Transaction confirmation based on user attributes
Techniques for providing a risk control method and device for resolving the issue of low application software security are described. A transaction request is received from a first user, and the transaction request comprises transaction data, data identifying the first user, and data identifying a second user. An attribute of the first user is determined from the data identifying the first user. An attribute of the second user is identified using the data identifying the second user. In response to the attribute of the first user being determined and the attribute of the second user being identified, an attribute similarity between the first user and the second user is determined. The attribute similarity is compared to a threshold. In response to determining the attribute similarity is less than the threshold, a notification is transmitted to the first user requesting a confirmation of the identified attribute of the second user.
1. A computer-implemented method, comprising:
receiving, by a server, a transaction request from a first user-device, wherein the transaction request comprises transaction data, data identifying a first user associated with the first user-device, and data identifying a second user who is party to the transaction request;
determining, by the server, an attribute of the first user from the data identifying the first user;
identifying, by the server, from a user attribute database, based on the data identifying the second user, personally identifying information of the second user different from the data identifying the second user;
in response to determining the attribute of the first user and identifying the personally identifying information of the second user, determining, by the server, an attribute similarity between the first user and the second user;
comparing, by the server, the attribute similarity to a threshold; determining that the attribute similarity is less than the threshold;
in response to determining the attribute similarity is less than the threshold, transmitting, by the server, to the first user-device, a request to provide the personally identifying information of the second user;
receiving, by the server, from the first user-device, a response to the request;
determining, by the server, that the response correctly provides the personally identifying information of the second user; and
based on determining that the response correctly provides the personally identifying information of the second user, executing, by the server, the transaction request.
2. The computer-implemented method of claim 1 , further comprising:
identifying, by the server, from the user attribute database, a third user having a relationship with the first user;
determining, by the server, identification information of the third user that matches the data identifying the second user; and
in response to determining the identification information of the third user matches the data identifying the second user, transmitting, by the server, the identification information of the third user and the data identifying the second user to the first user for confirmation.
3. The computer-implemented method of claim 2 , further comprising:
receiving, by the server, from the first user, data indicating a correction to the data identifying the second user and a confirmation of the identification information of the third user; and
executing, by the server, the transaction request using the corrected data identifying the second user.
4. The computer-implemented method of claim 3 , further comprising transmitting, by the server, a notification to the first user indicating the transaction request has been executed and completed.
5. The computer-implemented method of claim 2 , further comprising in response to determining the identification information of the third user does not match the data identifying the second user, determining, by the server, that the data identifying the second user was entered correctly.
6. The computer-implemented method of claim 1 , wherein the attribute similarity establishes a potential relationship between the first user and the second user.
7. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving a transaction request from a first user-device, wherein the transaction request comprises transaction data, data identifying a first user associated with the first user-device, and data identifying a second user who is party to the transaction request;
determining an attribute of the first user from the data identifying the first user;
identifying, from a user attribute database, based on the data identifying the second user, personally identifying information of the second user different from the data identifying the second user;
in response to determining the attribute of the first user and identifying the personally identifying information of the second user, determining an attribute similarity between the first user and the second user;
comparing the attribute similarity to a threshold; determining that the attribute similarity is less than the threshold;
in response to determining the attribute similarity is less than the threshold, transmitting, to the first user-device, a request to provide the personally identifying information of the second user;
receiving, from the first user-device, a response to the request;
determining that the response correctly provides the personally identifying information of the second user; and
based on determining that the response correctly provides the personally identifying information of the second user, executing the transaction request.
8. The non-transitory, computer-readable medium of claim 7 , the operations further comprising:
identifying, from the user attribute database, a third user having a relationship with the first user;
determining identification information of the third user that matches the data identifying the second user; and
in response to determining the identification information of the third user matches the data identifying the second user, transmitting the identification information of the third user and the data identifying the second user to the first user for confirmation.
9. The non-transitory, computer-readable medium of claim 8 , the operations further comprising:
receiving, from the first user, data indicating a correction to the data identifying the second user and a confirmation of the identification information of the third user; and
executing the transaction request using the corrected data identifying the second user.
10. The non-transitory, computer-readable medium of claim 9 , the operations further comprising transmitting a notification to the first user indicating the transaction request has been executed and completed.
11. The non-transitory, computer-readable medium of claim 8 , the operations further comprising in response to determining the identification information of the third user does not match the data identifying the second user, determining that the data identifying the second user was entered correctly.
12. The non-transitory, computer-readable medium of claim 7 , wherein the attribute similarity establishes a potential relationship between the first user and the second user.
13. A computer-implemented system, comprising:
one or more computers providing a server; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, by the server, a transaction request from a first user-device, wherein the transaction request comprises transaction data, data identifying a first user associated with the first user-device, and data identifying a second user who is party to the transaction request;
determining, by the server, an attribute of the first user from the data identifying the first user;
identifying, by the server, from a user attribute database, based on the data identifying the second user, personally identifying information of the second user different from the data identifying the second user;
in response to determining the attribute of the first user and identifying the personally identifying information of the second user, determining, by the server, an attribute similarity between the first user and the second user;
comparing, by the server, the attribute similarity to a threshold; determining that the attribute similarity is less than the threshold;
in response to determining the attribute similarity is less than the threshold, transmitting, by the server to the first user-device, a request to provide the personally identifying information of the second user;
receiving, by the server from the first user-device, a response to the request;
determining, by the server, that the response correctly provides the personally identifying information of the second user; and
based on determining that the response correctly provides the personally identifying information of the second user, executing, by the server, the transaction request.
14. The computer-implemented system of claim 13 , the operations further comprising:
identifying, by the server, from the user attribute database, a third user having a relationship with the first user;
determining, by the server, identification information of the third user that matches the data identifying the second user; and
in response to determining the identification information of the third user matches the data identifying the second user, transmitting, by the server, the identification information of the third user and the data identifying the second user to the first user for confirmation.
15. The computer-implemented method of claim 1 , wherein the personally identifying information comprises an address of the second user.