Systems and methods for enhanced authorization fraud mitigation

• US 8,719,167 B2
• Filed: 03/02/2012
• Issued: 05/06/2014
• Est. Priority Date: 03/02/2012
• Status: Active Grant

• Current Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Leyva, Marcel, Motaharian, Houman, Phelan, Robert, Too, Hing Seng
• Primary Examiner(s): Kalinowski, Alexander
• Assistant Examiner(s): Chang, Edward
• Application Number:
  US13/411,299
• Publication Number:
  US 20130232068A1
• Time in Patent Office: 795 Days
• Field of Search: 705/40, 705/44
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

A consumer uses a web client to transmit purchase information associated with a transaction to a merchant server. The purchase information is transmitted via a web acceleration server. The web acceleration server identifies enhanced authorization data associated with the transaction. The web acceleration server creates a pseudo authorization message. The web acceleration server transmits the pseudo authorization message to a transaction account issuer. The merchant server transmits an authorization request to the transaction account issuer. The transaction account issuer determines that the authorization request and the pseudo authorization message are associated with the same transaction. The transaction account issuer merges the authorization request and the pseudo authorization message and performs a fraud analysis. The transaction account issuer transmits an authorization response to the merchant.

Claims

1. A computer-implemented method comprising:

receiving, by a computer-based system for authorizing transaction requests, purchase information associated with a transaction from a web client;

identifying, by the computer-based system, enhanced authorization data associated with the purchase information;

creating, by the computer-based system, a pseudo authorization message associated with the transaction;

transmitting, by the computer-based system, the purchase information to a merchant server, wherein the merchant server creates an authorization request associated with the transaction, and wherein the merchant server transmits the authorization request to a transaction account issuer; and

transmitting, by the computer-based system, the pseudo authorization message to the transaction account issuer, wherein the pseudo authorization message bypasses the merchant server.

2. The method of claim 1, wherein the transaction account issuer determines that the pseudo authorization message is associated with the authorization request received from the merchant server.

3. The method of claim 1, wherein the merchant server does not process the pseudo authorization message.

4. The method of claim 3, wherein the transaction account issuer merges the pseudo authorization message and the authorization request.

5. The method of claim 1, wherein the pseudo authorization message is created by a web acceleration server.

6. The method of claim 1, further comprising separating, by the computer-based system, the enhanced authorization data from the purchase information.

7. The method of claim 1, wherein the pseudo authorization message comprises a combination of the purchase information and the enhanced authorization data.

8. The method of claim 1, wherein the pseudo authorization message is transmitted to the transaction account issuer through an application program interface.

9. The method of claim 1, wherein the pseudo authorization message comprises the enhanced authorization data not included in the purchase information.

10. The method of claim 1, further comprising receiving, by the computer-based system, an authorization response.

11. The method of claim 10, further comprising transmitting, by the computer-based system, the authorization response to at least one of the merchant server or the web client.

12. The method of claim 1, further comprising determining, by the computer-based system, that transaction data within a data stream is associated with a transaction.

13. The method of claim 12, further comprising storing, by the computer-based system, the transaction data associated with the transaction.

14. The method of claim 1, wherein the pseudo authorization message comprises at least one of a transaction account number, a transaction account issuer, an expiration date, a security code, a billing address, a consumer name, a consumer birth date, a shipping address, a ship-to-name, a shipping method, an email address, a telephone number, an IP address, a service establishment number, a time of the purchase request, a customer hostname, an HTTP browser type, and a description of the goods.

15. The method of claim 1, further comprising determining, by the computer-based system, that the merchant server participates in an enhanced authorization program.

16. The method of claim 1, further comprising determining, by the computer-based system, that the merchant server is incapable of processing the enhanced authorization data.

17. The method of claim 1, further comprising appending, by the computer-based system, a time stamp to the pseudo authorization message.

18. The method of claim 1, wherein the pseudo authorization message is transmitted directly to the transaction account issuer.

19. An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system for authorizing transaction requests, cause the computer-based system to perform operations comprising:

receiving, by the computer-based system, purchase information associated with a transaction from a web client;

identifying, by the computer-based system, enhanced authorization data associated with the purchase information;

creating, by the computer-based system, a pseudo authorization message associated with the transaction;

transmitting, by the computer-based system, the purchase information to a merchant server, wherein the merchant server creates an authorization request associated with the transaction, and wherein the merchant server transmits the authorization request to a transaction account issuer; and

transmitting, by the computer-based system, the pseudo authorization message to the transaction account issuer, wherein the pseudo authorization message bypasses the merchant server.

20. A system comprising:

a processor for authorizing transaction requests,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

receiving, by the processor, purchase information associated with a transaction from a web client;

identifying, by the processor, enhanced authorization data associated with the purchase information;

creating, by the processor, a pseudo authorization message associated with the transaction;

transmitting, by the processor, the purchase information to a merchant server, wherein the merchant server creates an authorization request associated with the transaction, and wherein the merchant server transmits the authorization request to a transaction account issuer; and

transmitting, by the processor, the pseudo authorization message to the transaction account issuer, wherein the pseudo authorization message bypasses the merchant server.