US 2022/0012352 A1Published application

Auto-tuning of rule weights in profiles

AssigneeVisa International Service Association

InventorsBenjamin Scott Boding, Ge Wen

Life of this patent

Estimating the term…

Loading patent…

Abstract

Disclosed is a system to optimize rule weights for classifying access requests so as to manage rates of false positives and false negative classifications. A rules suggestion engine may suggest a profile of classification rules to a merchant for access requests. The system can optimize weights for the profile of rules using a cost function based on a training set of historical access requests, for example using stepwise regression or machine learning (ML). The system can compute a profile score based on the optimized weights, for example by summing the weights. The system statistically analyzes the profile score using classification thresholds and the historical access requests. The system can perform receiver operating characteristic (ROC) analysis for various threshold values, enabling a user to select a suitable threshold. The system can further optimize by adding or removing rules from the profile of rules.

Claims20

Dependent claims

A method of configuring an access system for providing access to a resource, the method comprising, performing by the access system:

receiving a set of historical access requests for a set of resources, each of the set of historical access requests comprising access data identifying the resource of the set of resources and including requestor information of a requesting entity and an outcome label regarding a validity of the historical access request;
receiving a rule profile comprising rules that are triggerable by the access data, the rule profile defining a profile score based on weights of rules that are triggered for an access request and specifying access classifications of providing access to the set of resources managed by a resource computer based on the profile score;
optimizing, using the set of historical access requests, the weights for the rules of the rule profile using a cost function that includes the access classifications of the set of historical access requests obtained using the weights, the cost function including penalties for false positive classifications and false negative classifications relative to the outcome labels;
receiving a current access request including new access data identifying a current resource and including current requestor information of a current requesting entity;
computing a current profile score for the rule profile based on the optimized weights;
obtaining one or more classification thresholds for discriminating between different access request outcomes;
using one or more classification thresholds and the current profile score to determine a current access classification for providing access to the current resource;
and
processing the current access request in accordance with the current access classification to provide a specified access to the current resource.

6 more elements

An access system for providing access to a resource, the access system comprising:

a processor;
and
a non-transitory computer-readable medium coupled to the processor, the non-transitory computer-readable medium comprising code executable by the processor to perform a method comprising:
receiving a set of historical access requests for a set of resources, each of the set of historical access requests comprising access data identifying the resource of the set of resources and including requestor information of a requesting entity and an outcome label regarding a validity of the historical access request;
receiving a rule profile comprising rules that are triggerable by the access data, the rule profile defining a profile score based on weights of rules that are triggered for an access request and specifying access classifications of providing access to the set of resources managed by a resource computer based on the profile score;
optimizing, using the set of historical access requests, the weights for the rules of the rule profile using a cost function that includes the access classifications of the set of historical access requests obtained using the weights, the cost function including penalties for false positive classifications and false negative classifications relative to the outcome labels;
receiving a current access request including new access data identifying a current resource and including current requestor information of a current requesting entity;
computing a current profile score for the rule profile based on the optimized weights;
obtaining one or more classification thresholds for discriminating between different access request outcomes;
using one or more classification thresholds and the current profile score to determine a current access classification for providing access to the current resource;
and
processing the current access request in accordance with the current access classification to provide a specified access to the current resource.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/926,535Filed 10 Jul 2020
Published: 13 Jan 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G06F 21/604
Protecting data: tools and structures for managing or administering access control systems
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/316
User authentication: by observing the pattern of computer usage, e.g. typical user behaviour
G06N 5/01
Computing arrangements using knowledge-based models: dynamic search techniques; Heuristics; Dynamic trees; Branch-and-bound