Systems and methods for identifying information related to payment card breaches

• US 9,392,008 B1
• Filed: 10/26/2015
• Issued: 07/12/2016
• Est. Priority Date: 07/23/2015
• Status: Active Grant

• Current Assignee: Palantir Technologies Incorporated
• Original Assignee: Palantir Technologies Incorporated
• Inventors: Michel, Jean-Baptiste, McCardel, Barry, Norris, Daniel, Saperstein, Craig, Glen, Christopher, Denovitzer, Eric
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US14/923,364
• Time in Patent Office: 260 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

Approaches for determining a potential merchant breach are described. A system can acquire card transaction data from one or more sources such as merchants or financial institutions, in some instances at a predetermined time interval. Cards associated with the card transaction data can be analyzed to determine the health of a particular card, including the likelihood that the particular card has been compromised. A set of cards are accumulated, and their associated health data is stored. Based on the information obtained from a source, and the health associated with a set of cards, a potential date where a merchant was breached can be determined and fraudulent purchases can be prevented.

Claims

1. A system for determining a merchant breach, the system comprising:

a memory device configured to store a set of instructions; and

one or more processors configured to execute the set of instructions that cause the one or more processors to;

acquire card transaction data from one or more merchants, wherein the acquisition of the card transaction data is performed at a first predetermined periodic interval;

store information relating to payment cards associated with the card transaction data;

for at least some of the payment cards, automatically determine at least one value indicative of card health and store the determined values for the payment cards, wherein determination of the at least one value indicative of card health is performed at a second predetermined periodic interval;

accumulate, over a period of time, card health data for the payment cards based on the determined at least one value indicative of card health;

store the accumulated card health data;

identify a potential merchant breach and the timing of the potential merchant breach based on a comparison between the accumulated card health data and the stored information relating to payment cards associated with the card transaction data; and

display in a graph of a graphical user interface of the system, at least a portion of the accumulated card health data and the card transaction data indicating the potential merchant breach.

2. The system of claim 1, wherein the first predetermined periodic interval and the second predetermined periodic interval are both about one day.

3. The system of claim 1, wherein information identifying cards used at a particular merchant is collected at a particular time interval and stored in a memory.

4. The system of claim 1, wherein the card health is re-determined at least once for each of the payment cards.

5. The system of claim 1, wherein the card health values are stored based on a transaction date.

6. The system of claim 1, wherein a merchant breach is identified by determining the accumulated card health indicator values and identifying a concentration of abnormal card health indicator values within a particular date range.

7. They system of claim 1, wherein the comparison between the accumulated card health data and the stored information includes comparing the times at which card health data of the cards associated with the accumulated card health data changed and one or more common merchants included in the stored information.

8. A method for determining a merchant breach, the method comprising:

acquiring card transaction data from one or more merchants, wherein the acquisition of the card transaction data is performed at a first predetermined periodic interval;

storing information relating to payment cards associated with the card transaction data;

for at least some of the payment cards, automatically determining at least one value indicative of card health and store the determined values for the payment cards, wherein determination of the at least one value indicative of card health is performed at a second predetermined periodic interval;

accumulating, over a period of time, card health data for the payment cards based on the determined at least one value indicative of card health;

storing the accumulated card health data;

identifying a potential merchant breach and the timing of the potential merchant breach based on a comparison between the accumulated card health data and the stored information relating to payment cards associated with the card transaction data; and

displaying in a graph of a graphical user interface of a system, at least a portion of the accumulated card health data and the card transaction data indicating the potential merchant breach.

9. The method of claim 8, wherein the first predetermined periodic interval and the second predetermined periodic interval are both about one day.

10. The method of claim 8, wherein information identifying cards used at a particular merchant is collected at a particular time interval and stored in a memory.

11. The method of claim 8, wherein the card health is re-determined at least once for each of the payment cards.

12. The method of claim 8, wherein the card health values are stored based on a transaction date.

13. The method of claim 8, wherein a merchant breach is identified by determining the accumulated card health indicator values and identifying a concentration of abnormal card health indicator values within a particular date range.

14. The method of claim 8, wherein the comparison between the accumulated card health data and the stored information includes comparing the times at which card health data of the cards associated with the accumulated card health data changed and one or more common merchants included in the stored information.

15. A non-transitory computer-readable medium storing a set of instructions that are executable by one or more processors to cause the one or more processors to perform a method to determine a merchant breach, the method comprising:

acquiring card transaction data from one or more merchants, wherein the acquisition of the card transaction data is performed at a first predetermined periodic interval;

storing information relating to payment cards associated with the card transaction data;

for at least some of the payment cards, automatically determining at least one value indicative of card health and store the determined values for the payment cards, wherein determination of the at least one value indicative of card health is performed at a second predetermined periodic interval;

accumulating, over a period of time, card health data for the payment cards based on the determined at least one value indicative of card health;

storing the accumulated card health data;

identifying a potential merchant breach and the timing of the potential merchant breach based on a comparison between the accumulated card health data and the stored information relating to payment cards associated with the card transaction data; and

displaying in a graph of a graphical user interface of a system, at least a portion of the accumulated card health data and the card transaction data indicating the potential merchant breach.

16. The method of claim 15, wherein the first predetermined periodic interval and the second predetermined periodic interval are both about one day.

17. The method of claim 15, wherein information identifying cards used at a particular merchant is collected at a particular time interval and stored in a memory.

18. The method of claim 15, wherein the card health is re-determined at least once for each of the payment cards.

19. The method of claim 15, wherein the card health values are stored based on a transaction date.

20. The method of claim 15, wherein the comparison between the accumulated card health data and the stored information includes comparing the times at which card health data of the cards associated with the accumulated card health data changed and one or more common merchants included in the stored information.