Patent ID: 8151327
Filing Date: 2012-04-03
Classification: G06Q,H04L

Abstract:
1. A method for detecting session tampering, the method comprising: establishing a Session ID for an online session between a first computer and a second computer over a network, wherein the second computer is a client computer; instructing the first computer to collect at least two device identifiers including IP address information for the second computer during the online session from the second computer for the Session ID, wherein the two device identifiers including IP address information are collected from the second computer during the online session when viewing two different pre-selected pages that are configured for a session tampering comparison, such that a first device identifier including IP address information is collected when viewing a first page and a second device identifier including IP address information is collected when viewing a second page; and comparing the two device identifiers including IP address information associated with the Session ID taken during the online session, and if the two device identifiers including IP address information are not identical, detecting session tampering to provide an alert to initiate responsive actions to reduce fraudulent transactions.