Deep learning-based identity fraud detection

A computer program product comprising a computer readable storage medium having program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, and wherein the program code is readable and executable by a processor to perform a method comprising:

• representing, by an identity broker, an identity profile as a knowledge graph, wherein the identity broker receives a request for the identity profile from an identity requester, wherein the request is fulfilled by the identity broker from identity profiles from a plurality of identity networks, and wherein the identity broker couples an identity requester computer to the plurality of identity networks;
• associating, by the identity broker, a set of changes of the identity profile across the plurality of identity networks with a fraud score, wherein the fraud score identifies the identity profile located in the plurality of identity networks as being fraudulent;
• and
• implementing, by the identity broker, a security action based on the fraud score exceeding a predefined value, wherein the security action implemented by the identity broker blocks a release of the identity profile from the plurality of identity networks to the identity requester that requested the identity profile.

A computer system comprising one or more processors, one or more computer readable memories, and one or more computer readable non-transitory storage mediums, and program instructions stored on at least one of the one or more computer readable non-transitory storage mediums for execution by at least one of the one or more processors via at least one of the one or more computer readable memories, the stored program instructions executed to perform a method comprising:

• representing, by an identity broker, an identity profile as a knowledge graph, wherein the identity broker receives a request for the identity profile from an identity requester, wherein the request is fulfilled by the identity broker from identity profiles from a plurality of identity networks, and wherein the identity broker couples an identity requester computer to the plurality of identity networks;
• associating, by the identity broker, a set of changes of the identity profile across the plurality of identity networks with a fraud score, wherein the fraud score identifies the identity profile located in the plurality of identity networks as being fraudulent;
• and
• implementing, by the identity broker, a security action based on the fraud score exceeding a predefined value, wherein the security action implemented by the identity broker blocks a release of the identity profile from the plurality of identity networks to the identity requester that requested the identity profile.