comprises analyzing answers made by the cardholder to at least one of predetermined security questions and security questions determined in approximately real-time.

17. The risk-based decisioning system of claim 14 , wherein the generated merchant assessment of trustworthiness indicates the cardholder is trustworthy when the generated merchant assessment of trustworthiness indicates the cardholder is not fraudulent.

18. One or more non-transitory computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by at least one processor, the computer-executable instructions cause the processor to:
receive, from a sender, an authentication request message associated with a financial transaction initiated by a cardholder, wherein the authentication request message includes authentication data attributes relating to the cardholder's interaction with a merchant computing device;
perform an authentication routine for authenticating the cardholder as the actual cardholder using the authentication data attributes;
transmit an authentication response to the sender including results of the authentication routine;
receive, from the sender, an authorization request message associated with the financial

Assignees

• Mastercard International Inc

Inventors

• Wiesman Mark B

Classifications

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• G06Q20/34

  using cards, e.g. integrated circuit [IC] cards or magnetic cards · CPC title

• G06Q20/405

  Establishing or using transaction specific rules · CPC title

• G06Q20/4016 Primary

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title