Remotely generated behavioral profile for storage and use on mobile device

• US 10,395,251 B2
• Filed: 01/21/2016
• Issued: 08/27/2019
• Est. Priority Date: 04/25/2013
• Status: Active Grant

• Current Assignee: Paygilant Ltd.
• Original Assignee: Paygilant Ltd.
• Inventors: Einhorn, Ori
• Primary Examiner(s): Ade, Garcia
• Application Number:
  US15/003,490
• Publication Number:
  US 20160162901A1
• Time in Patent Office: 1,314 Days
• Field of Search: 705 21
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0201 Market modelling; Market analysis; Collecting market data
• CPC Class Codes: H04L 9/50 : using hash chains, e.g. blockchains or hash trees

Abstract

A system, method and a device for offline authentication of transactions using mobile device, based on, analytic engine such as behavioral pattern detection are provided. The behavioral pattern can be for a specific person, for group of people with similar characteristics, or a combination of the two. The invention has the advantage over the prior art centralized authentication and fraud detection systems in that it more precise in identifying and preventing fraud in real time. The precision is better for both customer and merchant frauds. The present invention also requires fewer investments in infrastructure and uses less communication traffic when compared to the prior art.

Claims

1. A non-transitory computer readable medium storing instructions that, when executed by at least one hardware-based processor, cause the at least one hardware-based processor to perform operations comprising:

receiving, from a mobile payment device, past user activity data associated with a user of the mobile payment device;

computing a behavioral profile for the user based, at least in part, on the received past user activity data, wherein the behavioral profile is generated at a location remote from the mobile payment device and is configured to be stored on and used by the mobile payment device; and

transmitting the behavioral profile to the mobile payment device for local use the mobile payment device in offline fraud detection, wherein the offline fraud detection occurs without contacting a remote server during the course of a real time financial transaction involving the mobile payment device;

wherein the transmitting is performed according to at least one of;

according to a predetermined schedule, or

in response to computing the behavioral profile.

2. The non-transitory computer readable medium of claim 1, wherein the past user activity data includes information about conduct of the user, gleaned from the mobile payment device.

3. The non-transitory computer readable medium of claim 1, wherein the past user activity data includes information about prior financial transactions of the user.

4. The non-transitory computer readable medium of claim 1, wherein the behavioral profile is computed based on both the past user activity data and activity data of users of other mobile payment devices.

5. The non-transitory computer readable medium of claim 1, wherein transmitting the behavioral profile further comprises transmitting a validity token to the mobile payment device, the validity token enabling the mobile payment device to perform the offline fraud detection.

6. The non-transitory computer readable medium of claim 1, wherein the operations further comprise identifying a change to a profile associated with the user, and computing an updated behavioral profile for the user based, at least in part, on the change to the profile.

7. The non-transitory computer readable medium of claim 1, wherein the operations further comprise identifying known fraudulent behavior, and computing an updated behavioral profile for the user based, at least in part, on the identified known fraudulent behavior.

8. A computer-implemented method for remotely generating a behavioral profile for storage and use on a mobile payment device comprising:

receiving, from the mobile payment device, past user activity data associated with a user of the mobile payment device;

computing a behavioral profile for the user based, at least in part, on the received past user activity data, wherein the behavioral profile is generated at a location remote from the mobile payment device and is configured to be stored on and used by the mobile payment device; and

transmitting the behavioral profile to the mobile payment device for local use by the mobile payment device in offline fraud detection, wherein the offline fraud detection occurs without contacting a remote server during the course of a real time financial transaction involving the mobile payment device;

wherein the transmitting is performed according to at least one of;

according to a predetermined schedule, or

in response to computing the behavioral profile.

9. The computer-implemented method of claim 8, wherein the past user activity data includes information about conduct of the user, gleaned from the mobile payment device.

10. The computer-implemented method of claim 8, wherein the past user activity data includes information about prior financial transactions of the user.

11. The computer-implemented method of claim 8, wherein the behavioral profile is computed based on both the past user activity data and activity data of users of other mobile payment devices.

12. The computer-implemented method of claim 8, wherein transmitting the behavioral profile further comprises transmitting a validity token to the mobile payment device, the validity token enabling the mobile payment device to perform the offline fraud detection.

13. The computer-implemented method of claim 8, further comprising identifying a change to a profile associated with the user, and computing an updated behavioral profile for the user based, at least in part, on the change to the profile.

14. The computer-implemented method of claim 8, further comprising identifying known fraudulent behavior, and computing an updated behavioral profile for the user based, at least in part, on the identified known fraudulent behavior.