Fraud detection system audit capability

• US 9,129,321 B2
• Filed: 04/19/2012
• Issued: 09/08/2015
• Est. Priority Date: 04/29/2011
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Boding, B. Scott, Siddens, Cory H.
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US13/451,431
• Publication Number:
  US 20120278868A1
• Time in Patent Office: 1,237 Days
• Field of Search: 726/5
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Embodiments of the invention are directed to a fraud detection system that records an audit log of modifications made by a user to a selection of fraud detection rules in a merchant profile. The audit log contains details of the modifications and the user associated with the modifications. A search can be conducted on the audit log to determine details of modifications made to a merchant profile within the fraud detection system.

Claims

1. A method comprising:

providing, by a server computer, a user interface on a first computer for viewing and modifying a plurality of fraud detection rules for detecting fraudulent transactions;

receiving, by the server computer, a modification to a first fraud detection rule from the plurality of fraud detection rules from a user via the user interface;

recording, by the server computer, the modification in a database by creating a first entry for the modification, the first entry including a field indicating a user identifier associated with the user;

subsequent to recording the modification, providing, by the server computer, the user interface on a second computer;

receiving, by the server computer, via the user interface on the second computer, a search request for prior modifications associated with the first fraud detection rule, the search request including a search parameter corresponding to the first fraud detection rule;

searching the database, by the server computer, for entries of the prior modifications associated with the first fraud detection rule using the search parameter; and

returning, by the server computer, a search result to the second computer, wherein the search result includes the user identifier of the user who modified the first fraud detection rule in the first entry.

2. The method of claim 1, further comprising:

parsing the search result for the modifications to the first fraud detection rule made by the user.

3. The method of claim 1, further comprising:

searching the database, by the server computer, for modifications to the selection of fraud detection rules made by the user.

4. The method of claim 1, wherein recording the modification in the database comprises storing the modification and the user ID of the user who made the modification.

5. The method of claim 1, further comprising:

authenticating the identity of the user prior to permitting the user to make the modification to the selection of fraud detection rules, wherein authenticating comprises verifying a login ID and password of the user.

6. The method of claim 1, further comprising:

restricting the returned search result based on text contained in a character string.

7. The method of claim 1, further comprising:

receiving, from a client computer, search parameters for searching the database.

20. The method of claim 1, further comprising:

determining whether a change in a number of fraud events is the result of the modifications to the first fraud detection rule.

8. A server computer comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method comprising;

providing a user interface on a first computer for viewing and modifying a plurality of fraud detection rules for detecting fraudulent transactions;

receiving a modification to a first fraud detection rule from the plurality of fraud detection rules from a user via the user interface;

recording the modification in a database by creating a first entry for the modification, the first entry including a field indicating a user identifier associated with the user;

subsequent to recording the modification, providing the user interface on a second computer;

receiving via the user interface on the second computer, a search request for prior modifications associated with the first fraud detection rule, the search request including a search parameter corresponding to the first fraud detection rule;

searching the database for entries of the prior modifications associated with the first fraud detection rule using the search parameter; and

returning a search result to the second computer, wherein the search result includes the user identifier of the user who modified the first fraud detection rule in the first entry.

9. The server computer of claim 8, wherein the method further comprises:

parsing the search result for the modifications to the first fraud detection rule made by the user.

10. The server computer of claim 8, wherein the method further comprises:

searching the database, by the server computer, for modifications to the selection of fraud detection rules made by the user.

11. The server computer of claim 8, wherein recording the modification in the database comprises storing the modification and the user ID of the user who made the modification.

12. The server computer of claim 8, wherein the method further comprises:

authenticating the identity of the user prior to permitting the user to make the modification to the selection of fraud detection rules, wherein authenticating comprises verifying a login ID and password of the user.

13. The server computer of claim 8, wherein the method further comprises:

restricting the returned search result based on text contained in a character string.

14. The server computer of claim 8, wherein the method further comprises:

receiving, from a client computer, search parameters for searching the database.

15. A method comprising:

receiving, by a client computer, a user interface for modifying and searching a plurality of fraud detection rules for detecting fraudulent transactions;

transmitting, by the client computer, to a fraud detection system via a communications network, a set of search parameters for conducting a search for modifications to the plurality of fraud detection rules in a merchant profile in a fraud rules modification database, the search parameters provided via the user interface; and

receiving, by the client computer, from the fraud detection system, a search result based on the set of search parameters, wherein the search result includes user information of a user who modified the plurality of fraud detection rules.

16. The method of claim 15, further comprising:

narrowing the scope of the search result based on modifications to the selection of fraud detection rules made by a user.

17. The method of claim 15, wherein the merchant profile is associated with one or more users who have access to modify the selection of fraud detection rules contained in the merchant profile.

18. A client computer comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method comprising;

receiving a user interface for modifying and searching a plurality of fraud detection rules for detecting fraudulent transactions;

transmitting to a fraud detection system via a communications network, a set of search parameters for conducting a search for modifications to the plurality of fraud detection rules in a merchant profile in a fraud rules modification database, the search parameters provided via the user interface; and

receiving from the fraud detection system, a search result based on the set of search parameters, wherein the search result includes user information of a user who modified the plurality of fraud detection rules.

19. The client computer of claim 18, wherein the method further comprises:

narrowing the scope of the search result based on modifications to the selection of fraud detection rules made by a user.