# US 2019/0318360 A1 · Transaction fraud detection

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0318360 A1
- Document ID: US20190318360A1
- Status: Published application
- Kind: A1
- Application number: 16/455,236
- Filed: 2019-06-27
- Published: 2019-10-17
- Earliest claimed: 2015-06-22
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: John J. Auvenshine; John T. Olson; Nedzad Taljanovic
- Web page: https://patentgrep.com/patent/US20190318360A1

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 20/3224: {Transactions dependent on location of M-devices}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An apparatus, method, system, and program product are disclosed for transaction fraud detection. A region determination module determines a valid region for a transaction. The region determination module includes at least one of an itinerary module that determines the valid region for the transaction based at least partly on a travel itinerary of a user and a network module that determines the valid region for the transaction based at least partly on two-way communication between an information handling device and a network. The travel itinerary may be obtained dynamically by accessing a third-party account of the user. The information handling device is not used to initiate the transaction. An approval module approves the transaction if a location of the transaction is within the valid region.

## Claims

### Claim 1

An apparatus comprising:
one or more processors; and
one or more non-transitory computer readable storage media, the one or more non-transitory computer readable storage media comprising executable code that when executed by the one or more processors is configured to:
enable a user to select one or more of a network module of a network and a positioning module of the network for determining a valid region for a transaction;
in response to the user selecting the network module for determining the valid region for the transaction, the executable code when executed by the one or more processors is configured to:
receive authentication data from the user;
transmit the authentication data to the network module, wherein the network module:
requests a location of an electronic device that serviced transmission of the authentication data;
determines the valid region for the transaction by applying a distance tolerance to the location of the electronic device;
compares the valid region for the transaction to a location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction; and
in response to the user selecting the positioning module for determining the valid region for the transaction, the executable code when executed by the one or more processors is configured to:
receive a location request from the positioning module;
transmit a geospatial location request to a geospatial position detector;
receive a geospatial location of the apparatus from the geospatial position detector;
transmit the geospatial location to the positioning module, wherein the positioning module:
determines the valid region for the transaction by applying the distance tolerance to the geospatial location;
compares the valid region for the transaction to the location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction.

### Claim 2 (depends on 1)

The apparatus of claim 1, wherein the apparatus is one of a mobile phone, a watch, a tablet computer, a laptop computer, and a desktop computer.

### Claim 3 (depends on 1)

The apparatus of claim 1, wherein the network comprises a cellular network.

### Claim 4 (depends on 1)

The apparatus of claim 1, wherein the network comprises a wide area network (“WAN”).

### Claim 5 (depends on 1)

The apparatus of claim 1, wherein the geospatial position detector is part of a Global Positioning System.

### Claim 6

A method comprising:
enabling, at a device, a user to select one or more of a network module of a network and a positioning module of the network for determining a valid region for a transaction;
in response to the user selecting the network module for determining the valid region for the transaction:
receiving authentication data from the user;
transmitting the authentication data to the network module, wherein the network module:
requests a location of an electronic device that serviced transmission of the authentication data;
determines the valid region for the transaction by applying a distance tolerance to the location of the electronic device;
compares the valid region for the transaction to a location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction; and
in response to the user selecting the positioning module for determining the valid region for the transaction:
receiving a location request from the positioning module;
transmitting a geospatial location request to a geospatial position detector;
receiving a geospatial location of the device from the geospatial position detector;
transmitting the geospatial location to the positioning module, wherein the positioning module:
determines the valid region for the transaction by applying the distance tolerance to the geospatial location;
compares the valid region for the transaction to the location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction.

### Claim 7 (depends on 6)

The method of claim 6, wherein the device is one of a mobile phone, a watch, a tablet computer, a laptop computer, and a desktop computer.

### Claim 8 (depends on 6)

The method of claim 6, wherein the network comprises a cellular network.

### Claim 9 (depends on 6)

The method of claim 6, wherein the network comprises a wide area network (“WAN”).

### Claim 10 (depends on 6)

The method of claim 6, wherein the geospatial position detector is part of a Global Positioning System.

### Claim 11

A computer program product for transaction fraud detection, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions are executable by a processor to cause the processor to:
enable, at a device, a user to select one or more of a network module of a network and a positioning module of the network for determining a valid region for a transaction;
in response to the user selecting the network module for determining the valid region for the transaction, the program instructions are executable by the processor to cause the processor to:
receive authentication data from the user;
transmit the authentication data to the network module, wherein the network module:
requests a location of an electronic device that serviced transmission of the authentication data;
determines the valid region for the transaction by applying a distance tolerance to the location of the electronic device;
compares the valid region for the transaction to a location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction; and
in response to the user selecting the positioning module for determining the valid region for the transaction, the program instructions are executable by the processor to cause the processor to:
receive a location request from the positioning module;
transmit a geospatial location request to a geospatial position detector;
receive a geospatial location of the device from the geospatial position detector;
transmit the geospatial location to the positioning module, wherein the positioning module:
determines the valid region for the transaction by applying the distance tolerance to the geospatial location;
compares the valid region for the transaction to the location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction.

### Claim 12 (depends on 11)

The computer program product of claim 11, wherein the computer program product is part of one of a mobile phone, a watch, a tablet computer, a laptop computer, and a desktop computer.

### Claim 13 (depends on 11)

The computer program product of claim 11, wherein the network comprises a cellular network.

### Claim 14 (depends on 11)

The computer program product of claim 11, wherein the network comprises a wide area network (“WAN”).

### Claim 15 (depends on 11)

The computer program product of claim 11, wherein the geospatial position detector is part of a Global Positioning System.

### Claim 16

A system comprising:
a processor;
a non-transitory computer readable storage media, the non-transitory computer readable storage media comprising executable code that when executed by the processor is configured to:
enable, at a device, a user to one or more of a network module of a network and a positioning module of the network for determining a valid region for a transaction;
in response to the user selecting the network module for determining the valid region for the transaction, the executable code that when executed by the processor is configured to:
receive authentication data from the user;
transmit the authentication data to the network module, wherein the network module:
requests a location of an electronic device that serviced transmission of the authentication data;
determines the valid region for the transaction by applying a distance tolerance to the location of the electronic device;
compares the valid region for the transaction to a location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction; and
in response to the user selecting the positioning module for determining the valid region for the transaction, the executable code that when executed by the processor is configured to:
receive a location request from the positioning module;
transmit a geospatial location request to a geospatial position detector;
receive a geospatial location of the device from the geospatial position detector;
transmit the geospatial location to the positioning module, wherein the positioning module:
determines the valid region for the transaction by applying the distance tolerance to the geospatial location;
compares the valid region for the transaction to the location of the transaction; and
provides approval for the transaction in response to the location of the transaction being within the valid region for the transaction.

### Claim 17 (depends on 16)

The system of claim 16, further comprising one of a mobile phone, a watch, a tablet computer, a laptop computer, and a desktop computer comprising the non-transitory computer readable store media.

### Claim 18 (depends on 16)

The system of claim 16, wherein the network comprises a cellular network.

### Claim 19 (depends on 16)

The system of claim 16, wherein the network comprises a wide area network (“WAN”).

### Claim 20 (depends on 16)

The system of claim 16, wherein the geospatial position detector is part of a Global Positioning System.
