Device reputation

• US 8,869,245 B2
• Filed: 03/08/2012
• Issued: 10/21/2014
• Est. Priority Date: 03/09/2011
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Ranganathan, Prashanth, Olson, Alexander J., Bluemle, Frieder, Speckbacher, Tobias
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): FIELDS, COURTNEY D
• Application Number:
  US13/415,184
• Publication Number:
  US 20120233665A1
• Time in Patent Office: 957 Days
• Field of Search: 726/4, 726/10, 713/156, 713/186, 455/12.1, 705/44
• US Class Current: 726/4
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 2221/031 Protect user input by software means
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A user device is associated with a dynamic trust score that may be updated as needed, where the trust score and the updates are based on various activities and information associated with the mobile device. The trust score is based on both parameters of the device, such as device type, registered device location, device phone number, device ID, the last time the device has been accessed, etc. and activities the device engages in, such as amount of transactions, dollar amount of transactions, amount of denied requests, amount of approved requests, location of requests, etc. Based on a transaction request from the user device, the trust score and a network reputation score is used to determine an overall trust/fraud score associated with the transaction request.

Claims

1. A system comprising:

a memory storing account information for a plurality of users, wherein the account information comprises a user identifier and an overall trust score for a device corresponding to a user account; and

a processor operable for;

receiving a transaction request from a user device, wherein the transaction request includes a payment request using a payment provider server; and

determining the overall trust score for the transaction request, wherein the overall trust score is based on a device reputation score, a device profile score, and a network reputation score, wherein a weight of the network reputation score in the overall trust score decreases with an increasing length of time since an update of the network reputation score, and

wherein the update is based on an additive increase/multiplicative decrease (AIMD) algorithm.

2. The system of claim 1, wherein at least one of the device reputation score and the network reputation score are based on previous transactions and results of the previous transactions using the user device.

3. The system of claim 1, wherein the device profile score comprises attributes that make up the user device.

4. The system of claim 1, wherein the overall trust score is updated for the user device based on changes to the user device and/or activities engaged in by the user device.

5. The system of claim 1, wherein the processor is further operable for creating a new unique identifier for the user device if the user device does not have a unique identifier or a device fingerprint.

6. The method of claim 5, wherein the creating comprises randomly generating a number.

7. The method of claim 1, wherein the device reputation score and the network reputation score are updated for the user device based on changes to the user device and/or activities engaged in by the user device.

8. The method of claim 1, wherein the network reputation score is based on transactions conducted through the same or similar IP addresses as an IP address for the transaction request.

9. The method of claim 1, wherein the device profile score is based on scores of devices similar to the user device.

10. A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:

receiving a transaction request from a user device, wherein the transaction request includes a payment request using a payment provider server; and

determining an overall trust score for the transaction request, wherein the overall mast score is based on a device reputation score, a device profile score, wherein a weight of the network reputation score in the overall trust score decreases with an increasing length of time since an update of the network reputation score, and

wherein the update is based on an additive increase/multiplicative decrease (AIMD) algorithm.

11. The non-transitory machine-readable medium of claim 10, wherein at least one of the device reputation score and the network reputation score are based on previous transactions and results of the previous transactions using the user device.

12. The non-transitory machine-readable medium of claim 10, wherein the device profile score comprises attributes that make up the user device.

13. The non-transitory machine-readable medium of claim 10, wherein the overall trust score is updated for the user device based on changes to the user device and/or activities engaged in by the user device.

14. The non-transitory machine-readable medium of claim 10, wherein the method further comprises creating a new unique identifier for the user device if the user device does not have a unique identifier or a device fingerprint.

15. The non-transitory machine-readable medium of claim 14, wherein the creating comprises randomly generating a number.

16. The non-transitory machine-readable medium of claim 10, wherein the device reputation score and the network reputation score are updated for the user device based on changes to the user device and/or activities engaged in by the user device.

17. The non-transitory machine-readable medium of claim 10, wherein the network reputation score is based on transactions conducted through the same or similar IP addresses as an IP address for the transaction request.

18. The non-transitory machine-readable medium of claim 10, wherein the device profile score is based on scores of devices similar to the user device.

19. A method, comprising:

receiving, electronically by a processor of a service provider, a transaction request from a user device, wherein the transaction request includes a payment request using a payment provider server;

determining a device profile score for the user device based on a user device identifier;

determining a device reputation score for the user device, wherein the device reputation score is based, at least partly, on previous transactions and results of the previous transactions using the user device;

determining a network reputation score for a network addressed used in the transaction request, wherein the network reputation score is based, at least partly, on transactions conducted through the same or similar IP addresses as an IP address for the transaction request;

determining an overall trust score for the transaction request based on the device profile score, the device reputation score, and the network reputation score, wherein a weight of the network reputation score in the overall trust score decreases with an increasing length of time since an update of the network reputation score, and wherein the update is based on an additive increase/multiplicative decrease (AIMD) algorithm; and

updating one or more of device profile score, the device reputation score, and the network reputation score based on results of the transaction request.