# US 2018/0025356 A1 · Computer device for monitoring for fraudulent activity

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0025356 A1
- Document ID: US20180025356A1
- Status: Published application
- Kind: A1
- Application number: 15/652,917
- Filed: 2017-07-18
- Published: 2018-01-25
- Earliest claimed: 2016-07-22
- Assignees: Mastercard Asia/Pacific Pte. Ltd.
- Applicants: MasterCard Asia/Pacific Pte. Ltd.
- Inventors: Rajat Maheshwari; Frederic Fortin; Vijin Venugopalan
- Web page: https://patentgrep.com/patent/US20180025356A1

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/3226: {Use of secure elements separate from M-devices}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/405: {Establishing or using transaction specific rules}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A computer device for monitoring for fraudulent activity, including (a) a plurality of sensors; and (b) one or more processors in communication with the sensors and non-transitory data storage including, stored thereon, a plurality of instructions which, when executed, cause the one or more processors to perform the steps of (i) receiving instructions to determine a confidence level; (ii) determining a confidence level by monitoring one or more of the following: sensor data; user behaviour; payment history; security level; connected devices; and location data; and (iii) returning said confidence level, wherein the confidence level represents a relative risk of fraudulent activity.

## Claims

### Claim 1

A computer device for monitoring for fraudulent activity, including:
(a) a plurality of sensors; and
(b) one or more processors in communication with the sensors and non-transitory data storage including, stored thereon, a plurality of instructions which, when executed, cause the one or more processors to perform the steps of:
(i) receiving instructions to determine a confidence level;
(ii) determining a confidence level by monitoring one or more of the following:
sensor data;
user behaviour;
payment history;
security level;
connected devices; and
location data; and
(iii) returning said confidence level,
wherein the confidence level represents a relative risk of fraudulent activity.

### Claim 2 (depends on 1)

The device claimed in claim 1, wherein the monitoring of the connected devices includes the determining if a separate device is in communication with the computer device, then decrementing the confidence level if there is a reduction of the quality of the signals received from the separate device.

### Claim 3 (depends on 2)

The device claimed in claim 2, wherein a reduction of the quality of the signals received from the separate device is determined if the signal strength falls below a threshold.

### Claim 4 (depends on 1)

The device claimed in claim 1, wherein the monitoring of the user behaviour includes decrementing the confidence level if the user is not following predefined behaviour patterns.

### Claim 5 (depends on 4)

The device claimed in claim 4, wherein the predefined behaviour patterns include patterns associated with one or more of the following:
(a) accessing e-mail;
(b) accessing calls;
(c) accessing messages;
(d) touch on a screen of the device; and
(e) activities on the device.

### Claim 6 (depends on 1)

The device claimed in claim 1, wherein the monitoring of the security level includes incrementing the confidence level if data is accessed from a secure area on the computer device.

### Claim 7 (depends on 1)

The device claimed in claim 1, wherein the monitoring of the security level includes decrementing the confidence level if a mobile payment application being used by the computer device is not secure.

### Claim 8 (depends on 1)

The device claimed in claim 1, wherein the monitoring of the location data includes:
(a) if the computer device is being used with an authentication procedure for a purchase, then the monitoring of the location data includes determining if the authentication procedure is being effected in or from a secure location and, if so, incrementing the confidence level.

### Claim 9 (depends on 8)

The device claimed in claim 8, wherein if the purchase is an in App-or e-commerce purchase, then the confidence level is decremented if the procedure is being used with a suspicious web site.

### Claim 10 (depends on 1)

The device claimed claim 1, wherein the monitoring of the payment history includes:
(a) if the computer device is being used with an authentication procedure for a purchase, then the monitoring of the payment history includes determining if the purchase is a repeat purchase and, if so, incrementing the confidence level.

### Claim 11 (depends on 10)

The device claimed in claim 10, wherein the confidence level is incremented again if the procedure relates to a recent repeat purchase within a predetermined time interval from the purchase.

### Claim 12 (depends on 8)

The device claimed in claim 8, wherein the confidence level is decremented if the purchase is high value.

### Claim 13 (depends on 10)

The device claimed in claim 10, wherein the confidence level is decremented if the purchase is high value.

### Claim 14 (depends on 8)

The device claimed in claim 8, wherein the confidence level is decremented if the purchase is being effected in a country in which the computer device has not previously been used to effect a purchase.

### Claim 15 (depends on 10)

The device claimed in claim 10, wherein the confidence level is decremented if the purchase is being effected in a country in which the computer device has not previously been used to effect a purchase.

### Claim 16

A method for monitoring for fraudulent activity on a computer device, including:
(a) receiving an instruction to determine a confidence level;
(b) determining a confidence level by monitoring one or more of the following:
(i) sensor data;
(ii) user behaviour;
(iii) payment history;
(iv) security level;
(v) connected devices; and
(vi) location data; and
(c) returning said confidence level,
wherein the confidence level represents a relative risk of fraudulent activity.

### Claim 17 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the connected devices includes determining if a separate device is in communication with the computer device, then decrementing the confidence level if there is a reduction of the quality of the signals received from the separate device.

### Claim 18 (depends on 17)

The method claimed in claim 17, wherein a reduction of the quality of the signals received from the separate device is determined if the signal strength falls below a threshold.

### Claim 19 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the user behaviour includes decrementing the confidence level if the user is not following predefined behaviour patterns.

### Claim 20 (depends on 19)

The method claimed in claim 19, wherein the predefined behaviour patterns include patterns associated with one or more of the following:
(a) accessing e-mail;
(b) accessing calls;
(c) accessing messages;
(d) touch on a screen of the device; and
(e) activities on the device.

### Claim 21 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the security level includes incrementing the confidence level if data is accessed from a secure area on the computer device.

### Claim 22 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the security level includes decrementing the confidence level if a mobile payment application being used by the computer device is not secure.

### Claim 23 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the location data includes:
(a) if the computer device is being used with an authentication procedure for a purchase, then the monitoring of the location data includes determining if the authentication procedure is being effected in or from a secure location and, if so, incrementing the confidence level.

### Claim 24 (depends on 23)

The method claimed in claim 23, wherein if the purchase is an in-App or e-commerce purchase, then the confidence level is decremented if the procedure is being used with a suspicious web site.

### Claim 25 (depends on 16)

The method claimed in claim 16, wherein the monitoring of the payment history includes:
(a) if the computer device is being used with an authentication procedure for a purchase, then the monitoring of the payment history includes determining if the purchase is a repeat purchase and, if so, incrementing the confidence level.

### Claim 26 (depends on 25)

The method claimed in claim 25, wherein the confidence level is incremented again if the procedure relates to a recent repeat purchase within a predetermined time interval from the purchase.

### Claim 27 (depends on 23)

The method claimed in claim 23, wherein the confidence level is decremented if the purchase is high value.

### Claim 28 (depends on 25)

The method claimed in claim 25, wherein the confidence level is decremented if the purchase is high value.

### Claim 29 (depends on 23)

The method claimed in claim 23, wherein the confidence level is decremented if the purchase is being effected in a country in which the computer device has not previously been used to effect a purchase.

### Claim 30 (depends on 25)

The method claimed in claim 25, wherein the confidence level is decremented if the purchase is being effected in a country in which the computer device has not previously been used to effect a purchase.

### Claim at position 31

-68. (canceled)
