Financial authorization of an online transaction based on a location and an identifier of a user device

Patent metadata

Field	Value
Publication number	US-9892402-B2
Application number	US-201314132870-A
Country	US
Kind code	B2
Filing date	Dec 18, 2013
Priority date	Dec 18, 2013
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A processor server receives transaction information associated with an online transaction between a user device and a merchant server, and provides embedded code to the user device based on receiving the transaction information. The processor server receives, based on execution of the embedded code, location information identifying a geographic location at which the user device is located, and an identifier associated with the user device. The processor server determines an authorization decision for the online transaction based on the transaction information, the location information, and the identifier, and forwards the authorization decision to the merchant server to permit the merchant server to approve or deny the online transaction.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a first server device and via a network, transaction information associated with an online transaction between a user device and a merchant device,
the first server device being different from the user device and the merchant device;

establishing, by the first server device and via the network, a communication with the user device based on a network connection of the user device being redirected from the merchant device to the first server device;
providing, by the first server device and via the network, embedded code to the user device temporarily based on receiving the transaction information and based on establishing the communication with the user device;
receiving, by the first server device, from the user device via the network, and based on execution of the embedded code in the user device:
an encrypted first location information identifying a geographic location at which the user device is located, and
an encrypted identifier of the user device;
the embedded code being removed from the user device after the encrypted first location information and the encrypted identifier are received;

receiving, by the first server device, an encryption key from the user device;
decrypting, by the first server device and based on receiving the encryption key, the encrypted first location information and the encrypted identifier to create a decrypted first location information and decrypted identifier;
calculating, by the first server device, a location suspicion score for the online transaction based on comparing the decrypted first location information with second location information,
the second location information identifying one or more previous geographic locations associated with the user device or a credit card of a user associated with the user device, and
the location suspicion score relating to a degree to which the online transaction corresponds to a fraudulent online transaction based on the decrypted first location information;

determining, by the first server device, whether the decrypted identifier matches a previously utilized identifier of a previously utilized user device that was previously utilized by the user to perform online transactions;
calculating, by the first server device, an identifier suspicion score for the online transaction based on determining whether the decrypted identifier matches the previously utilized identifier,
the identifier suspicion score relating to another degree to which the online transaction corresponds to the fraudulent online transaction based on the decrypted identifier;

calculating, by the first server device, an overall suspicion score based on the location suspicion score and the identifier suspicion score;
providing, by the first server device and via the network, the overall suspicion score to a second server device;
receiving, by the first server device and from the second server device via the network, an authorization decision for the online transaction based on the transaction information and the overall suspicion score; and
forwarding, by the first server device and via the network, the authorization decision to the merchant device to permit the merchant device to approve or deny the online transaction.

2. The method of claim 1 , where the transaction information includes one of:
information associated with the credit card of the user, or
information associated with a payment service provider account of the user.

3. The method of claim 1 , where the second server device is a financial device;
where providing the overall suspicion score comprises:
providing the transaction information and the overall suspicion score to the financial device,
the authorization decision being generated by the financial device based on the transaction information and the overall suspicion score; and

where receiving the authorization decision includes:
receiving the authorization decision from the financial device.

4. A device, comprising:
one or more processors to:
receive, via a network, transaction information associated with an online transaction between a user device and a merchant device,
the device being different from the user device and the merchant device,

establish, via the network, a communication with the user device based on a network connection of the user device being redirected from the merchant device to the device,
provide, temporarily and via the network, embedded code to the user device based on receiving the transaction information and based on establishing the communication with the user device,
receive, from the user device, via the network, and based on execution of the embedded code in the user device:
an encrypted first location information identifying a geographic location at which the user device is located, and
an encrypted identifier of the user device,
the embedded code being removed from the user device after the encrypted first location information and the encrypted identifier are received;

receive an encryption key from the user device;
decrypt, based on receiving the encryption key, the encrypted first location information and the encrypted identifier to create a decrypted first location information and decrypted identifier;
compare the decrypted first location information with second location information,
the second location information identifying one or more previous geographic locations associated with the user device or a credit card of a user associated with the user device,

determine whether the decrypted identifier matches a previously utilized identifier of a previously utilized user device that was previously utilized by the user to perform online transactions;
calculate an overall suspicion score based on determining whether the decrypted identifier matches the previously utilized identifier and based on comparing the decrypted first location information with the second location information,
the overall suspicion score relating to a degree to which the online transaction corresponds to a fraudulent online transaction,

provide, via the network, the overall suspicion score to a server device,
receive, from the server device and via the network, an authorization decision for the online transaction based on the transaction information and the overall suspicion score; and
forward, via the network, the authorization decision to the merchant device to permit the merchant device to approve or deny the online transaction.

5. The device of claim 4 , where the one or more processors are further to:
calculate a location suspicion score for the online transaction based on the decrypted first location information and the second location information,
the location suspicion score providing an indication of fraud associated with the online transaction based on the decrypted first location information, and

calculate an identifier suspicion score for the online transaction based on the decrypted identifier,
the identifier suspicion score providing another indication of fraud associated with the online transaction based on the decrypted identifier; and

where, when calculating the overall suspicion score, the one or more processors are to:
calculate the overall suspicion score based on the location suspicion score and the identifier suspicion score.

6. The device of claim 4 , where the server device is a financial device;
where the one or more processors, when providing the overall suspicion score, are to:
provide the transaction information and the overall suspicion score to the financial device,
the authorization decision being generated by the financial device based on the transaction information and the overall suspicion score; and

where, when receiving the authorization decisio

Assignees

• Verizon Patent & Licensing Inc

Inventors

• Sharma Manish
• Flores Kevin
• Blong Devin
• Chaudhary Tushar
• Gupta Gaurav

Classifications

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/027

  involving a payment switch or gateway · CPC title

• G06Q20/3224 Primary

  Transactions dependent on location of M-devices · CPC title