System and method for providing fraud control

A method for detecting uncapped modem fraud by a cable modem connected to a network comprising a database engine, a network collector, a network data converger and a Cable Modem Termination System (CMTS), the method comprising the steps of:

• simple network management protocol (SNMP) scanning by the network collector the cable modem to obtain a configured upward speed and/or downward speed of the cable modem;
• sending the configured upward speed and/or downward speed of the cable modem to the network data converger;
• querying, by the network data converger, the database engine for an allowed upward speed and/or downward speed of a subscription plan associated with the cable modem;
• comparing the allowed upward speed and/or downward speed with the configured upward speed and/or downward speed;
• and
• determining an occurrence of fraud based upon the comparing.

A method for detecting fraud in a network comprising a network collector, a cable modem termination system (CMTS), a network collector, a network data converger, and a cable modem, the method comprising the steps of:

• the network data converger asking the network collector to send a SNMP command to a cable modem;
• and
• relaying this information to the network data converger if the cable modem does not respond;
• incrementing a lack of response counter by the network data converger;
• and
• if the response count reaches a predetermined threshold, determining an occurrence of fraud.

A method for a cable network comprising a network collector, a cable modem termination system (CMTS), and a plurality of cable modems, the method comprising the steps of:

• maintaining by a network collector devices inventory of the plurality of cable modems, comprising for each of the plurality of cable modems a serial number, MAC address, subscription ID, an IP address and/or MAC domain of the CMTS that connects to the cable modem, and a timestamp when the cable modem was last detected in the network;
• receiving, by the network data converger, the IP address of a connecting cable modem of the plurality of modems when the connecting cable modem connects to the network, the network data converger asking the network collector 140 to scan the connecting cable modem for its MAC address and serial number and adding this information to a devices inventory;
• and
• periodically simple network management protocol (SNMP) scanning the plurality of cable modems through the CMTS to update the devices inventory.

A method for providing fraud detection by a service provider to a cable operator, where a cable operator network comprises a plurality of cable modems each connected to cable modem termination systems (CMTS) and a provisioning group, comprising the steps of:

• adding and configuring a VAS server to the cable operator network, the VAS server configured by the service provider, providing the capabilities of a network collector and connected to a VAS router through an edge router,
• the VAS router connecting to a database management system, a policy server, captive portal manager and web application, and a network data converger,
• the network data converger commanding the network collector within the VAS server to perform actions on its behalf;
• these actions comprising simple network management protocol (SNMP) scanning one or more cable modems of the plurality of cable modems;
• the network collector executing actions on behalf of the network data converger, and relaying the information collected to the network data converger.

A system in a network comprising:

• a database engine;
• a network collector;
• a network data converger server;
• and
• a Cable Modem Termination System (CMTS),
• wherein the system is configured to detect fraud by a device connected to the network by performing the steps of:
• querying the device via simple network management protocol (SNMP) to obtain a device identification and/or a device configuration;
• querying the database engine for a recognized device identification and/or an allowed device configuration associated with the recognized device identification;
• and
• comparing the device identification and/or the device configuration with the recognized device identification and/or the allowed device configuration;
• and
• determining an occurrence of fraud based upon the comparing.