IP Library › Granted Patent US 10,891,620
Granted Patent B2
US 10,891,620 · App. 15/228,532 · Granted Jan 12, 2021

Method for risk management based on aggregated information from multiple payment networks while maintaining anonymity of user

Inventors: Yunsong Meng (Mountain View, CA); Aneesh Ali Nainamvalappil Cheriyakath (Mountain View, CA); Manan Kapadia (Mountian View, CA); Minseok Park (Mountain View, CA); Chung Liu (Mountain View, CA)
Assignee: Samsung Electronics Co., Ltd.
G06Q20/4016G06Q20/102G06Q20/341
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,891,620
App. No.
15/228,532
Granted
Jan 12, 2021
Kind
B2
Abstract

A system and method is provided for accessing data across networks and from mobile devices for providing fraud detection and risk management and that maintains anonymity of users. More particularly, a system and method implemented inside a payment server is provided that can access data across networks and from mobile devices, including encoded personally identifiable information (PII) data, and aggregate and analyze such data from multiple payment networks to generate a risk score that is sent to one or more payment networks for fraud detection and risk management, while maintaining anonymity of users.

Claims (85)

1. A method for transaction risk reduction, comprising:

receiving at a server, in a mobile payment framework, with at least one processor and a memory storing one or more computer programs configured to be executed by the at least one processor, a request from a device, the request including payment card data and device data;

generating aggregated data based on stored information retrieved from a plurality of knowledge bases for a particular hashed value of personally identifiable information (PII) of the device, the particular hashed value based on a device-specific salt known only to the device and a payment network that issued the device-specific salt, wherein each knowledge base is associated with a payment network supporting a particular type of payment card;

computing a risk score based on the request and the aggregated data, wherein an authorization of the request is based at least in part on the risk score; and

sending the risk score to a payment network corresponding to the request.

2. The method of claim 1 , further comprising:

storing the payment card data and the device data in at least one of the plurality of knowledge bases,

wherein the stored information includes user common information, user account information, user activity information and device information.

3. The method of claim 1 ,

wherein the payment card data includes encoded payment card information, anonymous user information and mobile app information, and

wherein the device data includes device ID, device type and device activity data.

4. The method of claim 1 , further comprising:

updating, after computing the risk score based on the request and the aggregated data, the stored information of the plurality of knowledge bases.

5. The method of claim 1 ,

wherein the device is associated with a user identification, comprising at least one of a particular userId, deviceId, walletId, or accountId, and the stored information of the plurality of knowledge bases is associated with the particular userId, deviceId, walletId, or accountId, and

wherein the generating of the aggregated data is performed by retrieving and aggregating the stored information associated with the particular userId, deviceId, walletId, or accountId from the plurality of knowledge bases.

6. The method of claim 5 , further comprising computing the risk score based on a comparison of the payment card data and the aggregated data.

7. The method of claim 1 , further comprising:

extracting, when the request comprises a payment card enrollment request from a mobile device, enrollment data of a payment card and the device data of the mobile device from the payment card enrollment request;

retrieving, from the plurality of knowledge bases, the each knowledge base corresponding to the payment network supporting the particular type of payment card, a plurality of records including user common information, user account information, user activity information, and device information;

generating the aggregated data based on the user common information, the user account information, the user activity information and the device information;

computing the risk score based on the enrollment data, the device data and the aggregated data; and

sending the risk score to the payment network corresponding to the payment card enrollment request.

8. The method of claim 7 ,

wherein the enrollment data includes encoded payment card information, anonymous user information and mobile app information, and

wherein the device data includes device ID, device type, and device activity data.

9. The method of claim 7 , further comprising:

storing the enrollment data and the device data at a knowledge base corresponding to the payment network supporting the particular type of payment card.

10. The method of claim 7 ,

wherein the user common information comprises at least one of a location, a name, a zip, or a phone number associated with the mobile device,

wherein the user account information comprises at least one of a number of active cards, or an age of account associated with the mobile device,

wherein the user activity information comprises at least one of a period since last activity, a number of transactions, or a number of enrollment attempts associated with the mobile device, and

wherein the device information comprises at least one of a number of registered devices for a user, an age of account on the mobile device, or a country associated with the mobile device.

11. The method of claim 1 , further comprising:

extracting, when the request comprises a payment card transaction request from a mobile device, transaction data of a payment card and the device data of the mobile device from the payment card transaction request;

retrieving, from the plurality of knowledge bases, the each knowledge base corresponding to the payment network supporting the particular type of payment card, a plurality of records including user common information, user account information, user activity information, and device information;

generating the aggregated data based on the user common information, the user account information, the user activity information and the device information;

computing a risk score based on the transaction data, the device data and the aggregated data; and

sending the risk score to a payment network corresponding to the payment card transaction request.

12. The method of claim 11 ,

wherein the transaction data includes encoded payment card information, anonymous user information and mobile app information, and

wherein the device data includes device ID, device type, and device activity data.

13. The method of claim 11 , further comprising:

storing the transaction data and the device data at a knowledge base corresponding to the payment network supporting the particular type of payment card.

14. The method of claim 11 ,

wherein the user common information comprises at least one of a location, a name, a zip, or a phone number associated with the mobile device,

wherein the user account information comprises at least one of a number of active cards, or an age of account associated with the mobile device,

wherein the user activity information comprises at least one of a period since last activity, a number of transactions, and a number of enrollment attempts associated with the mobile device, and

wherein the device information comprises at least one of a number of registered devices for a user, an age of account on the mobile device, and a country associated with the mobile device.

15. An electronic device in a mobile payment framework to execute instructions for transaction risk reduction, the electronic device comprising:

a transceiver configured to transmit and receive data; and

at least one processor configured to:

receive a request from a device, the request including payment card data and device data,

generate aggregated data based on stored information retrieved from a plurality of knowledge bases for a particular hashed value of personally identifiable information (PII) of the device, the particular hashed value based on a device-specific salt known only to the device and a payment network that issued the device-specific salt, wherein each knowledge base is associated with a payment network supporting a particular type of payment card,

compute a risk score based on the request and the aggregated data, wherein an authorization of the request is based at least in part on the risk score, and

send the risk score to a payment network corresponding to the request, for risk determination.

16. The electronic device of claim 15 , wherein the at least one processor is further configured to:

store the payment card data and the device data in at least one of the plurality of knowledge bases,

wherein the stored information includes user common information, user account information, user activity information and device information.

17. The electronic device of claim 15 ,

wherein the payment card data includes encoded payment card information, anonymous user information and mobile app information, and

wherein the device data includes device ID, device type and device activity data.

18. The electronic device of claim 15 , wherein the at least one processor is further configured to:

update, after computing the risk score based on the request and the aggregated data, the stored information of the plurality of knowledge bases.

19. The electronic device of claim 15 ,

wherein the device is associated with a user identification, comprising at least one of a particular userId, deviceId, walletId, or accountId, and the stored information of the plurality of knowledge bases is associated with the particular userId, deviceId, walletId, or accountId, and

wherein generating of the aggregated data is performed by retrieving and aggregating the stored information associated with the particular userId, deviceId, walletId, or accountId from the plurality of knowledge bases.

20. The electronic device of claim 19 , wherein the at least one processor is further configured to compute the risk score based on a comparison of the payment card data and the aggregated data.

21. A non-transitory computer readable storage medium with a computer program stored thereon, the computer program including instructions configured to be executed by at least one processor of a server in a mobile payment framework to perform a method for transaction risk reduction, the method comprising:

receiving a request from a device, the request including payment card data and device data;

generating aggregated data based on stored information retrieved from a plurality of knowledge bases for a particular hashed value of personally identifiable information (PII) of the device, the particular hashed value based on a device-specific salt known only to the device and a payment network that issued the device-specific salt, wherein each knowledge base is associated with a payment network supporting a particular type of payment card;

computing a risk score based on the request and the aggregated data, wherein an authorization of the request is based at least in part on the risk score; and

sending the risk score to a payment network corresponding to the request, for risk determination.

22. The non-transitory computer readable storage medium of claim 21 , wherein the method further comprises:

storing the payment card data and the device data in at least one of the plurality of knowledge bases,

wherein the stored information includes user common information, user account information, user activity information and device information.

23. The non-transitory computer readable storage medium of claim 21 ,

wherein the payment card data includes encoded payment card information, anonymous user information and mobile app information, and

wherein the device data includes device ID, device type and device activity data.

24. The non-transitory computer readable storage medium of claim 21 , wherein the method further comprises:

updating, after computing the risk score based on the request and the aggregated data, the stored information of the plurality of knowledge bases.

25. The non-transitory computer readable storage medium of claim 21 ,

wherein the device is associated with a user identification, comprising at least one of a particular userId, deviceId, walletId, or accountId, and the stored information of the plurality of knowledge bases is associated with the particular userId, deviceId, walletId, or accountId, and

wherein the generating of the aggregated data is performed by retrieving and aggregating the stored information associated with the particular userId, deviceId, walletId, or accountId from the plurality of knowledge bases.

26. The non-transitory computer readable storage medium of claim 25 , wherein the method further comprises computing the risk score based on a comparison of the payment card data and the aggregated data.

Assignments (2)
CORRECTIVE ASSIGNMENT TO CORRECT THE SECOND LISTED ASSIGNORS NAME PREVIOUSLY RECORDED ON REEL 039345 FRAME 0242. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Nov 2, 2020
From: MENG, YUNSONG; NAINAMVALAPPIL CHERIYAKATH, ANEESH ALI; KAPADIA, MANAN; PARK, MINSEOK; LIU, CHUNG
To: SAMSUNG ELECTRONICS CO., LTD.
Reel/Frame 055530/0578 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 4, 2016
From: MENG, YUNSONG; NAINAMVALAPPIL, ANEESH; KAPADIA, MANAN; PARK, MINSEOK; LIU, CHUNG
To: SAMSUNG ELECTRONICS CO., LTD.
Reel/Frame 039345/0242 →
Continuity (2)
Provisional Application 62208306 · Aug 21, 2015
Related Publication 20170053283A1 · Feb 23, 2017
Cited By (1)
US 12,333,526