# US 11,443,319 B2 · Method and system for identification of shared devices for fraud modeling > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,443,319 B2 - Document ID: US11443319B2 - Status: Granted - Kind: B2 - Application number: 16/732,806 - Filed: 2020-01-02 - Published: 2020-05-07 - Granted: 2022-09-13 - Earliest claimed: 2016-10-11 - Assignees: Mastercard International Incorporated - Applicants: Mastercard International Incorporated - Inventors: Todd Christian Lowenberg; Rohit Chauhan - Web page: https://patentgrep.com/patent/US11443319B2 ## CPC - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - H04L 63/102: {Entity profiles} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 2209/16: Obfuscation or hiding, e.g. involving white box - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L 2463/102: applying security measure for e-commerce - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for fraud modeling based on shared computing device usage includes: storing transaction data entries, each including a transaction date and/or time, account identifier, and device identifier associated with a computing device; receiving a transaction message for a payment transaction, the transaction message including a specific device identifier, primary account number, and additional transaction data; identifying transaction data entries where the included device identifier corresponds to the specific device identifier; determining a fraud risk rating based on a number of unique account identifiers included in the identified transaction data entries over a predetermined period of time; and transmitting the transaction message and the determined fraud risk rating to a financial institution associated with the primary account number. ## Claims ### Claim 1 A method for fraud modeling based on shared computing device usage, comprising: storing, in a transaction database of a processing server, a plurality of transaction data entries, wherein each transaction data entry is a structured data set related to a payment transaction including at least a transaction date and/or time, an account identifier, and a device identifier associated with a computing device involved in the related payment transaction; receiving, by a receiving device of the processing server, a transaction message for a payment transaction, wherein the transaction message is formatted based on one or more standards and includes at least a plurality of data elements including at least a first data element configured to store a specific device identifier, a second data element configured to store a primary account number, and one or more additional data elements configured to store additional transaction data; executing, by a querying module of the processing server, a query on the transaction database to identify one or more transaction data entries where the included device identifier corresponds to the specific device identifier stored in the first data element included in the received transaction message; determining, by a determination module of the processing server, a fraud risk rating based on at least a plural number of unique account identifiers included in the identified one or more transaction data entries where the included device identifier corresponds to the specific device identifier over a predetermined period of time and the primary account number stored in the second data element included in the received transaction message; and electronically transmitting, by a transmitting device of the processing server, at least the received transaction message and the determined fraud risk rating to a financial institution associated with the primary account number stored in the second data element included in the received transaction message. ### Claim 2 (depends on 1) The method of claim 1, further comprising: executing, by the querying module of the processing server, a query on the transaction message to store the determined fraud risk rating in a corresponding data element of the plurality of data elements, wherein transmitting the received transaction message and determined fraud risk rating to the financial institution includes transmitting the transaction message including the fraud risk rating stored in the corresponding data element. ### Claim 3 (depends on 1) The method of claim 1, further comprising: generating, by a generation module of the processing server, a tokenized representation of the specific device identifier, wherein the device identifier included in each of the identified one or more transaction data entries is equivalent to the tokenized representation. ### Claim 4 (depends on 3) The method of claim 3, wherein the tokenized representation is generated via encrypting the specific device identifier using a predetermined encryption algorithm. ### Claim 5 (depends on 3) The method of claim 3, wherein generating the tokenized representation includes executing, by the querying module of the processing server, a query on a look-up table to identify the tokenized representation as being associated with the specific device identifier. ### Claim 6 (depends on 1) The method of claim 1, wherein the plurality of data elements further includes a third data element configured to store a transaction date and a fourth data element configured to store a transaction time, and the predetermined period of time is based on the transaction date and/or transaction time. ### Claim 7 (depends on 1) The method of claim 1, wherein the fraud risk rating is further based on the additional transaction data stored in the one or more additional data elements included in the received transaction message. ### Claim 8 (depends on 7) The method of claim 7, wherein the additional transaction data includes at least one of: a transaction amount, a merchant category code, a merchant identifier, a geographic location, a transaction time, and a transaction date. ### Claim 9 (depends on 1) The method of claim 1, further comprising: executing, by the querying module of the processing server, a query on the transaction database to insert a new transaction data entry including at least the primary account number and specific device identifier included in the received transaction message and a date and/or time. ### Claim 10 (depends on 1) The method of claim 1, wherein the specific device identifier is a media access control address. ### Claim 11 A system for fraud modeling based on shared computing device usage, comprising: a transaction database of a processing server configured to store a plurality of transaction data entries, wherein each transaction data entry is a structured data set related to a payment transaction including at least a transaction date and/or time, an account identifier, and a device identifier associated with a computing device involved in the related payment transaction; a receiving device of the processing server configured to receive a transaction message for a payment transaction, wherein the transaction message is formatted based on one or more standards and includes at least a plurality of data elements including at least a first data element configured to store a specific device identifier, a second data element configured to store a primary account number, and one or more additional data elements configured to store additional transaction data; a querying module of the processing server configured to execute a query on the transaction database to identify one or more transaction data entries where the included device identifier corresponds to the specific device identifier stored in the first data element included in the received transaction message; a determination module of the processing server configured to determine a fraud risk rating based on at least a plural number of unique account identifiers included in the identified one or more transaction data entries where the included device identifier corresponds to the specific device identifier over a predetermined period of time and the primary account number stored in the second data element included in the received transaction message; and a transmitting device of the processing server configured to electronically transmit at least the received transaction message and the determined fraud risk rating to a financial institution associated with the primary account number stored in the second data element included in the received transaction message. ### Claim 12 (depends on 11) The system of claim 11, wherein the querying module of the processing server is further configured to execute a query on the transaction message to store the determined fraud risk rating in a corresponding data element of the plurality of data elements, and transmitting the received transaction message and determined fraud risk rating to the financial institution includes transmitting the transaction message including the fraud risk rating stored in the corresponding data element. ### Claim 13 (depends on 11) The system of claim 11, further comprising: a generation module of the processing server configured to generate a tokenized representation of the specific device identifier, wherein the device identifier included in each of the identified one or more transaction data entries is equivalent to the tokenized representation. ### Claim 14 (depends on 13) The system of claim 13, wherein the tokenized representation is generated via encrypting the specific device identifier using a predetermined encryption algorithm. ### Claim 15 (depends on 13) The system of claim 13, wherein generating the tokenized representation includes executing, by the querying module of the processing server, a query on a look-up table to identify the tokenized representation as being associated with the specific device identifier. ### Claim 16 (depends on 11) The system of claim 11, wherein the plurality of data elements further includes a third data element configured to store a transaction date and a fourth data element configured to store a transaction time, and the predetermined period of time is based on the transaction date and/or transaction time. ### Claim 17 (depends on 11) The system of claim 11, wherein the fraud risk rating is further based on the additional transaction data stored in the one or more additional data elements included in the received transaction message. ### Claim 18 (depends on 17) The system of claim 17, wherein the additional transaction data includes at least one of: a transaction amount, a merchant category code, a merchant identifier, a geographic location, a transaction time, and a transaction date. ### Claim 19 (depends on 11) The system of claim 11, wherein the querying module of the processing server is further configured to execute a query on the transaction database to insert a new transaction data entry including at least the primary account number and specific device identifier included in the received transaction message and a date and/or time. ### Claim 20 (depends on 11) The system of claim 11, wherein the specific device identifier is a media access control address.