Method and system for detecting fraud in a credit card transaction over a computer network

Abstract

A method and system for detecting fraud in a credit card transaction between consumer and a merchant over the Internet. The method and system comprises obtaining credit card information relating to the transaction from the consumer; and verifying the credit card information based upon a variety of parameters. The variety of parameters are weighted so as to provide a merchant with a quantifiable indication of whether the credit card transaction is fraudulent. In so doing, an integrated verification system is provided which allows a merchant, or the like, to accurately and efficiently determine the validity of a transaction over the Internet.

Description

FIELD OF THE INVENTION

The present invention relates generally to credit card transactions and specifically to detecting fraud in such credit card transactions when ordering and downloading information over the Internet.

BACKGROUND OF THE INVENTION

Credit card transactions are being utilized in a variety of environments. In a typical environment a user provides a merchant with a credit card, and the merchant through various means will verify whether that information is accurate. For example, referring now to FIG. 1, a typical credit card verification system 10 is shown. In such a system, a merchant 12 receives a credit card from the customer 14. The merchant then verifies the credit card information through an automated verification system AVS 16.

These systems work well in a credit card transaction in which either the customer has a face-to-face meeting with the merchant or the merchant is actually shipping a package or the like to the address of a customer. The verification procedure typically includes receiving at the AVS system address information and identity information. However, when downloading information from an online service or the Internet, the address and identity information are not enough to adequately verify that the customer who is purchasing the goods is actually the owner of the credit card. For example, an individual may have both the name and the address of a particular credit card holder and that information in a normal transaction may be sufficient for authorization of such a transaction. However, in an Internet transaction it is possible to obtain all the correct information related to the particular credit card holder through unscrupulous means, and therefore, be able to fraudulently obtain information.

Accordingly, what is needed is a system and method that overcomes the problems associated with a typical verification system for credit card transactions particularly in the Internet or online services environment The system should be easily implemented within the existing environment and should also be straightforwardly applied to existing technology. The present invention addresses such a need.

SUMMARY

A method and system for detecting fraud in a credit card transaction between a consumer and a merchant over the Internet. The method and system comprises obtaining credit card information relating to the transaction from the consumer; and verifying the credit card information based upon a variety of parameters. The variety of parameters are weighted so as to provide a merchant with a quantifiable indication of whether the credit card transaction is fraudulent In so doing, an integrated verification system is provided which allows a merchant, or the like, to accurately and efficiently determine the validity of a transaction over the Internet

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is diagram of the prior art verification system for credit card transaction.

FIG. 2 is a verification system in accordance with the present invention.

FIG. 3 is a flow chart of the verification system in accordance with the present invention.

FIG. 4 is a flow chart of the integrated verification system in accordance with the present invention.

DETAILED DESCRIPTION

The present invention relates to a fraud detection method, system and apparatus for use in credit card transaction over online services or the Internet. The following description is presented to enable one of ordinary skill in the art to make and use the invention and is provided in the context of a patent application and its requirements. Various modifications to the preferred embodiment will be readily apparent to those skilled in the art and the generic principles herein may be applied to other embodiments. Thus, the present invention is not intended to be limited to the embodiment shown but is to be accorded the widest scope consistent with the principles and features described herein.

The present invention provides an integrated verification system for credit card transactions over an online service or the Internet. Referring now to FIG. 2, what is shown is a block diagram of a system 100 which would use the verification procedure in accordance with the present invention. System 100 includes, similar to FIG. 1, a customer 102 and a merchant 104. The customer 102 provides the merchant with a credit card, and the merchant then sends information from it to an integrated verification system “IVS” 106 which includes a variety of parameters providing consistency, history and other information in an integrated fashion to determine whether the credit card information is valid. The IVS 106 is typically implemented in software for example in a hard disk, floppy disk or other computer-readable medium. In a typical embodiment, when the customer 102 orders a particular piece of software to be downloaded from a merchant 104, the merchant will provide the credit card number, e-mail address and other pertinent information to the IVS 106. The integrated verification system 106 then weights the variety of parameters so as to provide a merchant with a quantifiable indication on whether the credit and transaction is fraudulent. To more clearly describe the operation of a system and method in accordance with the present invention, refer now to the following discussion in conjunction with the accompanying figures.

FIG. 3 shows a simple block diagram for providing an integrated verification of a credit card transaction over the Internet. The IVS 106 includes a controller 212 which receives the credit information from the merchant and then sends that information on to a variety of parameters 202-208. The plurality of parameters operate on the information to provide an indication of whether the transaction is valid. In this embodiment, the plurality of parameters comprises a history check 202, a consistency check 204, an automatic verification system 206 and an Internet identification verification system (“IIVS”) 208. The output or individual indications of validity of these parameters are provided to fraud detector 210. The fraud detector 210 combines these inputs to provide an integrated indication of whether the particular transaction is valid.

Consistency check 204 allows IVS 106 to determine whether the credit information is consistent, i.e., does the credit information match the user and other information. AVS system 206 provides similar information as AVS 16 described in FIG. 1. A key feature of both the history database 222 and the Internet ID database 224 is that they can be accessed and the information there within can be supplemented by a variety of other merchants and, therefore, information from those merchants is obtainable thereby.

History check 202 is provided which also accesses a history database 222 which may include card number and email information. The history check 202 will also actively determine if the particular transaction matches previous database information within the history database 222. Therefore, the Internet ID verification system 208 and history check 202 increases in utility over time. The Internet ID verification system 208 provides for a system for verifying the validity of Internet address, the details of which will be discussed hereinafter. The Internet identification verification system 208 similar to the history check 202 includes a database 224 which can be added to by other merchants.

In addition, the Internet identification verification system 208 accesses and communicates with a database of Internet addresses. This system will be used to verify whether the Internet address is consistent with other Internet addresses being used in transactions utilizing this credit card.

These different parameters are weighted via weighting blocks 214-220, respectively, dependent upon the particular credit card transaction. For example, if the amount of dollar transaction is critical, it may be appropriate for the history check 202 and AVS system 206 to be weighted more critically than the other parameters. On the other hand, if a critical point is the consistency of the Internet address, then the consistency check 204 and the Internet identification system 208 may be more critical. Accordingly, each of the verification parameters 202-208 may be weighted in different amounts depending upon its importance in the verification process.

A particularly important feature of the present invention is the Internet identification system 208 and its operation within the integrated verification system 106. Through this system 208, it is possible to quickly determine if an Internet identification address is being utilized fraudulently. To describe this feature in more detail refer now to FIG. 4 and the accompanying discussion.

FIG. 4 is a flow chart of the Internet identification verification system 208. The goal of Internet identification verification system 208 is to determine whether the physical address or the physical location of the address compares to a previous physical location that was used for that particular Internet address. Accordingly, in the flow chart of FIG. 4, first the number of transactions that had been processed using that particular Internet address is obtained from the database 224, via step 302. Thereafter, a map of those transactions is constructed based on those obtained transactions, via step 304. Finally, the constructed map is used to determine if the new credit card transaction is valid, via step 306. Accordingly, through a system and method in accordance with this system, an Internet identification verification system is provided which can quickly and easily determine whether a particular Internet address is related to a particular credit card transaction.

Accordingly, what is provided is a system and method for accurately determining whether a particular credit card transaction is a fraudulent one. The integrated verification system in accordance with the present invention provides for weighting the variety of parameters so as to provide a merchant with a quantifiable indication on whether the credit and transaction is fraudulent.

Although the present invention has been described in accordance with the embodiments shown, one of ordinary skill in the art will recognize that there could be variations to the embodiment and those variations would be within the spirit and scope of the present invention. Therefore, although the present invention was described in terms of a particular verification system, one of ordinary skill in the art readily recognizes, that any number of parameters can be utilized and their use would be within the spirit and scope of the present invention. Accordingly, many modifications may be made by one of ordinary skill without departing from the spirit and scope of the present invention, the scope of which is defined by the following claims.

Claims

1. A method for detecting fraud in a transaction between a consumer and a merchant over the Internet, wherein the transaction involves the consumer purchasing a product from the merchant using a credit card, the method comprising the steps of: receiving, from the merchant, transaction information that identifies the consumer and the product, including an Internet address of the consumer; receiving, from the merchant, credit card information associated with the consumer that identifies the credit card to be used in the transaction; verifying the credit card information based upon a consistency check that determines whether the credit card information matches the consumer; verifying the credit card information based upon a history check that determines whether the credit card information is consistent with the transaction information; verifying the credit card information based upon an automatic verification system; verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in a database of records of other transaction information for other transactions that are associated with the Internet address of the consumer; creating and storing a fraud score value based on the verifying steps that provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent.

2. A method as recited in claim 1, wherein the step of verifying the credit card information based upon an Internet identification system comprises the step of: receiving, from the merchant, transaction information that identifies the consumer and the product, including an Internet address of the consumer and a shipping address for the product; retrieving, from the database of the Internet identification system, a plurality of records of other transaction information that are associated with the Internet address of the consumer; determining whether a physical address contained in each of the plurality of records matches the shipping address in the transaction information; verifying the credit card information when the physical address matches the shipping address in the transaction information.

3. A method as recited in claim 1, wherein the step of verifying the credit card information based upon an Internet identification system comprises the step of: verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in other transaction information for other transactions associated with an Internet email address of the consumer.

4. A method as recited in claim 1, wherein the step of verifying the credit card information based upon an Internet identification system comprises the step of: retrieving a plurality of records of other transactions from an Internet identification system that associates the credit card number with other physical addresses that have been specified in other transaction information for other transactions associated with an Internet address of the consumer; creating and storing a map of the other transactions; verifying the credit card information based upon the map of other transactions, by determining whether a physical address specified in the transaction information is consistent with the other physical addresses in the other transaction information.

5. A method as recited in claim 1, further comprising the step of: weighting each of the verifying steps according to an importance as determined by the merchant of each verifying step to the credit card transaction.

6. A method as recited in claim 1, wherein the step of verifying the credit card information based upon a history check comprises the step of: receiving, from other merchants, records of other transactions involving the other merchants and the consumer; storing the records of other transactions in a transaction history database that can be accessed and supplemented by other merchants with information about other credit card transactions with the consumer and such other merchants; verifying the credit card information based upon the transaction history database by determining whether the credit card information is consistent with the records of other transactions in the transaction history database.

7. A method as recited in claim 1, wherein the step of verifying the credit card information based upon an Internet identification system comprises the step of: receiving, from other merchants, records of other transactions involving the other merchants and the consumer; storing the records of other transactions in an Internet identification database that can be accessed and supplemented by other merchants with information about other credit card transactions with the consumer and such other merchants; verifying the credit card information based upon the Internet identification database by determining whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in records of the Internet identification database for other transactions associated with an Internet address of the consumer.

8. A method for detecting fraud in a credit card transaction between a consumer and a merchant over the Internet comprising the steps of: receiving, from the consumer, credit card information relating to the transaction; creating and storing a consistency check mechanism, a transaction history check mechanism, an automatic verification mechanism and an Internet identification mechanism, each of which may indicate whether the credit card transaction is fraudulent based on transaction information, in combination with information that identifies the consumer, in which the transaction information provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent; receiving from the merchant and storing a weight value associated with each of the mechanisms and storing the weight value in association with information that identifies the mechanisms, wherein each of the weight values signifies an importance to the merchant of the value to the credit card transaction of the associated mechanism; weighting each value of the plurality of parameters according to the weight values; verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in a database of records of other transaction information for other transactions that are associated with the Internet address of the consumer; creating and storing a fraud score value based on the verifying steps that provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent.

9. A method as recited in claim 8 wherein the steps of creating and storing further include: creating and storing a transaction history check mechanism that includes a transaction history database which can be accessed and supplemented by other merchants with information about transactions of the consumer with such other merchants.

10. A method as recited in claim 8 wherein the steps of creating and storing further include: creating and storing an Internet identification verification system (IIS) mechanism that includes an Internet address database that can be accessed and supplemented with new Internet addresses as Internet address expansion occurs.

11. A method as recited in claim 8 wherein the steps of creating and storing further include: obtaining other transactions utilizing an Internet address that is identified with the credit card transaction; constructing a map of credit card transactions based upon the other transactions; utilizing the map of credit card transactions to determine if the credit card transaction is valid.

12. An integrated verification system for determining whether a transaction between a merchant and consumer over the Internet is fraudulent, wherein the transaction involves the consumer purchasing a product from the merchant using a credit card, the system comprising: means for receiving, from the merchant, transaction information that identifies the consumer and the product; means for receiving, from the merchant, credit card information associated with the consumer that identifies the credit card to be used in the transaction; means for verifying the credit card information based upon a consistency check that determines whether the credit card information matches the consumer; means for verifying the credit card information based upon a transaction history check that determines whether the credit card information is consistent with the transaction information; means for verifying the credit card information based upon an automatic verification system; verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in a database of records of other transaction information for other transactions that are associated with the Internet address of the consumer; means for creating and storing a fraud score value based on the verifying steps that provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent.

13. A computer readable medium containing program instructions for detecting fraud in a credit card transaction between a consumer and a merchant over the Internet, wherein the transaction involves the consumer purchasing a product from the merchant using a credit card, wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to carry out the steps of: receiving, from the merchant, transaction information that identifies the consumer and the product; receiving, from the merchant, credit card information associated with the consumer that identifies the credit card to be used in the transaction; verifying the credit card information based upon a consistency check that determines whether the credit card information matches the consumer; verifying the credit card information based upon a transaction history check that determines whether the credit card information is consistent with the transaction information; verifying the credit card information based upon an automatic verification system; verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in a database of records of other transaction information for other transactions that are associated with the Internet address of the consumer; creating and storing a fraud score value based on the verifying steps that provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent.

14. A method for detecting fraud in a transaction between a consumer and a merchant over the Internet, wherein the transaction involves the consumer purchasing a product from the merchant using a credit card, the method comprising the steps of: receiving, from the merchant, transaction information that identifies the consumer and the product; receiving, from the merchant, credit card information associated with the consumer that identifies the credit card to be used in the transaction; verifying the credit card information based upon a consistency check that determines whether the credit card information matches the consumer, a transaction history check that determines whether the credit card information is consistent with the transaction information, and an automatic verification system; verifying the credit card information based upon an Internet identification system that determines whether a physical address specified in the transaction information is consistent with other physical addresses that have been specified in a database of records of other transaction information for other transactions that are associated with the Internet address of the consumer; creating and storing a fraud score value based on the verifying steps that provides the merchant with a quantifiable indication of whether the credit card transaction is fraudulent.