Method and system for identifying users and detecting fraud by use of the internet
A method and system for detecting and preventing Internet fraud in online transactions by utilizing and analyzing a number of parameters to uniquely identify a computer user and potential fraudulent transaction through predictive modeling. The method and system uses a delta of time between the clock of the computer used by the actual fraudulent use and the potentially fraudulent user and the clock of the server computer in conjunction with personal information and/or non-personal information, preferably the Browser ID.
1. A non-transitory computer storage storing one or more computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform steps of:
receiving and storing a plurality of matching parameters;
detecting an electronic communication of a first online transaction between a first consumer device and a merchant server via a merchant website;
based on the detecting of the electronic communication of the first online transaction:
receiving an IP address of the first consumer device;
capturing consumer time expression data associated with the first consumer device, wherein the consumer time expression data comprises a time of the first consumer device and a time zone of the first consumer device;
accessing merchant time expression data associated with the merchant server, wherein the merchant time expression data comprises a time of the merchant server and a time zone of the merchant server;
generating and storing a first electronic computer identifier corresponding to the first consumer device based at least in part on the merchant time expression data, the IP address, and the consumer time expression data; and
detecting an electronic communication of a second online transaction between a second consumer device and the merchant server via the merchant website; and
based on the detecting of the electronic communication of the second online transaction:
identifying a second electronic computer identifier corresponding to the second consumer device; and
determining that the first electronic computer identifier matches with the second electronic computer identifier based at least in part on one or more of the plurality of matching parameters; and
communicating the determination of the match to the merchant server.
2. The non-transitory computer storage of claim 1 , wherein each of the consumer device time expression data and the merchant server time expression data includes a time in hours, minutes, or seconds and a time zone.
3. The non-transitory computer storage of claim 1 , wherein the consumer time expression data or the merchant time expression data is in a military time format.
4. The non-transitory computer storage of claim 1 , wherein the one or more computer-executable instructions further cause the one or more processors to perform a step of:
calculating a first level of fraud risk for the first online transaction based at least in part on an analysis of the IP address using a first weight value and an analysis of the consumer time expression data using a second weight value.
5. The non-transitory computer storage of claim 4 , wherein the computer-executable instructions further cause the one or more processors perform a step of:
determining that the first online transaction is fraudulent based on a comparison of the first level of risk to a predetermined threshold value.
6. A computerized method for automated real-time fraud detection for an online transaction between a consumer and a merchant, the computerized method comprising:
receiving and storing, by a merchant server, a plurality of matching parameters;
detecting, by the merchant server, an electronic communication of a first online transaction between a first consumer device and the merchant server via a merchant website;
based on the detecting of the electronic communication of the first online transaction:
receiving, by the merchant server, an IP address of the first consumer device;
capturing, by the merchant server, consumer time expression data associated with the first consumer device, wherein the consumer time expression data comprises a time of the first consumer device and a time zone of the first consumer device;
accessing, by the merchant server, merchant time expression data associated with the merchant server wherein the merchant time expression data comprises a time of the merchant server and a time zone of the merchant server;
generating and storing, by the merchant server, a first electronic computer identifier corresponding to the first consumer device based at least in part on the merchant time expression data, the IP address, and the consumer time expression data; and
detecting, by the merchant server, an electronic communication of a second online transaction between a second consumer device and the merchant server via the merchant website; and
based on the detecting of the electronic communication of the second online transaction:
identifying, by the merchant server, a second electronic computer identifier corresponding to the second consumer device; and
determining, by the merchant server, that the first electronic computer identifier matches with the second electronic computer identifier based at least in part on one or more of the plurality of matching parameters; and
communicating the determination of the match to a component within the merchant server.
7. The computerized method of claim 6 , wherein each of the consumer time expression data and the merchant time expression data includes two or more temporal components.
8. The computerized method of claim 7 , wherein the temporal components include a time in hours, minutes, or seconds and a time zone.
9. The computerized method of claim 6 , wherein the consumer time expression data or the merchant time expression data is in a military time format.
10. The computerized method of claim 6 , wherein the consumer time expression data of the first consumer device, and wherein the first merchant time expression data and the second merchant time expression data of the merchant website server.
11. The computerized method of claim 6 , wherein generating the first electronic computer identifier further comprising determining a clock skew of the first consumer device.
12. The computerized method of claim 6 , further comprising calculating, by the merchant server, a first level of fraud risk for the first online transaction based at least in part on at least:
an analysis of the first consumer IP address using a first weight value; and
an analysis of the first consumer device time expression using a second weight value.
13. The computerized method of claim 12 , further comprising determining, by the merchant server, that the first online transaction is fraudulent based on a comparison of the first level of fraud risk to a predetermined threshold value.
14. The computerized method of claim 12 , wherein the second weight value is based at least on a skew of a difference between the first consumer device time and the first merchant time.
15. A system for real-time fraud detection for an online transaction between a consumer and a merchant, the system comprising:
a processor of a merchant server;
a network interface configured to communicate with a plurality of consumer devices and a server; and
a memory storing computer-executable instructions that, when executed by the processor, cause the processor of the merchant server to perform the steps of:
receiving and storing a plurality of matching parameters;
detecting an electronic communication of a first online transaction between a first consumer device and the merchant server via a merchant website;
based on the detecting of the electronic communication of the first online transaction:
receiving an IP address of the first consumer device;
capturing consumer time expression data associated with the first consumer device, wherein the consumer time expression data comprises a time of the first consumer device and a time zone of the first consumer device;
accessing merchant time expression data associated with the merchant server, wherein the merchant time expression data comprises a time of the merchant server and a time zone of the merchant server;
generating and storing a first electronic computer identifier corresponding to the first consumer device based at least in part on the merchant time expression data, the IP address, and the consumer time expression data; and
detecting an electronic communication of a second online transaction between a second consumer device and the merchant server via the merchant website; and
based on the detecting of the electronic communication of the second online transaction:
identifying a second electronic computer identifier corresponding to the second consumer device; and
determining that the first electronic computer identifier matches with the second electronic computer identifier based at least in part on one or more of the plurality of matching parameters; and
communicating the determination of the match to a component within the merchant server.
16. The system of claim 15 , wherein each of the consumer time expression data and the merchant time expression data includes two or more temporal components.
17. The system of claim 16 , wherein the temporal components include a time in hours, minutes, or seconds and a time zone.
18. The system of claim 15 , wherein the consumer time expression data or the merchant time expression data is in a military time zone format.
19. The system of claim 15 , wherein the consumer time expression data of the first consumer device, and wherein the merchant time expression data of the merchant server.
20. The system of claim 15 , wherein the computer-executable instructions further cause the processor to perform a step of: calculating a first level of fraud risk for the first online transaction based on at least:
an analysis of the IP address using a first weight value; and
an analysis of the consumer time expression using a second weight value.