Patent ID: 11972427
Assignee: SUBWAY IP LLC
Field: IT methods for management (Electrical engineering)
Classification: CPC G | IPC G

Claim 6:
7. A system for deterring unauthorized access to an account associated with a restaurant online ordering platform configured to receive payment for food ordered from the restaurant in the form of one or more of gift certificates issued by the restaurant or loyalty points issued by the restaurant, comprising:
a server hosting an online ordering application that enables authorized users to place an order of food from the restaurant and pay for the order at the restaurant using one or more of gift certificates issued by the restaurant or loyalty points issued by the restaurant;
a plurality of account holder computers capable of accessing the server via a connection over the Internet;
an account database accessible by the server, the account database having a plurality of records each having a username associated therewith;
the online ordering application executing on the server to perform a plurality of actions on the server, the plurality of actions comprising:
receiving a user login request from one of the plurality of account holder computers;
identifying a username associated with the received user login request, a time associated with the received user login request, an internet protocol (IP) address associated with the received user login request, and a risk score associated with the received login request;
determining a number of previous login requests received from the identified IP address during a duration of time being five minutes or less (TR) immediately before the identified time, each of the received login requests having a unique username being different than identified username, determining whether the risk score associated with the received request is within an acceptable risk score range;
disabling access to the account associated with the identified username for a duration of time TB being at least fifteen minutes and less than sixty minutes when one or more of: the determined number of received login requests is above a request threshold B being two or less and the risk score is not within the acceptable risk score range.