Using integrated code to extract device characteristics for online security

A computer-based system, comprising:

• a processor;
• a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
• transmitting, by the processor, device identifying code to a merchant server,
• wherein the device identifying code causes the merchant server to transmit characteristics of a device and a device ID of the device to a device registry;
• receiving, by the processor, an authorization request from the merchant server;
• receiving, by the processor, an enhanced authorization message comprising the device ID from the merchant server;
• receiving, by the processor, a device risk message comprising the device ID from the device registry;
• storing, by the processor, the device risk message in a device risk queue;
• polling, by the processor, the device risk queue based on the device ID in the enhanced authorization message;
• merging, by the processor and based on the device ID, the device risk message, the enhanced authorization message, and the authorization request into an enhanced authorization request;
• authorizing, by the processor and based on the enhanced authorization request, the authorization request;
• and
• transmitting, by the processor, an authorization response to the merchant server.

An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system, cause the computer-based system to perform operations comprising:

• transmitting, by the computer-based system, device identifying code to a merchant server,
• wherein the device identifying code causes the merchant server to transmit characteristics of a device and a device ID of the device to a device registry;
• receiving, by the computer-based system, an authorization request from the merchant server;
• receiving, by the computer-based system, an enhanced authorization message comprising the device ID from the merchant server;
• receiving, by the computer-based system, a device risk message comprising the device ID from the device registry;
• storing, by the computer-based system, the device risk message in a device risk queue;
• polling, by the computer-based system, the device risk queue based on the device ID in the enhanced authorization message;
• merging, by the computer-based system and based on the device ID, the device risk message, the enhanced authorization message, and the authorization request into an enhanced authorization request;
• authorizing, by the computer-based system and based on the enhanced authorization request, the authorization request;
• and
• transmitting, by the computer-based system, an authorization response to the merchant server.