Authorization Message Modification Using Session Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authorization processes are inefficient and resource-intensive, as they often require gathering and analyzing large amounts of data to assess risk, which can lead to inaccurate assessments and slow down transaction authorization.
Innovation Solution
The system modifies the authorization process by using a session identifier to retrieve a portion of pre-analyzed data from a supplemental database, performing a risk analysis, and modifying the authorization request message to include the data and risk analysis score, thereby enhancing the efficiency and accuracy of the authorization process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If large amounts of data are gathered and aggregated from multiple sources to determine risk assessment, then the accuracy of risk assessment is improved, but the resource consumption and time required for authorization increases
Solution Approach 1:
The patent segments the authorization process into two phases: pre-analysis (during authentication) where data is gathered and stored with session identifiers, and authorization phase where only relevant pre-analyzed data is retrieved. This segmentation allows comprehensive data collection without slowing down the actual authorization process, as the heavy lifting is done beforehand during authentication.
Solution Approach 2:
The system performs data gathering, aggregation, and initial risk analysis in advance during the authentication phase, storing results with session identifiers. When authorization is needed, the system only needs to retrieve and use the pre-analyzed data, significantly reducing the time and resources required for the actual authorization decision.
2Reliability
If comprehensive data is gathered and stored for all user interactions, then the reliability of risk assessment is improved, but the system resource utilization increases unnecessarily
Solution Approach 1:
The patent applies local quality by storing and retrieving only the specific portion of data relevant to each user session and authorization request. Instead of uniformly processing all user data, the system selectively accesses pre-analyzed data associated with the particular session identifier, optimizing resource utilization while maintaining assessment reliability.
Solution Approach 2:
The system extracts only the necessary pre-analyzed data associated with a specific session identifier from the stored data, rather than gathering and processing comprehensive data for each authorization request. This extraction approach maintains reliable risk assessment using only relevant information, reducing unnecessary resource consumption.
3Device complexity
If static data points and models are used by authentication services, then the simplicity of the system is maintained, but the adaptability to new fraud activity trends is reduced
Solution Approach 1:
The patent implements dynamic models that can adapt to new fraud patterns while maintaining system simplicity. The risk assessment models are updated with new data and patterns over time, allowing the system to evolve and respond to emerging fraud tactics without fundamentally changing the underlying authorization architecture or increasing operational complexity.
Data Source
AI summary
Techniques for authorizing a transaction or interaction of a user that is modified by authentication information for the same user are described herein. In embodiments, an authorization request message for a transaction and a session identifier may be received from a transport computer or a resource provider computer. A portion of pre-analyzed data about the user and the one or more interactions may be obtained, from a database, based on the session identifier. A risk analysis for the transaction using the portion of the pre-analyzed data may be performed to generate a value. The authorization request message may be modified to include the portion of the pre-analyzed data and the value. The modified authorization request message may be transmitted to an authorizing computer.