Systems and methods for enhanced authorization fraud mitigation

• US 8,650,120 B2
• Filed: 03/02/2012
• Issued: 02/11/2014
• Est. Priority Date: 03/02/2012
• Status: Active Grant

• Current Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Leyva, Marcel, Motaharian, Houman, Phelan, Robert, Too, Hing Seng
• Primary Examiner(s): Chang, Edward
• Application Number:
  US13/411,370
• Publication Number:
  US 20130232069A1
• Time in Patent Office: 711 Days
• Field of Search: 705/40, 705/35
• US Class Current: 705/40
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

A consumer uses a web client to transmit purchase information associated with a transaction to a merchant server. The purchase information is transmitted via a web acceleration server. The web acceleration server identifies enhanced authorization data associated with the transaction. The web acceleration server creates a pseudo authorization message. The web acceleration server transmits the pseudo authorization message to a transaction account issuer. The merchant server transmits an authorization request to the transaction account issuer. The transaction account issuer determines that the authorization request and the pseudo authorization message are associated with the same transaction. The transaction account issuer merges the authorization request and the pseudo authorization message and performs a fraud analysis. The transaction account issuer transmits an authorization response to the merchant.

Claims

1. A computer-implemented method comprising:

receiving, by a computer-based system for authorizing transaction requests, an authorization request associated with a transaction from a merchant server;

receiving, by the computer-based system, a pseudo authorization message associated with the transaction from a web acceleration server, wherein the pseudo authorization message bypasses the merchant server;

determining, by the computer-based system, that the authorization request was received within a specified time of the pseudo authorization message; and

merging, by the computer-based system, the authorization request and the pseudo authorization message to create an enhanced authorization message.

2. The method of claim 1, wherein the pseudo authorization message is created by the web acceleration server.

3. The method of claim 1, further comprising determining, by the computer-based system, that the authorization request and the pseudo authorization message are associated with the transaction.

4. The method of claim 1, further comprising comparing, by the computer-based system, the enhanced authorization message with fraud data in a database.

5. The method of claim 1, further comprising transmitting, by the computer-based system, an authorization response to the merchant server.

6. The method of claim 1, wherein the authorization response comprises an approval or a denial.

7. The method of claim 1, further comprising storing, by the computer-based system, the pseudo authorization message in an enhanced authorization queue.

8. The method of claim 7, further comprising determining, by the computer-based system, that the pseudo authorization message has not been merged with an authorization request for a predetermined period of time.

9. The method of claim 8, further comprising removing, by the computer-based system, the pseudo authorization message from the enhanced authorization queue.

10. The method of claim 1, further comprising polling, by the computer-based system, an enhanced authorization queue for a pseudo authorization message corresponding to the authorization request.

11. The method of claim 1, further comprising polling, by the computer-based system and in response to receiving the pseudo authorization message, a database for a corresponding authorization request.

12. The method of claim 1, further comprising determining, by the computer-based system, that the merchant participates in an enhanced authorization program.

13. The method of claim 4, wherein the comparing comprises comparing at least one of a time received, a merchant, a transaction account number, and a transaction amount.

14. The method of claim 1, further comprising determining, by the computer-based system, that information in the enhanced authorization message is associated with fraudulent activity.

15. The method of claim 1, wherein the pseudo authorization message comprises a combination of purchase information and enhanced authorization data.

16. The method of claim 1, wherein the merchant server is incapable of processing enhanced authorization data.

17. The method of claim 1, wherein the pseudo authorization message comprises at least one of a transaction account number, a transaction account issuer, an expiration date, a security code, a billing address, a consumer name, a consumer birth date, a shipping address, a ship-to-name, a shipping method, an email address, a telephone number, an IP address, a service establishment number, a time of the purchase request, a customer hostname, N HTTP browser type, and a description of the goods.

18. The method of claim 1, further comprising appending, by the computer-based system, a time stamp to the pseudo authorization message.

19. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system for authorizing transaction requests, cause the computer-based system to perform operations comprising:

receiving, by the computer-based system, an authorization request associated with a transaction from a merchant server;

receiving, by the computer-based system, a pseudo authorization message associated with the transaction from a web acceleration server, wherein the pseudo authorization message bypasses the merchant server;

determining, by the computer-based system, that the authorization request was received within a specified time of the pseudo authorization message; and

merging, by the computer-based system, the authorization request and the pseudo authorization message to create an enhanced authorization message.

20. A system comprising;

a processor for authorizing transaction requests,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

receiving, by the processor, an authorization request associated with a transaction from a merchant server;

receiving, by the processor, a pseudo authorization message associated with the transaction from a web acceleration server, wherein the pseudo authorization message bypasses the merchant server;

determining, by the computer-based system, that the authorization request was received within a specified time of the pseudo authorization message; and

merging, by the processor, the authorization request and the pseudo authorization message to create an enhanced authorization message.