System and method for fraud risk analysis in IoT
Embodiments of the disclosure are directed to methods, systems, and devices for the use of portable devices, such as a vehicle driven by a user, that are distinctive physical objects and can be presented to an authentication system for authentication purposes. More specifically, the portable device may be used as a source of information for the authentication system that can be verified. Images may be captured of the portable devices in order to determine their distinctive features for comparison to other physical objects registered to the user. The portable devices may also be a source of metadata, or additional contextual information associated with those portable devices or their interaction with the authentication system. The image data and/or the metadata associated with a portable device can be verified for fraud or risk analysis.
1. A computer-implemented method, comprising:
receiving, by an access device, a transaction request from a portable device to initiate a transaction, the transaction request comprising an account identifier associated with a user account associated with the portable device;
receiving, by the access device, a plurality of two-dimensional images of the portable device;
determining, by the access device, image data for the plurality of two-dimensional images of the portable device; and
providing, by the access device, the image data, a set of metadata associated with the portable device, and the account identifier to a transaction processing computer;
verifying, by the transaction processing computer, the image data by creating a 3D mapping using the image data formed from the plurality of two-dimensional images, identifying distinct features of the portable device using the 3D mapping, and comparing the 3D mapping and the distinct features against a registered template of the portable device that was previously registered with the transaction processing computer using a machine learning algorithm;
updating, by the transaction processing computer, the machine learning algorithm based on a result of the comparing of the 3D mapping and the distinct features against the registered template of the portable device;
verifying, by the transaction processing computer, the set of metadata associated with the portable device by comparing the set of metadata to a set of metadata associated with the portable device registered to the user account;
determining, by the transaction processing computer, a risk score at least partly based on both the verification of the image data for the plurality of two-dimensional images of the portable device and the verification of the set of metadata associated with the portable device; and
transmitting, by the transaction processing computer, an authorization request message comprising the risk score requesting authorization of the transaction to an authorizing computer, which authorizes or does not authorize the transaction based on the contents of the authorization request message, and if the transaction is authorized the authorizing computer transmits an authorization response message to a resource provider computer indicating that the transaction is authorized, and if the transaction is not authorized the authorizing computer transmits an authorization response message to the resource provider computer indicating that the transaction is not authorized.
2. The computer-implemented method of claim 1 , wherein the image data comprises 3D image data.
3. The computer-implemented method of claim 1 , wherein the access device comprises a camera configured to capture the plurality of two-dimensional images of the portable device.
4. The computer-implemented method of claim 1 , wherein the portable device is a vehicle.
5. The computer-implemented method of claim 4 ,
wherein the set of metadata associated with the vehicle includes one or more of: a license plate number, a vehicle identification number (VIN), a number of miles the vehicle has been driven, and a timestamp.
6. The computer-implemented method of claim 1 , wherein the account identifier is a token.
7. The computer-implemented method of claim 1 , wherein the image data of the portable device comprises a set of 3D planar cross-sections.
8. The computer-implemented method of claim 1 , wherein the access device comprises a sensor configured to interface with the portable device to obtain a metadata item associated with the portable device.
9. A system comprising:
an access device, comprising
a first processor,
a network interface, and
a first non-transitory computer-readable memory storing a set of instructions configured to be executed to instruct the first processor to:
receive a transaction request from a portable device to initiate a transaction, the transaction request comprising an account identifier associated with a user account associated with the portable device,
receive a plurality of two-dimensional images of the portable device,
determine image data for the plurality of two-dimensional images of the portable device, and
provide the image data, a set of metadata associated with the portable device, and the account identifier to a transaction processing computer; and
the transaction processing computer, the transaction processing computer comprising:
a second processor, and
a second non-transitory computer readable memory storing instructions configured to be executed by the second processor to:
verify the image data by creating a 3D mapping using the image data formed from the plurality of two-dimensional images, identifying distinct features of the portable device using the 3D mapping, and comparing the 3D mapping and the distinct features against a registered template of the portable device that was previously registered with the transaction processing computer using a machine learning algorithm,
update the machine learning algorithm based on a result of the comparing of the 3D mapping and the distinct features against the registered template of the portable device,
verify the set of metadata associated with the portable device by comparing the set of metadata to a set of metadata associated with the portable device registered to the user account;
determine a risk score at least partly based on both the verification of the image data for the plurality of two-dimensional images of the portable device and the verification of the set of metadata associated with the portable device; and
transmit an authorization request message requesting authorization for the transaction to an authorizing computer, which authorizes or does not authorize the transaction based on the contents of the authorization request message, and if the transaction is authorized the authorizing computer transmits an authorization response message to a resource provider computer indicating that the transaction is authorized, and if the transaction is not authorized the authorizing computer transmits an authorization response message to the resource provider computer indicating that the transaction is not authorized.
10. The system of claim 9 , wherein the image data comprises 3D image data.
11. The system of claim 9 , wherein the access device comprises a camera configured to capture an image of the portable device.
12. The system of claim 9 , wherein the portable device is a vehicle.
13. The system of claim 12 ,
wherein the set of metadata associated with the vehicle includes one or more of: a license plate number, a vehicle identification number (VIN), a number of miles the vehicle has been driven, and a timestamp.
14. The system of claim 9 , wherein the account identifier is a token.
15. The system of claim 9 , wherein the image data comprises a set of 3D planar cross-sections.
16. The system of claim 9 , wherein the access device further comprises a sensor configured to interface with the portable device to obtain a metadata item associated with the portable device.
17. A computer-implemented method, comprising:
receiving, by a transaction processing computer, a set of data associated with a transaction, wherein the set of data associated with the transaction includes:
image data for a plurality of two-dimensional images of a portable device, the image data formed from the plurality of two-dimensional images of the portable device;
an account identifier associated with a user account associated with the portable device; and
a set of metadata associated with the portable device;
verifying, by the transaction processing computer, the image data for the plurality of two-dimensional images of the portable device by creating a 3D mapping using the image data formed from the plurality of two-dimensional images, identifying distinct features of the portable device using the 3D mapping, and comparing the 3D mapping and the distinct features against a registered template of the portable device that was previously registered with the transaction processing computer using a machine learning algorithm;
updating the machine learning algorithm based on a result of the comparing of the 3D mapping and the distinct features against the registered template of the portable device;
verifying, by the transaction processing computer, the set of metadata associated with the portable device by comparing the set of metadata to a set of metadata associated with the portable device registered to the user account;
determining, by the transaction processing computer, a risk score at least partly based on both the verification of the image data for the plurality of two-dimensional images of the portable device and the verification of the set of metadata associated with the portable device; and
transmitting, by the transaction processing computer, an authorization request message containing the risk score and requesting authorization for the transaction to an authorizing computer, which authorizes or does not authorize the transaction based on the contents of the authorization request message, and if the transaction is authorized the authorizing computer transmits an authorization response message to a resource provider computer indicating that the transaction is authorized, and if the transaction is not authorized the authorizing computer transmits an authorization response message to the resource provider computer indicating that the transaction is not authorized.
18. The computer-implemented method of claim 17 , wherein the portable device is a vehicle.
19. The computer-implemented method of claim 17 , wherein the portable device registered to the user account is a vehicle.
20. The computer-implemented method of claim 17 , wherein the account identifier is a token.