Network security and fraud detection system and method

• US 9,118,646 B2
• Filed: 02/08/2013
• Issued: 08/25/2015
• Est. Priority Date: 06/14/2004
• Status: Active Grant

• Current Assignee: iovation Incorporated
• Original Assignee: iovation Incorporated
• Inventors: Pierson, Greg, DeHaan, Jason
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US13/763,422
• Publication Number:
  US 20130239182A1
• Time in Patent Office: 928 Days
• Field of Search: 726/23, 726/22, 726/25, 726/26, 705/73, 705/7.29, 709/223, 709/224, 455/410, 713/182
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system and method to detect and prevent fraud in a system is provided. The system may uniquely identify physical devices connecting to a network, register unique devices, track end-user logins, associate end-user accounts with specific devices, and share information with multiple network service providers is described.

Claims

1. A computer implemented method for use with a network device and a plurality of network service providers, the network device transmitting a device identifier to a selected one of the network service providers, the method comprising:

receiving, by at least one server computing device, a request from the selected network service provider, the request comprising the device identifier that identifies the network device;

associating, by the at least one server computing device, the device identifier with a plurality of reputation factors, at least a portion of the one or more reputation factors having been received from one or more of the plurality of network service providers other than the selected network service provider;

generating, by the at least one server computing device, a reputation for the network device based at least in part on the plurality of reputation factors associated with the device identifier, and transmitting, by the at least one server computing device, the reputation to the selected network service provider in response to the request; and

sharing, by the at least one server computing device, the reputation of the network device between the one or more network service providers to detect fraud using the network device across the plurality of network service providers.

2. The method of claim 1, further comprising:

generating, by the at least one server computing device, the device identifier for the network device, and transmitting the device identifier to the network device.

3. The method of claim 1, wherein the plurality of reputation factors comprise one or more of end-user account information provided by the selected network service provider, a credit card account number of a user associated with the network device, a fingerprint of the user, an email address of the user, a phone number of the user, a physical address of the user, and a cellular phone number of the user.

8. The method of claim 1, further comprising:

transmitting, by the at least one server computing device, computer executable instructions to the network device or the selected network service provider for transmission thereby to the network device, the computer executable instructions being configured to cause the network device to obtain the device identifier, and transmit the device identifier to the selected network service provider.

9. The method of claim 1, further comprising:

sharing, by the at least one server computing device, the plurality of reputation factors associated with the device identifier with the plurality of network service providers.

4. A network security and fraud detection and prevention system for use with a network device storing a device identifier that identifies the network device, the system comprising:

a plurality of network service providers each configured to provide a service, the network device connecting to a selected one of the network service providers over a communications network to use the service provided by the selected network service provider, the network device transmitting the device identifier to the selected network service provider; and

at least one fraud detection server computing device configured to receive the device identifier, associate the device identifier with a plurality of reputation factors, generate a reputation for the network device based at least in part on the plurality of reputation factors associated with the device identifier, and transmit the reputation to the selected network service provider, wherein the reputation of the network device is shared between the plurality of network service providers to detect fraud using the network device across the network service providers, and at least a portion of the one or more reputation factors were received from one or more of the plurality of network service providers other than the selected network service provider.

5. The system of claim 4, wherein the device identifier comprises a serial number for a cellular phone.

6. The system of claim 4, wherein the network device is a cellular phone, a personal digital assistant, a laptop computer, a personal computer, or a telephone.

7. The system of claim 4, wherein the plurality of reputation factors comprise one or more of end-user account information provided by the selected network service provider, a credit card account number of a user associated with the network device, a fingerprint of the user, an email address of the user, a phone number of the user, a physical address of the user, and a cellular phone number of the user.

10. The system of claim 4, wherein at least one fraud detection server computing device configured to transmit computer executable instructions to the network device or the selected network service provider for transmission thereby to the network device, the computer executable instructions being configured to cause the network device to obtain the device identifier, and transmit the device identifier to the selected network service provider.

11. The system of claim 4, wherein at least one fraud detection server computing device configured to share the plurality of reputation factors associated with the device identifier with the plurality of network service providers.

12. The system of claim 4, wherein at least one fraud detection server computing device configured to share the reputation associated with the device identifier with the plurality of network service providers.