Granted Patent B1

US 9,842,338 · App. 15/357,655 · Granted Dec 12, 2017

Abstract

Claims (67)

1. A method comprising:

accessing a database of customer transaction data that includes card reader identifiers and transaction codes, the card reader identifiers and the transaction codes corresponding to a set of transactions conducted through a set of card readers identified by the card reader identifiers;

receiving an identification of a set of card reader identifiers from among the card reader identifiers, the set of card reader identifiers identifying a set of compromised card readers from among the set of card readers, and the customer transaction data further including compromised transaction data corresponding to the set of compromised card readers;

identifying a common transaction code from the compromised transaction data of the set of compromised card readers;

correlating the common transaction code to an instance of fraud associated with the compromised set of card readers;

monitoring a first card reader, the first card reader having a first card reader identifier;

receiving first transaction data from the first card reader, the first transaction data corresponding to a transaction conducted through the first card reader, and including the common transaction code;

identifying the common transaction code within the first transaction data; and

causing display of a notification at a client device in response to the identifying the common transaction code, the notification including an indication of the first card reader identifier.

2. The method of claim 1 , wherein the first transaction data includes a card number, and transaction details, and the method further comprises:

generating a report that includes the card number and the transaction details.

3. The method of claim 1 , wherein the method further comprises:

causing an interruption of the transaction associated with the first transaction data in response to the identifying the common transaction code within the first transaction data.

4. The method of claim 1 , wherein the method further comprises:

collecting first transaction data from a first card reader over a time period;

determining a rate in which the common transaction code appears within the first transaction data over the time period;

calculating a vulnerability score based on the rate and the time period; and

assigning the vulnerability score to the first card reader.

5. The method of claim 4 , wherein the method further comprises:

determining that the vulnerability score transgresses a threshold value, the threshold value indicating that the first card reader has been compromised; and

causing display of a notification at a client device in response to the determining that the badness score transgresses the threshold value, the notification including a display of the vulnerability score and a first identifier of the first card reader.

6. The method of claim 4 , wherein the time period is defined by a number of transactions conducted through the first card reader.

7. The method of claim 4 , wherein the time period is defined by a duration of time.

8. The method of claim 1 , wherein the transaction codes include time stamps, and the method further comprises:

collecting first transaction data from a first card reader over a time period;

determining a number of instances in which the common transaction code appears within the first transaction data over the time period, based on the time stamps of the transaction codes;

calculating a vulnerability score based on the frequency and the time period; and

assigning the vulnerability score to the first card reader.

9. The method of claim 1 , wherein the method further comprises:

monitoring a first card reader, the first card reader having a first card reader identifier;

receiving first transaction data from the first card reader, the first transaction data corresponding to a transaction conducted through the first card reader, and including the common transaction code;

identifying the common transaction code within the first transaction data; and

disabling the first card reader in response to the identifying the common transaction code.

10. The method of claim 1 , wherein the transaction codes include error codes.

11. The method of claim 1 , wherein the instance of fraud includes a skimmer installed on a card reader.

12. The system of claim 11 , wherein the instructions cause the system to perform operations further comprising:

collecting first transaction data from a first card reader over a time period;

determining a number of instances in which the common transaction code appears within the first transaction data over the time period;

calculating a vulnerability score based on the rate and the time period; and

assigning the vulnerability score to the first card reader.

13. The system of claim 12 , wherein the instructions cause the system to perform operations further comprising:

determining that the vulnerability score transgresses a threshold value, the threshold value indicating that the first card reader has been compromised; and

causing display of a notification at a client device in response to the determining that the badness score transgresses the threshold value, the notification including a display of the vulnerability score and a first identifier of the first card reader.

14. A system comprising:

one or more processors of a machine; and

a memory storing instructions that, when executed by at least one processor among the one or more processors, causes the machine to perform operations comprising:

accessing a database of customer transaction data that includes card reader identifiers and transaction codes, the card reader identifiers and the transaction codes corresponding to a set of transactions conducted through a set of card readers identified by the card reader identifiers;

receiving an identification of a set of card reader identifiers from among the card reader identifiers, the set of card reader identifiers identifying a set of compromised card readers from among the set of card readers, and the customer transaction data further including compromised transaction data corresponding to the set of compromised card readers;

identifying a common transaction code from the compromised transaction data of the set of compromised card readers;

correlating the common transaction code to an instance of fraud associated with the compromised set of card readers;

monitoring a first card reader, the first card reader having a first card reader identifier;

receiving first transaction data from the first card reader, the first transaction data corresponding to a transaction conducted through the first card reader, and including the common transaction code;

identifying the common transaction code within the first transaction data; and

causing display of a notification at a client device in response to the identifying the common transaction code, the notification including an indication of the first card reader identifier.

15. The system of claim 14 , wherein the first transaction data includes a card number, and transaction details, and the instructions cause the system to perform operations further comprising:

generating a report that includes the card number and the transaction details.

16. The system of claim 14 , wherein the instructions cause the system to perform operations further comprising:

causing an interruption of the transaction associated with the first transaction data in response to the identifying the common transaction code within the first transaction data.

17. A non-transitory machine-readable storage medium comprising instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

accessing a database of customer transaction data that includes card reader identifiers and transaction codes, the card reader identifiers and the transaction codes corresponding to a set of transactions conducted through a set of card readers identified by the card reader identifiers;

receiving an identification of a set of card reader identifiers from among the card reader identifiers, the set of card reader identifiers identifying a set of compromised card readers from among the set of card readers, and the customer transaction data further including compromised transaction data corresponding to the set of compromised card readers;

identifying a common transaction code from the compromised transaction data of the set of compromised card readers;

correlating the common transaction code to an instance of fraud associated with the compromised set of card readers;

monitoring a first card reader, the first card reader having a first card reader identifier;

receiving first transaction data from the first card reader, the first transaction data corresponding to a transaction conducted through the first card reader, and including the common transaction code;

identifying the common transaction code within the first transaction data; and

causing display of a notification at a client device in response to the identifying the common transaction code, the notification including an indication of the first card reader identifier.

Assignments (8)