FRAUD DETECTION SYSTEM, METHOD, AND DEVICE

• US 20160162900A1
• Filed: 12/09/2015
• Published: 06/09/2016
• Est. Priority Date: 12/09/2014
• Status: Abandoned Application

• Current Assignee: Zighra, Inc.
• Original Assignee: Zighra, Inc.
• Inventors: Dutt, Deepak Chandra, Yin, Xun, WANG, Zhaoyang, Tysowski, Piotr Konrad, Hasan, Mohammed Anwarul
• Application Number:
  US14/963,420
• Publication Number:
  US 20160162900A1
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A system for authentication for a user device associated with a user, said system comprising: a processing system to generate a first user interface running on a screen of said user device, said first user interface comprising one or more components, wherein said one or more components comprises a first icon, which when activated, directs a user to a second user interface to select a secret pattern, a second icon, which when activated, generates a current randomly populated keyboard, further wherein said processing system provides a current Personal Identification Number (PIN) to said user by correlating said secret pattern with the current randomly populated keyboard, and a regular keyboard for said user to enter a PIN for authentication.

Claims

1. A method of authenticating a transaction, the method comprising:

responsive to receiving a request for authenticating a transaction involving a first device and including a first device information defining a first device characteristic of the first device;

obtaining a second device information defining a second device characteristic of a second device associated with the transaction;

determining a level of correlation between the first device information and the second device information; and

authenticating the transaction based on the level of correlation between the first device information and the second device information, wherein the transaction is authenticated when the level of correlation between the first device information and the second device information is above a pre-determined threshold.

2. The method of claim 1 wherein, determining a level of correlation between the first device information and the second device information comprises:

obtaining a dynamic weighting factor corresponding to the first device characteristic and the second device characteristic;

applying the dynamic weighting factor to the first device information and the second device information; and

generating a sum correlation total, where the sum correction total comprises the calculation of dynamic weighting factors to each of the first device information and the second device information.

3. The method of claim 1 wherein, the first device and the second device are the same device.

4. The method of claim 1 wherein, the method further comprises establishing a call between a third party and an entity in response to a determination that the level of correlation between the first device information and the second device information is below a pre-determined threshold for authentication, the entity being associated with at least one of the first device and the second device.

5. The method of claim 1 wherein, the method further comprises prompting of the input of a PIN at the first device, the PIN and the context in which the PIN is input being recorded.

6. The method of claim 1 wherein, the method further comprises prompting of the input of a password at the first device, the password and the context in which the password is input being recorded.

7. The method of claim 1 wherein, the method further comprises prompting of the input of biometric data at the first device, the biometric data and the context in which the biometric data is input being recorded.

8. A method of authenticating a transaction, the method comprising:

responsive to receiving a request for authenticating a transaction involving a first device and including a first device information defining a first device characteristic of the first device;

obtaining a second information defining a second characteristic of the transaction, the second information independent of the first device;

determining a level of correlation between the first device information and the second device information; and

authenticating the transaction based on the level of correlation between the first device information and the second information, wherein the transaction is authenticated when the level of correlation between the first device information and the second information is above a pre-determined threshold.

9. The method of claim 8 wherein the second information comprises crowdsourcing data, the crowdsourcing data comprising a plurality of users'"'"' feedback, the plurality of users'"'"' not involved with the transaction.

10. The method of claim 9 wherein, the method further comprises using the crowdsourcing data to generate a risk level weighted by the time and age of the crowdsourcing data.

11. The method of claim 8 wherein, the second information is related to the location of the transaction and obtained based on crowdsourcing data, the crowdsourcing data comprising a plurality of users'"'"' feedback, the plurality of users'"'"' not involved with the transaction.

12. A method of fraudulence verification of a transaction being conducted over a communications network, the transaction having associated transaction information, the method comprising:

comparing the transaction information with database information stored in a database to determine whether a transaction is potentially fraudulent, the database information comprising crowdsourcing data, the crowdsourcing data comprising a plurality of users'"'"' feedback, the plurality of users'"'"' not involved with the transaction;

sending a request to a second device associated with the transaction requesting confirmation information on whether the transaction is fraudulent; and

,

responsive to receiving a response with the confirmation information, authenticating the transaction using the confirmation information.

13. The method of claim 12 wherein the request comprises second request for user credentials, the method comprising:

responsive to receiving the response with the user credentials and the confirmation information;

determining whether the user credentials allow access to the transaction; and

,

authenticating the transaction using the confirmation information only if the user credentials allow access to the transaction.

14. The method of claim 12 wherein, database information comprises authentication history of an entity associated with at least the one of the first device and the second device.

15. The method of claim 14 wherein, notifications are sent to the first device when a number of invalid transactions recorded in the authentication history of an entity associated with the second device reaches a pre-determined threshold.

16. The method of claim 12 wherein, notifications are sent to the second device when a number of invalid transactions recorded in the authentication history of an entity associated with the first device reaches a pre-determined threshold.

17. The method of claim 12 wherein the user credentials comprise a PIN, a password, or biometric data, the user credential and the context in which the user credentials are input being recorded.

18. The method of claim 12 wherein the database information comprises crowdsourcing data, the crowdsourcing data comprising a plurality of users'"'"' feedback, the plurality of users'"'"' not involved with the transaction.

19. The method of claim 18 wherein the crowdsourcing data to used to generate a risk level weighted by the time and age of the crowdsourcing data.

20. The method of claim 18 wherein the crowdsourcing data to used to generate a risk level weighted by the time and age of the crowdsourcing data.