POS Terminal Risk Scoring via Mobile Location Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile payment systems face security weaknesses due to sophisticated fraudsters mimicking legitimate mobile terminals, leading to increased fraud rates, as reliance on mobile terminal identifiers and PINs or passwords is insufficient for preventing fraudulent transactions.
Innovation Solution
A mobile payment transaction processing system generates a POS terminal risk score based on the similarity and consistency of geographic locations reported by mobile terminals, allowing for enhanced security by controlling transaction processing based on this risk score, even when the terminal's location is not explicitly provided.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If mobile payment systems use traditional authentication methods (mobile terminal identifiers and PINs/passwords), then the ease of operation is improved, but the reliability deteriorates due to sophisticated fraudsters being able to mimic legitimate mobile terminals
Solution Approach 1:
The patent introduces geographic location data as an intermediary verification element. Instead of relying solely on mobile terminal identifiers and PINs, the system uses the geographic location of the mobile terminal as a mediating factor to verify the authenticity of the POS terminal. This intermediary layer helps distinguish legitimate transactions from fraudulent ones by checking whether the mobile terminal's location is consistent with the expected location of the POS terminal, thereby improving reliability while maintaining ease of operation.
2Reliability
If the system generates POS terminal risk scores based on geographic location analysis, then the reliability is improved by reducing fraudulent transactions, but the device complexity increases due to additional processing requirements
Solution Approach 1:
The patent changes the parameter used for verification from static mobile terminal identifiers to dynamic geographic location data. By incorporating location-based parameters into the risk scoring system, the patent enhances reliability without requiring complex hardware modifications. The system processes location data that is already available from mobile terminals and combines it with transaction information to generate risk scores, avoiding the need for additional complex devices or infrastructure.
3Reliability
If the system controls transaction processing based on POS terminal risk scores, then the reliability is improved by preventing fraudulent transactions, but the productivity decreases due to additional verification steps
Solution Approach 1:
The patent applies partial verification by not requiring all transactions to undergo the same level of scrutiny. Instead, the system generates risk scores for all transactions but only applies additional verification controls to transactions with high risk scores. This partial action approach maintains productivity for low-risk transactions while enhancing reliability for suspicious transactions, avoiding the need to slow down all transactions uniformly.
Data Source
AI summary
A method of performing operations on a processor of a mobile payment transaction processing system, includes receiving mobile payment messages from a point-of-sale (POS) terminal operated by a merchant performing mobile payment transactions with mobile terminals. Each of the mobile payment messages contains transaction information, a network address for the POS terminal, and a geographic location provided by the mobile terminal. A POS terminal risk score is generated based on similarity between the geographic locations provided by the mobile terminals contained in the mobile payment messages which also contain the network address for the POS terminal. Processing of another mobile payment message, which is received from the POS terminal performing another mobile payment transaction with another mobile terminal subsequent to the generating of the POS terminal risk score, is controlled based on the POS terminal risk score and transaction information contained in the another mobile payment message. Related computer nodes of mobile payment transaction processing systems are disclosed.


