# US 2021/0241276 A1 · User authentication based on a user interaction associated with a transaction

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0241276 A1
- Document ID: US20210241276A1
- Status: Published application
- Kind: A1
- Application number: 16/777,174
- Filed: 2020-01-30
- Published: 2021-08-05
- Earliest claimed: 2020-01-30
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Michael MOSSOBA; Abdelkader M'Hamed BENKREIRA; Joshua EDWARDS
- Web page: https://patentgrep.com/patent/US20210241276A1

## CPC

- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR}
- G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit}
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G06Q 20/352: {Contactless payments by cards}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/40145: {Biometric identity checks}
- G07F 7/088: {the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

An example fraud analysis platform may receive timing information associated with a user interaction during a transaction, wherein the user interaction is associated with a user engaging in a transaction using a transaction account and a transaction device to access the transaction account. The fraud analysis platform may generate, based on the timing information, a transaction interaction signature associated with the user interaction. The fraud analysis platform may compare the transaction interaction signature to a reference signature associated with an authorized user of a transaction account. The fraud analysis platform may determine, based on the transaction interaction signature being associated with the reference signature, that the user interaction was performed by the authorized user of the transaction account. The fraud analysis platform may perform, based on determining that the user interaction was performed by the authorized user, an action associated with the transaction or transaction account.

## Claims

### Claim 1

A method, comprising:
receiving, by a device, timing information associated with a user interaction during a transaction,
wherein the user interaction is associated with a user engaging in a transaction using a transaction account and a transaction device to access the transaction account;
receiving, by the device, transaction device information associated with the transaction device;
generating, by the device and based on the timing information, a transaction interaction signature associated with the user interaction;
identifying, by the device and based on the transaction device information, a set of reference signatures in a reference signature data structure,
wherein the reference signature data structure includes a plurality of reference signatures associated with user interactions involving the transaction account,
wherein the set of reference signatures are reference signatures, of the plurality of reference signatures, that are mapped to the transaction device information;
determining, by the device, that the transaction interaction signature is associated with a reference signature of the set of reference signatures,
wherein the reference signature is associated with an authorized user of the transaction account;
determining, by the device and based on the transaction interaction signature being associated with the reference signature, that the user interaction was performed by the authorized user of the transaction account; and
performing, by the device and based on determining that the user interaction was performed by the authorized user, an action associated with the transaction or transaction account.

### Claim 2 (depends on 1)

The method of claim 1, wherein the timing information and the transaction device information are received from the transaction device.

### Claim 3 (depends on 1)

The method of claim 1, wherein the user interaction includes a swipe of a transaction card and the timing information includes:
a timestamp associated with a beginning of the swipe, and
a timestamp associated with an end of the swipe.

### Claim 4 (depends on 1)

The method of claim 1, wherein the user interaction includes providing a user input associated with providing a personal identification number for the transaction account and the timing information includes:
timestamps for individual actions involving an input component of the transaction device that is used to provide the personal identification number.

### Claim 5 (depends on 1)

The method of claim 1, wherein the user interaction includes providing a user input associated with providing a hand signature to authenticate the user and the timing information includes:
timestamps for individual actions involving an electronic signature pad of the transaction device that is used to provide the hand signature.

### Claim 6 (depends on 1)

The method of claim 1, wherein the authorized user is a first authorized user of a plurality of authorized users associated with the transaction account, and
wherein the reference signature is a first reference signature of a plurality of reference signatures that are associated with corresponding ones of the plurality of reference signatures.

### Claim 7 (depends on 1)

The method of claim 1, wherein performing the action comprises at least one of:
sending, to the transaction device, an authorization to authorize the transaction,
bypassing performance of an examination of a fraud analysis of the transaction, or
flagging, in a transaction log maintained for a fraud analysis of the transaction account, the transaction as being performed by the authorized user.

### Claim 8

A device, comprising:
one or more memories; and
one or more processors communicatively coupled to the one or more memories, configured to:
generate a reference signature based on a first user interaction performed by an authorized user of a transaction account,
wherein the first user interaction is performed by the authorized user during a first transaction, and
wherein the reference signature is generated based on first timing information associated with the first user interaction;
receive, from a transaction device, second timing information associated with a second user interaction during a second transaction,
wherein the second user interaction is associated with a user engaging in the second transaction using the transaction account and the transaction device;
generate, based on the second timing information, a transaction interaction signature associated with the second user interaction;
determine, based on a portion of the transaction interaction signature matching a threshold portion of the reference signature, that the second user interaction was performed by the authorized user; and
perform, based on determining that the second user interaction was performed by the authorized user, an action associated with the transaction or the transaction account.

### Claim 9 (depends on 8)

The device of claim 8, wherein the first user interaction is one of a plurality of reference user interactions and the first transaction is one of a plurality of reference transactions,
wherein the reference signature is generated based on reference timing information associated with the plurality of reference user interactions.

### Claim 10 (depends on 8)

The device of claim 8, wherein the reference signature is generated according to timestamps associated with first individual actions performed by the authorized user during the first user interaction,
wherein the timestamps of the first individual actions are included in the first timing information, and
wherein the transaction interaction signature is generated according to timestamps of the second timing information.

### Claim 11 (depends on 8)

The device of claim 8, wherein the authorized user is determined to be authorized to use the transaction account based on a verification process associated with the first transaction.

### Claim 12 (depends on 8)

The device of claim 8, wherein the reference signature is associated with at least one of:
a type of the first user interaction and the second user interaction,
a type of the transaction device, or
an entity associated with the transaction.

### Claim 13 (depends on 8)

The device of claim 8, wherein both the first user interaction and the second user interaction include at least one of:
the user swiping a transaction card through a card reader,
wherein the transaction card is associated with the transaction account;
the user entering a personal identification number via an input component; or
the user providing a signature via an electronic signature pad.

### Claim 14 (depends on 8)

The device of claim 8, wherein the one or more processors, when performing the action, are configured to:
send, to the transaction device, an authorization to authorize the transaction.

### Claim 15

A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors, cause the one or more processors to:
receive timing information associated with a user interaction during a transaction,
wherein the user interaction is associated with a user engaging in a transaction using a transaction account and a transaction device to access the transaction account, and
wherein the timing information includes information identifying at least one of:
timing associated with the user utilizing, via the transaction device, a transaction card of the transaction account,
timing associated with the user entering, via the transaction device, user authentication information associated with the transaction account, or
timing associated with providing a hand signature via the transaction device;
generate, based on the timing information, a transaction interaction signature associated with the user interaction;
compare the transaction interaction signature to a reference signature associated with an authorized user of a transaction account;
determine, based on the transaction interaction signature being associated with the reference signature, that the user interaction was performed by the authorized user of the transaction account; and
perform, based on determining that the user interaction was performed by the authorized user, an action associated with the transaction or transaction account.

### Claim 16 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the transaction interaction signature is generated based on a timestamp associated with a beginning of the user interaction and a timestamp associated with an end of the user interaction,
wherein the transaction interaction signature corresponds to a duration of the user interaction and the reference signature corresponds to a reference duration corresponding to an average duration of previous user interactions performed by the user during previous transactions,
wherein the transaction interaction signature is determined to be associated with the reference signature based on the duration of the user interaction being within a threshold range of the average duration.

### Claim 17 (depends on 16)

The non-transitory computer-readable medium of claim 16, wherein at least one of:
the timestamp of the beginning of the user interaction corresponds to a time at which a first bit of the transaction card is read by the transaction device and the timestamp of the end of the user interaction corresponds to a time at which a last bit of the transaction card is read by the transaction device,
the timestamp of the beginning of the user interaction corresponds to a time at which a first user input, associated with the user authentication information, is provided to the transaction device, and the timestamp of the end of the user interaction corresponds to a time at which a last user input, associated with the user authentication information, is provided to the transaction device, or
the timestamp of the beginning of the user interaction corresponds to a time at which is the hand signature is started using an electronic signature pad of the transaction device, and the timestamp of the end of the user interaction corresponds to a time at which the hand signature is completed via the electronic signature pad of the transaction device.

### Claim 18 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the timing information includes timestamps of individual actions of the user during the transaction, and
wherein the reference signature is generated based on timestamps of individual actions of the authorized user during a previous transaction involving the transaction account.

### Claim 19 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the reference signature is compared with the transaction interaction signature based on at least one of:
a type of the transaction device, or
an entity associated with the transaction.

### Claim 20 (depends on 15)

The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, that cause the one or more processors to perform the action, cause the one or more processors to at least one of:
send, to the transaction device, an authorization to authorize the transaction,
bypass performance of an examination of a fraud analysis of the transaction, or
flag, in a transaction log maintained for a fraud analysis of the transaction account, the transaction as being performed by the authorized user.