# US 2014/0156515 A1 · Dynamically reacting policies and protections for securing mobile financial transaction data in transit > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0156515 A1 - Document ID: US20140156515A1 - Status: Published application - Kind: A1 - Application number: 14/175,475 - Filed: 2014-02-07 - Published: 2014-06-05 - Earliest claimed: 2010-01-20 - Assignees: American Express Travel Related Services Company, Inc. - Applicants: American Express Travel Related Services Company, Inc. - Inventors: Samuel A. Bailey, JR. - Web page: https://patentgrep.com/patent/US20140156515A1 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 21/564: {by virus signature recognition} - G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]} - G06Q 20/3223: {Realising banking transactions through M-devices} - G06Q 20/382: {insuring higher security of transaction} - G06Q 20/3829: {involving key management} - G06Q 20/401: {Transaction verification} - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - H04L 63/1416: {Event detection, e.g. attack signature detection} - G06Q 2220/00: Business processing using cryptography - H04L 2463/102: applying security measure for e-commerce - H04W 4/00: Services specially adapted for wireless communication networks; Facilities therefor - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A secure mobile financial transaction is provided by receiving, over a communication network, a list of protection mechanisms available for implementation by an external terminal. Security-related data is received from one or more sensors and an attack signature is computed based on the security-related data. An appropriate security policy is selected from multiple security policies stored in a database based on the list of protection mechanisms and the attack signature. A secure communication session is established between the external terminal and an internal network component according to the selected security policy. A data message associated with a mobile financial transaction is communicated over the communication network during the communication session. ## Claims ### Claim at position 1 1-18. (canceled) ### Claim 19 A method for securing a mobile financial transaction, the method comprising: computing, based on a predetermined valuation formula, a value associated with a data message to be communicated; computing, based on an attack signature and a first protection mechanism, a probability that security of the data message will be compromised; computing a total risk level based on the value associated with the data message and the probability that security of the data message will be compromised; and selecting, from a plurality of security policies stored in a database, a security policy that results in a risk level within a predetermined risk threshold. ### Claim 20 (depends on 19) The method of claim 19, further comprising: comparing the total risk level to the predetermined risk threshold; and based on a result of the comparing, either: selecting a security policy associated with the first protection mechanism, or selecting a security policy associated with a second protection mechanism, different from the first protection mechanism. ### Claim 21 (depends on 20) The method of claim 20, wherein the first protection mechanism is a protection mechanism currently being implemented by an external terminal. ### Claim 22 (depends on 19) The method of claim 19, wherein the computing the value associated with the data message based on the predetermined valuation formula includes computing the value based on a value of a financial transaction associated with the data message. ### Claim 23 (depends on 19) The method of claim 19, wherein the computing the total risk level includes computing the total risk level as a product of (1) the value associated with the data message and (2) the probability that security of the data message will be compromised. ### Claim 24 (depends on 19) The method of claim 19, wherein the selecting the security policy includes selecting a security policy based on a list of protection mechanisms available for implementation by an external terminal. ### Claim 25 (depends on 19) The method of claim 19, further comprising computing the attack signature based on security related data received from one or more sensors over a communication network. ### Claim 26 A system for securing a mobile financial transaction, the system comprising: a memory; and a processor coupled to the memory, wherein the processor and the memory cooperate to: compute, based on a predetermined valuation formula, a value associated with a data message to be communicated, compute, based on an attack signature and a first protection mechanism, a probability that security of the data message will be compromised, compute a total risk level based on the value associated with the data message and the probability that security of the data message will be compromised, and select, from a plurality of security policies stored in a database, a security policy that results in a risk level within a predetermined risk threshold. ### Claim 27 (depends on 26) The system of claim 26, wherein the processor and the memory further cooperate to: compare the total risk level to the predetermined risk threshold; and based on a result of the comparing, either: select a security policy associated with the first protection mechanism, or select a security policy associated with a second protection mechanism, different from the first protection mechanism. ### Claim 28 (depends on 27) The system of claim 27, wherein the first protection mechanism is a protection mechanism currently being implemented by an external terminal. ### Claim 29 (depends on 26) The system of claim 26, wherein the computing the value associated with the data message based on the predetermined valuation formula includes computing the value based on a value of a financial transaction associated with the data message. ### Claim 30 (depends on 26) The system of claim 26, wherein the computing the total risk level includes computing the total risk level as a product of (1) the value associated with the data message and (2) the probability that security of the data message will be compromised. ### Claim 31 (depends on 26) The system of claim 26, wherein the selecting the security policy includes selecting a security policy based on a list of protection mechanisms available for implementation by an external terminal. ### Claim 32 (depends on 26) The system of claim 26, wherein the processor and the memory further cooperate to compute the attack signature based on security related data received from one or more sensors over a communication network. ### Claim 33 A non-transitory computer-readable medium having stored thereon sequences of instructions, the sequences of instructions including instructions which, when executed by a computer system, cause the computer system to perform: computing, based on a predetermined valuation formula, a value associated with a data message to be communicated; computing, based on an attack signature and a first protection mechanism, a probability that security of the data message will be compromised; computing a total risk level based on the value associated with the data message and the probability that security of the data message will be compromised; and selecting, from a plurality of security policies stored in a database, a security policy that results in a risk level within a predetermined risk threshold. ### Claim 34 (depends on 33) The non-transitory computer-readable medium of claim 33, wherein the sequences of instructions further include instructions which, when executed by the computer system cause the computer system to perform: comparing the total risk level to the predetermined risk threshold; and based on a result of the comparing, either: selecting a security policy associated with the first protection mechanism, or selecting a security policy associated with a second protection mechanism, different from the first protection mechanism. ### Claim 35 (depends on 34) The non-transitory computer-readable medium of claim 34, wherein the first protection mechanism is a protection mechanism currently being implemented by an external terminal. ### Claim 36 (depends on 33) The non-transitory computer-readable medium of claim 33, wherein the computing the value associated with the data message based on the predetermined valuation formula includes computing the value based on a value of a financial transaction associated with the data message. ### Claim 37 (depends on 33) The non-transitory computer-readable medium of claim 33, wherein the computing the total risk level includes computing the total risk level as a product of (1) the value associated with the data message and (2) the probability that security of the data message will be compromised. ### Claim 38 (depends on 33) The non-transitory computer-readable medium of claim 33, wherein the selecting the security policy includes selecting a security policy based on a list of protection mechanisms available for implementation by an external terminal. ### Claim 39 (depends on 33) The non-transitory computer-readable medium of claim 33, wherein the sequences of instructions further include instructions which, when executed by the computer system cause the computer system to perform: computing the attack signature based on security related data received from one or more sensors over a communication network.