US 12,488,327 B2
Contactless payment relay attack protection
Florent Hay, Laeken (BE); Eddy Van De Velde, Leuven (BE); and Patrick Mestre, Sart-Bernard (BE)
Assigned to MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed by MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed on Jul. 12, 2023, as Appl. No. 18/221,172.
Application 18/221,172 is a division of application No. 17/011,618, filed on Sep. 3, 2020, granted, now 11,704,649.
Prior Publication US 2023/0360014 A1, Nov. 9, 2023
Int. Cl. G06Q 20/20 (2012.01); G06F 11/30 (2006.01); G06F 11/34 (2006.01); G06N 20/00 (2019.01); G06Q 20/32 (2012.01); G06Q 20/34 (2012.01); G06Q 20/36 (2012.01); G06Q 20/38 (2012.01); G06Q 20/40 (2012.01); H04W 12/122 (2021.01)
CPC G06Q 20/204 (2013.01) [G06F 11/3006 (2013.01); G06F 11/3419 (2013.01); G06N 20/00 (2019.01); G06Q 20/202 (2013.01); G06Q 20/3415 (2013.01); G06Q 20/3825 (2013.01); G06Q 20/3829 (2013.01); G06Q 20/4016 (2013.01); H04W 12/122 (2021.01); G06Q 20/3226 (2013.01); G06Q 20/352 (2013.01); G06Q 20/36 (2013.01); G06Q 2220/00 (2013.01)] 7 Claims
OG exemplary drawing
 
1. A non-transitory storage medium having instructions stored thereon that when executed by a computing system direct the computing system to:
receive an online authorization request including a cryptogram, an identifier of a payment device, a measured processing time, and a reference processing time, wherein the reference processing time corresponds to an amount of time that the payment device performs a particular command in a monetary transaction, wherein the measured processing time is a measured amount of time that the payment device performed the particular command in the monetary transaction;
verify the cryptogram;
determine that the measured processing time exceeds the reference processing time;
in response to the measured processing time exceeding the reference processing time, perform an artificial intelligence transaction analysis for the monetary transaction, the artificial intelligence transaction analysis comprising:
retrieve, from training data of an artificial intelligence transaction model, past device data based on the identifier of the payment device, wherein the past device data includes previous measured processing times of payment devices similar to the payment device;
compare, by the artificial intelligence transaction model, the measured processing time to the previous measured processing times of payment devices similar to the payment device; and
produce, by the artificial intelligence transaction model, a confidence assessment indicating a likelihood that a difference between the reference processing time and the measured processing time is acceptable; and
transmit, based on the confidence assessment, an online authorization response to a terminal wherein the online authorization response authorizes the monetary transaction.