Transaction authentication based on metadata

A method for authenticating transactions comprising:

• detecting, via a processor, metadata corresponding to a user of a mobile device, wherein the metadata comprises a call history, a user browsing history, and user credentials from the mobile device;
• detecting, via the processor, transaction information corresponding to the user of the mobile device from a remote server, wherein the transaction information corresponds to a transaction initiated at a remote service provider and wherein the transaction information indicates a transaction type, a portion of a browsing history of a web store of the remote server, and transaction initiator information that is to be used to determine locally on the mobile device whether a phone number of the remote service provider is in the call history of the mobile device;
• generating, via the processor, an authentication score of the transaction based on the metadata and the transaction information, the generating of the authentication score comprising identifying that the user credentials correspond to the user of the mobile device and the user credentials correspond to the portion of the browsing history of the web store of the remote server and identifying that the mobile device is actively in use by the user of the mobile device during a time the transaction is initiated at the remote service provider, the authentication score to be increased in response to detecting that the transaction is associated with a type of product corresponding to at least one search in the user browsing history of the metadata;
• and
• authorizing, via the processor, the transaction based on the authentication score by sending an authentication response comprising an approval or a rejection of the transaction to the remote server, the authorizing of the transaction based on the authentication score being above a predetermined value, the transaction authorization to be determined locally on the mobile device without transmitting the metadata from the mobile device to the remote server.

A computer program product for authenticating transactions, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to cause the processor to:

• detect metadata corresponding to a user of a mobile device, wherein the metadata comprises a call history, a user browsing history, and user credentials from the mobile device;
• detect transaction information corresponding to the user of the mobile device from a remote server, wherein the transaction information corresponds to a transaction initiated at a remote service provider and wherein the transaction information indicates a transaction type, a portion of a browsing history of a web store of the remote server, and transaction initiator information that is to be used to determine locally on the mobile device whether a phone number of the remote service provider is in the call history of the mobile device;
• generate an authentication score of the transaction based on the metadata and the transaction information, the generating of the authentication score comprising identifying that the user credentials correspond to the user of the mobile device and the user credentials correspond to the portion of the browsing history of the web store of the remote server and identifying that the mobile device is actively in use by the user of the mobile device during a time the transaction is initiated at the remote service provider, the authentication score to be increased in response to detecting that the transaction is associated with a type of product corresponding to at least one search in the user browsing history of the metadata;
• and
• authorize the transaction based on the authentication score by sending an authentication response comprising an approval or a rejection of the transaction to the remote server, the authorizing of the transaction based on the authentication score being above a predetermined value, the transaction authorization to be determined locally on the mobile device without transmitting the metadata from the mobile device to the remote server.