IP Library › Granted Patent US 11,295,305
Granted Patent B2
US 11,295,305 · App. 16/694,325 · Granted Apr 5, 2022

Identifying domains for evaluation during transaction processing

Inventors: Bradley Wardman (Phoenix, AZ); Jakub Burgis (Scottsdale, AZ)
Assignee: PayPal, Inc.
G06Q20/40G06Q20/04G06Q20/12G06Q20/20G06Q20/3224G06Q30/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,295,305
App. No.
16/694,325
Granted
Apr 5, 2022
Kind
B2
Abstract

Techniques are disclosed relating to determining a risk score for domains associated with a transaction. In some embodiments, a transaction computer system receives transaction details for a transaction between a consumer and a merchant, where the transaction details are received from the merchant real-time with the transaction and include a set of transaction URLs for subsequent use in the transaction. The computer system may receive, from a browser of the consumer that is used to initiate the transaction, URL referrer information real-time with the transaction, where the URL referrer information indicates a referring web page to the transaction computer system. The computer system may determine, using the set of transaction URLs and the URL referrer information, a set of domains for the transaction and then determine a risk score for the set of domains. The computer system may determine, based on the risk score, whether to allow the transaction.

Claims (46)

1. A method, comprising:

receiving, at a transaction computer system, transaction details for a transaction between a consumer and a merchant, wherein the transaction details are received from the merchant real-time upon initiation of the transaction and include a set of multiple transaction URLs for subsequent use in the transaction;

receiving, at the transaction computer system from a browser of a computing device of the consumer that is used to initiate the transaction, URL referrer information that indicates a web page that is a referring web page to the transaction computer system, wherein the URL referrer information is received real-time upon initiation of the transaction;

determining, by the transaction computer system using the set of multiple transaction URLs and the URL referrer information, a set of domains for the transaction to be directed through;

evaluating, by the transaction computer system, the transaction, including determining a risk score for the transaction, wherein evaluating risk is performed based on one or more proxy domains being included in the set of domains;

determining, by the transaction computer system, whether the risk score satisfies a risk threshold; and

in response to determining that the risk score satisfies the risk threshold, executing, by the transaction computer system, a process to block the transaction.

2. The method of claim 1 , further comprising:

receiving, by the transaction computer system prior to the transaction, registration information from the merchant, wherein the registration information includes self-reported domain information for the merchant;

wherein the set of domains that are determined includes the self-reported domain information.

3. The method of claim 2 , wherein the registration information includes an expected transaction volume, wherein the transaction details for the transaction include a payment amount, and wherein determining whether to permit the transaction is based on the expected transaction volume and the payment amount.

4. The method of claim 1 , wherein the set of multiple transaction URLs includes a return URL to which the consumer is to be directed upon completion of the transaction.

5. The method of claim 4 , wherein the set of multiple transaction URLs includes a cancelation URL to which the consumer is to be directed if the transaction is canceled.

6. The method of claim 1 , wherein the set of multiple transaction URLs includes a notification URL of the merchant to which transaction confirmation details are to be provided upon completion of the transaction.

7. The method of claim 1 , wherein the evaluating is based on ages of domains in the set of domains.

8. The method of claim 1 , wherein the URL referrer information is received as part of an HTTP request for navigating from the referring web page to a destination web page of the transaction computer system, wherein the URL referrer information specifies a URL of the referring web page.

9. A system, comprising:

one or more processors and one or more computer-readable memories storing program instructions, the one or more processors configured to execute the program instructions to cause the system to perform operations comprising:

receiving transaction details for a transaction between a consumer and a merchant, wherein the transaction details are received from the merchant real-time upon initiation of the transaction and include a set of multiple transaction URLs for subsequent use in the transaction;

receiving from a browser of a computing device of the consumer that is used to initiate the transaction, URL referrer information that indicates a web page that is a referring web page to the system, wherein the URL referrer information is received real-time upon initiation of the transaction;

determining, using the set of multiple transaction URLs and the URL referrer information, a set of domains for the transaction to be directed through;

evaluating the transaction, including determining a risk score for the transaction, wherein evaluating risk is performed based on one or more proxy domains being included in the set of domains;

determining whether the risk score satisfies a risk threshold; and

in response to determining that the risk score satisfies the risk threshold, blocking the transaction.

10. The system of claim 9 , the operations further comprising:

receiving, prior to the transaction, registration information from the merchant, wherein the registration information includes self-reported domain information for the merchant;

wherein the set of domains that are determined includes the self-reported domain information.

11. The system of claim 10 , wherein the registration information includes an expected transaction volume, wherein the transaction details for the transaction include a payment amount, and wherein determining whether to permit the transaction is based on the expected transaction volume and the payment amount.

12. The system of claim 9 , wherein the set of multiple transaction URLs includes a return URL to which the consumer is to be directed upon completion of the transaction.

13. The system of claim 12 , wherein the set of multiple transaction URLs includes a cancelation URL to which the consumer is to be directed if the transaction is canceled.

14. The system of claim 9 , wherein the set of multiple transaction URLs includes a notification URL of the merchant to which transaction confirmation details are to be provided upon completion of the transaction.

15. The system of claim 9 , wherein the evaluating is based on ages of domains in the set of domains.

16. The system of claim 9 , wherein the URL referrer information is received as part of an HTTP request for navigating from the referring web page to a destination web page of the system, wherein the URL referrer information specifies a URL of the referring web page.

17. A computer program product, comprising:

one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more computer-readable tangible storage devices, the program instructions when executed cause a machine to perform operations comprising:

receiving transaction details for a transaction between a consumer and a merchant, wherein the transaction details are received from the merchant real-time upon initiation of the transaction and include a set of multiple transaction URLs for subsequent use in the transaction;

receiving, from a browser of a computing device of the consumer that is used to initiate the transaction, URL referrer information that indicates a web page that is a referring web page to the machine, wherein the URL referrer information is received real-time upon initiation of the transaction to be directed through;

determining, using the set of multiple transaction URLs and the URL referrer information, a set of domains for the transaction;

evaluating the transaction, including determining a risk score for the transaction, wherein evaluating risk is performed based on one or more proxy domains being included in the set of domains;

determining whether the risk score satisfies a risk threshold; and

in response to determining that the risk score satisfies the risk threshold, executing a process to block the transaction.

18. The computer program product of claim 17 , the operations further comprising:

receiving, prior to the transaction, registration information from the merchant, wherein the registration information includes self-reported domain information for the merchant;

wherein the set of domains that are determined includes the self-reported domain information.

19. The computer program product of claim 18 , wherein the registration information includes an expected transaction volume, wherein the transaction details for the transaction include a payment amount, and wherein determining whether to permit the transaction is based on the expected transaction volume and the payment amount.

20. The computer program product of claim 17 , wherein the set of multiple transaction URLs include a return URL to which the consumer is to be directed upon completion of the transaction.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 25, 2019
From: WARDMAN, BRADLEY; BURGIS, JAKUB
To: PAYPAL, INC.
Reel/Frame 051106/0637 →
Continuity (1)
Related Publication 20210158349A1 · May 27, 2021