# US 10,318,964 B2 · Systems and methods for detecting entity migration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,318,964 B2 - Document ID: US10318964B2 - Status: Granted - Kind: B2 - Application number: 15/248,244 - Filed: 2016-08-26 - Published: 2017-03-02 - Granted: 2019-06-11 - Earliest claimed: 2015-08-27 - Assignees: LexisNexis Risk Solutions FL Inc. - Applicants: LexisNexis Risk Solutions FL Inc. - Inventors: Jesse C P B Shaw; Johannes Philippus de Villiers Prichard; Eric Blood; Andrew John Bucholz - Web page: https://patentgrep.com/patent/US10318964B2 ## CPC - G06Q 30/0185: {Product, service or business identity fraud} - G06F 16/2465: {Query processing support for facilitating data mining operations in structured databases} - G06F 16/26: Visual data mining; Browsing structured data - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems and methods are disclosed herein for detecting entity migration. A method is provided for receiving container information for all known addresses in the United States. The container information can include address records, person or business entities associated with the address records, and temporal information associating the entities with the address records. The method includes determining, with one or more special-purpose computer processors in communication with a memory, migration data based on the container information. The method includes extracting metrics from the migration data. The metrics can include velocity of migration data; simultaneous movement of individuals within a predetermined time period; distance moved; and/or age of the person or business entities. The method can include determining, based at least in part on outliers associated with the metrics, one or more indicators of fraud; and outputting, for display, the one or more indicators of the fraud. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving, from two or more sources, container information for all known addresses in the United States, the container information comprising: address records; person or business entities associated with the address records; and temporal information associating the person or business entities with the address records; disambiguating the container information to verify or correct the container information obtained from the two or more sources; determining, with one or more special-purpose computer processors in communication with a memory, migration data based on the disambiguated container information; extracting metrics from the migration data, the metrics comprising one or more of: velocity of migration data; simultaneous movement of individuals within a predetermined time period; distance moved; and age of the person or business entities; determining, with the one or more special-purpose computer processors, and based at least in part on outliers associated with the metrics, one or more indicators of fraud, wherein determining the one or more indicators of fraud comprises determining a ratio of the number of persons or business entities associated with a single address per square footage of the address being greater than a threshold ratio; and outputting, for display, the one or more indicators of the fraud. ### Claim 2 (depends on 1) The method of claim 1, wherein the indicators of fraud are related to identity theft fraud. ### Claim 3 (depends on 1) The method of claim 1, wherein determining the one or more indicators of fraud comprises determining one or more of: a number of person or business entities associated with a single address being greater than a first threshold number; a number of person or business entities moving to a single address per time-period being greater than a second threshold number; and an association of person or business entities with an address having known previous criminal activity. ### Claim 4 (depends on 1) The method of claim 1, wherein extracting metrics from the migration data further comprises extracting activities of the person or business entities related to one or more of: governmental benefits, tax returns, Medicaid, and credit abuse. ### Claim 5 (depends on 1) The method of claim 1, wherein extracting metrics from the migration data further comprises extracting activities of the person or business entities related to one or more of: a distance between a current and previous address; and a length of time associated with a previous address. ### Claim 6 (depends on 1) The method of claim 1, wherein the outliers associated with the metrics correspond to data that differs from a statistical normal by greater than a standard deviation. ### Claim 7 (depends on 1) The method of claim 1, wherein determining the one or more indicators of fraud comprises determining one or more of: an association of person or business entities with vehicle hoarding; an association of person or business entities with nominee incorporation services, and an association of person or business entities with shelf companies. ### Claim 8 (depends on 1) The method of claim 1, further comprising scoring the metrics based on or more of: data quality; anomalous migration; groups that evidence the greatest connectedness; events associated with an organization; and false positive association of person or business entities with fraudulent activity. ### Claim 9 A system comprising: at least one memory for storing data and computer-executable instructions; and at least one special-purpose processor configured to access the at least one memory and further configured to execute the computer-executable instructions to: receive, from two or more sources, container information for all known addresses in the United States, the container information comprising: address records; person or business entities associated with the address records; and temporal information associating the person or business entities with the address records; disambiguate the container information to verify or correct the container information obtained from the two or more sources; determine migration data based on the disambiguated container information; extract metrics from the migration data, the metrics comprising one or more of: velocity of migration data; simultaneous movement of individuals within a predetermined time period; distance moved; and age of the person or business entities; determine, based at least in part on outliers associated with the metrics, one or more indicators of fraud, wherein determining the one or more indicators of fraud comprises determining a ratio of the number of persons or business entities associated with a single address per square footage of the address being greater than a threshold ratio; and output, for display, the one or more indicators of the fraud. ### Claim 10 (depends on 9) The system of claim 9, wherein the indicators of fraud are related to identity theft fraud. ### Claim 11 (depends on 9) The system of claim 9, wherein the one or more indicators of fraud comprises one or more of: a number of person or business entities associated with a single address being greater than a first threshold number; a number of person or business entities moving to a single address per time-period being greater than a second threshold number; and an association of person or business entities with an address having known previous criminal activity. ### Claim 12 (depends on 9) The system of claim 9, wherein the metrics further comprises activities of the person or business entities related to one or more of: governmental benefits, tax returns, Medicaid, and credit abuse. ### Claim 13 (depends on 9) The system of claim 9, wherein metrics from the migration data further comprises activities of the person or business entities related to one or more of: a distance between a current and previous address; and a length of time associated with a previous address. ### Claim 14 (depends on 9) The system of claim 9, wherein the outliers associated with the metrics correspond to data that differs from a statistical normal by greater than a standard deviation. ### Claim 15 (depends on 9) The system of claim 9, wherein the one or more indicators of fraud comprises one or more of: an association of person or business entities with vehicle hoarding; an association of person or business entities with nominee incorporation services, and an association of person or business entities with shelf companies. ### Claim 16 (depends on 9) The system of claim 9, wherein the at least one special-purpose processor is configured to execute the computer-executable instructions to score the metrics based on or more of: data quality; anomalous migration; groups that evidence the greatest connectedness; events associated with an organization; and false positive association of person or business entities with fraudulent activity. ### Claim 17 A non-transitory computer-readable media comprising computer-executable instructions that, when executed by one or more processors, configure the one or more processors to perform the method of: receiving, from two or more sources, container information for all known addresses in the United States, the container information comprising: address records; person or business entities associated with the address records; and temporal information associating the person or business entities with the address records; disambiguating the container information to verify or correct the container information obtained from the two or more sources; determining, with one or more special-purpose computer processors in communication with a memory, migration data based on the disambiguated container information; extracting metrics from the migration data, the metrics comprising one or more of: velocity of migration data; simultaneous movement of individuals within a predetermined time period; distance moved; and age of the person or business entities; determining, with the one or more special-purpose computer processors, and based at least in part on outliers associated with the metrics, one or more indicators of fraud, wherein determining the one or more indicators of fraud comprises determining a ratio of the number of persons or business entities associated with a single address per square footage of the address being greater than a threshold ratio; and outputting, for display, the one or more indicators of the fraud. ### Claim 18 (depends on 17) The computer-readable media of claim 17, wherein the indicators of fraud are related to identity theft fraud. ### Claim 19 (depends on 17) The computer-readable media of claim 17, wherein determining the one or more indicators of fraud comprises determining one or more of: a number of person or business entities associated with a single address being greater than a first threshold number; a number of person or business entities moving to a single address per time-period being greater than a second threshold number; and an association of person or business entities with an address having known previous criminal activity. ### Claim 20 (depends on 17) The computer-readable media of claim 17, wherein the computer-executable instructions configure the one or more processors to score the metrics based on or more of: data quality; anomalous migration; groups that evidence the greatest connectedness; events associated with an organization; and false positive association of person or business entities with fraudulent activity.