Threat Mitigation Platform for Payment Fraud Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing payment systems struggle to detect and mitigate social engineering schemes, as there are few technological signals that can warn users of imminent illegitimate payments or provide relevant information about payees.

Innovation Solution

A threat mitigation platform that receives payment information from a payment product application, analyzes it using a threat analysis engine, generates a threat identifier, and queries a threat repository to communicate relevant information back to the payment product application, thereby preemptively warning users or blocking illegitimate payments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Difficulty of detecting and measuring

If payment systems implement traditional authorization methods, then payment processing speed is maintained, but detection capability for social engineering schemes remains insufficient

Engineering Contradiction:
Improvedetection capability for fraudulent paymentsVSAvoidsystem complexity
Core Design Contradiction:
Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The patent introduces a threat mitigation platform as an intermediary component between the payment product application and the payment network. This platform receives payment information, analyzes it against known threat indicators, and returns authorization decisions. The intermediary layer enables sophisticated fraud detection without requiring fundamental changes to the core payment processing architecture, thus improving detection capability while managing system complexity through modular design.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary analysis of payment information against a repository of known threat indicators before authorization is granted. By proactively checking payment details against stored threat patterns (such as social engineering schemes), the system prevents fraudulent transactions from reaching the payment network. This preliminary action enables detection and prevention of fraud while maintaining efficient payment processing through automated decision-making.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If payment systems provide real-time analysis of payment information, then user protection is improved, but processing time increases

Engineering Contradiction:
Improveuser protectionVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent replaces manual or mechanical payment authorization processes with automated computer-based analysis. The threat mitigation platform automatically compares payment information against stored threat indicators using digital pattern recognition and data processing. This substitution of mechanical systems with automated digital systems enables real-time analysis and decision-making, improving user protection while minimizing processing time through high-speed computational operations.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system maintains continuous operation by continuously monitoring payment information streams and continuously updating threat indicator databases. The automated analysis process operates without interruption, providing constant protection while maintaining fast processing speeds. The continuous nature of the analysis allows the system to respond immediately to payment transactions without delays associated with batch processing or manual review.

Inventive Principle:
Principle #20Continuity of useful action

3Loss of information

If payment systems provide detailed information about payees to users, then user awareness is improved, but information overload increases

Engineering Contradiction:
Improveuser awareness of payee informationVSAvoiduser interface simplicity
Core Design Contradiction:
Loss of informationVSEase of operation

Solution Approach 1:

The patent applies local quality by providing targeted information to users only when and where it is most relevant. Instead of displaying comprehensive payee information universally, the system selectively presents threat-related information (such as warnings about social engineering schemes) only when analysis identifies potential fraud. This localized information delivery improves user awareness of critical issues while avoiding information overload by suppressing irrelevant data during normal transactions.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system implements feedback mechanisms that provide users with specific information about payee legitimacy based on real-time analysis results. When the threat mitigation platform identifies potential fraud, it feeds back warning information to the user through the payment application interface. This targeted feedback approach ensures users receive critical information about payee reliability without being overwhelmed by unnecessary data, as the feedback is triggered only by detected threats rather than providing comprehensive payee details routinely.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20250029104A1Systems and methods for payment threat mitigation
Publication Date: 2025.01.23 JPMORGAN CHASE BANK NA
  • US20250029104A1 patent drawing
  • US20250029104A1 patent drawing
  • US20250029104A1 patent drawing

AI summary

In some aspects, the techniques described herein relate to a method including: receiving, at a threat mitigation platform, payment information from a payment product application; providing the payment information to a threat analysis engine of the threat mitigation platform as input to the threat analysis engine; generating, as output of the threat analysis engine and based on the payment information, a threat identifier; querying, by an authorization engine, a threat repository using the threat identifier as a lookup key; receiving, by the authorization engine and from the threat repository, information associated with the threat identifier; and communicating the information associated with the threat identifier to the payment product application.