Fraud detection mechanism
AssigneeInternational Business Machines Corporation
InventorsShang Q. Guo, Jonathan Lenchner, Maharaj Mukherjee
Life of this patent
Estimating the term…
Abstract
Embodiments include methods, systems and computer program products for providing access to a secure service. Aspects include receiving, from a user device, a request to access a secure service, the request including access information and receiving, from the user device, a requested action on the secure service. Aspects also include correlating the access information and the requested action with stored information associated with the user device and performing the requested action, in response to said correlating.
Claims20
A computer-implemented method, comprising:
- receiving, from a user device, a request to access a secure service, the request including access information, wherein the access information includes a received password;
- receiving, from the user device, a requested action on the secure service;
- correlating the access information and the requested action with stored information associated with the user device;
- determining a fraud score based on a correlation between the received password and one of a most recently stored password and a previously stored password;
- determining a security level associated with the requested action;
- based on a determination that the fraud score is less than a threshold level, performing the requested action;
- based on a determination that the fraud score is above the threshold level and that the security level is below a second threshold level, performing the requested action;
- and
- based on a determination that the fraud is above the threshold level and that the security level is above a second threshold level, denying the requested action.
A system for providing access to a secure service, the system comprising:
- at least one processor
- a memory, operably coupled to the at least one processor, the memory storing processor computer readable instructions;
- the at least one processor, configured to execute computer readable instructions, which cause the processor to:
- receive, from a user device, a request to access a secure service, the request including access information, wherein the access information includes a received password;
- receive, from the user device, a requested action on the secure service;
- correlate the access information and the requested action with stored information associated with the user device;
- determine a fraud score based on a correlation between the received password and one of a most recently stored password and a previously stored password;
- determine a security level associated with the requested action;
- based on a determination that the fraud score is less than a threshold level, perform the requested action;
- based on a determination that the fraud score is above the threshold level and that the security level is below a second threshold level, perform the requested action;
- and
- based on a determination that the fraud is above the threshold level and that the security level is above a second threshold level, deny the requested action.
A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:
- receive, from a user device, a request to access a secure service, the request including access information, wherein the access information includes a received password;
- receive, from the user device, a requested action on the secure service;
- correlate the access information and the requested action with stored information associated with the user device;
- determine a fraud score based on a correlation between the received password and one of a most recently stored password and a previously stored password;
- determine a security level associated with the requested action;
- based on a determination that the fraud score is less than a threshold level, perform the requested action;
- based on a determination that the fraud score is above the threshold level and that the security level is below a second threshold level, perform the requested action;
- and
- based on a determination that the fraud is above the threshold level and that the security level is above a second threshold level, deny the requested action.
Dependencies are inferred from the claim text.