Method and system for using social networks to verify entity affiliations and identities

• US 9,413,737 B2
• Filed: 01/16/2014
• Issued: 08/09/2016
• Est. Priority Date: 03/07/2012
• Status: Active Grant

• Current Assignee: BILL Operations LLC (Bill Holdings, Inc.)
• Original Assignee: Bill.com, Inc. (Bill.com Holdings, Inc.)
• Inventors: Orttung, Mark, Linscott, Darren
• Primary Examiner(s): Davis, Zachary A
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US14/157,420
• Publication Number:
  US 20140136382A1
• Time in Patent Office: 936 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Login credentials for at least one website, such as a social networking website, are received from a user purporting to act on behalf of an entity, for example, in the context of registering the entity with a system for electronic bill payment. Social data relating to the entity is retrieved from the websites using the login credentials. The social data comprises a plurality of social connections, each reflecting a respective relationship between the entity and a respective third party. A plurality of relevant social connections comprising at least a subset of the plurality of social connections is determined, each social connection of the plurality of relevant social connections reflecting a relationship to a respective third party that is deemed to be reliable. A reliability rating of the entity is then determined based on the plurality of relevant social connections.

Claims

1. A method, comprising:

receiving, in a computing device, a request from a user purporting to act on behalf of an entity;

receiving, in the computing device from the user, login credentials of an account of the entity on one of one or more online communication sites;

obtaining, by the computing device using the login credentials and from one or more online communication sites, social data identifying a plurality of social connections between the entity and a plurality of respective third parties;

identifying, by the computing device, at least a subset of the social connections, wherein each third party in the subset of the social connections has a reliability rating;

determining, by the computing device, a reliability rating of the entity based on the subset of the social connections to third parties having reliability ratings in the plurality of social connections of the entity; and

determining, by the computing device, whether or not to accept the request based on the reliability rating of the entity.

2. The method of claim 1, wherein the social connections are identified from online communications between the entity and the plurality of respective third parties in the one or more online communication sites.

3. The method of claim 1, wherein the reliability ratings of third parties in the subset of social connections indicate that the third parties in the subset of social connections are deemed reliable.

4. The method of claim 3, further comprising:

identifying a respective third party in the subset of social connections as reliable based on the respective third party being a member of a financial service.

5. The method of claim 3, further comprising:

identifying a respective third party in the subset of social connections as reliable based on the respective third party having received favorable ratings from members of a financial service.

6. The method of claim 3, further comprising:

identifying a respective third party in the subset of social connections as reliable based on the respective third party having a history of on time payments, made via a financial service, to other members of the financial service.

7. The method of claim 3, further comprising:

identifying a respective third party in the subset of social connections as reliable based on a history and current trends of a ratio of receivables of the third party and receipts to payables of the third party.

8. The method of claim 1, wherein the social data is obtained from a plurality of social networking websites, the method further comprising:

identifying, using the computing device, a plurality of overlapping social connections, wherein each of the overlapping social connections reflects a relationship between the entity and a respective third party in more than one of the social networking websites.

9. The method of claim 8, further comprising:

providing an increased weight to the overlapping social connections in determining the reliability rating of the entity.

10. The method of claim 1, wherein the reliability rating of the entity is based on a count of the subset of the social connections to third parties having a predetermined reliability rating.

11. The method of claim 10, wherein the predetermined reliability rating corresponds to a favorable rating.

12. The method of claim 11, further comprising:

identifying the reliability rating of the entity as favorable when the count of the subset of the social connections exceeds a threshold.

13. The method of claim 12, wherein the threshold is based on a count of the plurality of social connections.

14. The method of claim 1, wherein the reliability rating of the entity is based on whether a ratio between a count of the subset of the social connections and a count of the plurality of social connections is above a threshold.

15. The method of claim 14, wherein the threshold depends on the count of the plurality of social connections.

16. The method of claim 1, wherein each third party in the subset of the social connections has a reliability rating deemed one of:

reliable and unreliable.

17. A non-transitory computer readable storage media storing thereon computer readable instructions configured to instruct a computing device to at least:

receive, in the computing device, a request from a user purporting to act on behalf of an entity;

receive, in the computing device from the user, login credentials of an account of the entity on one of one or more online communication sites;

obtain, by the computing device using the login credentials and from one or more online communication sites, social data identifying a plurality of social connections between the entity and a plurality of respective third parties;

identify, by the computing device, at least a subset of the social connections, wherein each third party in the subset of the social connections has a reliability rating;

determine, by the computing device, a reliability rating of the entity based on the subset of the social connections to third parties having reliability ratings in the plurality of social connections of the entity; and

determine, by the computing device, whether or not to accept the request based on the reliability rating of the entity.

18. A computing device, comprising:

at least one processor; and

memory storing instructions configured to instruct the at least one processor to;

receive, in the computing device, a request from a user purporting to act on behalf of an entity;

receive, in the computing device from the user, login credentials of an account of the entity on one of one or more online communication sites;

obtain, by the computing device using the login credentials and from one or more online communication sites, social data identifying a plurality of social connections between the entity and a plurality of respective third parties;

identify, by the computing device, at least a subset of the social connections, wherein each third party in the subset of the social connections has a reliability rating;

determine, by the computing device, a reliability rating of the entity based on the subset of the social connections to third parties having reliability ratings in the plurality of social connections of the entity; and

determine, by the computing device, whether or not to accept the request based on the reliability rating of the entity.