Systems and methods for determining fraudulent transactions using digital wallet data

• US 10,657,521 B2
• Filed: 05/22/2015
• Issued: 05/19/2020
• Est. Priority Date: 09/16/2014
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Tomasofsky, Christian P., Hubbard, Steve E., da Silva, Luis Felipe de Almeida Ferreira
• Primary Examiner(s): Ebersman, Bruce I
• Application Number:
  US14/719,645
• Publication Number:
  US 20160078443A1
• Time in Patent Office: 1,824 Days
• Field of Search: 705 35- 45
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 20/407 Cancellation of a transaction
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 30/0229 Multi-merchant loyalty card systems

Abstract

A computing device for risk-based analysis of a payment card transaction is provided herein. The computing device includes a processor communicatively coupled to a memory. The computing device is programmed to receive a request for authentication of the payment card transaction. The payment card transaction includes a suspect consumer presenting a payment card from a digital wallet of a privileged cardholder. The computing device is also programmed to identify fraud feature data from the digital wallet. The computing device is further programmed to compute a fraud score for the payment card transaction based at least in part on the fraud feature data. The computing device is still further programmed to provide the fraud score for use during authentication of the suspect consumer.

Claims

1. A computing device for risk-based analysis of a payment card transaction, said computing device comprising a processor communicatively coupled to a memory, said computing device programmed to:

receive, during a current online card-not-present (CNP) financial transaction, an authentication request for authentication of the current online CNP financial transaction prior to submission of the current online CNP financial transaction for authorization, wherein the current online CNP financial transaction includes a suspect consumer providing payment card data stored in a digital wallet on a user computing device used to conduct the current online CNP financial transaction with a first merchant, and wherein the authentication request includes transaction data associated with the current online CNP financial transaction, digital wallet data associated with the digital wallet used to conduct the current online CNP financial transaction, and current device data associated with the user computing device, wherein the digital wallet data is captured at the user computing device during the current online CNP financial transaction;

parse the digital wallet data from the authentication request;

identify historical digital wallet use data for the digital wallet stored in the digital wallet, wherein the historical digital wallet use data is associated with use of the digital wallet to conduct one or more previous online financial transactions;

compute a digital wallet score for the current online CNP financial transaction based a comparison of the transaction data and the digital wallet data with the historical digital wallet use data;

compute a device score for the current online CNP financial transaction based on the current device data, the device score representing a likelihood that the user computing device is trustworthy;

receive a first scoring configuration profile from at least one of the first merchant and another party to the current online CNP financial transaction, the first scoring configuration profile defining at least one transaction amount range, each of the at least one transaction amount ranges associated with a corresponding risk level;

store the first scoring configuration profile in said memory;

determine a transaction amount of the current online CNP financial transaction;

perform a lookup in said memory of the first scoring configuration profile using the transaction amount to identify a risk level associated with the transaction amount;

compute a fraud score based on the digital wallet score, the device score, and the risk level associated with the transaction amount, the fraud score representing a likelihood that the suspect consumer is a user privileged to use the digital wallet;

generate an enriched authentication response message that includes an extension including the fraud score; and

transmit the enriched authentication response message to the first merchant with the fraud score for use by the first merchant during authentication of the current online CNP financial transaction prior to submitting an authorization request message requesting authorization of the current online CNP financial transaction, wherein the enriched authentication response message including the extension with the fraud score is received at the first merchant such that the first merchant uses the fraud score to determine whether to submit the authorization request message requesting authorization of the current online CNP financial transaction.

2. The computing device of claim 1, wherein the digital wallet data includes a current authentication method associated with an access of the digital wallet to conduct the current online CNP financial transaction, and wherein the historical digital wallet use data includes historical authentication data associated with one or more prior access instances of a privileged cardholder authenticating into the digital wallet, wherein said computing device is further programmed to compute the fraud score based at least in part on comparing the current authentication method to the historical authentication data.

3. The computing device of claim 1, wherein the authentication request further includes current personal data provided during the current online CNP financial transaction, and wherein said computing device is further programmed to:

identify verified personal data stored in the digital wallet; and

compute the fraud score further based on comparing the current personal data with the verified personal data.

4. The computing device of claim 1, wherein the historical digital wallet use data from the digital wallet includes historical device data associated with past transactions involving the digital wallet, wherein said computing device is further programmed to compute the device score based on comparing the current device data to the historical device data.

5. The computing device of claim 1, wherein the authentication request further includes current loyalty account data provided during the current online CNP financial transaction, and wherein said computing device is further programmed to:

identify verified loyalty account data stored in the digital wallet; and

compute the fraud score based at least in part on comparing the current loyalty account data to the verified loyalty account data.

6. A computer-based method for risk-based analysis of a payment card transaction, the method implemented using a computer device including a processor and a memory, said method comprising:

receiving, during a current online card-not-present (CNP) financial transaction, an authentication request for authentication of the current online CNP financial transaction prior to submission of the current online CNP financial transaction for authorization, wherein the current online CNP financial transaction includes a suspect consumer providing payment card data stored in a digital wallet on a user computing device used to conduct the current online CNP financial transaction with a first merchant, and wherein the authentication request includes transaction data associated with the current online CNP financial transaction, digital wallet data associated with the digital wallet used to conduct the current online CNP financial transaction, and current device data associated with the user computing device, wherein the digital wallet data is captured at the user computing device during the current online CNP financial transaction;

parsing the digital wallet data from the authentication request;

identifying historical digital wallet use data for the digital wallet stored in the digital wallet, wherein the historical digital wallet use data is associated with use of the digital wallet to conduct one or more previous online financial transactions;

computing a digital wallet score for the current online CNP financial transaction based on a comparison of the transaction data and the digital wallet data with the historical digital wallet use data;

computing a device score for the current online CNP financial transaction based on the current device data, the device score representing a likelihood that the user computing device is trustworthy;

receiving a first scoring configuration profile from at least one of the first merchant and another party to the current online CNP financial transaction, the first scoring configuration profile defining at least one transaction amount range, each of the at least one transaction amount ranges associated with a corresponding risk level;

storing the first scoring configuration profile in the memory;

determining a transaction amount of the current online CNP financial transaction;

performing a lookup in the memory of the first scoring configuration profile using the transaction amount to identify a risk level associated with the transaction amount;

computing a fraud score based on the digital wallet score, the device score, and the risk level associated with the transaction amount, the fraud score representing a likelihood that the suspect consumer is a user privileged to use the digital wallet;

generating an enriched authentication response message that includes an extension including the fraud score; and

transmitting the enriched authentication response message to the first merchant with the fraud score for use by the first merchant during authentication of the current online CNP financial transaction prior to submitting an authorization request message requesting authorization of the current online CNP financial transaction, wherein the enriched authentication response message including the extension with the fraud score is received at the first merchant such that the first merchant uses the fraud score to determine whether to submit the authorization request message requesting authorization of the current online CNP financial transaction.

7. The method of claim 6, wherein the digital wallet data includes a current authentication method associated with an access of the digital wallet to conduct the current online CNP financial transaction, and wherein the historical digital wallet use data includes historical authentication data associated with one or more prior access instances of a privileged cardholder authenticating into the digital wallet, wherein computing the fraud score further includes comparing the current authentication method to the historical authentication data.

8. The method of claim 6, wherein the authentication request further includes current personal data provided during the current online CNP financial transaction, and wherein computing the fraud score further comprises:

identifying verified personal data stored in the digital wallet; and

comparing the current personal data with the verified personal data.

9. The method of claim 6, wherein the historical digital wallet use data from the digital wallet includes historical device data associated with past transactions involving the digital wallet, wherein computing the device score further comprises comparing the current device data to the historical device data.

10. The method of claim 6, wherein the authentication request further includes current loyalty account data provided during the current online CNP financial transaction, and wherein computing the fraud score further comprises:

identifying verified loyalty account data stored in the digital wallet; and

comparing the current loyalty account data to verified loyalty account data.

11. At least one non-transitory computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by at least one processor, the computer-executable instructions cause the processor to:

receive, during a current online card-not-present (CNP) financial transaction, an authentication request for authentication of the current online CNP financial transaction prior to submission of the current online CNP financial transaction for authorization, wherein the current online CNP financial transaction includes a suspect consumer providing payment card data stored in a digital wallet on a user computing device used to conduct the current online CNP financial transaction with a first merchant, and wherein the authentication request includes transaction data associated with the current online CNP financial transaction, digital wallet data associated with the digital wallet used to conduct the current online CNP financial transaction, and current device data associated with the user computing device, wherein the digital wallet data is captured at the user computing device during the current online CNP financial transaction;

parse the digital wallet data from the authentication request;

identify historical digital wallet use data for the digital wallet stored in the digital wallet, wherein the historical digital wallet use data is associated with use of the digital wallet to conduct one or more previous online financial transactions;

compute a digital wallet score for the current online CNP financial transaction based on a comparison of the transaction data and the digital wallet data with the historical digital wallet use data;

compute a device score for the current online CNP financial transaction based on the current device data, the device score representing a likelihood that the user computing device is trustworthy;

receive a first scoring configuration profile from at least one of the first merchant and another party to the current online CNP financial transaction, the first scoring configuration profile defining at least one transaction amount range, each of the at least one transaction amount ranges associated with a corresponding risk level;

store the first scoring configuration profile;

determine a transaction amount of the current online CNP financial transaction;

perform a lookup of the first scoring configuration profile using the transaction amount to identify a risk level associated with the transaction amount;

compute a fraud score based on the digital wallet score, the device score, and the risk level associated with the transaction amount, the fraud score representing a likelihood that the suspect consumer is a user privileged to use the digital wallet;

generate an enriched authentication response message that includes an extension including the fraud score; and

transmit the enriched authentication response message to the first merchant with the fraud score for use by the first merchant during authentication of the current online CNP financial transaction prior to submitting an authorization request message requesting authorization of the current online CNP financial transaction, wherein the enriched authentication response message including the extension with the fraud score is received at the first merchant such that the first merchant uses the fraud score to determine whether to submit the authorization request message requesting authorization of the current online CNP financial transaction.

12. The computer-readable storage media of claim 11, wherein the digital wallet data includes a current authentication method associated with an access of the digital wallet to conduct the current online CNP financial transaction, and wherein the historical digital wallet use data includes historical authentication data associated with one or more prior access instances of a privileged cardholder authenticating into the digital wallet, wherein the computer-executable instructions further cause the processor to compute the fraud score based at least in part on comparing the current authentication method to the historical authentication data.

13. The computer-readable storage media of claim 11, wherein the fraud feature data includes current personal data provided during the current online CNP financial transaction, and wherein the computer-executable instructions further cause the processor to:

identify verified personal data stored in the digital wallet; and

compute the fraud score based at least in part on comparing the current personal data with the verified personal data.

14. The computer-readable storage media of claim 11, wherein the historical digital wallet use data from the digital wallet includes historical device data associated with past transactions involving the digital wallet, wherein the computer-executable instructions further cause the processor to compute the device score further based on comparing the current device data to the historical device data.

15. The computer-readable storage media of claim 11, wherein the digital wallet data includes current loyalty account data provided during the current online CNP financial transaction, and wherein the computer-executable instructions further cause the processor to:

identify verified loyalty account data stored in the digital wallet; and

compute the fraud score further based on comparing the current loyalty account data to verified loyalty account data.