Identifier velocity anomaly detection
AssigneeAT&T Intellectual Property I, L.P.
InventorsTri Bui, Andrew Campbell, Ana Armenta
Life of this patent
Estimating the term…
Abstract
A processing system including at least one processor may obtain a personal identifier comprising a plurality of characters and generate a first embedding of the personal identifier in accordance with an embedding model. The processing system may then identify one or more embeddings of other personal identifiers that are within a threshold distance of the first embedding and generate an alert in response to the identifying of the one or more embeddings of the other personal identifiers that are within the threshold distance.
Claims20
A method comprising:
- obtaining, by a processing system including at least one processor, a personal identifier comprising a plurality of characters associated with a transaction;
- generating, by the processing system, a first embedding of the personal identifier in accordance with a text embedding model applied to the plurality of characters, wherein the text embedding model comprises a co-occurrence matrix model, and wherein the generating comprises generating a first co-occurrence matrix in which elements of the co-occurrence matrix comprise measures of co-occurrences of the plurality of characters within sub-strings of the personal identifier;
- identifying, by the processing system, one or more embeddings of one or more other personal identifiers that are within a threshold distance of the first embedding, wherein the identifying the one or more embeddings comprises identifying a threshold number of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance, wherein the one or more other personal identifiers are obtained in connection with one or more other transactions, and wherein the one or more personal identifiers include at least one personal identifier that is flagged as being associated with at least one non-permitted transaction;
- and
- generating, by the processing system, an alert in response to the identifying of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance including the at least one personal identifier that is flagged as being associated with at least one non-permitted transaction.
A non-transitory computer-readable medium storing instructions which, when executed by a processing system including at least one processor, cause the processing system to perform operations, the operations comprising:
- obtaining a personal identifier comprising a plurality of characters associated with a transaction;
- generating a first embedding of the personal identifier in accordance with a text embedding model applied to the plurality of characters, wherein the text embedding model comprises a co-occurrence matrix model, and wherein the generating comprises generating a first co-occurrence matrix in which elements of the co-occurrence matrix comprise measures of co-occurrences of the plurality of characters within sub-strings of the personal identifier;
- identifying one or more embeddings of one or more other personal identifiers that are within a threshold distance of the first embedding, wherein the identifying the one or more embeddings comprises identifying a threshold number of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance, wherein the one or more other personal identifiers are obtained in connection with one or more other transactions, and wherein the one or more personal identifiers include at least one personal identifier that is flagged as being associated with at least one non-permitted transaction;
- and
- generating an alert in response to the identifying of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance including the at least one personal identifier that is flagged as being associated with at least one non-permitted transaction.
A device comprising:
- a processing system including at least one processor;
- and
- a computer-readable medium storing instructions which, when executed by the processing system, cause the processing system to perform operations, the operations comprising:
- obtaining a personal identifier comprising a plurality of characters associated with a transaction;
- generating a first embedding of the personal identifier in accordance with a text embedding model applied to the plurality of characters, wherein the text embedding model comprises a co-occurrence matrix model, and wherein the generating comprises generating a first co-occurrence matrix in which elements of the co-occurrence matrix comprise measures of co-occurrences of the plurality of characters within sub-strings of the personal identifier;
- identifying one or more embeddings of one or more other personal identifiers that are within a threshold distance of the first embedding, wherein the identifying the one or more embeddings comprises identifying a threshold number of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance, wherein the one or more other personal identifiers are obtained in connection with one or more other transactions, and wherein the one or more personal identifiers include at least one personal identifier that is flagged as being associated with at least one non-permitted transaction;
- and
- generating an alert in response to the identifying of the one or more embeddings of the one or more other personal identifiers that are within the threshold distance including the at least one personal identifier that is flagged as being associated with at least one non-permitted transaction.
Dependencies are inferred from the claim text.