Real-time fraud session termination in direct pay system

1 . A system comprising:

processing circuitry; and

a memory device including instructions stored thereon, wherein the instructions, which when executed by the processing circuitry, configure the processing circuitry to perform operations that:

establish a plurality of sessions with an application, the application facilitating access to an endpoint, wherein the application is associated with an application webpage having a concurrent session management (CCSM) client and each of the plurality of sessions:

are established with a session establishment request and user credentials; and

maintain a user specific state having persistent objects and user identities between a device and the endpoint, the endpoint having a status stored at an application service accounts database, the status being associated with a first value;

receive a first request via a first session of the plurality of sessions after the plurality of sessions have been established, the first request requesting access to the endpoint;

determine, by a fraud detection system, that the first request is an unauthorized attempt to access the endpoint;

in response to determining that the first request is an unauthorized attempt, apply a flag to an application user account associated with the first session at the application service accounts database to prevent further access to the endpoint;

change the status at the application service accounts database associated with the endpoint from the first value to a second value, the second value indicating that no further access to the endpoint is permitted;

block, by a CCSM manager in communication with the CCSM client, the first session thereby blocking a user associated with the first session from accessing the application using the first session when a determination is made that the first request is an unauthorized attempt to access the endpoint such that the user specific state is no longer maintained at the application service accounts database;

receive a second request via a second session of the plurality of sessions after the first session is blocked, wherein:

the second request requests access to the endpoint;

the second session is established prior to blocking the first session;

in response to receiving the second request, cause the CCSM client to contact the CCSM manager with an application user account identifier;

receive a message from the application service accounts database indicating the application user account is blocked in response to receiving the message; and

determine, by the CCSM manager, that the status associated with the endpoint has the second value; and

block, by the CCSM manager, the second session such that a user associated with the second session cannot access the application using the second session such that all sessions of the plurality of sessions are blocked, wherein ones of the plurality of sessions were established prior to blocking the first session.

2 . The system of claim 1 , wherein the processing circuitry is further configured to perform operations that:

access the application service accounts database when the second request is received via the second session; and

block the second session based on the application user account being flagged.

3 . The system of claim 2 , wherein the application is a direct pay application associated with the application webpage and the CCSM manager receives messages from the application service accounts database when the second request is received.

4 . The system of claim 1 , wherein a same user is associated with the first session and the second session and the plurality of sessions are parallel sessions.

5 . The system of claim 4 , wherein the processing circuitry is further configured to perform operations that:

track sessions of the plurality of sessions that are associated with a same application user account; and

block sessions of the plurality of sessions that are associated with the same application user account in response to determining that the first request is an unauthorized attempt to access the endpoint.

6 . The system of claim 1 , wherein a first user is associated with the first session and a second user different from the first user is associated with the second session.

7 . The system of claim 1 , wherein the endpoint is a bank account holding monetary funds.

8 . The system of claim 1 , wherein the user credentials include a username and a password that are exchanged and are active when the first request is received via the first session.

9 . The system of claim 1 , wherein the second request is one of a request to access the endpoint, a session refresh request, or a request to withdraw funds from the endpoint.

10 . A non-transitory, machine-readable medium, comprising instructions, which when performed by a processor of a machine, causes the processor to perform operations to:

establish a plurality of sessions with an application, the application facilitating access to an endpoint, wherein the application is associated with an application webpage having a concurrent session management (CCSM) client and each of the plurality of sessions:

are established with a session establishment request and user credentials; and

maintain a user specific state having persistent objects and user identities between a device and the endpoint, the endpoint having a status stored at an application service accounts database, the status being associated with a first value;

receive a first request via a first session of the plurality of sessions after the plurality of sessions have been established, the first request requesting access to the endpoint;

determine, by a fraud detection system, that the first request is an unauthorized attempt to access the endpoint;

in response to determining that the first request is an unauthorized attempt, apply a flag to an application user account associated with the first session at the application service accounts database to prevent further access to the endpoint;

change the status at the application service accounts database associated with the endpoint from the first value to a second value, the second value indicating that no further access to the endpoint is permitted;

block, by a CCSM manager in communication with the CCSM client, the first session thereby blocking a user associated with the first session from accessing the application using the first session when a determination is made that the first request is an unauthorized attempt to access the endpoint such that the user specific state is no longer maintained at the application service accounts database;

receive a second request via a second session of the plurality of sessions after the first session is blocked, wherein:

the second request requests access to the endpoint;

the second session is established prior to blocking the first session;

in response to receiving the second request, cause the CCSM client to contact the CCSM manager with an application user account identifier;

receive a message from the application service accounts database indicating the application user account is blocked in response to receiving the message; and

determine, by the CCSM manager, that the status associated with the endpoint has the second value; and

block, by the CCSM manager, the second session such that a user associated with the second session cannot access the application using the second session such that all sessions of the plurality of sessions are blocked, wherein ones of the plurality of sessions were established prior to blocking the first session.

11 . The non-transitory, machine-readable medium of claim 10 , wherein the instructions further cause the processor perform operations to:

access the application service accounts database when the second request is received via the second session; and

block the second session based on the application user account being flagged, wherein the application is a direct pay application and the CCSM manager accesses the application service accounts database when the second request is received.

12 . The non-transitory, machine-readable medium of claim 10 , wherein a same user is associated with the first session and the second session and the plurality of sessions are parallel sessions and the instructions further cause the processor perform operations to:

track sessions of the plurality of sessions that are associated with a same application user account; and

block sessions of the plurality of sessions that are associated with the same application user account in response to determining that the first request is an unauthorized attempt to access the endpoint.

13 . The non-transitory, machine-readable medium of claim 10 , wherein a first user is associated with the first session and a second user different from the first user is associated with the second session and the instructions further cause the processor perform operations to block all sessions of the plurality of sessions.

14 . The non-transitory, machine-readable medium of claim 10 , wherein the second request is one of a request to access the endpoint, a session refresh request, or a request to withdraw funds from the endpoint.

15 . A method comprising:

establishing a plurality of sessions with an application, the application facilitating access to an endpoint, wherein the application is associated with an application webpage having a concurrent session management (CCSM) client and each of the plurality of sessions:

are established with a session establishment request and user credentials; and

maintain a user specific state having persistent objects and user identities between a device and the endpoint, the endpoint having a status stored at an application service accounts database, the status being associated with a first value;

receiving a first request via a first session of the plurality of sessions after the plurality of sessions have been established, the first request requesting access to the endpoint;

determining, by a fraud detection system, that the first request is an unauthorized attempt to access the endpoint;

in response to determining that the first request is an unauthorized attempt, applying a flag to an application user account associated with the first session at the application service accounts database to prevent further access to the endpoint;

blocking, by a CCSM manager in communication with the CCSM client, the first session thereby blocking a user associated with the first session from accessing the application using the first session when a determination is made that the first request is an unauthorized attempt to access the endpoint such that the user specific state is no longer maintained at the application service accounts database;

receiving a second request via a second session of the plurality of sessions after the first session is blocked, wherein:

the second request requests access to the endpoint; and

the second session is established prior to blocking the first session;

in response to receiving the second request, cause the CCSM client to contact the CCSM manager with an application user account identifier;

receive a message from the application service accounts database indicating the application user account is blocked in response to receiving the message; and

determine, by the CCSM manager, that the status associated with the endpoint has the second value; and

blocking, by the CCSM manager, the second session such that a user associated with the second session cannot access the application using the second session such that all sessions of the plurality of sessions are blocked, wherein ones of the plurality of sessions were established prior to blocking the first session.

16 . The method of claim 15 , wherein to the method further comprises:

accessing the application service accounts database when the second request is received via the second session; and

blocking the second session based on the application user account being flagged, wherein the application is a direct pay application associated with an application web page, the application web page having a concurrent session management (CCSM) client that communicates with a CCSM manager where the CCSM manager accesses the application service accounts database when the second request is received, wherein the second request is one of a request to access the endpoint, a session refresh request, or a request to withdraw funds from the endpoint.

17 . The method of claim 15 , wherein a same user is associated with the first session and the second session and the plurality of sessions are parallel sessions and the method further comprises:

tracking sessions of the plurality of sessions that are associated with a same application user account; and

blocking sessions of the plurality of sessions that are associated with the same application user account in response to determining that the first request is an unauthorized attempt to access the endpoint.

18 . The method of claim 15 , wherein a first user is associated with the first session and a second user different from the first user is associated with the second session and the method further comprises blocking all sessions of the plurality of sessions.