GRADUATED SECURITY SEASONING APPARATUSES, METHODS AND SYSTEMS

• US 20130218765A1
• Filed: 03/29/2012
• Published: 08/22/2013
• Est. Priority Date: 03/29/2011
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Hammad, Ayman, Siegel, Kevin P., O'Connell, Craig
• Application Number:
  US13/434,818
• Publication Number:
  US 20130218765A1
• Time in Patent Office: Days
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

The GRADUATED SECURITY SEASONING APPARATUSES, METHODS AND SYSTEMS (“GSS”) transform user virtual wallet activity and historical fraud reports via GSS components into transaction authorization triggers generated pursuant to graduated, transaction risk-appropriate, escalated security protocols. In one implementation, the GSS obtains a current transaction request, the request utilizing a user virtual wallet account for payment. The GSS identifies a transaction risk type associated with the request, and calculates a transaction risk level associated with the transaction risk type. Based on the transaction risk level, the GSS selects a security protocol for processing the current transaction request; and provide a security data request in accordance with the selected security protocol. The GSS also generates an offer, for an entity involved in processing the current transaction request, of a financial incentive in exchange for assuming the transaction risk level associated with the transaction risk type; and provides the offer for the entity.

Claims

1. A graduated security protocol escalation processor-implemented method, comprising:

obtaining a current transaction request, the current transaction request utilizing a user virtual wallet account for purchase payment;

identifying a transaction risk type associated with the current transaction request;

calculating, via a processor, a transaction risk level associated with the transaction risk type;

selecting a security protocol, based on the calculated transaction risk level, for processing the current transaction request; and

providing a security data request in accordance with the selected security protocol.

2. The method of claim 1, further comprising:

obtaining data on prior user wallet activity associated with the user virtual wallet account from a database; and

wherein the transaction risk type is identified using the data on the prior user wallet activity.

3. The method of claim 2, wherein the prior user wallet activity includes a product barcode price scan.

4. The method of claim 2, wherein the data on the prior user wallet activity includes a geographical location identifier for the prior user wallet activity.

5. The method of claim 4, wherein the grographical location identifier is a computer network address.

6. The method of claim 1, wherein the current transaction request is a service enrollment request.

7. The method of claim 1, wherein the current transaction request is virtual wallet card addition request.

8. The method of claim 1, wherein the current transaction request is a purchase transaction request.

9. The method of claim 8, wherein the purchase transaction request is obtained from a mobile device.

10. The method of claim 1, wherein the transaction risk type is identified based on historical fraud data.

11. The method of claim 1, further comprising:

generating an offer, for an entity involved in processing the current transaction request, of a financial incentive in exchange for assuming the transaction risk level associated with the transaction risk type; and

providing the offer for the entity.

12. The method of claim 11, wherein the entity is one of:

a user;

a merchant;

an issuer;

an acquirer;

a payment service provider; and

a payment network.

13. The method of claim 1, wherein the selection of the security protocol is further based on a burden to respond to the security data request.

14. The method of claim 13, wherein the burden is measured by an amount of user intervention to respond to the security data request.

15. The method of claim 13, wherein the burden is measured by a network bandwidth required to respond to the security data request.

16. The method of claim 13, wherein the selection of the security protocol is based on minimizing the burden to respond to the security data request.

17. The method of claim 1, wherein a burden of the security protocol increases with increase in the transaction risk level associated with the transaction risk type.

18. The method of claim 1, further comprising:

identifying a second transaction risk type associated with the current transaction request;

selecting a second security protocol for processing the current transaction request; and

providing a second security data request in accordance with the selected second security protocol.

19. The method of claim 18, wherein the second security data request is provided for an entity different than the one for which the security data request is provided.

20. The method of claim 1, wherein the calculation of the transaction risk level associated with the transaction risk type uses previously obtained security data.

21. A graduated security protocol escalation means, comprising:

means for obtaining a current transaction request, the current transaction request utilizing a user virtual wallet account for purchase payment;

means for identifying a transaction risk type associated with the current transaction request;

means for calculating a transaction risk level associated with the transaction risk type;

means for selecting a security protocol, based on the calculated transaction risk level, for processing the current transaction request; and

means for providing a security data request in accordance with the selected security protocol.

22. The means of claim 21, further comprising:

means for obtaining data on prior user wallet activity associated with the user virtual wallet account from a database; and

wherein the transaction risk type is identified using the data on the prior user wallet activity.

23. The means of claim 22, wherein the prior user wallet activity includes a product barcode price scan.

24. The means of claim 22, wherein the data on the prior user wallet activity includes a geographical location identifier for the prior user wallet activity.

25. The means of claim 24, wherein the grographical location identifier is a computer network address.

26. The means of claim 21, wherein the current transaction request is a service enrollment request.

27. The means of claim 21, wherein the current transaction request is virtual wallet card addition request.

28. The means of claim 21, wherein the current transaction request is a purchase transaction request.

29. The means of claim 28, wherein the purchase transaction request is obtained from a mobile device.

30. The means of claim 21, wherein the transaction risk type is identified based on historical fraud data.

31. The means of claim 21, further comprising:

means for generating an offer, for an entity involved in processing the current transaction request, of a financial incentive in exchange for assuming the transaction risk level associated with the transaction risk type; and

means for providing the offer for the entity.

32. The means of claim 31, wherein the entity is one of:

a user;

a merchant;

an issuer;

an acquirer;

a payment service provider; and

a payment network.

33. The means of claim 21, wherein the selection of the security protocol is further based on a burden to respond to the security data request.

34. The means of claim 33, wherein the burden is measured by an amount of user intervention to respond to the security data request.

35. The means of claim 33, wherein the burden is measured by a network bandwidth required to respond to the security data request.

36. The means of claim 33, wherein the selection of the security protocol is based on minimizing the burden to respond to the security data request.

37. The means of claim 21, wherein a burden of the security protocol increases with increase in the transaction risk level associated with the transaction risk type.

38. The means of claim 21, further comprising:

means for identifying a second transaction risk type associated with the current transaction request;

means for selecting a second security protocol for processing the current transaction request; and

means for providing a second security data request in accordance with the selected second security protocol.

39. The means of claim 28, wherein the second security data request is provided for an entity different than the one for which the security data request is provided.

40. The means of claim 21, wherein the calculation of the transaction risk level associated with the transaction risk type uses previously obtained security data.

41. A graduated security protocol escalation system, comprising:

a processor; and

a memory disposed in communication with the processor and storing processor-executable instructions to;

obtain a current transaction request, the current transaction request utilizing a user virtual wallet account for purchase payment;

identify a transaction risk type associated with the current transaction request;

calculate, via the processor, a transaction risk level associated with the transaction risk type;

select a security protocol, based on the calculated transaction risk level, for processing the current transaction request; and

provide a security data request in accordance with the selected security protocol.

42. The system of claim 41, the memory further storing instructions to:

obtain data on prior user wallet activity associated with the user virtual wallet account from a database; and

wherein the transaction risk type is identified using the data on the prior user wallet activity.

43. The system of claim 42, wherein the prior user wallet activity includes a product barcode price scan.

44. The system of claim 42, wherein the data on the prior user wallet activity includes a geographical location identifier for the prior user wallet activity.

45. The system of claim 44, wherein the grographical location identifier is a computer network address.

46. The system of claim 41, wherein the current transaction request is a service enrollment request.

47. The system of claim 41, wherein the current transaction request is virtual wallet card addition request.

48. The system of claim 41, wherein the current transaction request is a purchase transaction request.

49. The system of claim 48, wherein the purchase transaction request is obtained from a mobile device.

50. The system of claim 41, wherein the transaction risk type is identified based on historical fraud data.

51. The system of claim 41, the memory further storing instructions to:

generate an offer, for an entity involved in processing the current transaction request, of a financial incentive in exchange for assuming the transaction risk level associated with the transaction risk type; and

provide the offer for the entity.

52. The system of claim 51, wherein the entity is one of:

a user;

a merchant;

an issuer;

an acquirer;

a payment service provider; and

a payment network.

53. The system of claim 41, wherein the selection of the security protocol is further based on a burden to respond to the security data request.

54. The system of claim 53, wherein the burden is measured by an amount of user intervention to respond to the security data request.

55. The system of claim 53, wherein the burden is measured by a network bandwidth required to respond to the security data request.

56. The system of claim 53, wherein the selection of the security protocol is based on minimizing the burden to respond to the security data request.

57. The system of claim 41, wherein a burden of the security protocol increases with increase in the transaction risk level associated with the transaction risk type.

58. The system of claim 41, the memory further storing instructions to:

identify a second transaction risk type associated with the current transaction request;

select a second security protocol for processing the current transaction request; and

provide a second security data request in accordance with the selected second security protocol.

59. The system of claim 58, wherein the second security data request is provided for an entity different than the one for which the security data request is provided.

60. The system of claim 41, wherein the calculation of the transaction risk level associated with the transaction risk type uses previously obtained security data.

63. The medium of claim 42, wherein the prior user wallet activity includes a product barcode price scan.

61. A computer-readable tangible medium storing computer-executable graduated security protocol escalation instructions to:

obtain a current transaction request, the current transaction request utilizing a user virtual wallet account for purchase payment;

identify a transaction risk type associated with the current transaction request;

calculate a transaction risk level associated with the transaction risk type;

select a security protocol, based on the calculated transaction risk level, for processing the current transaction request; and

provide a security data request in accordance with the selected security protocol.

62. The medium of claim 61, further storing instructions to:

obtain data on prior user wallet activity associated with the user virtual wallet account from a database; and

wherein the transaction risk type is identified using the data on the prior user wallet activity.

64. The medium of claim 62, wherein the data on the prior user wallet activity includes a geographical location identifier for the prior user wallet activity.

65. The medium of claim 64, wherein the grographical location identifier is a computer network address.

66. The medium of claim 61, wherein the current transaction request is a service enrollment request.

67. The medium of claim 61, wherein the current transaction request is virtual wallet card addition request.

68. The medium of claim 61, wherein the current transaction request is a purchase transaction request.

69. The medium of claim 68, wherein the purchase transaction request is obtained from a mobile device.

70. The medium of claim 61, wherein the transaction risk type is identified based on historical fraud data.

71. The medium of claim 61, further storing instructions to:

generate an offer, for an entity involved in processing the current transaction request, of a financial incentive in exchange for assuming the transaction risk level associated with the transaction risk type; and

provide the offer for the entity.

72. The medium of claim 71, wherein the entity is one of:

a user;

a merchant;

an issuer;

an acquirer;

a payment service provider; and

a payment network.

73. The medium of claim 61, wherein the selection of the security protocol is further based on a burden to respond to the security data request.

74. The medium of claim 73, wherein the burden is measured by an amount of user intervention to respond to the security data request.

75. The medium of claim 73, wherein the burden is measured by a network bandwidth required to respond to the security data request.

76. The medium of claim 73, wherein the selection of the security protocol is based on minimizing the burden to respond to the security data request.

77. The medium of claim 61, wherein a burden of the security protocol increases with increase in the transaction risk level associated with the transaction risk type.

78. The medium of claim 61, further storing instructions to:

identify a second transaction risk type associated with the current transaction request;

select a second security protocol for processing the current transaction request; and

provide a second security data request in accordance with the selected second security protocol.

79. The medium of claim 78, wherein the second security data request is provided for an entity different than the one for which the security data request is provided.

80. The medium of claim 61, wherein the calculation of the transaction risk level associated with the transaction risk type uses previously obtained security data.