Patent ID: 7580891
Filing Date: 2009-08-25
Classification: G06Q,G07F,G07G

Abstract:
1. A method for of identifying merchants at which payment accounts have been compromised on a financial transaction network, the merchants having associated merchant accounts stored in at least a first database on said financial transaction network, the method comprising: determining a first number of pre-fraud payment accounts used to conduct one or more transactions with at least a first merchant account using a processor; determining whether the first number is no less than a first threshold number; determining a second number of pre-fraud payment accounts used to conduct one or more pre-fraud transactions with the first merchant account during a first time period, the one or more pre-fraud transactions having been conducted on one or more dates using a processor; determining a third number of payment accounts used to conduct one or more transactions with the first merchant account on the one or more dates using a processor; determining whether a first fraction is no less than a threshold fraction, the first fraction comprising the second number divided by the third number; a conditional step of selecting the first merchant account for inclusion in a first set of suspect merchant accounts if a plurality of conditions are satisfied, the plurality of conditions comprising the following conditions: (a) the first number is no less than the first threshold number, and (b) the first fraction is no less than the threshold fraction; and identifying merchants having associated accounts in the first set of suspect merchant accounts as likely merchants at which payment accounts have been compromised; selecting a subset of suspect merchant accounts from one or more sets of suspect merchant accounts, the one or more sets of suspect merchant accounts including the first set of suspect merchant accounts, each merchant account of the subset having associated therewith a number of pre-fraud payment accounts used to conduct one or more transactions with only the merchant account of the subset, the number of pre-fraud payment accounts used to conduct one or more transactions with only the merchant account of the subset being no less than a second threshold number; selecting a plurality of pre-fraud payment accounts, each payment account of the plurality of pre-fraud payment accounts having been used to conduct one or more transactions with at least one merchant account of the subset; performing ,using a processor, the following steps for each payment account of the plurality of pre-fraud payment accounts: including, in a set of suspect merchant accounts associated with the payment account, all merchant accounts of the one or more sets of suspect merchant accounts that were used to conduct one or more transactions with the payment account during at least one time period, the at least one time period including the first time period, for each merchant account of the set of suspect merchant accounts associated with the payment account, computing a maximum implication strength, using a processor, of a set of one or more implication strengths, each implication strength of the set of one or more implication strengths comprising  wherein pfrd equals a number of pre-fraud payment accounts used to conduct, on a set of one or more dates associated with the implication strength, one or more transactions with the merchant account of the set of merchant accounts associated with the payment account, wherein accts equals a number of payment accounts used to conduct, on the set of one or more dates associated with the implication strength, one or more transactions with the merchant account of the set of suspect merchant accounts associated with the each payment account, and identifying a most strongly implicated merchant account for the payment account, the most strongly implicated merchant account having a maximum implication strength which is at least as large as the maximum implication strengths of all other merchant accounts of the set of suspect merchant accounts associated with the payment account; and performing, using a processor, the following steps for each merchant account of the subset: determining a number of payment accounts of the plurality of pre-fraud payment accounts for which the merchant account of the subset has been identified as the most strongly implicated merchant account, and including the merchant account of the subset in a refined set of suspect merchant accounts if one or more conditions are satisfied, the one or more conditions comprising at least one of the following conditions: (a) the number of payment accounts for which the merchant account has been identified as the most strongly implicated merchant account is no less than a third threshold number, (b) the number of payment accounts for which the merchant account has been identified as the most strongly implicated merchant account is no less than a selected fraction of accts, and (c) the number of payment accounts for which the merchant account has been identified as the most strongly implicated merchant account is no less than a selected fraction of pfrd.