Back to results
US 11,238,456 B2Granted
Keystroke analysis
AssigneeThe 41st Parameter, Inc.
InventorOri Eisen
Life of this patent
Estimating the term…
Abstract
A system, method and device for detecting keystroke entries in a field entered by keyboard in connection with an online transaction that may be fraudulent or erroneous. A score can be assigned to a keystroke based upon its distance from another keystroke. The scores of keystrokes in a string can be summed to obtain a string score. The string score can be normalized by dividing the string score by the number of keystrokes summed to obtain the normalized string score. A risk of fraud or error can be determined based upon the value of the normalized string score in comparison to a predetermined value.
Claims20
A computer-implemented method for authenticating an online session, the method comprising:
- establishing, by a computer processor of a fraud detection server, a first online session for a first online transaction associated with a first user, wherein the first online transaction involves a first user input field;
- receiving, by the computer processor of the fraud detection server via the first user input field, a first data string comprising alpha-numeric characters;
- calculating, by the computer processor of the fraud detection server, a transaction risk score for the first data string based on a determination that the alpha-numeric characters are entered with a shift key;
- determining, by the computer processor of the fraud detection server that the first online transaction is potentially fraudulent based at least in part on the transaction risk score;
- establishing, by a computer processor of a fraud detection server, a second online session for a second online transaction associated with a second user, wherein the second online transaction involves a second user input field;
- receiving, by the computer processor of the fraud detection server, a second field data string via the second user input field;
- comparing, by the computer processor of the fraud detection server, the second data string to the first data string;
- based on the comparison, determining, by the computer processor of the fraud detection server, that the second online transaction is potentially fraudulent;
- and
- in response to the determination that the second online transaction is potentially fraudulent, providing, by the computer processor of the fraud detection server, an indication to the first user or the second user that the second transaction is potentially fraudulent.
7 more elements
A system for authenticating an online session, the system comprising:
- a fraud detection server system comprising a computer processor configured to execute computer instructions;
- and
- a memory in electronic communication with the computer processor, said memory is configured to store the computer instructions causing the processor of the fraud detection server system to:
- establish a first online session for a first online transaction associated with a first user, wherein the first online transaction involves a first user input field;
- receive a first data string via the first user input field, the first data string comprising alpha-numeric characters;
- calculate a transaction risk score for the first data string based on a determination of whether the alpha-numeric characters are entered with a shift key;
- determine that the first online transaction is potentially fraudulent based at least in part on the transaction risk score;
- establish a second online session for a second online transaction associated with a second user, wherein the second online transaction involves a second user input field;
- receive a second data string via the second user input field;
- compare the second data string to the first data string;
- based on the comparison, determine that the second online transaction is potentially fraudulent;
- and
- in response to the determination that the second online transaction is potentially fraudulent, provide, by the computer processor of the fraud detection server, an indication to the first user or the second user that the second transaction is potentially fraudulent.
10 more elements
Non-transitory computer storage having stored thereon a computer program, the computer program including executable instructions that instruct a computer processor to at least:
- establish a first online session for a first online transaction associated with a first user, wherein the first online transaction involves a first user input field;
- receive, via the first user input field, a first data string comprising alpha-numeric characters;
- calculate a transaction risk score for the first data string based on a determination of whether the alpha-numeric characters are entered with a shift key;
- determine that the first online transaction is potentially fraudulent based at least in part on the transaction risk score;
- establish a second online session for a second online transaction associated with a second user, wherein the second online transaction involves a second user input field;
- receive a second data string via the second user input field;
- compare the second data string to the first data string;
- based on the comparison, determine that the second online transaction is potentially fraudulent;
- and
- in response to the determination that the second online transaction is potentially fraudulent, provide, by the computer processor of the fraud detection server, an indication to the first user or the second user.
7 more elements
Dependencies are inferred from the claim text.