Authentication process using search technology

• US 8,600,875 B2
• Filed: 04/11/2011
• Issued: 12/03/2013
• Est. Priority Date: 04/12/2010
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Ciurea, Peter
• Primary Examiner(s): Chang, Edward
• Application Number:
  US13/084,426
• Publication Number:
  US 20110258118A1
• Time in Patent Office: 967 Days
• Field of Search: 705/38, 705/35
• US Class Current: 705/38
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

Systems and methods are presented for improved authentication and risk analysis processes using search engine technology. In one potential implementation, an authorization request message is received at a payment processing network as part of a transaction between a user and a merchant. The payment processing network analyzes risk based on a search history associated with the user involved in the transaction with the merchant. A response to the authentication request is made based in part on the risk associated with the user search history. In further embodiments, a user registers with a search engine as part of a service for improved authentication, where the user accepts privacy settings allowing storage of search and transaction data by a search engine server. The search engine server passes search and transaction data to a risk analysis server for creation of risk parameters which may be used to authenticate transactions.

Claims

1. A method comprising:

receiving, at a server computer, an authorization request message, wherein the authorization request message requests authorization to conduct a transaction and was generated in response to an interaction between a user and a merchant;

retrieving, by the server computer, search history data or search parameters relating to searches conducted by the user;

after retrieving the search history data or search parameters, determining, by the server computer, a risk parameter associated with the transaction, wherein the risk analysis parameter is based on at least the search history data or search parameters;

modifying the authorization request message to include the risk analysis parameter to create a modified authorization request message; and

transmitting, by the server computer, the modified authorization request message to an issuer.

2. The method of claim 1 wherein the server computer is in a payment processing network that is configured to process credit and debit card transactions.

3. The method of claim 1 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for the merchant.

4. The method of claim 1 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for the merchant, and wherein the risk analysis parameter indicates that the transaction is low risk.

5. The method of claim 1 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for a different merchant, and wherein the risk analysis parameter indicates that the transaction is higher risk than if the authorization request message comprised an indicator for the merchant.

6. The method of claim 1 wherein the risk analysis parameter is a risk score.

7. The method of claim 1 wherein the authorization request message was generated by an access device or computer of the merchant, and wherein the authorization request message comprises a payment card account identifier.

8. The method of claim 1 further comprising:

receiving an authorization response message from the issuer, wherein the authorization response message comprises an indicator indicating that the issuer approved of the transaction.

9. The method of claim 1 wherein the merchant offers goods or services for sale on the Internet, and also offers goods or services for sale at a physical location.

10. The method of claim 1 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant at a specific location, and wherein the authorization request message comprises a location indicator, wherein the location indicator corresponds to the specific location, and wherein the risk analysis parameter indicates that the transaction is low risk.

11. A system comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium code for causing the processor to implement a method comprising

receiving, at a server computer, an authorization request message, wherein the authorization request message requests authorization to conduct a transaction and was generated in response to an interaction between a user and a merchant,

retrieving, by the server computer, search history data or search parameters relating to searches conducted by the user,

after retrieving the search history data or search parameters, determining, by the server computer, a risk parameter associated with the transaction, wherein the risk analysis parameter is based on at least the search history data or search parameters,

modifying the authorization request message to include the risk analysis parameter to create a modified authorization request message, and

transmitting, by the server computer, the modified authorization request message to an issuer.

12. The system of claim 11 wherein the server computer is in a payment processing network that is configured to process credit and debit card transactions.

13. The system of claim 11 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for the merchant.

14. The system of claim 11 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for the merchant, and wherein the risk analysis parameter indicates that the transaction is low risk.

15. The system of claim 11 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant, and wherein the authorization request message comprises an indicator for a different merchant, and wherein the risk analysis parameter indicates that the transaction is higher risk than if the authorization request message comprised an indicator for the merchant.

16. The system of claim 11 wherein the risk analysis parameter is a risk score.

17. The system of claim 11 wherein the authorization request message was generated by an access device or computer of the merchant, and wherein the authorization request message comprises a payment card account identifier.

18. The system of claim 11 further comprising:

receiving an authorization response message from the issuer, wherein the authorization response message comprises an indicator indicating that the issuer approved of the transaction.

19. The system of claim 11 wherein the merchant offers goods or services for sale on the Internet, and also offers goods or services for sale at a physical location.

20. The system of claim 11 wherein the search history data or the search parameters comprises an indication that the user searched for the merchant at a specific location, and wherein the authorization request message comprises a location indicator, wherein the location indicator corresponds to the specific location;

and wherein the risk analysis parameter indicates that the transaction is low risk.