SYSTEMS AND METHODS FOR ONLINE ACTIVITY-BASED AUTHENTICATION

• US 20160189153A1
• Filed: 12/30/2014
• Published: 06/30/2016
• Est. Priority Date: 12/30/2014
• Status: Active Application

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Luk, Bryant Genepang, Tang, Yu, Brenner, Jennifer, O'Toole, Christopher Diebold, Bates, Richard Chapman, Ziaja, Jason, Das, Ananya
• Application Number:
  US14/586,874
• Publication Number:
  US 20160189153A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 50/01 Social networking

Abstract

Systems and methods for authentication of users using online activity are provided. An authentication system may build a user profile in a database by associating online activity data with a user in the user profile, and further by processing the online activity data to generate user interest data and associating it with the user. The authentication system may receive a payment request for a purchase of an item using a payment account of the user. The authentication system may determine if the purchase of the item by the user is consistent with the user'"'"'s online activity data and/or user interest data. If consistent, the authentication system may authenticate the user and process the payment request by approving the payment request.

Claims

1. A system comprising:

a storage module configured to store a user profile of a user, the user profile including online activity data;

an authentication module configured to determine a purchase of an item by the user is consistent with the user profile in response to receiving a payment request for the purchase of the item using an account associated with the user, and authenticate the user based, at least in part, on the determination; and

a payment processor module configured to process the payment request in response to authenticating the user.

2. The system of claim 1, wherein the an authentication module is configured to receive credentials of the user including a user identifier (ID) and a password, and authenticate the user based, at least in part, on the credentials.

3. The system of claim 1, wherein the online activity data comprises viewed item data, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on the viewed item data indicating the user viewed an online representation of the item or another item having an item type of the item a plurality of times.

4. The system of claim 3, wherein the online activity data further comprises clicked-on link data, visited webpage data, and/or search term data, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on the online activity data indicating the user performed an action directed to the online representation of the item or the other item having the item type of the item.

5. The system of claim 4, wherein the authentication module is configured to give more weight to a recent part of the online activity data.

6. The system of claim 1, wherein the online activity data comprises viewed item data, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on the viewed item data indicating another user associated with the user viewed an online representation of the item or another item having an item type of the item.

7. The system of claim 1, wherein the online activity data comprises social media post data obtained by scraping a social media account of the user or email data obtained by scraping an email account of the user, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on the social media post data or the email data indicating the user mentioned the item or another item having an item type of the item.

8. The system of claim 1, wherein the user profile further includes user interest data indicating an interest of the user, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on whether the item relates to the interest.

9. The system of claim 8, further comprising:

an online activity module configured to associate the online activity data with the user in the user profile in response to receiving the online activity data; and

an interest identification module configured to analyze the online activity data for behavioral patterns to generate the user interest data and associate the user interest data with the user in the user profile.

10. The system of claim 9, wherein the interest identification module is further configured to determine an audience segment in which the user belongs based on the online activity data, and wherein the authentication module is configured to determine the purchase is consistent with the user profile based, at least in part, on a proportion of the audience segment that is interested in the item or another item having an item type of the item.

11. A method comprising:

receiving, by a processing system over a network through a network interface from a user device, online activity data of a user;

associating, by the processing system in response to the receiving, the online activity data with the user in a non-transitory hardware memory;

receiving, by the processing system, a payment request for a purchase of an item using an account associated with the user;

determining, by the processing system, the purchase of the item by the user is consistent with the online activity data;

authenticating, by the processing system, the user based, at least in part, on the determining; and

processing, by the processing system, the payment request based on the authenticating.

12. The method of claim 11, further comprising receiving, by the processing system over the network through the network interface from the user device, credentials of the user including a user ID and a password, wherein the authenticating is based, at least in part, on the credentials.

13. The method of claim 11, wherein the online activity data comprises viewed item data, and wherein the authenticating is based, at least in part, on the viewed item data indicating the user viewed an online representation of the item or another item having an item type of the item a predetermined number of times.

14. The method of claim 13, wherein the online activity data comprises clicked-on link data, visited webpage data, and search term data, and wherein the authenticating is based, at least in part, on the online activity data indicating the user performed an action directed to the online representation of the item or the other item having the item type of the item.

15. The method of claim 14, wherein the authenticating comprises giving less weight to or ignoring a part of the online activity data from before a predetermined time period.

16. The method of claim 11, wherein the online activity data comprises social media data or email data, the method further comprising scraping a social media account of the user or an email account of the user to obtain the social media data or the email data, and wherein the authenticating is based, at least in part, on the social media post data or the email data indicating the user mentioned the item or another item having an item type of the item.

17. The method of claim 11, further comprising:

analyzing, by the processing system, the online activity data for behavioral patterns;

generating, by the processing system in response to the analyzing, user interest data indicating an interest of the user; and

associating, by the processing system in response to the generating, the user interest data with the user in the non-transitory hardware memory,

wherein the determining is based, at least in part, on whether the item relates to the interest.

18. The method of claim 17, wherein the generating comprises determining an audience segment in which the user belongs based on the online activity data, and wherein the determining is based, at least in part, on whether the item relates to an interest of members of the audience segment.

19. A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which, when executed by one or more processors, causes the one or more processors to perform a method comprising:

associating online activity data with a user in a non-transitory hardware memory in response to receiving the online activity data from a user device;

determining whether a purchase of an item by the user is consistent with the online activity data in response to receiving a payment request for the purchase of the item using an account associated with the user;

deciding whether to authenticate the user based, at least in part, on the determining; and

processing the payment request by approving the payment request in response to authenticating the user or denying the payment request in response to failing to authenticate the user.

20. The non-transitory machine-readable medium of claim 19, the method further comprising transmitting a notification and/or a request for additional authenticating information in response to determining the purchase of the item is not consistent with the online activity data.