IP Library › Granted Patent US 12,206,667
Granted Patent B2
US 12,206,667 · App. 17/704,226 · Granted Jan 21, 2025

System, method, and computer program product for controlling access to online actions

Inventors: Robert Chifamba (Austin, TX); Krishnaram Muthusamy (Austin, TX)
Assignee: Visa International Service Association
H04L63/0892G06F17/18H04L63/083H04L63/0884
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,206,667
App. No.
17/704,226
Granted
Jan 21, 2025
Kind
B2
Abstract

Provided are computer-implemented methods that may include receiving, via a communication network, a request to perform an online action from a user device; retrieving data associated with a number of times the user device performed the online action within at least one time interval; determining whether a dataset associated with a number of times a plurality of user devices have performed the online action within the at least one time interval is normally distributed; and determining a standard deviation associated with the number of times the user device performed the online action within the at least one time interval in response to determining that the dataset is normally distributed, and performing a control operation associated with the request to conduct the online action based on a threshold of standard deviation. Systems and computer program products are also provided.

Claims (60)

1. A computer-implemented method, comprising:

receiving, with at least one processor and via a communication network, a request to perform an online action, wherein the online action comprises at least one of:

an online action associated with a user login process;

an online action associated with a forgotten password process;

an online action associated with a purchase transaction; or

an online action associated with an addition of user information to a user account;

retrieving, with at least one processor, data associated with a number of times the online action has been performed within at least one time interval;

determining, with at least one processor, a standard deviation associated with the number of times the online action has been performed within the at least one time interval;

calculating, with at least one processor, at least one value associated with the number of times the online action has been performed within the at least one time interval;

calculating at least one value of a median of the number of times the online action has been performed within the at least one time interval,

wherein calculating the at least one value associated with the number of times the online action has been performed the online action within the at least one time interval comprises:

calculating the at least one value of a percentile associated with the number of times the online action has been performed within the at least one time interval based on the at least one value of the median of the number of times the online action has been performed within the at least one time interval; and

performing, with at least one processor, a control operation associated with the request to conduct the online action based on a threshold of standard deviation and the at least one value associated with the number of times the online action has been performed within the at least one time interval.

2. The computer-implemented method of claim 1 , wherein the threshold of standard deviation comprises a value of standard deviation, and wherein the value of standard deviation is based on a measure of an amount of variation of a number of times that a plurality of user devices each performed the online action during a prior time interval.

3. The computer-implemented method of claim 1 , wherein the request comprises at least one identity attribute associated with a user device and an identification attribute associated with the online action, and

wherein retrieving the data associated with the number of times the online action has been performed within the at least one time interval comprises:

retrieving the data associated with the number of times the online action has been performed within the at least one time interval based on the at least one identity attribute associated with the user device and the identification attribute associated with the online action.

4. The computer-implemented method of claim 1 , further comprising:

storing the at least one value of the number of times the online action has been performed within the at least one time interval within a data structure based on calculating the at least one value of the number of times the online action has been performed within the at least one time interval.

5. The computer-implemented method of claim 1 , further comprising:

determining whether a dataset associated with the number of times a plurality of user devices have performed the online action within the at least one time interval is normally distributed.

6. The computer-implemented method of claim 1 , wherein performing the control operation associated with the request to conduct the online action comprises:

performing the control operation associated with the request to conduct the online action based on determining the standard deviation is within a predetermined Gaussian range.

7. A system comprising:

at least one hardware processor programmed or configured to:

receive, via a communication network, a request to perform an online action, wherein the online

action comprises at least one of:

an online action associated with a user login process;

an online action associated with a forgotten password process;

an online action associated with a purchase transaction; or

an online action associated with an addition of user information to a user account;

retrieve data associated with a number of times the online action has been performed within at least one time interval;

determine a standard deviation associated with the number of times the online action has been performed within the at least one time interval;

calculate at least one value associated with the number of times the online action has been performed within the at least one time interval;

calculate at least one value of a median of the number of times the online action has been performed within the at least one time interval, wherein, when calculating the at least one value associated with the number of times the online action has been performed the online action within the at least one time interval, the at least one processor is programmed or configured to:

calculate the at least one value of a percentile associated with the number of times the online action has been performed within the at least one time interval based on the at least one value of the median of the number of times the online action has been performed within the at least one time interval; and

perform a control operation associated with the request to conduct the online action based on a threshold of standard deviation and the at least one value associated with the number of times the online action has been performed within the at least one time interval.

8. The system of claim 7 , wherein the threshold of standard deviation comprises a value of standard deviation, and wherein the value of standard deviation is based on a measure of an amount of variation of a number of times that a plurality of user devices each performed the online action during a prior time interval.

9. The system of claim 7 , wherein the request comprises at least one identity attribute associated with a user device and an identification attribute associated with the online action, and

wherein, when retrieving the data associated with the number of times the online action has been performed within the at least one time interval, the at least one hardware processor is programmed or configured to:

retrieve the data associated with the number of times the online action has been performed within the at least one time interval based on the at least one identity attribute associated with the user device and the identification attribute associated with the online action.

10. The system of claim 7 , wherein the at least one hardware processor is further programmed or configured to:

store the at least one value of the number of times the online action has been performed within the at least one time interval within a data structure based on calculating the at least one value of the number of times the online action has been performed within the at least one time interval.

11. The system of claim 7 , wherein the at least one hardware processor is further programmed or configured to:

determine whether a dataset associated with the number of times a plurality of user devices have performed the online action within the at least one time interval is normally distributed.

12. A computer program product comprising at least one non-transitory computer-readable medium including one or more instructions that, when executed by at least one hardware processor, cause the at least one hardware processor to:

receive, via a communication network, a request to perform an online action, wherein the online action comprises at least one of:

an online action associated with a user login process;

an online action associated with a forgotten password process;

an online action associated with a purchase transaction; or

an online action associated with an addition of user information to a user account;

retrieve data associated with a number of times the online action has been performed within at least one time interval;

determine a standard deviation associated with the number of times the online action has been performed within the at least one time interval;

calculate at least one value associated with the number of times the online action has been performed within the at least one time interval;

calculate at least one value of a median of the number of times the online action has been performed within the at least one time interval, wherein, the one or more instructions that cause the at least one processor to calculate the at least one value associated with the number of times the online action has been performed the online action within the at least one time interval, cause the at least one processor to:

calculate the at least one value of a percentile associated with the number of times the online action has been performed within the at least one time interval based on the at least one value of the median of the number of times the online action has been performed within the at least one time interval; and

perform a control operation associated with the request to conduct the online action based on a threshold of standard deviation and the at least one value associated with the number of times the online action has been performed within the at least one time interval.

13. The computer program product of claim 12 , wherein the one or more instructions that cause the at least one hardware processor to perform the control operation associated with the request to conduct the online action, cause the at least one hardware processor to:

perform the control operation associated with the request to conduct the online action based on determining the standard deviation is within a predetermined Gaussian range.

14. The computer program product of claim 12 , wherein the threshold of standard deviation comprises a value of standard deviation, and wherein the value of standard deviation is based on a measure of an amount of variation of a number of times that a plurality of user devices each performed the online action during a prior time interval.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 25, 2022
From: CHIFAMBA, ROBERT; MUTHUSAMY, KRISHNARAM
To: VISA INTERNATIONAL SERVICE ASSOCIATION
Reel/Frame 059399/0528 →
Continuity (2)
Continuation 16781028 · Feb 4, 2020
Related Publication 20220217144A1 · Jul 7, 2022
References Cited (24)
US 8032896B1 · Li et al. · 2011 [cited by applicant]
US 9781152B1 · Mistratov · 2017 [cited by examiner]
US 10027694B1 · Gupta et al. · 2018 [cited by applicant]
US 20110239278A1 · Downey · 2011 [cited by examiner]
US 20150295913A1 · Foote · 2015 [cited by examiner]
US 20170134362A1 · Randall et al. · 2017 [cited by applicant]
US 20170346809A1 · Plotnik · 2017 [cited by examiner]
US 20170346821A1 · Yedidi · 2017 [cited by examiner]
US 20180115631A1 · Martin · 2018 [cited by examiner]
US 20180288026A1 · Callaghan · 2018 [cited by examiner]
US 20190190934A1 · Peppe · 2019 [cited by examiner]
US 20200136816A1 · Prasad Nittur · 2020 [cited by examiner]
US 20200137066A1 · Erickson · 2020 [cited by examiner]
US 20200177615A1 · Grabois · 2020 [cited by examiner]
US 20200382534A1 · Simanovsky · 2020 [cited by examiner]
US 20210203675A1 · Kaidi · 2021 [cited by examiner]
Yuan Wang et al., Bot-like Behavior Detection in Online Banking, May 2019, ACM, pp. 140-144. (Year: 2019). [cited by examiner]
Lívia C. F. Araújo et al., User Authentication Through Typing Biometrics Features, Jan. 17, 2005, IEEE, vol. 53, Issue: 2, pp. 851-855. (Year: 2005). [cited by examiner]
Dorothy E. Denning, An Intrusion-Detection Model, Feb. 1987, IEEE, vol. SE-13, Issue: 2, pp. 222-232. (Year: 1987). [cited by examiner]
Prakash Chandra Mondal et al., Transaction Authorization from Know Your Customer (KYC) Information in Online Banking, Feb. 16, 2017, IEEE, pp. 523-526. (Year: 2017). [cited by examiner]
Wang et al., “Bot-like Behavior Detection in Online Banking”, ACM, May 2019, pp. 140-144. [cited by applicant]
Araujo et al., “User Authentication Through Typing Biometrics Features”, IEEE, Jan. 17, 2005, pp. 851-855, vol. 53, Issue 2. [cited by applicant]
Denning, “An Intrusion-Detection Model”, IEEE, Feb. 1987, pp. 222-232, vol. SE-13, Issue 2. [cited by applicant]
Mondal et al., “Transaction Authorization from Know Your Customer (KYC) Information in Online Banking”, IEEE, Feb. 16, 2017, pp. 523-526. [cited by applicant]