System and method for identifying and preventing on-line fraud

• US 9,779,556 B1
• Filed: 12/27/2006
• Issued: 10/03/2017
• Est. Priority Date: 12/27/2006
• Status: Active Grant

• Current Assignee: Auctane LLC (Stamps.com, Inc.)
• Original Assignee: Stamps.com, Inc.
• Inventors: Thobhani, Akbar A., Huebner, Kyle, Spring, Steve
• Primary Examiner(s): Zelaskiewicz, Chrystina
• Application Number:
  US11/616,529
• Time in Patent Office: 3,933 Days
• Field of Search: 705 75, 705 60- 62
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2250/05 using cryptography
• CPC Class Codes: G07B 17/00024 Physical or organizational aspects of franking systems
• CPC Class Codes: G07B 17/0008 Communication details outside or between apparatus coin-freed apparatus for franking per se G07F17/26
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00064 Virtual meter, online stamp; PSD functions or indicia creation not at user's location

Abstract

The present invention is directed to systems and methods which identify fraudulent situations during the transaction phase. In one embodiment, such detection is accomplished by monitoring for situations either outside the range of normal for the general population or outside the range of normal for this particular user. The normal range could be rule driven and, for example, could include size of a given purchase, frequency of purchases, identity of use equipment being utilized for the current transaction, etc. The rule could be relaxed or tightened, at least in part, based on the length of time that the user has been a customer and the user'"'"'s past payment history. In one embodiment, device ids are used to detect fraudulent users. These device (or software) ids could, for example, be a “fingerprint” of the user'"'"'s equipment, or a “cookie” previously downloaded to the user that identifies the user to the fulfillment system. In situations where fraud is detected downloading the value to the user is interrupted.

Claims

1. A method of sending downloadable value indicia data over the Internet, said data used to generate value indicia which is stored on identifiable media for subsequent use by a recipient, said method comprising:

receiving, by a server, information relating to a purchase of said identifiable media, the information including;

identifiable portions of said identifiable media, an identity of a user who purchased said identifiable media, and a first fingerprint of computer equipment used by said user to purchase said identifiable media;

storing, by said server, said identifiable portions of said identifiable media in association with said identity of said user and in association with said first fingerprint of said computer equipment;

receiving, by said server from a remote computing device of said recipient, an order for specific downloadable value indicia data of said downloadable value indicia data to generate said value indicia, wherein said order specifies an identifiable medium to have printed thereon said value indicia;

obtaining, by said server, a second fingerprint of said remote computing device;

determining, by said server, whether said first fingerprint matches said second fingerprint;

in response to a determination, by said server, that said first fingerprint matches said second fingerprint, determining, by said server, whether said specified identifiable medium of said order matches at least one of said stored identifiable portions of said identifiable media associated with said identity of said user who purchased said identifiable media to store said value indicia; and

in response to a determination, by said server, that said specified identifiable medium of said order matches said at least one of said stored identifiable portions of said identifiable media associated with said identity of said user who purchased said identifiable media to store said value indicia, sending, by said server, over the Internet to said remote computing device, said specific downloadable value indicia data.

2. The method of claim 1 wherein said sending said specific downloadable value indicia data to said remote computing device is further in response to determining whether said order contains a non-approved parameter, and wherein said sending said specific downloadable value indicia data to said remote computing device is blocked in response to a determination that said accepted order contains said non-approved parameter.

3. The method of claim 2 wherein said information relating to said purchase of said identifiable media includes a quantity of said identifiable media purchased by said user, and wherein said determining whether said order contains a non-approved parameter includes:

determining a remaining quantity of said identifiable media, said remaining quantity corresponding to unused identifiable media purchased by said user; and

determining whether a quantity of identifiable media necessary for storing said value indicia is greater than said remaining quantity of said identifiable media.

4. The method of claim 2 wherein said server includes a rules engine that uses rules to determine whether said order contains said non-approved parameter.

5. The method of claim 1 wherein said identifiable portions are identified by a serial number.

6. The method of claim 4 wherein at least some of said rules are adjusted from time to time for said computer equipment.

7. The method of claim 6 wherein at least some of said adjustments are dependent upon prior orders accepted from said computer equipment.

8. The method of claim 1 wherein said identifiable media is print stock, and wherein said identifiable media is provided to said recipient as multiple sheets of said print stock.

13. The method of claim 1 wherein said information relating to said purchase of said identifiable media is received from a third party vendor of the identifiable media.

14. The method of claim 1 wherein said first fingerprint of said computer equipment matches said second fingerprint of said remote computing device.

9. A method of sending value indicia data to a remote computing device of a recipient, said method comprising:

receiving, by a server from a computing device of a user, a request for purchase of at least one identifiable medium;

obtaining a first fingerprint of said computing device in response to said request, wherein said first fingerprint comprises at least one of a physical address, an electronic address, a supplied phone number, a printer identification, and a MAC address;

sending, to said user, said purchased at least one identifiable medium;

recording, by the server, identifiable portions of said purchased at least one identifiable medium, wherein said recording indicates that said sent at least one identifiable medium was purchased by said user using said computing device having said first fingerprint;

receiving, by said server from said remote computing device of said recipient, an order for said value indicia data, wherein said order specifies an identifiable medium;

obtaining, by said server, a second fingerprint of said remote computing device in response to receiving said order;

determining, by said server, whether said first fingerprint matches said second fingerprint;

in response to a determination that said first fingerprint matches said second fingerprint, determining, by the server, whether said identifiable medium specified in said order matches one of said recorded identifiable portions of said at least one identifiable medium purchased using said computing device having said first fingerprint; and

in response to a determination that said specified identifiable medium of said order matches said one of said recorded identifiable portions of said sent at least one identifiable medium purchased using said computing device having said first fingerprint, sending said value indicia data to said remote computing device.

10. The method of claim 9 further comprising:

storing a set of rules in association with said user,

wherein said sending said value indicia data to said remote computing device is further in response to determining whether said order comprises a parameter that violates said set of rules, and, in response to a determination that said order comprises a parameter that violates said set of rules, blocking said sending said value indicia data to said computing device.

11. The method of claim 9 wherein said identifiable medium is print stock with identification markings thereon.

12. The method of claim 9 wherein said first fingerprint comprises information about at least one of:

a software component of said computing device; and

a hardware component of said computing device.