Neural network learning for the prevention of false positive authorizations

Disclosed herein are systems and methods that identify and improve upon false positive scores. Some embodiments may include artificial neural network learning methods that utilize data input from users as well as enterprise machines. Information, such as transaction timing, prior transaction data, and demographics, may be taken as inputs to the neural network processing. The processing may be done on one or more neural network computers or nodes.

TECHNICAL FIELD

This application relates generally information systems and specifically to dynamically generating and manipulating datasets associated with analytics processing.

BACKGROUND

Artificial computer neural networks are able to learn from themselves by repeatedly running a set of instructions or algorithm, and learning each time from the previous results. Computer networks which are used by financial institutions can have and maintain these elaborate artificial neural network schemes in order to track billions of transactions every hour. These learning systems may improve upon themselves in order to protect identities as well as preserve truthful transactions.

Enterprise systems frequently utilize rules and rules engines to determine which transactions to allow. For example, a consumer using a payment card may attempt to make a legitimate transaction in person or online. An attempt may similarly be made in a fraudulent manner with a user using an illegitimate or stolen payment card. Enterprise and banking systems may devise their rules such as to prevent these transactions. In order to prevent these transactions, however, a system must be implemented to detect who and when one may use an authorized payment method. Laurene Fausett's Fundamentals of Neural Networks Architectures, Algorithms and Applications, published by Pearson Education in 2004, and incorporated by reference, includes examples of systems known in the art.

In some systems which are overly cautious, one out of ten detected transactions may be fraud while the other nine are valid transactions. This system may frustrate users with repeated authorization requests or denied transactions. There is a need, therefore, for better identification of false positives, as well as improved rules systems' mechanisms.

SUMMARY

Disclosed herein are systems and methods capable of addressing the above-described shortcomings and may also provide any number of additional or alternative benefits and advantages. For example, the embodiments described herein may include an Artificial Neural Network (ANN) for the prevention of false positives, a situation where a transaction has been determined to be a fraud and so the transaction is declined, but the transaction is not in fact fraudulent. The ANN may receive information at an artificial neural network node from a user terminal when a transaction is declined regarding the user's account, retrieve information from an enterprise terminal regarding the user's financial profile, perform neural network learning based on information associated for the user including calculating a false positive score, and submit the false positive score to the enterprise terminal.

The systems and methods described herein attempt to better determine when a false decline transaction occurs. When a transaction is declined, the systems and methods identify a similar transaction on another card that may have been initiated by the same person. The determinations can use the following data: transactions at same merchant after the decline, a time difference between the decline and the subsequent transactions, an amount difference between the decline transaction and subsequent transactions, a channel of declined transaction and subsequent transactions, demographic information of the users associated with the card numbers making subsequent transactions and the users associated with the card number of the declined transaction (e.g., age, income, number of children, gender), and a comparison of the profile of the card that made the declined transaction and the cards making the subsequent transaction.

The method may include the steps of matching authorization data and clearing data, analyzing declined and subsequent approved transactions, receiving input about false positive data from an issuer, using an output of the analysis of declined and subsequent approved transactions as an input to a neural network, and generating a false positive decline score.

In one embodiment, a method of machine learning in an ANN for the prevention of false positives, the method comprises, upon receiving an indication that a transaction has been declined, receiving, by an ANN server, demographic information from a terminal about a user associated with the user account in the transaction; retrieving, by the ANN server, information from an enterprise terminal regarding the user's profile, wherein the information represents transaction history of the user; updating, by the ANN server, values on each neural network node based on demographic information from the user terminal and transaction history information from the enterprise terminal; upon updating the values on the neural network node, generating, by the ANN server, a false positive score based on a weighting of the values on each neural network node; and transmitting, by the ANN server, the false positive score to the enterprise terminal configured to display a graphical user interface populated with the false positive score.

In another embodiment, a server configured for machine learning in an ANN for the prevention of false positives, the server comprises a memory; and a processor configured to: upon receiving an indication that a transaction has been declined, receive demographic information from a terminal about a user associated with the user account in the transaction; retrieve information from an enterprise terminal regarding the user's profile, wherein the information represents transaction history of the user; update values on each neural network node based on demographic information from the user terminal and transaction history information from the enterprise terminal; upon updating the values on the neural network node, generate a false positive score based on a weighting of the values on each neural network node; and transmit the false positive score to the enterprise terminal configured to display a graphical user interface populated with the false positive score.

DETAILED DESCRIPTION

Reference will now be made to the exemplary embodiments illustrated in the drawings, and specific language will be used here to describe the same. It will nevertheless be understood that no limitation of the scope of the invention is thereby intended. Alterations and further modifications of the inventive features illustrated here, and additional applications of the principles of the inventions as illustrated here, which would occur to a person skilled in the relevant art and having possession of this disclosure, are to be considered within the scope of the invention.

The embodiments described herein provide systems and methods for creating dynamic rules systems which use neural networks to improve and identify false positives more accurately.

System Diagram

FIG. 1illustrates components of an exemplary system100, according to an exemplary embodiment. Exemplary system100may include user point of sale (POS) terminals102,104, merchant devices110, and Artificial Neural Network (ANN)120.

POS terminals102,104may be a physical location for use in-person or an online terminal or vendor. POS terminals102,104may be a computer, a laptop, a contact or contactless payment card reader, a web server, an automated teller machine (ATM), or the like. POS terminals102,104may communicate various types of data inputs and outputs with nodes of the ANN120. The inputs and outputs might include transaction data, payment data, entity data, database records, and/or instructions and parameters for generating datasets and conducting analytics.

In operation, the ANN120may receive payment and/or other data from POS terminals102,104after consumers purchase products or services with a payment instrument (e.g., credit card, debit card, prepaid card) and that payment method is rejected as fraudulent.

ANN120may include neural network nodes122-128. ANN120may be at least one server that comprises nodes122-128, where nodes122-128are applications or modules that are executed by one of the ANN servers. When referring to ANN120herein, the example embodiment is configured as an ANN server that executes each of the nodes122-128, though it is intended that any number of servers or nodes can be utilized. ANN120is illustrated with nodes122-128, though any number and configuration of neural network nodes may be utilized. Nodes122-128may comprise one or more separate applications or modules executed on one or more terminals or network devices. Alternatively, a single network device, e.g., an ANN server, may comprise all nodes122-128. In one example, nodes122-128may each represent a separate instantiation of a virtual machine on the same server. In some instances, nodes122-128represent what is commonly referred to as hidden nodes in a neural network, where POS terminals102,104provide input, and outputs are provided to merchant devices110. In another example, nodes122-128are hidden nodes while receiving inputs from POS terminals102,104and merchant devices110, and outputting to POS terminals102,104.

ANN120may include any known or anticipated neural network topology or connections. In this example, ANN120is illustrated as a ring topology. In the illustrated ring topology, messages may be passed from a node to an adjacent node around the ring. In this ring network, each node may contain some memory (e.g., data values) that contributes to the neural network. Each node may store or maintain certain information that is different from other nodes. In this way, each node may contribute to the neural network in a comprehensive and machine learning methodology. Additional examples of node topologies include mesh, star, fully connected, line, tree, etc.

The ANN can learn from the updated variables and data stored in and shared by each node. In one example, a user may attempt an online transaction using POS terminal104. A payment transaction server, e.g., merchant device110, rejects the transaction as being fraudulent. The rejection of the transaction causes data to be transmitted to ANN120from POS104. The data may include a kind of terminal used, the time of the transaction, and the amount of the transaction. At the same time, ANN120may receive information from merchant devices110, such as profile information of the user, which may be stored on merchant devices110. Profile information may include usage data and habits of a user, such as frequency of payment card use, types of payment card use (e.g., online, brick-and-mortar store use), types of purchases made, and spending habits of the user. Using these inputs, ANN120may utilize nodes122-128to output a score indicating likelihood of another fraudulent transaction.

In some instances, the different applications or modules of nodes122-128may be weighted using merchant rules and preferences, accounting for each factor differently. For example, demographics may be weighted 20%, time difference between transactions 20%, dollar amount difference between declined and subsequent transactions 20%, and profile information 40%. It should be appreciated that any percentage may be given to different factors and that additional factors will be considered by one skilled in the art.

ANN120may include an architecture that weighs the variables incoming from the data sources. ANN120may include activity rules on different time scales. There may be a feedback loop for certain time scales. For example, on a shorter time scale of seconds or minutes, ANN120may interact with merchant devices110indicating an immediate transactions failure or success. Further, on a larger time scale, ANN120may signal to merchant devices110that a false positive score is being output whether low or high, so that merchant devices110may store this for future use days or months later.

ANN120may also use learning rules internal to the ANN. The learning rules may specify how the weights may change over time or as certain events occur. This may be interactive with merchant devices110as well. For example, some rules may be internal to the ANN120, while some others may be input and feedback from merchant devices110. The learning rules may be dependent on activities of the nodes, occurring as a response to inputs from merchant devices110or POS terminals102,104. Target values may also be supplied by merchant devices110with or without thresholds.

Merchant devices110may include one or more merchant devices, such as exemplary merchant devices112,114. Exemplary merchant device112,114may be a server hosted by a bank or financial institution who manages the account for which a transaction is going to be made. For example, exemplary merchant device112may be a server which keeps logs of all transactions for each user or account. Exemplary merchant device112,114may store its information on one or more servers and keep track in profiles. Exemplary merchant device112,114may include a rules manager, a rules storage, and a policy decision engine.

Rules manager, for example, may include a graphical user interface by which merchants and/or vendors can specify rules and policies according to their needs. For example, a user may be able to specify stringent requirements on unlimited accounts so that a $100,000 purchase does not get approved without additional (e.g., secondary) verification. Rules manager may include hardware or software to define, modify, or manage rules. For example, rules manager may receive a definition of a policy from a merchant and store it in rules manager storage. Subsequently, rules manager may receive false positive information or scores and amend the rules in rules storage accordingly. A new version as well as a second version of the rules/policy may be stored thus managing version controls and enabling preservation of the history. The graphical user interface of the rules manager can be rendered on the merchant device (e.g., enterprise terminal) and populated with the false positive score transmitted from the ANN120.

Rules manager storage may include a database or data structure used to store merchant rules. Rules manager storage may be in optical storage media, flash-memory devices, solid state devices, Read-Only Memory (ROM) or Random-Access memory (RAM). Rules manager storage may be a database configured to store the transaction data generated by the merchant Exemplary merchant device112-114. Rules manager storage may be capable of receiving, storing, updating, and/or querying merchant transaction records of a merchant database containing the transaction data. Rules manager storage may be a logical construct of data files that are stored in non-transitory machine-readable storage media, such as a hard disk or computer memory, controlled by software modules of a database program (e.g., SQL, NoSQL, MySQL, Access®, Oracle®, IBM DB2®), and a related database management system (DBMS) that executes the code modules (e.g., SQL scripts) for various data queries and other management functions.

Flow Chart

FIG. 2shows execution of a method200of identifying false positives in an artificial neural network, according to an exemplary embodiment. The exemplary method200shown inFIG. 2comprises execution steps202,204,206, and208. However, it should be appreciated that other embodiments may comprise additional or alternative execution steps, or may omit one or more steps altogether. It should also be appreciated that other embodiments may perform certain execution steps in a different order, simultaneously, or near-simultaneously.

In step202, the ANN may receive an identified declined transaction for a user. A user at user POS102,104may initiate a purchase (e.g., online or at a brick-and-mortar store) that is rejected as an attempted fraud. The ANN determines which merchant was involved in this transaction as well as what kind of merchant. For example, a user may have a history of purchasing from a certain clothing vendor or frequently use one card for clothing. Similarly, merchant types may be categorized as travel, online services, jewelry, furniture, or home goods. For example, if a user frequently purchases from an online marketplace, then the ANN may mark the merchant as a common merchant or categorize according to a merchant type. As such, the ANN may utilize whether a prior or subsequent transaction is made at the same or similar merchant.

In addition to merchant type, channel of purchase may be used to improve the false positive values in the ANN. For example, channel may be categorized as online (e.g., card not present) or in-person (e.g., card present). If a user may use a different card with another user's name at an in-person terminal, this may indicate that a false transaction is taking place. In one example, a purchase at a large retailer can be determined to be a card present transaction. In this example, the user may not subsequently request a card not present transaction online within a few minutes. This may indicate a false transaction, which can be detected by the ANN.

In step204, the ANN may retrieve information from an issuer or enterprise terminal regarding a user's profile. Information retrieved from the enterprise terminal (e.g., merchant device112shown inFIG. 1) may include profile and/or demographics information. Some or all of this information may similarly be retrieved from user POS terminals102,104. This information may be retrieved via a wired or wireless network connection between ANN120and merchant devices110.

Demographic information may include data regarding which payment card or account numbers are making subsequent transactions and the payment card or account numbers of declined transactions. Demographic information may include age, income, number of children, gender, etc. Demographic information may be retrieved via third party access, such as through a credit reporting server. For example, if two cards have the same name and account number, but other demographics information is different, it may be indicative of a fraudulent transaction. For example, if a card for John Doe is used, where John Doe has two children in one transaction, and John Doe's card is used in another transaction but he appears to suddenly have five children, then this may indicate that a fraudulent account number or payment card is being used. Similarly, if Jane Doe is 32 years old in a declined transaction, and Jane Doe's demographic information indicates she is 55 years old in a subsequent transaction, this may also indicate a possible fraudulent transaction. However, if Jane Doe's age, income, gender, and number of children are all consistent between one transaction and the subsequent transaction, this may indicate that a non-fraudulent transaction has occurred.

The profile of the user may include data or information on how the user of the account has historically conducted transactions. For example, the account of a person who does not typically spend a lot may be considered compromised if the account is suddenly initiated with many purchases. Profile information may include, for example, frequency, timing, and common amounts of spending. A purchaser who makes frequent purchases on travel may not be flagged once another travel purchase is made. However, if a user who does not use their account very much, all of a sudden makes several purchases for airline tickets at a large cost, then the subsequent purchases may be flagged as potentially fraudulent transactions. Similarly, a sudden expensive jewelry purchase may veer from typical behavior of some users. A user may have different profiles for different cards or accounts that are used. Information may be compared between different profiles. For example, one account may be a business account that is used for travel, eating, and entertainment, whereas another account may be used for all other purchases including groceries, clothes, and utilities.

In step206, the ANN may perform neural network machine learning utilizing the information associated for the user within the ANN. In this step, the ANN may analyze declined and subsequent approved transactions. To accomplish the analysis, the ANN may access the one or more of its nodes. Any of the above parameters may be used with a threshold in comparing or analyzing the data.

In some embodiments, a false positive score may be calculated using a combination of the above factors. For example, a false positive score may be calculated according to the formula:
False Positive Score (FPS)=α+β1*Same/Similar Merchant+β2*Time difference+/β3*Amount difference+/β4*Same/Different channel+β5*similar demographics+β6*similar profile,where the value of coefficients β1, β2, β3, β4, β5, β6 are based on assigned significances of the predicting variables to predict the probability of false positive, same/similar merchant may=0 or 1, same/different channel may=0 or 1, similar demographics may=0 or 1, and similar profile may=a score between 0 and 1 depending on similarity in profile of declined card and the card making next transaction.

In step208, the ANN may submit a false positive score to the rules manager database. The false positive score may be transmitted to one of merchant devices110for display on a graphical user interface rendered on the merchant devices110. False positive scores may be used as input for issuer rules regarding a fraud strategy, which may assist issuers to approve more transactions without significantly increasing fraud risk. The false positive score may be used in the rules manager engines on merchant device112,114.

FIG. 3illustrates an exemplary embodiment using an activation process300. Exemplary embodiment using an activation process300may include inputs302, weights304, a transfer function306, and an activation function308.

Embodiment using an activation process300may take in inputs302and weigh them each accordingly using weights304. Inputs with respect to step204ofFIG. 2may be used as inputs302. For example, demographics, channel data, purchase history, etc. may be used as inputs302. Different weights may be assigned to each of the inputs, using weights304. Inputs302may be received from POS terminals102,104.

Inputs302as weighed according to weights304may be input into transfer function306which may be a summation. Transfer function306may be applied at a node of ANN120, such as node124or node126. Any of several activation functions such as nonlinear, continuously differentiable, a range, or monotonic may be used for activation function308. Activation function308may use the output of transfer function306to output a false positive score using the steps outlined in method200.

In some embodiments, a threshold or other information may be taken in from one or more of merchant devices110. Rules implemented in merchant devices110may be applied and used as inputs to activation function308and/or transfer function306.

In one embodiment, ANN120may use a node's network function ƒ(x) defined as a composition of other functions gi(x), using a nonlinear weighted sum, where ƒ(x)=K(Σiwigi(x)), where K is an activation function. The activation function may be nonlinear, continuously differentiable, a range, monotonic, a smooth function with a monotonic derivative, or an approximation identity near the origin, for example.