Authentication alerts

• US 10,115,079 B1
• Filed: 04/26/2017
• Issued: 10/30/2018
• Est. Priority Date: 06/16/2011
• Status: Active Grant

• Current Assignee: Consumerinfo.com Incorporated (Experian plc)
• Original Assignee: Consumerinfo.com Incorporated (Experian plc)
• Inventors: Burger, Michael, Dean, Michael John, Kapczynski, Mark Joseph, Yu, Nelson
• Primary Examiner(s): Ojiaku, Chikaodinaka
• Application Number:
  US15/498,304
• Time in Patent Office: 552 Days
• Field of Search: None
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/4037 Remote solvency checks
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04M 1/72436 for text messaging, e.g. short messaging services [SMS] or e-mails
• CPC Class Codes: H04M 1/72448 with means for adapting the functionality of the device according to specific conditions
• CPC Class Codes: H04M 1/72484 wherein functions are triggered by incoming communication events

Abstract

Methods and systems are provided for generating alerts in association with a request to open an account for an individual. For example, information identifying an individual may be received from a financial entity in association with the financial entity receiving a request to open an account for the individual from a requesting entity. The requesting entity may be a vendor or service provider associated with the financial entity. An electronic notification may then be sent to the individual, which may include a selectable option to indicate that the individual does not authorize opening of the account. In response to receiving an indication that the individual does not authorize opening of the account, notifications may be sent to both the financial entity and the requesting entity indicating that the individual has not authorized opening of the account.

Claims

1. A computing system comprising:

a data store that stores contact information associated with one or more individuals enrolled in a monitoring service; and

a computing device, comprising at least one physical processor, that is in communication with the data store and that configured to;

receive, by the computing device, information identifying an individual for whom an authentication request has been received in association with a request from a requesting entity that received the information in real time from a person alleging to be the individual, wherein the received information includes a vendor identifier identifying the requesting entity and wherein the person alleging to be the individual is present in real time at a place of business of the vendor;

retrieve, by the computing device, contact information associated with the individual from the data store;

retrieve, by the computing device, vendor contact information associated with the requesting entity based on the vendor identifier;

send, from the computing device, an electronic notification to a mobile device of the individual based at least in part on the retrieved contact information, wherein the electronic notification provides notification to the individual that an authentication request was received regarding the individual and includes at least a vendor name from the retrieved vendor contact information, wherein the electronic notification provides the individual with a selectable option to indicate whether the person alleging to be the individual is actually the individual,

wherein the electronic notification is provided as a push alert delivered via an application executed on the mobile device, wherein sending the electronic notification as the push alert causes the mobile device to launch the application executed on the mobile device, wherein the application causes display of the vendor name and the selectable option;

receive, by the computing device as a result of a selection of the selectable option in the electronic notification, an indication that the person alleging to be the individual is not actually the individual; and

in response to receiving the indication, substantially in real time after receiving the indication, and substantially while the person is still at the place of business, providing a notification to the requesting entity indicating fraudulent use of identity information of the individual in association with the authentication request, wherein the notification is provided based at least in part on the retrieved vendor contact information.

2. The computing system of claim 1, wherein a financial entity maintains financial accounts for the vendor, wherein the computing device receives indication of the authentication request from the financial entity, and wherein the computing system is further configured to determine the requesting entity based at least in part on the financial entity.

3. The computing system of claim 2, wherein the requesting entity is determined based at least in part by retrieving data that associates the financial entity with one or more vendors or service providers associated with the financial entity.

4. The computing system of claim 2, wherein the financial entity comprises a financial institution that maintains credit accounts for a plurality of individuals on behalf of two or more vendors.

5. The computing system of claim 1, wherein the request is to open a financial account for the individual.

6. The computing system of claim 5, wherein the financial account is a store credit card associated with the vendor, wherein the vendor is a retailer.

7. The computing system of claim 5, wherein the financial account for the individual comprises a credit account.

8. The computing system of claim 1, wherein the vendor is a service provider.

9. The computing system of claim 1, wherein the electronic notification is provided as a text message sent to a phone number associated with the mobile device.

10. The computing system of claim 1, wherein the computing system is further configured to provide a default notification of approval or denial to the requesting entity when the individual does not respond to the electronic notification within a certain time period.

11. The computing system of claim 1, wherein providing the notification to the requesting entity comprises transmitting the notification to a POS terminal within a retail store.

12. A computer-implemented method comprising:

receiving, by one or more computing devices that are configured with specific executable instructions, information identifying an individual for whom an authentication request has been received in association with a request from a requesting entity that received the information in real time from a person alleging to be the individual, wherein the received information includes a vendor identifier identifying the requesting entity;

retrieving, by the one or more computing devices, contact information associated with the individual from a data store, wherein the retrieved contact information includes a phone number associated with a mobile device of the individual, wherein the contact information is retrieved based at least in part by matching information stored in the data store with the information identifying the individual received in association with the authentication request;

retrieving, by the one or more computing devices, vendor contact information associated with the requesting entity based on the vendor identifier;

sending, by the one or more computing devices, an electronic notification to the mobile device of the individual based at least in part on the retrieved contact information, wherein the electronic notification provides notification to the individual that an authentication request was received regarding the individual and includes at least a vendor name from the retrieved vendor contact information, wherein the electronic notification provides the individual with a selectable option to indicate whether the person alleging to be the individual is actually the individual;

receiving, by the one or more computing devices as a result of a selection of the selectable option in the electronic notification, an indication that the person alleging to be the individual is not actually the individual; and

in response to receiving the indication, and substantially in real time after receiving the indication, providing a notification to the requesting entity indicating fraudulent use of identity information of the individual in association with the authentication request, wherein the notification is provided based at least in part on the retrieved vendor contact information.

13. The computer-implemented method of claim 12, wherein providing the notification to the requesting entity comprises sending an electronic message.

14. The computer-implemented method of claim 12, wherein providing the notification to the requesting entity comprises automatically placing a phone call.

15. The computer-implemented method of claim 12, wherein a financial entity maintains financial accounts for the requesting entity, and further comprising determining the requesting entity based at least in part on the financial entity.

16. The computer-implemented method of claim 15, wherein the requesting entity is determined based at least in part by retrieving data that associates the financial entity with one or more vendors or service providers associated with the financial entity.

17. The computer-implemented method of claim 12, wherein the electronic notification is sent to the individual based at least in part on a determination that the individual is enrolled in a notification service.

18. The computer-implemented method of claim 12, wherein the electronic notification is provided as a push alert delivered via an application executed on the mobile device, wherein sending the electronic notification as the push alert causes the mobile device to launch the application executed on the mobile device, wherein the application causes display of the vendor name and the selectable option to indicate whether the person alleging to be the individual is actually the individual.

19. A non-transitory, computer-readable medium having stored thereon computer-executable instructions configured to cause a processor of a computing system to perform operations comprising:

receiving information identifying an individual for whom an authentication request has been received in association with a request from a requesting entity that received the information in real time from a person alleging to be the individual, wherein the received information includes a vendor identifier identifying the requesting entity;

retrieving contact information associated with the individual from a data store, wherein the retrieved contact information includes a phone number associated with a mobile device of the individual, wherein the contact information is retrieved based at least in part by matching information stored in the data store with the information identifying the individual received in association with the authentication request;

retrieving vendor contact information associated with the requesting entity based on the vendor identifier;

sending an electronic notification to the mobile device of the individual based at least in part on the retrieved contact information, wherein the electronic notification provides notification to the individual that an authentication request was received regarding the individual and includes at least a vendor name from the retrieved vendor contact information, wherein the electronic notification provides the individual with a selectable option to indicate whether the person alleging to be the individual is actually the individual;

receiving, based on a selection of the selectable option in the electronic notification, an indication that the person alleging to be the individual is not actually the individual; and

in response to receiving the indication, and substantially in real time after receiving the indication, providing a notification to the requesting entity indicating fraudulent use of identity information of the individual in association with the authentication request, wherein the notification is provided based at least in part on the retrieved vendor contact information.

20. The non-transitory, computer-readable medium of claim 19, wherein the electronic notification is provided as a push alert delivered via an application executed on the mobile device, wherein sending the electronic notification as the push alert causes the mobile device to launch the application executed on the mobile device, wherein the application causes display of the vendor name and the selectable option to indicate whether the person alleging to be the individual is actually the individual.