Fraud detection system automatic rule population engine

• US 9,971,992 B2
• Filed: 08/02/2017
• Issued: 05/15/2018
• Est. Priority Date: 04/29/2011
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Boding, B. Scott, Siddens, Cory H.
• Primary Examiner(s): Fleischer, Mark A
• Application Number:
  US15/666,932
• Publication Number:
  US 20170330146A1
• Time in Patent Office: 286 Days
• Field of Search: 705 38, 705 44, 705318, 705 67, 705 76, 705 18, 705 728
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

Embodiments of the invention are directed to a fraud detection system that stores fraud detection rules and merchant profiles. The fraud detection system allows a user to designate fraud detection rules as core fraud detection rules, and the fraud detection system can automatically populate new merchant profiles with the user'"'"'s core fraud detection rules.

Claims

1. A method comprising:

storing, by a server computer in memory, a plurality of existing fraud-detection rules;

providing, by the server computer to a client computer, a first user interface for viewing the plurality of existing fraud-detection rules;

receiving, by the server computer, a first selection of a fraud detection rule made via the first user interface;

providing, by the server computer to the client computer, a second user interface comprising a plurality of user profiles based at least in part on the first selection;

receiving, by the server computer, a second selection made via the second user interface, the second selection identifying a first profile of the plurality of user profiles to include the selected fraud detection rule and including an action to be taken when the selected fraud detection rule is triggered as part of applying the first profile to an authorization request;

modifying, by the server computer, the first profile to include the selected fraud detection rule in combination with the action to be taken;

receiving an authorization request message transmitted from a merchant access device that is associated with the first profile of the plurality of user profiles; and

using, by the server computer, the selected fraud detection rule to process transaction details received in the authorization request message transmitted from the merchant access device to the server computer, the authorization request message transmitted between a user computer and the merchant access device using a communications network.

2. The method of claim 1, wherein the action to be taken is associated with the authorization request message for a transaction.

3. The method of claim 2, wherein the action to be taken comprises:

monitor the transaction, accept the transaction, review the transaction, or reject the transaction.

4. The method of claim 2, wherein the action to be taken comprises:

adjust a priority of the transaction.

5. The method of claim 1, further comprising:

prior to using the selected fraud detection rule to process transaction details, authenticating the merchant access device.

6. The method of claim 1, further comprising:

storing the modified first profile.

7. The method of claim 1, wherein the plurality of user profiles are populated with core fraud rules in addition to the selected fraud detection rule.

8. The method of claim 7, further comprising:

storing the core fraud rules in a fraud rules database.

9. A server computer comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method comprising;

storing, in memory, a plurality of existing fraud-detection rules;

providing, to a client computer, a first user interface for viewing the plurality of existing fraud-detection rules;

receiving a first selection of a fraud detection rule made via the first user interface;

providing, to the client computer, a second user interface comprising a plurality of user profiles based at least in part on the first selection;

receiving a second selection made via the second user interface, the second selection identifying a first profile of the plurality of user profiles to include the selected fraud detection rule and including an action to be taken when the selected fraud detection rule is triggered as part of applying the first profile to an authorization request;

modifying the first profile to include the selected fraud detection rule in combination with the action to be taken;

receiving an authorization request message transmitted from a merchant access device that is associated with the first profile of the plurality of user profiles; and

using the selected fraud detection rule to process transaction details received in the authorization request message transmitted from the merchant access device to the server computer, the authorization request message transmitted between a user computer and the merchant access device using a communications network.

10. The server computer of claim 9, wherein the action to be taken is associated with the authorization request message for a transaction.

11. The server computer of claim 10, wherein the action to be taken comprises:

monitor the transaction, accept the transaction, review the transaction, or reject the transaction.

12. The server computer of claim 9, wherein the method further comprising:

prior to using the selected fraud detection rule to process transaction details, authenticating the merchant access device.

13. The server computer of claim 9, wherein the method further comprising:

storing the modified first profile.

14. The server computer of claim 9, wherein the plurality of user profiles are populated with core fraud rules in addition to the selected fraud detection rule.

15. The server computer of claim 14, wherein the method further comprising:

storing the core fraud rules in a fraud rules database.

16. A client computer comprising:

a processor; and

a non-transitory computer-readable storage medium, comprising code executable by the processor for implementing a method comprising;

receiving, at the client computer from a server computer, a first user interface for viewing a plurality of existing fraud-detection rules;

receiving, via the first user interface at the client computer, a first selection of a fraud detection rule;

transmitting the selected fraud detection rule to the server computer;

receiving, at the client computer from the server computer, a second user interface comprising a plurality of user profiles based at least in part on the first selection;

receiving, via the second user interface at the client computer, a second selection, the second selection identifying a first profile of the plurality of user profiles to include the selected fraud detection rule and including an action to be taken when the selected fraud detection rule is triggered as part of applying the first profile to an authorization request; and

transmitting the selected first profile of the plurality of user profiles to the server computer,

wherein the selected first profile is modified to include the selected fraud detection rule in combination with the action to be taken, wherein the selected fraud detection rule is used to process transaction details received in an authorization request message transmitted from a merchant access device to the server computer, the authorization request message transmitted between the client computer and the merchant access device using a communications network.

17. The client computer of claim 16, wherein the method further comprises:

transmitting, by the client computer, conditions for creating a new core fraud detection rule;

selecting, by the client computer, the new core fraud detection rule; and

transmitting, by the client computer, a request to add the new core fraud detection rule to one or more of the plurality of user profiles.

18. The client computer of claim 16, wherein the action to be taken is associated with the authorization request message for a transaction.

19. The client computer of claim 18, wherein the action to be taken comprises:

monitor the transaction, accept the transaction, review the transaction, or reject the transaction.

20. A method comprising:

receiving, at a client computer from a server computer, a first user interface for viewing a plurality of existing fraud-detection rules;

receiving, via the first user interface at the client computer, a first selection of a fraud detection rule;

transmitting the selected fraud detection rule to the server computer;

receiving, at the client computer from the server computer, a second user interface comprising a plurality of user profiles based at least in part on the first selection;

receiving, via the second user interface at the client computer, a second selection, the second selection identifying a first profile of the plurality of user profiles to include the selected fraud detection rule and including an action to be taken when the selected fraud detection rule is triggered as part of applying the first profile to an authorization request; and

transmitting the selected first profile of the plurality of user profiles to the server computer,

wherein the selected first profile is modified to include the selected fraud detection rule in combination with the action to be taken, wherein the selected fraud detection rule is used to process transaction details received in an authorization request message transmitted from a merchant access device to the server computer, the authorization request message transmitted between the client computer and the merchant access device using a communications network.