Transaction chaining for fraud prevention

Abstract

Fraudulent transactions are detected in peer-to-peer payments without intermediaries. An audit trail is generated associated with the chain of transactions transferring digital currency from the initial sending wallet to the final receiving wallet, and is also associated with the token of the digital currency. Each token maintains an audit trail of the intermediate digital wallets it passed through in the transaction before being received by the final receiving wallet. A request is received to identify whether a first transaction is a fraudulent transaction. In response to the request, the first audit trail associated with the first token associated with the first transaction is retrieved. If, by analyzing the first audit trail, wallet cloning or value manipulation is detected within the first token associated with the first transaction, the first transaction is determined to be a fraudulent transaction.

Description

Technical Field

[0001] This application relates to the chaining of transactions for fraud prevention.

[0002] Cross - reference to related applications This application claims the benefit and priority of U.S. Provisional Patent Application No. 63 / 496,398, filed on April 15, 2023, the entire disclosure of which is hereby incorporated by reference in its entirety for all purposes.

Background Art

[0003] A user can send data from one computing device to another through multiple options. Many users upload data from one computing device to a server, which is done so that other users can download the data from the server to another computing device. Alternatively, the user can use a peer - to - peer data transmission method to enable a direct transfer of data from a sender to a recipient.

Summary of the Invention

[0004] In some examples, a system is provided for detecting fraudulent transactions in peer-to-peer payments without an intermediary. The system comprises a processor and a computer storage medium storing instructions, the instructions being a request causing the processor to identify whether a chain of transactions transferring digital currency of one or more digital currency tokens is a fraudulent transaction; the system being able to search for a first audit trail associated with a first digital currency token associated with a first transaction, wherein the first transaction is part of the chain of transactions and is associated with one of the one or more digital currency tokens; the system being able to detect wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail; and the system being able to designate the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation. Each sending wallet is configured to generate an audit trail associated with the transaction transferring digital currency from the sending wallet to the receiving wallet, and to cryptographically sign each of the one or more digital currency tokens before transfer to the receiving wallet by digitally attaching one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet.

[0005] Another example is a method provided which generates one or more audit trails associated with a transaction transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency is broken down into one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before the transfer to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet, and the first transaction is fraudulent A step of receiving a request to identify whether it is a transaction, wherein the first transaction is part of the transaction and is associated with one of the one or more digital currency tokens, and in response to receiving the request: a step of searching for a first audit trail associated with the first digital currency token associated with the first transaction; a step of detecting a wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail; and a step of designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation.

[0006] Further examples include a computer storage medium which stores computer executable instructions, and when such instructions are executed by a processor, the processor generates at least one audit trail associated with a chain of transactions transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency comprises one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before transfer to the receiving wallet, and each digital currency token is traced back to the digital wallets through which it was transacted before being received by the receiving wallet. The system performs the steps of: maintaining an audit trail; receiving a request to identify whether a first transaction is a fraudulent transaction, wherein the first transaction is part of the transaction and associated with one of the one or more digital currency tokens; and in response to receiving the request: searching for a first audit trail associated with the first digital currency token associated with the first transaction; detecting wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail; and designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation.

[0007] This summary is provided to introduce selected concepts, which will be further detailed in the detailed explanation. This summary is not intended to identify key or essential features of the claims, nor is it intended to be used as an aid in determining the claims. [Brief explanation of the drawing]

[0008] This disclosure will be better understood from the detailed description below with reference to the attached drawings, namely:

[0009] [Figure 1] This block diagram illustrates an exemplary system configured to detect fraudulent transactions in peer-to-peer payments. [Figure 2] This is a block diagram illustrating an exemplary system configured to generate audit trails. [Figure 3] This flowchart illustrates an exemplary method for transferring digital currency tokens to a receiving wallet. [Figure 4] This flowchart illustrates an exemplary method for detecting fraudulent transactions in peer-to-peer payments. [Figure 5] Figure 5A is a block diagram illustrating an exemplary token. Figure 5B is a block diagram illustrating an exemplary audit trail. Figure 5C is a block diagram illustrating an exemplary token containing multiple audit trails. [Figure 6] This diagram shows an exemplary computing device in a functional block diagram.

[0010] Corresponding reference numerals indicate corresponding parts throughout the various figures. Figures 1-6 show the system in schematic diagrams. The drawings may not be to the correct scale. Any figure can be combined into a single example or embodiment. [Modes for carrying out the invention]

[0011] If card-to-card payments can be made in the physical world without requiring a merchant's terminal, mobile phone, or internet connection, it could pave the way for digital payments in developing countries, potentially leading to their integration into financial systems and providing access to credit, microinvestment, and other services. In many countries, a significant portion of the population still uses cash, which is inconvenient for both locals and visitors. This type of cash cannot be spent online, limiting investment, imports and exports, and tourist spending in these countries.

[0012] Peer-to-peer transactions are difficult to trace, especially when the transaction amount associated with a transaction is broken down into multiple transaction amounts, and multiple transactions are associated with those multiple transaction amounts. For example, a fraudster can profit by manipulating the transaction value of one or more transactions within multiple transactions, or by cloning a fraudulent wallet as the receiving wallet. Simple ledgers are insufficient against such attacks, and therefore peer-to-peer payments are not secure.

[0013] In contrast, the aspects of this disclosure provide a system and method for detecting fraudulent transactions in peer-to-peer payments without intermediaries. This disclosure is configured to generate an audit trail associated with a chain of transactions transferring digital currency from an initial sending wallet to a final receiving wallet. The amount of digital currency is broken down into one or more digital currency tokens. For example, when a transaction is performed to transfer digital currency from one wallet to another, the amount is accompanied by digital currency tokens of a fixed face value. For example, a digital wallet can hold digital currency tokens of $1, $5, $10, $20, or any combination thereof, and can be deposited up to a defined limit for that wallet. For clarity, if the digital currency has a value of $35 and this is to be transferred from a sending wallet to a receiving wallet, the $35 can be broken down into five $1 tokens, one $20 token, and two $5 tokens.

[0014] When a transaction takes place between two digital wallets, the sending wallet digitally attaches elements of the receiving wallet's digital credentials to each digital currency token and cryptographically signs each token before transferring it to the receiving wallet. When the receiving wallet uses the received tokens, it performs the same process. That is, the receiving wallet becomes the sending wallet and sends the tokens to another wallet, which then becomes the receiving wallet. This process is repeated until the tokens arrive at the final receiving wallet. Through this mechanism, the tokens maintain an audit trail, which in some cases is a list of the digital wallets the tokens have passed through in relation to the transaction. Thus, each digital currency token maintains an audit trail of the digital wallets it has passed through (transferred to) in the transaction before being received by the receiving wallet.

[0015] This audit trail may be acquired by acquirers or their network operators for fraud detection purposes. Such audit trails can be used to detect and investigate wallet cloning or value manipulation (e.g., token value manipulation, token cloning, creation of counterfeit tokens). For example, a request is received (e.g., from an acquirer or a legally authorized law enforcement agency that owns a digital wallet) to identify whether a first transaction (e.g., a $1, $20, or $5 transaction) that is part of a transaction and associated with one of the digital currency tokens is a fraudulent transaction. In response to the request, the first audit trail associated with the first digital currency token associated with the first transaction is retrieved. The first audit trail is analyzed, and if wallet cloning or value manipulation is detected within the first digital currency token associated with the first transaction, the first transaction is determined to be a fraudulent transaction. For example, the first transaction is flagged, marked, or otherwise designated as fraudulent.

[0016] Analyzing the first audit trail involves one or more of the following: analyzing the manipulation of the token value within the first digital currency token (for example, if the token value of a $1 token is manipulated by a fraudster to $5, which is a token value greater than $1); analyzing whether the first digital currency token is a clone of the second digital currency token (for example, a clone of a $20 token may be created by a fraudster); and / or analyzing whether the first digital currency token is a counterfeit token (for example, a counterfeit token with a token value of $10 may be created by a fraudster).

[0017] This disclosure operates in an atypical manner, by maintaining at least an audit trail of the digital wallets through which a particular digital currency token has been transacted before it is received by the final receiving wallet. If necessary for fraud prevention or legal law enforcement investigation, the audit trail traces the transaction chain without the involvement of intermediaries (e.g., without third parties signing and / or validating the digital currency token). The audit trail is secured through encryption for privacy protection, but is available for fraud detection or legal law enforcement investigation purposes. Therefore, technical solutions are provided for any technical challenges.

[0018] Furthermore, maintaining audit trails makes disclosure more flexible and reduces the computational load on the device for identifying and / or preventing fraudulent transactions, thereby improving the device's performance. Enabling peer-to-peer payments without intermediaries eliminates the need for intermediary servers. Consequently, the computing system resources required to track transaction chains for fraud prevention or legal enforcement investigations are reduced. This enables post-mortem investigations and fraud detection, and allows truly peer-to-peer transactions over the internet or in the physical world using battery-powered credit / debit cards and low-power mobile phones.

[0019] In essence, this describes a computerized method for detecting fraudulent peer-to-peer payments without the need for intermediaries. An audit trail is generated associated with a chain of transactions transferring digital currency from the initial sending wallet to the final receiving wallet. The amount of digital currency consists of one or more digital currency tokens. The sending wallet digitally attaches elements of the receiving wallet's and sending wallet's digital credentials to each digital currency token and cryptographically signs each digital currency token before transfer to the receiving wallet. Each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet. A request is received to identify whether a first transaction, which is part of a transaction and associated with one of the digital currency tokens, is fraudulent or legitimate. In response to the request, the first audit trail associated with the first digital currency token associated with the first transaction is retrieved. For example, if wallet cloning or manipulation of a value is detected by analyzing the first audit trail within the first digital currency token associated with the first transaction, the first transaction is designated as a fraudulent transaction.

[0020] Figure 1 is a block diagram showing an exemplary system 100 configured to detect fraudulent transactions in peer-to-peer payments. In some examples, system 100 involves an initial sending wallet 102 transferring an amount of digital currency to a final receiving wallet 104. For example, a first token T1 (e.g., a $1 token) is sent from the first initial sending wallet 102 to the final receiving wallet 104 via an intermediate wallet 106, thereby generating an audit trail for token T1. In this case, the intermediate wallet 106 is first the receiving wallet to the first initial sending wallet 102, and later the sending wallet with respect to sending token T1 to the final receiving wallet 104. In this way, the audit trail grows as token T1 passes through several intermediate wallets. This is because each wallet adds its own unique audit trail to token T1 (for example, elements of the digital credentials of the sending wallet and / or receiving wallet, and the resulting audit trail, including token T1, is encrypted). Depending on the embodiment, transferring token T1 from the initial sending wallet 102 to the final receiving wallet 104 may involve more or fewer intermediate wallets (for example, intermediate wallet 106).

[0021] Similarly, tokens T2, T3, and T4 (for example, $20 tokens, $5 tokens, and another $5 tokens, respectively) are sent from the initial sending wallet 102 to the final receiving wallet 104 via the intermediate wallet 108, thereby generating an audit trail for tokens T2, T3, and T4. In this case, the intermediate wallet 108 first becomes the receiving wallet for the initial sending wallet 102, and then later becomes the sending wallet with respect to sending tokens T2, T3, and T4 to the final receiving wallet 104. Depending on the implementation, more or fewer intermediate wallets (e.g., intermediate wallet 108) may be involved in transferring tokens T2, T3, and T4 from the initial sending wallet 102 to the final receiving wallet 104. Furthermore, in at least one example, tokens (e.g., tokens T1-T4, etc.) are transferred from the initial sending wallet 102 to the final receiving wallet 104 via a different wallet (or a different number of intermediate wallets) than those shown in Figure 1.

[0022] Each digital currency token maintains an audit trail of the digital wallets through which the digital currency token has transacted prior to receipt by the ultimate receiving wallet 104. For example, as shown in FIG. 1, initially, the sending wallet 102 adds elements of the digital credentials of the intermediate wallet 106 to token T1 and also cryptographically signs token T1 prior to transfer to wallet 106. Next, wallet 106 acts as the sending wallet and adds elements of the digital credentials of the ultimate receiving wallet 104 to token T1 and also cryptographically signs token T1 prior to transfer to the ultimate receiving wallet 104. Those skilled in the art will understand that the token T1 shown in FIG. 1 is different because elements of the digital credentials of each receiving wallet (e.g., initially wallet 106 and later wallet 104) are appended thereto and cryptographically signed by each sending wallet (e.g., initially wallet 102 and later wallet 106).

[0023] In some embodiments, the audit trail is encrypted and attached to each digital currency token. Thus, the audit trail is stored by the digital wallet in encrypted form. The audit trail is encrypted using an encryption key issued by one or more issuer servers. In some examples, the audit trail is encrypted multiple times with multiple encryption keys. By using multiple encryption keys, it can be required that all holders of the audit trail decryption key agree on decrypting the audit trail. Non-participation by any of the holders of the audit trail decryption key will prevent the decryption and reading of the audit trail.

[0024] In some examples, one or more audit trails (i.e., token audit trail data) are stored multiple times with one or more digital currency tokens, and each copy of the one or more audit trails is encrypted using one or more audit trail encryption keys. This allows the audit trail to be decrypted and viewed by multiple holders of the corresponding decryption keys for the audit trail data copies. In some examples, a multi-party key management scheme can be applied to this model with one or more digital currency tokens, which involves encrypting a decryption key with the encryption keys of multiple parties who hold the audit trail decryption key. For example, each audit trail of a logged transaction is encrypted, and only authorized parties such as a payment processor, law enforcement, or a combination of both can access the audit trail.

[0025] In some embodiments, the initial sender wallet 102 is issued by an issuer server and can take the form of software on a computer, an app on a mobile phone, a credit card or debit card, or a service on the Internet or other network. Depending on the embodiment, the final recipient wallet 104 is associated with an acquirer (e.g., a seller) that receives digital cash from one or more digital wallets such as the initial sender wallet 102. The issuer server issues / receives digital credentials (e.g., an account number and / or a public or private cryptographic key) to / from the digital wallet. The issuer server receives the credentials if they are generated by the digital wallet, or issues the credentials for a digital wallet of a type that does not generate its own keys.

[0026] In some examples, a digital credential is a digital certificate signed with the issuer's private key and counter-signed by the digital wallet. The signed certificate or credential includes elements of the digital credential (e.g., account number, issuer ID, expiration date, transaction limits, and customization features such as total wallet limits, branding, and foreign exchange). The digital wallet is loaded with digital currency. Depending on the embodiment, the digital wallet may be loaded by one or more of the following: a bank, wallet issuer, payment gateway, virtual asset service provider (VASP), ATM cash machine, acquirer, merchant, and similar entities. A digital wallet may also be loaded with digital currency from one or more other digital wallets, which is a so-called "transaction," for example, a transaction to send digital currency from the initial sending wallet 102 to the final receiving wallet 104, and the digital currency will be loaded into wallet 104.

[0027] Furthermore, in some examples, the digital wallets of system 100 (e.g., digital wallets 102-108) are implemented on one or more computing devices (e.g., the computing devices in Figure 6), which are configured to communicate with each other via one or more communication networks (e.g., an intranet, the internet, a cellular network, another wireless network, another wired network, or similar).

[0028] Figure 2 is a block diagram showing an exemplary system 200 configured to generate one or more audit trails 212. In some examples, system 200 is used to implement a wallet (e.g., wallets 102-108) shown as system 100 in Figure 1. Furthermore, it should be understood that the computing device 202 generates audit trails to detect fraudulent transactions in peer-to-peer payments without an intermediary. The computing device 202 includes a processor 204 and memory 206. In some embodiments, memory 206 stores a digital wallet 208 and tokens 210 for transferring amounts of digital currency from the digital wallet 208 (e.g., wallets 102-108 in Figure 1) to another wallet (e.g., final receiving wallet 104). The digital wallet 208 affixes elements of the receiving wallet's electronic digital credential (EDC) to each of the tokens 210, thereby generating audit trails 212. For clarity, audit trail 212 is shown separately from token 210, but audit trail 212 is not stored separately from token 210, which mitigates the security risk of someone wiping audit trail 212 while redeeming funds. Depending on the implementation, EDC may include account number, issuer ID, expiration date, transaction limits, or customization features.

[0029] In some examples, audit trails 212 are stored as blockchains within memory 206. For example, audit trails 212 for T1-T4 (illustrated in Figure 1) are stored within different blockchains. These blockchains can be analyzed using machine learning to find evidence of fraudulent behavior. These analyses include scoring and other actionable metrics, enabling entities to meet their compliance requirements (e.g., anti-money laundering compliance). Entities that may implement this disclosure include, but are not limited to, issuer servers, acquirer servers, cryptocurrency exchanges / platforms, hedge funds, financial services, regulatory bodies (e.g., government agencies), intelligence agencies, lawyers, auditors, banks, brokers, and security researchers.

[0030] Storing audit trail 212 within the blockchain is technically beneficial because, as mentioned above, analysis of audit trail 212 makes it possible to determine whether a transaction or part of it was altered by the fraudulent behavior of a fraudster.

[0031] In some embodiments, the computing device 202 has a user interface (UI) 214 which prompts the user of the computing device 202 to input the amount of digital currency to be transferred from the initial sending wallet 102 to the final receiving wallet 104. In some examples, if part of the transaction is determined to be a fraudulent transaction, the UI 214 displays to the user that the transaction was modified by a fraudster before being transferred to the final receiving wallet 104 and therefore the transaction was rejected. In this way, fraudulent transactions can be prevented in real time by the embodiments of this disclosure.

[0032] Figure 3 is a flowchart illustrating an exemplary method 300 for transferring digital currency tokens from a sending wallet to a receiving wallet. Method 300 details the steps for generating an audit trail for the digital currency tokens at each sending wallet. Method 300 loops through each intermediate wallet to which the digital currency tokens are traded until they reach the final receiving wallet. In some examples, the method is performed by a system such as System 100 in Figure 1 or System 200 in Figure 2, or in other manner.

[0033] In S302, an audit trail is generated associated with the transaction transferring digital currency from the sending wallet to the receiving wallet. The amount of digital currency consists of one or more digital currency tokens. In S303, one or more elements of the sending wallet's digital credentials (DC) are attached to each of the one or more digital currency tokens. In S304, one or more elements of the receiving wallet's digital credentials are attached to each of the one or more digital currency tokens. In S306, each of the one or more digital currency tokens is cryptographically signed before being transferred to the receiving wallet. In S308, the sending wallet transfers the one or more digital currency tokens to the receiving wallet. For each intermediate wallet involved in transferring the digital currency tokens from the initial sending wallet to the final receiving wallet, the process loops back to S302. Each intermediate receiving wallet then becomes a sending wallet.

[0034] An audit trail is part of a digital currency token and is transferred along with it. The audit trail is not stored separately from the digital currency token, mitigating security risks such as someone wiping the audit trail and then redeeming funds or making false accusations against the issuer's customer support. In at least one embodiment, the audit trail may be stored separately, but the token has a hash and signature of the audit trail to verify its authenticity. In at least one embodiment, one-time tokens (OTPs) are stored within one or more audit trails for authenticity verification and to deter replay attacks.

[0035] In the optional S309, a digital receipt is received by the recipient.

[0036] Figure 4 is a flowchart illustrating an exemplary method 400 for detecting fraudulent transactions in peer-to-peer payments. In some examples, method 400 is performed by a system such as system 200 in Figure 2 or in other embodiments.

[0037] In S402, the request is received and it is determined whether the first transaction is a fraudulent transaction. In some examples, the first transaction is part of a chain of transactions initiated from the initial sending wallet 102 to the final receiving wallet 104. The first transaction is associated with one or more digital currency tokens. In response to the request, the first audit trail associated with the first digital currency token associated with the first transaction is searched in S404. In S406, the first audit trail is analyzed. Based on the analysis, S408 determines or detects whether wallet cloning or value manipulation has occurred within the first digital currency token associated with the first transaction. If wallet cloning or value manipulation is detected in S408, the first transaction is determined to be a fraudulent transaction in S412. If wallet cloning or value manipulation is not detected in S408, and if additional audit trails are determined to belong to the first digital currency token in S409, the process loops back to S404 to analyze the next audit trail. For example, if there are five audit trails, steps S404-S408 will be performed five times. Only a complete audit trail can identify a breeding ground for fraud. Depending on the embodiment, the contents of a fraud audit trail can simply consist of the wallet / card ID, amount, and transaction date and time. This audit chain can be linked with other audit chains in the system to detect money mules, wallet replicators, or other fraudsters or schemes.

[0038] If no further audit trails requiring analysis are found in S409, and no wallet cloning or value manipulation is detected, then in S410, the first transaction is determined to be a genuine transaction.

[0039] Figure 5A is a block diagram showing an exemplary token, such as a dual digital currency token 210. The digital currency token 210 includes an identifier 502 associated with the token that uniquely identifies the digital currency token 210 and the amount 504 represented by the digital currency token 210. There may be one or more audit trails for each token. For example, the digital currency token 210 may include both a fraud audit trail 506 and an investigative audit trail 508, which are generated as the digital currency token 210 passes through different wallets (e.g., wallets 102-108). The fraud audit trail 506 may include a trail or log of transactions, for example, a wallet ID, an amount, and optionally a date or one-time token. This audit trail may be encrypted with a symmetric or private key, or the symmetric key may be encrypted with the public key of the fraud auditor or wallet issuer. Combining this audit trail with the analysis of other audit trails exhibiting abnormal behavior regarding transaction number or fiat value can provide valuable and actionable insights into fraud without exposing the identity of wallet holders or other personal information. On the other hand, one or more investigative audit trails 508 may instead include other data that can be useful for investigation, such as the date and time of the transaction, and possibly travel rule information required for certain high-value wallets or cards. There may be another audit trail that includes travel rule information for sanctions against high-value wallets or other screening purposes. This reduces the computational resource requirements for detecting fraudulent transactions because computing devices such as device 618 only need to process the fraud audit trail 506 and / or investigative audit trail 508 instead of processing the entire audit trail P510 (illustrated in Figures 5B and 5C).Furthermore, this enables the detection of fraud that cannot be detected in peer-to-peer digital transaction systems, and allows for secure and controlled access to data such as the real names of wallet holders and other KYC (Know Your Customer) due diligence requirements using a key management mechanism, thereby enabling compliance with sanctions and other regional KYC requirements required by the Financial Action Task Force (FATF) Recommendation No. 15. This can serve as a basis for third-party reliance on other parties' KYC.

[0040] Figure 5B is a block diagram illustrating an exemplary audit trail P510. The audit trail P510 includes an identifier and signature 514 of wallet 512 (e.g., the initial sending wallet 102 and / or the final receiving wallet 104). In some versions, the signature 514 includes the hash of the audit trail P510 and / or the public key or other identifier of the initial sending wallet 102. In the example, the audit trail P510 includes audit trail P-1 516, which is an audit trail generated at a previous level. In another example, the audit trail P510 is generated by an intermediate wallet 106, while the audit trail P-1 516 is generated by the initial sending wallet 102 (illustrated in Figure 1). Depending on the embodiment, there may be more or fewer audit trails than those shown in Figure 5B without departing from the aspects of this disclosure.

[0041] Figure 5C is a block diagram showing an exemplary token that includes multiple audit trails. In some embodiments, the digital currency token 210 includes an audit trail P510, which itself includes an audit trail P-1 516. Similarly, audit trail P-1 516 includes an audit trail P-2 518, which itself further includes an audit trail P-3 520. In this way, the audit trails are nested, and the path traversed by the token 210 is known from audit trail P510, which itself includes the path the token took from the initial wallet (e.g., the initial sending wallet 102) to the final sending wallet (e.g., the intermediate wallet 106). Depending on the embodiment, without departing from the aspects of this disclosure, the nested structure may involve more or fewer audit trails than shown in Figure 5C. In at least one example, the contents of these audit trails are encrypted by one or more key controllers, authorized audit decryptors, and / or auditers.

[0042] Exemplary operating environment This disclosure can be used in conjunction with a computing device according to the embodiment shown in the functional block diagram 600 of Figure 6. For example, according to one or more embodiments of this specification, components of the computing device 618 are implemented as part of an electronic device. The computing device 618 comprises one or more processors 619, which may be microprocessors, controllers, or any other type of processor suitable for processing computer executable instructions, thereby controlling the operation of the electronic device. Alternatively or additionally, the processors 619 may be any technology capable of executing logic or instructions, such as a hardcoded machine. In some examples, platform software comprising an operating system 620 or any other suitable platform software is provided on the device 618, thereby enabling application software 621 to run on the device. In some examples, as described above, detection of fraudulent transactions in peer-to-peer payments without intermediaries is achieved by software, hardware, and / or firmware.

[0043] In some examples, computer-executable instructions are provided using any computer-readable medium accessible by the computing device 618. Computer-readable mediums may include, for example, computer storage media such as memory 622 and communication media. Computer storage media such as memory 622 may include volatile and non-volatile, removable and non-removable media implemented in any method or technique for storing computer-readable instructions, data structures, program modules, or similar information. Computer storage media include, but are not limited to, random-access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), persistent memory, phase-change memory, flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital multipurpose disc (DVD), or other optical storage, magnetic cassettes, magnetic tapes, magnetic disk storage, shingled disk storage, or other magnetic storage devices, or other non-transmission media usable for storing information for access by the computing device. In contrast, communication media can be embodied as computer-readable instructions, data structures, program modules, or similar entities, and can be provided, for example, within modulated data signals by carrier waves or other transmission principles. As defined in this disclosure, computer storage media do not include communication media. Therefore, computer storage media do not include propagated signals. Propagated signals themselves are not examples of computer storage media. Although computer storage media (memory 622) are illustrated within computing device 618, those skilled in the art will understand that in some examples, storage may be distributed or located remotely and accessible via a network or other communication link (for example, using communication interface 623).

[0044] Furthermore, in some examples, the computing device 618 includes an input / output (I / O) controller 624, which is configured to output information to one or more output devices 625 (e.g., a display or speaker), which are either separate or an integrated part of the electronic device. Additionally or alternatively, the I / O controller 624 is configured to receive and process input from one or more input devices 626, such as a keyboard, microphone, or touchpad. In one example, an output device 625 also functions as an input device. An example of such a device would be a touch-sensitive display. The I / O controller 624 can also output data to devices other than output devices (e.g., a locally connected printer). In some examples, the user provides input to the input device 626 or receives output from the output device 625.

[0045] The functions described can be performed, at least in part, by one or more hardware logic components. According to one embodiment, the computing device 618 is configured to perform the described steps and functions when program code is executed by the processor 619. Alternatively or additionally, the functions described can be performed, at least in part, by one or more hardware logic components. For example, non-limiting examples of hardware logic components that can be used include field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), specific program standard products (ASSPs), system-on-chip systems (SoCs), composite programmable logic devices (CPLDs), and graphics processing units (GPUs).

[0046] At least some of the functions of the various elements in the diagram can be performed by other elements in the diagram, or by entities not shown (e.g., processors, web services, servers, application programs, computing devices, or similar entities).

[0047] Although described in relation to exemplary computing system environments, the examples of disclosure can be implemented with many other general-purpose or specialized computing system environments, configurations, or devices.

[0048] Examples of well-known computing systems, environments, and / or configurations suitable for use with respect to the aspects of disclosure include, but are not limited to, portable or mobile computing devices (e.g., smartphones), personal computers, server computers, handheld (e.g., tablets) or laptop devices, multiprocessor systems, game consoles or controllers, microprocessor-based systems, set-top boxes, programmable consumer electronics, mobile phones, mobile computing and / or communication devices in wearable or accessory form factors (e.g., watches, glasses, headsets, or earphones), network PCs, minicomputers, mainframe computers, distributed computing environments including any of the systems or devices described above, and similar devices. Generally, this disclosure can be operated with any device having processing power capable of executing the instructions described. Such a system or device may receive input from a user in any manner, such as through input devices such as keyboards or pointing devices, gesture input, proximity input (e.g., hovering), and / or voice input.

[0049] Examples of this disclosure can be described in the general context of computer executable instructions, such as program modules, which are executed by one or more computers or other devices in software, firmware, hardware, or a combination thereof. Computer executable instructions can be organized into one or more computer executable components or modules. Generally, program modules include, but are not limited to, routines, program objects, components, and data structures that perform a particular task or implement a particular abstract data type. The embodiments of this disclosure can be implemented by any number and any organization of such components or modules. For example, the embodiments of this disclosure are not limited to the specific computer executable instructions or components or modules illustrated and described. Other examples of this disclosure include different computer executable instructions or components having more or less functionality than those illustrated and described.

[0050] In examples involving a general-purpose computer, the general-purpose computer will be transformed into a purpose-specific computing device when configured to execute the instructions described herein according to the embodiments of this disclosure.

[0051] An exemplary system comprises: a processor and a computer storage medium storing instructions, and when an instruction is executed by the processor: receiving a request to identify whether a chain of transactions transferring digital currency from an initial sending wallet to a final receiving wallet is a fraudulent transaction, wherein the amount of digital currency comprises one or more digital currency tokens; searching for a first audit trail associated with a first digital currency token associated with a first transaction, wherein the first transaction is part of the transaction transferring digital currency from the initial sending wallet to the final receiving wallet and is associated with one of the one or more digital currency tokens; and analyzing at least the first audit trail to determine which is associated with the first transaction. The steps include: detecting wallet cloning or value manipulation within the first digital currency token; and, based on the detection of the wallet cloning or value manipulation, designating the first transaction as the fraudulent transaction, wherein each sending wallet is configured to: generate an audit trail associated with the transaction transferring digital currency from the sending wallet to the receiving wallet; digitally attach one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens; cryptographically sign each of the one or more digital currency tokens before transfer to the receiving wallet; and each digital currency token maintains an audit trail of the digital wallets through which the digital currency token has transacted prior to receipt by the receiving wallet; and a computer storage medium to perform these steps.

[0052] An exemplary computerized method includes the steps of: generating one or more audit trails associated with a transaction transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency is broken down into one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before the transfer to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet; and the first transaction is deemed fraudulent. A step of receiving a request to identify whether a first transaction is a transaction, wherein the first transaction is part of the transaction and is associated with one of the one or more digital currency tokens, and in response to receiving the request: a step of searching for a first audit trail associated with the first digital currency token associated with the first transaction; a step of detecting a wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail; and a step of designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation.

[0053] With respect to one or more computer storage media, computer executable instructions are stored therein, and when the instructions are executed by a processor, the processor generates at least one audit trail associated with a transaction transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency comprises one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before the transfer to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet. The system performs the steps of: receiving a request to identify whether a first transaction is a fraudulent transaction, wherein the first transaction is part of the transaction and associated with one of the one or more digital currency tokens; and in response to receiving the request: searching for a first audit trail associated with the first digital currency token associated with the first transaction; detecting wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail; and designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation.

[0054] Alternatively, or in addition to the other examples provided, the examples may include any combination of the following: - Analyzing the first audit trail involves one or more of the following: analyzing the manipulation of token values ​​within the first digital currency token, analyzing whether the first digital currency token is a clone of the second digital currency token, and analyzing whether the first digital currency token is a counterfeit token. - The one or more audit trails mentioned above are encrypted and attached to their respective digital currency tokens. - The encryption keys used to encrypt the one or more audit trails are issued by one or more issuer servers. - The one or more audit trails are encrypted multiple times using multiple encryption keys. - The decryption key for decrypting one or more of the aforementioned encrypted audit trails is encrypted using the encryption keys of multiple parties who possess the audit trail decryption keys. - The one or more audit trails are stored multiple times along with the one or more digital currency tokens, and each copy of the one or more audit trails is encrypted with one or more audit trail encryption keys. - The aforementioned one or more audit trails are stored in memory as a blockchain.

[0055] Any range or value of the apparatus described herein can be extended or modified without loss of the desired effect, as will be apparent to those skilled in the art.

[0056] Examples were given with reference to data collected and / or monitored from users (e.g., user identity data related to profiles). In some examples, users are notified about data collection (e.g., through a dialog box or preference settings), and are given the opportunity to give or refuse consent to monitoring and / or collection. Consent may take the form of an opt-in or opt-out consent.

[0057] While the subject matter is described in language specific to structural features and / or methodological operations, it should be understood that the subject matter as defined in the attached claims is not necessarily limited to the specific features or operations described above. Rather, the specific features and operations described above are disclosed as exemplary forms that implement the claims.

[0058] It should be understood that the above-mentioned advantages and merits may relate to one or more embodiments. Embodiments are not limited to solving any or all of the above-mentioned problems, nor are they limited to possessing any or all of the above-mentioned advantages and merits. Also, it should be understood that even when the indefinite article "an" is used with an item, it refers to one or more such items.

[0059] Embodiments illustrated and described herein, as well as embodiments not specifically described herein but belonging to aspects of the claims, constitute exemplary means for detecting fraudulent transactions in peer-to-peer payments without the need for intermediaries.

[0060] In this specification, the term "to be equipped" means to include a subsequent feature or action, but does not negate the presence of one or more additional features or actions.

[0061] In some examples, the illustrated steps may be implemented as software instructions encoded on a computer-readable medium, as hardware programmed or designed to perform the steps, or both. For example, embodiments of this disclosure are implemented as a system-on-a-chip or as other circuits comprising a plurality of interconnected conductive elements.

[0062] The order in which the steps are performed or carried out in the examples of disclosures illustrated and described herein is not mandatory unless otherwise specified. That is, unless otherwise specified, the steps can be performed in any order, and the examples of disclosures may include more or fewer steps than those disclosed herein. For example, performing or carrying out certain steps before, at the same time as, or after other steps is intended to be within the scope of the embodiments of this disclosure.

[0063] When describing elements or examples of aspects of this disclosure, the articles “a,” “an,” “the,” and “said” mean that there are one or more of them. The terms “comprising,” “including,” and “having” are intended to include and imply that there may be additional elements other than those listed. The term “exemplary” means “an example of ~.” The expression “one or more of the following: A, B, and C” means “at least one of A and / or at least one of B and / or at least one of C.”

[0064] The aspects of this disclosure are described in detail, and it is clear that modifications and variations may be made without departing from the scope of the aspects of this disclosure as defined in the attached claims. Since various modifications can be made to the above structures, products, and methods without departing from the scope of this disclosure, all matters included in the above description and shown in the attached drawings are intended to be construed as illustrative rather than restrictive.

Claims

1. A system for detecting fraudulent transactions in peer-to-peer payments without intermediaries, wherein the system: Processor and; It comprises a computer storage medium that stores instructions, When the instruction is executed by the processor: Steps include receiving a request to identify whether a chain of transactions transferring digital currency from an initial sending wallet to a final receiving wallet is a fraudulent transaction, wherein the amount of digital currency comprises one or more digital currency tokens, A step of searching for a first audit trail associated with a first digital currency token associated with a first transaction, wherein the first transaction is part of a chain of transactions and is associated with one or more digital currency tokens. The steps include detecting wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail, The steps include: designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation; The processor is instructed to perform the following: Each sending wallet, starting with the aforementioned initial sending wallet, is: An audit trail is generated for the transaction that transfers digital currency from the sending wallet to the receiving wallet, One or more elements of the digital credentials of the receiving wallet are digitally attached to each of the one or more digital currency tokens. Each of the one or more digital currency tokens is configured to be cryptographically signed before being transferred to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has passed through in the transaction before being received by the receiving wallet. system.

2. The system according to claim 1, wherein analyzing the first audit trail involves one or more of the following: analyzing the manipulation of the token value within the first digital currency token; analyzing whether the first digital currency token is a clone of the second digital currency token; and analyzing whether the first digital currency token is a counterfeit token.

3. The system according to claim 1, wherein the one or more audit trails are encrypted and attached to each digital currency token.

4. The system according to claim 3, wherein the encryption key used to encrypt one or more audit trails is issued by one or more issuer servers.

5. The system according to claim 3, wherein one or more audit trails are encrypted multiple times using multiple encryption keys.

6. The system according to claim 3, wherein the decryption key for decrypting one or more encrypted audit trails is encrypted using the encryption keys of multiple persons who possess the audit trail decryption keys.

7. The system according to claim 1, wherein the one or more audit trails are stored multiple times together with the one or more digital currency tokens, and each copy of the one or more audit trails is encrypted with one or more audit trail encryption keys.

8. A system according to claim 1, wherein the one or more audit trails are stored on a blockchain.

9. A computerization method, A step of generating one or more audit trails associated with a chain of transactions transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency is broken down into one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before the transfer to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet. The process includes receiving a request to identify whether a first transaction is a fraudulent transaction, wherein the first transaction is part of the transaction and is associated with one of the one or more digital currency tokens, In response to receiving the aforementioned request: A step of searching for a first audit trail associated with a first digital currency token associated with the first transaction, The steps include detecting wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail, The steps include: designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation; This will be done. Computerization methods.

10. A computerized method according to claim 9, wherein analyzing the first audit trail comprises one or more of the following: analyzing the manipulation of the token value in the first digital currency token; analyzing whether the first digital currency token is a clone of the second digital currency token; and analyzing whether the first digital currency token is a counterfeit token.

11. Computerization method according to claim 9, wherein the one or more audit trails are encrypted and attached to each digital currency token.

12. A computerization method according to claim 11, wherein the encryption key used to encrypt one or more audit trails is issued by one or more issuer servers.

13. The computerization method according to claim 11, wherein one or more audit trails are encrypted multiple times using multiple encryption keys.

14. The computerization method according to claim 11, wherein the decryption key for decrypting one or more encrypted audit trails is encrypted using the encryption keys of multiple persons who possess the audit trail decryption key.

15. A computerization method according to claim 9, wherein the one or more audit trails are stored multiple times together with the one or more digital currency tokens, and each copy of the one or more audit trails is encrypted with one or more audit trail encryption keys.

16. A computerization method according to claim 9, wherein the one or more audit trails are stored on a blockchain.

17. A computer storage medium in which computer executable instructions are stored, wherein when an instruction is executed by a processor, the processor has at least: A step of generating one or more audit trails associated with a chain of transactions transferring digital currency from a sending wallet to a receiving wallet, wherein the amount of digital currency comprises one or more digital currency tokens, the sending wallet digitally attaches one or more elements of the receiving wallet's digital credentials to each of the one or more digital currency tokens, and cryptographically signs each of the one or more digital currency tokens before the transfer to the receiving wallet, and each digital currency token maintains an audit trail of the digital wallets it has traversed in the transaction before being received by the receiving wallet. The steps include receiving a request to identify whether a first transaction is a fraudulent transaction, wherein the first transaction is part of the transaction and is associated with one of the one or more digital currency tokens, In response to receiving the aforementioned request: A step of searching for a first audit trail associated with a first digital currency token associated with the first transaction, The steps include detecting wallet cloning or value manipulation within the first digital currency token associated with the first transaction by analyzing at least the first audit trail, The steps include: designating the first transaction as the fraudulent transaction based on the detection of the wallet cloning or value manipulation; To have them do it, Computer storage medium.

18. The computer storage medium according to claim 17, wherein analyzing the first audit trail comprises one or more of the following: analyzing token value manipulation within the first digital currency token, analyzing whether the first digital currency token is a clone of the second digital currency token, and analyzing whether the first digital currency token is a counterfeit token.

19. A computer storage medium according to claim 17, wherein the one or more audit trails are encrypted and attached to each digital currency token.

20. A computer storage medium according to claim 17, wherein the one or more audit trails are stored on a blockchain.

Images