Method, System, and Computer Program Product for Identifying a Malicious User
AssigneeVisa International Service Association
InventorsBartlomiej Piotr Prokop, Kerry Philomena McGullion, Peter Jackson Lennon, Thomas Joseph Looney
Life of this patent
Estimating the term…
Abstract
A method, system, and computer program product for identifying a malicious user obtain a plurality of service requests for a service provided by a processing system, each service request of the plurality of service requests being associated with a requesting user and a requesting system, and a plurality of service responses associated with the plurality of service requests, each service response of the plurality of service responses being associated with the processing system; and identify the requesting user as malicious based on the plurality of service requests and the plurality of service responses.
Claims20
A computer-implemented method for identifying a malicious user, comprising:
- obtaining, with at least one processor, a plurality of service requests for a service provided by a processing system, wherein each service request of the plurality of service requests is associated with a requesting user and a requesting system;
- providing, with at least one processor, the plurality of service requests to the processing system;
- receiving, with at least one processor, from the processing system, a plurality of service responses associated with the plurality of service requests, wherein each service response of the plurality of service responses includes response data associated with an acceptance or a denial of the service at the processing system inserted as a header value in a HyperText Transfer Protocol (HTTP) response of that service response;
- and
- identifying, with at least one processor, the requesting user as malicious based on the plurality of service requests and the plurality of service responses.
A computing system for identifying a malicious user, comprising:
- one or more processors programmed and/or configured to:
- obtain a plurality of service requests for a service provided by a processing system, wherein each service request of the plurality of service requests is associated with a requesting user and a requesting system;
- provide the plurality of service requests to the processing system;
- receive from the processing system, a plurality of service responses associated with the plurality of service requests, wherein each service response of the plurality of service responses includes response data associated with an acceptance or a denial of the service at the processing system inserted as a header value in a HyperText Transfer Protocol (HTTP) response of that service response;
- and
- identify the requesting user as malicious based on the plurality of service requests and the plurality of service responses.
A system, comprising:
- a requesting system including a plurality of requesting servers;
- a processing system including a plurality of processing servers;
- a first load balancer configured to distribute a plurality of service calls from a plurality of user devices across the plurality of requesting servers, wherein the plurality of requesting servers is configured to generate a plurality of service requests based on the plurality of service calls;
- and
- a second load balancer configured to distribute the plurality of service requests across the plurality of processing servers, wherein the plurality of processing servers is configured to generate a plurality of service responses associated with the plurality of service requests, wherein each service response of the plurality of service responses includes response data associated with an acceptance or a denial of the service at the processing system inserted as a header value in a HyperText Transfer Protocol (HTTP) response of that service response, and wherein the second load balancer is further configured to distribute the plurality of service responses across the plurality of requesting servers.
Dependencies are inferred from the claim text.