US 10,320,846 B2Granted

Systems and methods for generation and selection of access rules

AssigneeVisa International Service Association

InventorsHaochuan Zhou, Hung-Tzaw Hu, Rong Zhang, Benjamin Scott Boding

Life of this patent

Estimating the term…

Loading patent…

Abstract

A resource security system may generate access rules for use in determining whether to grant or deny a request for access to a resource. In order to generate the access rules, the resource security system may select certain access request parameters and determine conditions associated with those parameters. The resource security system may generate mutually exclusive segments associated with a condition of each of the parameters. The resource security system may generate independent access rules based on the segments. The resource security system may then evaluate the performance of each of the access rules based on validity information corresponding to previously received access requests that satisfy the conditions of a particular access rule.

Claims20

Dependent claims

A method for generating access rules, the method comprising performing by a computer system:

storing access request information including a plurality of previous access requests, each previous access request having a plurality of access request parameters;
storing validity information corresponding to the plurality of previous access requests, the validity information indicating whether each access request is fraudulent or legitimate;
selecting a first parameter and a second parameter from the plurality of access request parameters, the first parameter associated with a first set of conditions, the second parameter associated with a second set of conditions;
determining a plurality of mutually exclusive segments based on the first set of conditions and the second set of conditions, each segment associated one condition of the first set of conditions and one condition of the second set of conditions;
generating a plurality of potential access rules, each potential access rule corresponding to a different segment of the plurality of mutually exclusive segments, each of the potential access rules having the conditions of the corresponding segment;
determining a predictive percentage for each of the potential access rules based on the validity information corresponding to previous access requests having one or more parameters that involve the conditions of the potential access rule;
selecting one or more of the potential access rules to be included in an operational set of access rules based on the predictive percentages for each of the potential access rules;
receiving, over a network from a plurality of devices, a plurality of real-time access requests;
accessing a system memory to obtain the operational set of access rules when one of the plurality of real-time access requests is received from a first device of the plurality of devices;
using the operational set of access rules to determine access request outcomes for the real-time access requests;
and
providing access to a resource based on the access request outcomes.

9 more elements

A computer system, comprising:

a non-transitory computer readable storage medium storing a plurality of instructions;
and
one or more processors for executing the instructions stored on the computer readable storage medium to:
store access request information including a plurality of previous access requests, each previous access request having a plurality of access request parameters;
store validity information corresponding to the plurality of previous access requests, the validity information indicating whether each access request is fraudulent or legitimate;
select a first parameter and a second parameter from the plurality of access request parameters, the first parameter associated with a first set of conditions, the second parameter associated with a second set of conditions;
determine a plurality of mutually exclusive segments based on the first set of conditions and the second set of conditions, each segment associated one condition of the first set of conditions and one condition of the second set of conditions;
generate a plurality of potential access rules, each potential access rule corresponding to a different segment of the plurality of mutually exclusive segments, each of the potential access rules having the conditions of the corresponding segment;
determine a predictive percentage for each of the potential access rules based on the validity information corresponding to previous access requests having one or more parameters that involve the conditions of the potential access rule;
select one or more of the potential access rules to be included in an operational set of access rules based on the predictive percentages for each of the potential access rules;
receive, over a network from a plurality of devices, a plurality of real-time access requests;
access a system memory to obtain the operational set of access rules when one of the plurality of real-time access requests is received from a first device of the plurality of devices;
use the operational set of access rules to determine access request outcomes for the real-time access requests;
and
provide access to a resource based on the access request outcomes.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/365,389Filed 30 Nov 2016
Published: US 2018/0152478 A131 May 2018
Granted: 11 Jun 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L 63/0263
Filtering policies: rule management
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L
Digital communication

Family

US 2018/0152478 A1Pre-grant publication · published 31 May 2018
US 10,320,846 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key