Enhanced security for transaction requests utilizing automatic source identification
Described herein are methods and systems for enhancing security of transaction requests from POS terminals by utilizing ANI-DNIS information. The header of the transaction request can include automatic source information (“ASI”), which can be extracted from the header by the line handler. The ASI information can be provided to the front end interface, which can compare the ASI information with known customer information. The comparison can provide information indicating whether the transaction is legitimate or fraudulent. If fraudulent, the transaction request can be declined. The ASI information can further be stored in a security analysis database and further queried to identify larger threats including denial of service attacks.
1. A transaction processing system comprising:
one or more memories having computer-readable instructions stored thereon; and
one or more processors that execute the computer-readable instructions to:
receive, from a point of sale device, a transaction request having a header and a first transaction level identifier;
extract source identification information from the header upon determining the header comprises the source identification information;
generate an internal message comprising the source identification information;
identify a source sender and a first source sender information based on the internal message;
generate a second transaction level identifier by:
identifying a seed value based on the transaction request and a shared secret between the transaction processing system and the point of sale device;
generating a code based on the seed value; and
hashing the code to generate the second transaction level identifier; and
determine an approval status of the transaction request by:
declining the transaction request based on a determination that the first source sender information does not match a second source sender information;
declining the transaction request based on a determination that the first transaction level identifier does not match the second transaction level identifier; or
approving the transaction request based at least in part on a determination that the first source sender information matches the second source sender information and a determination that the first transaction level identifier matches the second transaction level identifier.
2. The transaction processing system of claim 1 , wherein the one or more processors further execute computer-readable instructions to:
identify a first transmission line for receiving the transaction request from the first source sender information;
identify a second transmission line on which the transaction request was received; and
determine whether the first source sender information matches the second source sender information based on whether the first transmission line matches the second transmission line on which the transaction request was received.
3. The transaction processing system of claim 1 , wherein the one or more processors further execute computer-readable instructions to:
obtain the second source sender information about the source sender from a database, the database containing client information;
store data, based on the header, in the database;
identify suspect transaction requests based on the transaction request and additional information from the database; and
transmit information related to the suspect transaction requests for display on a graphical user interface of a user device of a user.
4. The transaction processing system of claim 3 , wherein:
the information related to the suspect transaction requests comprises aggregate threat information associated with the suspect transaction requests and additional transactions requests; and
the aggregate threat information is transmitted for display on the graphical user interface based on a query of the database received from the user device.
5. The transaction processing system of claim 1 , wherein:
the internal message is a fast internal message (FIM);
data within the FIM is standardized from multiple input and output formats into a single internal format; and
the source identification information is automatic source identification (ASI) information.
6. The transaction processing system of claim 1 , wherein the one or more processors further execute computer-readable instructions to:
transmit information associated with the transaction request comprising merchant contact information, and a plurality of additional transactions or transaction requests, for display via a graphical user interface of a user device.
7. The transaction processing system of claim 1 , wherein the point of sale device is a first point of sale device of a plurality of point of sale devices, and wherein the shared secret comprises a unique seed table shared only between the first point of sale device and the transaction processing system.
8. A non-transitory computer-readable media having computer-readable instructions stored thereon that, when executed by one or more processors of a transaction processing system, cause the one or more processors to:
receive, from a point of sale device, a transaction request having a header and a first transaction level identifier;
extract source identification information from the header upon determining the header comprises the source identification information;
generate an internal message comprising the source identification information;
identify a source sender and a first source sender information based on the internal message;
generate a second transaction level identifier by:
identifying a seed value based on the transaction request and a shared secret with the point of sale device;
generating a code based on the seed value; and
hashing the code to generate the second transaction level identifier; and
determine an approval status of the transaction request by:
declining the transaction request based on a determination that the first source sender information does not match a second source sender information;
declining the transaction request based on a determination that the first transaction level identifier and the second transaction level identifier do not match; or
approving the transaction request based at least in part on a determination that the first source sender information matches the second source sender information and a determination that the first transaction level identifier matches the second transaction level identifier.
9. The non-transitory computer-readable media of claim 8 , wherein the one or more processors further execute computer readable instructions to:
identify a first transmission line for receiving the transaction request from the first source sender information;
identify a second transmission line on which the transaction request was received; and determine whether the first source sender information matches the second source sender information based on whether the first transmission line matches the second transmission line on which the transaction request was received.
10. The non-transitory computer-readable media of claim 8 , wherein the one or more processors further execute computer readable instructions to:
obtain the second source sender information about the source sender from a database, the database containing client information;
store data, based on the header, in the database;
identify suspect transaction requests based on the transaction request and additional information from the database; and
transmit information related to the suspect transaction requests for display on a graphical user interface of a user device of a user.
11. The non-transitory computer-readable media of claim 10 , wherein:
the information related to the suspect transaction requests comprises aggregate threat information associated with the suspect transaction requests and additional transaction requests; and
the aggregate threat information is transmitted for display on the graphical user interface, based on a query of the database received from the user device.
12. The non-transitory computer-readable media of claim 8 , wherein:
the internal message is a fast internal message (FIM);
data within the FIM is standardized from multiple input and output formats into a single internal format; and
the source identification information comprises automatic source identification (ASI) information.
13. The non-transitory computer-readable media of claim 8 , wherein the one or more processors further execute computer readable instructions to:
transmit information associated with the transaction request comprising merchant contact information, and a plurality of additional transactions or transaction requests, for display via a graphical user interface of a user device.
14. The non-transitory computer-readable media of claim 8 , wherein the point of sale device is a first point of sale device of a plurality of point of sale devices, and wherein the shared secret comprises a unique seed table shared only with the first point of sale device.
15. A method comprising:
receiving, from a point of sale device, a transaction request having a header and a first transaction level identifier;
extracting source identification information from the header upon determining the header comprises the source identification information;
generating an internal message comprising the source identification information;
identifying a source sender and a first source sender information based on the internal message;
generating a second transaction level identifier, the generating comprising:
identifying a seed value based on the transaction request and a shared secret with the point of sale device;
generating a code based on the seed value; and
hashing the code to generate the second transaction level identifier; and
determining an approval status of the transaction request by:
declining the transaction request based on a determination that the first source sender information does not match a second source sender information;
declining the transaction request based on a determination that the first transaction level identifier does not match the second transaction level identifier; or
approving the transaction request based at least in part on a determination that the first source sender information matches the second source sender information and a determination that the first transaction level identifier matches the second transaction level identifier.
16. The method of claim 15 , further comprising:
identifying a first transmission line for receiving the transaction request from the first source sender information;
identifying a second transmission line on which the transaction request was received;
determining whether the first source sender information matches the second source sender information based on whether the first transmission line matches the second transmission line on which the transaction request was received; and
wherein the point of sale device is a first point of sale device of a plurality of point of sale devices, and wherein the shared secret comprises a unique seed table shared only between the first point of sale device and a transaction processing system.
17. The method of claim 15 , further comprising:
obtain the second source sender information about the source sender from a database, the database containing client information;
storing data, based on the header, in the database;
identifying suspect transaction requests, based on the transaction request and additional information from the database; and
transmitting the suspect transaction requests for display on a graphical user interface of a user device of a user.
18. The method of claim 17 wherein the information related to the suspect transaction requests comprises aggregate threat information associated with the suspect transaction requests and additional transaction requests, and further comprising:
querying the database for the aggregate threat information associated with the suspect transaction requests; and
transmitting the aggregate threat information for display on the graphical user interface.
19. The method of claim 15 , wherein:
the internal message is a fast internal message (FIM);
data within the FIM is standardized from multiple input and output formats into a single internal format; and
the source identification information comprises automatic source identification (ASI) information.
20. The method of claim 15 further comprising:
transmitting information associated with the transaction request comprising merchant contact information, and a plurality of additional transactions or transaction requests, for display via a graphical user interface of a user device.
21. The method of claim 15 , wherein the point of sale device is a first point of sale device of a plurality of point of sale devices, and wherein the shared secret comprises a unique seed table shared only between the first point of sale device and a transaction processing system.