Automatic learning multi-modal fraud prevention (LMFP) system

• US 9,372,976 B2
• Filed: 03/20/2014
• Issued: 06/21/2016
• Est. Priority Date: 03/20/2013
• Status: Active Grant

• Current Assignee: Dror Bukai
• Original Assignee: Dror Bukai
• Inventors: Bukai, Dror
• Primary Examiner(s): Henderson, Esther B
• Application Number:
  US14/220,407
• Publication Number:
  US 20140289867A1
• Time in Patent Office: 824 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

A computerized learning multi-modal fraud prevention system and method for generating a data signature of a user, such as one engaged in electronic commerce, to prevent fraudulent activities by machines and persons imitating the user. Steps comprise: fetching a signal of a user'"'"'s signature stored in memory; generating at least one challenge sequence based on the signal to create a second signature; presenting the generated challenge sequence to the user; collecting the user'"'"'s challenge response to the generated challenge sequence; computing a quality factor between the user'"'"'s challenge response and the generated challenge sequence; computing a transaction quality factor and content quality factor and reporting an impostor or re-challenging if the quality factor is below a threshold. Lastly, generating a new signature based on any portion of a user'"'"'s challenge response and/or any portion of the previously generated signature and/or any portion of collectable information from the user'"'"'s device memory.

Claims

1. A computerized method for generating a new signature of a user to prevent user impersonation, comprising a computer processor steps of,

a. fetching a signal from a non-volatile memory of at least one portion of at least one previously generated user'"'"'s signature;

b. generating at least one challenge sequence based on the signal to create a new signature;

c. presenting the generated challenge sequence to the user;

d. collecting the user'"'"'s challenge response to the generated challenge sequence, and further comprising an events correlation mechanism that checks for use abnormalities of a user and generates a trigger to re-generate a challenge question if an abnormality is detected, wherein the abnormality comprises one or more of;

conflicts in a user'"'"'s known location, current activity, time length of transaction, repetition of visiting a transaction, time lapse between repeated transaction, distribution of transaction locations, speed of movement within same transaction location area, and speed of movement between different transaction location areas;

e. computing a quality factor which represents a degree of correlation between any portion of the user'"'"'s challenge response and any portion of the generated challenge sequence;

f. generating a new signature based on any portion of user'"'"'s challenge response and any portion of the previously generated signature and any portion of collectable information from user'"'"'s device memory;

g. storing the new signature and at least one of, the quality factor, a trust factor or a transaction quality factor in a non-volatile memory or communicating it to a computer program; and

,

h. wherein each challenge sequence and challenge response comprises any combination of one or more of textual, visual effects of display, picture, moving picture, video, audio, animation, advertisement format, computer code, and computer data objects.

2. The computerized method of claim 1, wherein the trust factor or the transaction quality factor comprises computing a degree of correlation between any portion of the user'"'"'s challenge response and any portion of a previously generated signature and any portion of collectable information from the user'"'"'s device memory.

3. The computerized method of claim 1, wherein generating a new signature is further based on information collected from memory of at least one user device.

4. The computerized method of claim 1, wherein generating a new signature on, or adjacent to, every user interaction, or an external application interaction, or a predefined schedule or trigger event is based on any portion of location, device unique parameters, unique program identifier, unique device identifier, user identifying information, and user related information fetched from memory of at least one user device.

5. The computerized method of claim 1, wherein generating a new trust factor or transaction quality factor on, or adjacent to, every user interaction, or an external application interaction, or a predefined schedule or trigger event is based on any portion of location, device unique parameters, unique program identifier, unique device identifier, user identifying information, or user related information fetched from memory of at least one user device.

6. The computerized method of claim 1, wherein the trust factor or the transaction quality factor is a cross platform transaction quality factor related to at least two computer programs the user interacts with through at least one device.

7. The computerized method of claim 1, wherein a content quality factor reflects a user'"'"'s interest in an advertisement that may be presented to user by incorporation within a challenge sequence or by controlling content presented to the user.

8. The computerized method of claim 1, wherein any of the quality factor, the trust factor, the transaction quality factor and a content quality factor may be communicated to at least one computer program at any time.

9. A networked based computing system for detecting fraudulent machine or human impersonation of a user, comprising:

a) a system computer comprising at least one processor and at least one memory device operably connected to one another, and a plurality of computer-executable instructions stored on the memory device that when executed by the processor, cause the processor to;

i. fetch a signal from a non-volatile memory of at least one portion of at least one previously generated user'"'"'s signature;

ii. generate at least one challenge sequence based on the signal to create a new signature;

iii. present the generated challenge sequence to the user;

iv. collect the user'"'"'s challenge response to the generated challenge sequence, wherein the generated challenge sequence and the user'"'"'s challenge response comprises any combination of one or more of textual, visual effects of display, picture, moving picture, video, audio, animation, advertisement format, computer code, and computer data objects,

v. check for use abnormalities of a user and generate a trigger to re-generate a challenge question if an abnormality is detected, wherein the abnormality comprises one or more of;

conflicts in a user'"'"'s known location, current activity, time length of transaction, repetition of visiting a transaction, time lapse between repeated transaction, distribution of transaction locations, speed of movement within same transaction location area, and speed of movement between different transaction location areas;

vi. compute a quality factor which represents a degree of correlation between any portion of the user'"'"'s challenge response and any portion of the generated challenge sequence;

vii. generate a new signature based on any portion of the user'"'"'s challenge response and any portion of the previously generated signature and any portion of collectable information from the user'"'"'s device memory;

viii. store the new signature and at least one of, the quality factor, a trust factor, and a transaction quality factor in memory or communicating it to a computer program; and

,

b) a connection between the system computer and one or more external applications.

10. The networked based computing system of claim 9, wherein the trust factor or the transaction quality factor comprises computing a degree of correlation between any portion of the user'"'"'s challenge response and any portion of a previously generated signature and any portion of collectable information from the user'"'"'s device memory.

11. The networked based computing system of claim 9, wherein generating a new signature is further based on information collected from memory of at least one user device.

12. The networked based computing system of claim 9 wherein generating a new signature on, or adjacent to, every user interaction, or an external application interaction, or a predefined schedule or trigger event is based on any portion of location, device unique parameters, unique program identifier, unique device identifier, user identifying information, and user related information fetched from memory of at least one user device.

13. The networked based computing system of claim 9 wherein generating a new trust factor or transaction quality factor on or adjacent to every user interaction, or an external application interaction or a predefined schedule or trigger event is based on any portion of location, device unique parameters, unique program identifier, unique device identifier, user identifying information, and user related information fetched from memory of at least one user device.

14. The networked based computing system of claim 9, wherein the trust factor or the transaction quality factor is a cross platform transaction quality factor related to at least two computer programs the user interacts with through at least one device.

15. The networked based computing system of claim 9, wherein a content quality factor reflects a user'"'"'s interest in an advertisement that may be presented to user by incorporation within a challenge sequence or by controlling content presented to user.

16. The networked based computing system of claim 9, wherein any of the quality factor, the trust factor, the transaction quality factor and a content quality factor may be communicated to at least one computer program at any time.

17. A networked based computing system for detecting fraudulent machine or human impersonation of a user, comprising:

a) a system computer comprising at least one processor and at least one memory device operably connected to one another, and a plurality of computer-executable instructions stored on the memory device that when executed by the processor, cause the processor to;

i. fetch signals from memory of at least one portion of any two or more of the following;

a previously generated user'"'"'s signature, a previously generated challenge sequence, a user'"'"'s identifying information, a user'"'"'s related information, a user'"'"'s device identifying information, a user'"'"'s device location, a user'"'"'s device parameters, a user'"'"'s challenge response, a quality factor, a trust factor, a transaction quality factor, a content quality factor, a whitelist, a blacklist, an advertisement, a content object, a user'"'"'s behavior information;

ii. generate at least one new signature on, or adjacent to, every user interaction, or an external application interaction, or a predefined schedule or trigger event based on the signals;

iii. store the new signature in memory or communicate it to a computer program;

iv. generate at least one challenge sequence based on the signals;

vi. present the generated challenge sequence to a user, in one of visual, audible or audiovisual format;

vii. collect a user'"'"'s challenge response to the generated challenge sequence, and check for use abnormalities of a user and generate a trigger to re-generate a challenge question if an abnormality is detected, wherein the abnormality comprises one or more of;

conflicts in a user'"'"'s known location, current activity, time length of transaction, repetition of visiting a transaction, time lapse between repeated transaction, distribution of transaction locations, speed of movement within same transaction location area, and speed of movement between different transaction location areas;

viii. compute on or adjacent to every user interaction, or an external application interaction or a predefined schedule or trigger event, any of a quality factor which represents a degree of correlation between any portion of the user'"'"'s challenge response and any portion of the generated challenge sequence, a trust factor which represents a degree of quasi-continuous authenticity certainty, a transaction quality factor which represents degree of acceptance or rejection of an online transaction, a content quality factor which represents the degree of a user'"'"'s interest in content presented to the user, a whitelist which represents legitimate users, and, a blacklist which represents impostors or non-legitimate users;

ix. store in memory at least one of, the challenge sequence, the challenge response, the quality factor, the trust factor, the transaction quality factor, the content quality factor, the whitelist and the blacklist or communicate it to a computer program; and

,

b) a connection between the system computer and one or more external applications.

18. The system of claim 17, wherein the trust factor or the transaction quality factor are a cross platform transaction quality factor related to at least two computer programs the user interacts with through at least one device.

19. The system of claim 17, further comprising causing the processor to:

i. any one of generate, fetch from memory, receive from the external applications at least one content object or the advertisement related to the content quality factor; and

,

ii. present the content object or the advertisement to the user, in one of visual, audible or audiovisual format.