US 12,646,082 B2Granted

Web presence based legitimacy analysis

AssigneeCapital One Services, LLC

InventorsSteve Frensch, Amr Abouelkhair, Elijah Moreau-Arnott, Yuqi Zhao

Life of this patent

Estimating the term…

Loading patent…

Abstract

Web presence data is employed to determine merchant legitimacy. An address of a web page associated with a merchant named on a credit card transaction can be determined. Subsequently, a secure socket layer certificate associated with the web page can be acquired and utilized as a basis for computing a risk score of a merchant. The number of subject alternate names identified by the certificate can be determined and utilized as a factor in risk score computation. Other factors can include similarity of subject alternate names as well as web page code and content. The risk score can be compared to a threshold. When the risk score satisfies the threshold, an action can be triggered, such as generating a customer alert.

Claims20

Dependent claims

A server system for facilitating authorization of a transaction initiated with a merchant via a server-side handshake initiation that (i) is with a web server hosting a web page of the merchant and (ii) occurs after the transaction is initiated with the merchant, the server system comprising:

one or more processors and memory storing instructions that, when executed by the one or more processors, cause operations comprising:
in response to obtaining, from a transaction server, transaction information for the transaction initiated with the merchant, identifying a merchant name of the merchant from the transaction information and querying a database using the merchant name to determine a web page address for the merchant;
after obtaining the transaction information for the transaction from the transaction server, performing, based on the web page address, a secure socket layer (SSL) handshake process with the web server hosting the web page to acquire an SSL certificate that specifies a plurality of subject alternative names;
and
transmitting, based on the subject alternative names, an indication for denying the transaction to the transaction server, the transaction server denying the transaction based on the transmitted indication from the server system.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/530,264Filed 18 Nov 2021
Published: US 2023/0153830 A118 May 2023
Granted: 2 Jun 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06Q 30/0185
Certifying business or products: product, service or business identity fraud
G06F 11/3624
Debugging of software: by performing operations on the source code, e.g. via a compiler
H04L 9/3263
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
G06Q
Information and communication technology [ict] specially adapted for administrative, commercial, financial, managerial