USER DEVICE PROFILING IN TRANSACTION AUTHENTICATIONS

摘要

A real-time fraud prevention system enables merchants and commercial organizations on-line to assess and protect themselves from high-risk users. A centralized database is configured to build and store dossiers of user devices and behaviors collected from subscriber websites in real-time. Real, low-risk users have webpage click navigation behaviors that are assumed to be very different than those of fraudsters. Individual user devices are distinguished from others by hundreds of points of user-device configuration data each independently maintains. A client agent provokes user devices to volunteer configuration data when a user visits respective webpages at independent websites. A collection of comprehensive dossiers of user devices is organized by their identifying information, and used calculating a fraud score in real-time. Each corresponding website is thereby assisted in deciding whether to allow a proposed transaction to be concluded with the particular user and their device.

主权项

1. A webserver process for identifying, tracking, and authenticating users by the devices they employ in online transactions, and comprising steps of:
inputting user log-on and webpage clickstream navigation information provided by a user device to a web-service over a network connection; extracting user-device identifying parameters from said log-on and webpage clickstream navigation information for use in recognizing, tracking, and authenticating the devices of individual users; provoking said user devices to supply even more user-device identifying parameters with webserver messages back to the user devices if needed to recognize, track, and authenticate the devices of said individual users; cataloging and recording a current sequence of said webpage clickstream navigation information of a particular user device then being employed to browse through a subject webpage and a website maintained by a consumer website server, wherein said webpage clickstream navigation information is presumed to be characteristic of a corresponding particular user; collecting and maintaining a database of comprehensive dossiers of user device identifications (ID's) obtained from many user-device visits to a variety of webpages maintained by many websites over a period of time; matching a user device currently visiting a website by identifying characteristics obtainable through a user device browser, and forwarding these over a network to a dossier file already maintained in said database, if possible; and calculating a fraud score in real-time based on results obtained in the steps of analyzing and collecting; and configuring the calculation as a signal output useful to assist each consumer website server in determining whether to allow a proposed transaction to be concluded by a particular user computing device.