Fraud tracking cookie

• US 20050076230A1
• Filed: 10/02/2003
• Published: 04/07/2005
• Est. Priority Date: 10/02/2003
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Kanthi, Niraj, Redenbaugh, George, DeBold, Donald J.
• Application Number:
  US10/678,682
• Publication Number:
  US 20050076230A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

An embodiment of the invention provides a method of improving accuracy in fraud screening for online transactions, including: providing a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the customer; and if the customer accesses the website at a subsequent time, checking if the customer has exceeded a velocity value based upon the unique ID of the user. If the customer has exceeded the velocity value, then the order is placed in an outsort queue for fraud analysis. Alternatively, if the customer has exceeded the velocity value, then the velocity value along with other indicators relating to the order are evaluated by an electronic commerce fraud detection module to determine if the order is to be placed in an outsort queue for fraud analysis. A velocity value may be defined as the number of orders placed by the customer to the website within a particular defined time period.

Claims

1. A method of improving accuracy in fraud screening for online transactions, the method comprising:

providing a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the customer; and

if the customer accesses the website at a subsequent time, checking if the customer has exceeded a velocity value based upon the unique ID of the user.

2. The method of claim 1, further comprising:

if the customer has exceeded the velocity value, then placing the order in an outsort queue for fraud analysis.

3. The method of claim 1, further comprising:

if the customer has exceeded the velocity value, then evaluating, by an electronic commerce fraud detection module, the velocity value along with other indicators relating to the order to determine if the order is to be placed in an outsort queue for fraud analysis.

4. The method of claim 1, wherein the velocity value comprises:

a number of orders placed by the customer to the website within a particular defined time period.

5. The method of claim 1, wherein the security cookie is separate from a session cookie that provides security for transactions with the website.

6. The method of claim 1, wherein the unique ID is integrated in a session cookie that provides security for transactions with the website.

7. The method of claim 1, wherein a different unique ID is assigned to another user who accesses the website.

8. A method of improving accuracy in fraud screening for online transactions, the method comprising:

providing a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the computer; and

if the customer accesses the website at a subsequent time, checking if the customer has exceeded a velocity value based upon the unique ID, where the security cookie links multiple login names to a single customer to enable velocity analysis on an order placement from the customer, regardless of the login name that is used by the customer.

9. An apparatus for improving accuracy in fraud screening for online transactions, the apparatus comprising:

a server configured to provide a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the customer;

the server configured to check if the customer has exceeded a velocity value based upon the unique ID of the user, if the customer accesses the website at a subsequent time.

10. The apparatus of claim 9, wherein the server is configured to place the order in an outsort queue for fraud analysis, if the customer has exceeded the velocity value.

11. The apparatus of claim 9, wherein if the customer has exceeded the velocity value, then evaluating, by an electronic commerce fraud detection module, the velocity value along with other indicators relating to the order to determine if the order is to be placed in an outsort queue for fraud analysis.

12. The apparatus of claim 9, wherein the velocity value comprises:

a number of orders placed by the customer to the website within a particular defined time period.

13. The apparatus of claim 9, wherein the security cookie is separate from a session cookie that provides security for transactions with the website.

14. The apparatus of claim 9, wherein the unique ID is integrated in a session cookie that provides security for transactions with the website.

15. The apparatus of claim 9, wherein a different unique ID is assigned to another user who accesses the website.

16. An apparatus for improving accuracy in fraud screening for online transactions, the apparatus comprising:

a server configured to provide a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the computer;

the server configured to check if the customer has exceeded a velocity value based upon the unique ID, if the customer accesses the website at a subsequent time, where the security cookie links multiple login names to a single customer to enable velocity analysis on an order placement from the customer, regardless of the login name that is used by the customer.

17. An apparatus for improving accuracy in fraud screening for online transactions, the apparatus comprising:

means for providing a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the customer; and

means for checking if the customer has exceeded a velocity value based upon the unique ID of the user, if the customer accesses the website at a subsequent time.

18. An article of manufacture, comprising:

a machine-readable medium having stored thereon instructions to;

provide a security cookie to a computer of a customer who accesses a website, where the security cookie includes a unique identifier (ID) that is assigned to the customer; and

check if the customer has exceeded a velocity value based upon the unique ID of the user, if the customer accesses the website at a subsequent time.