Adaptive fraud monitoring and control
AssigneeAT&T Corp.
InventorArabinda Mukherjee
Life of this patent
Estimating the term…
Abstract
Access to a resource such as a telecommunications system is monitored and prevented adaptively on a real-time basis by establishing with the customer, a steady state low level of surveillance and arbitrary intermittent interruption during which the telecommunications company demands authentication, by personal identification number (PIN), of a given fraction of access demands (for example, telephone calls), and, in response to signals indicating that arrival of an alert condition, and preferably at least one prior invalid call, raising the level of authentication demands.
Claims22
The method of monitoring access to a system, comprising:
- establishing a rate of interruption for demanding authentication from a potential accessor;
- denying access in the event of failure to authenticate in response to each demand;
- and
- automatically varying the rate of interruption to a another rate in response to predetermined conditions;
- one of the predetermined conditions including prior failed authentications.
The method of monitoring access to a system, comprising:
- establishing a rate of interruption for demanding authentication from a potential accessor;
- denying access in the event of failure to authenticate in response to each demand;
- and
- automatically varying the rate of interruption to a another rate in response to predetermined conditions;
- the step of establishing a rate of interruption including determining whether calls are suspicious and determining the rate of interruptions on the basis of only the rate of failed suspicious calls.
An apparatus for monitoring access to a system, comprising:
- means for establishing a rate of interruption for demanding authentication from a potential accessor;
- means for denying access in the event of failure to authenticate in response to each demand;
- and
- means for varying the rate of interruption to another in response to predetermined conditions selected by the customer, one of the predetermined conditions including prior failed authentications.
An apparatus for monitoring access to a system, comprising:
- means for establishing a rate of interruption for demanding authentication from a potential accessor;
- means for denying access in the event of failure to authenticate in response to each demand;
- and
- means for varying the rate of interruption to another in response to predetermined conditions selected by the customer,
- the means for establishing a rate of interruption including means for determining whether calls are suspicious and means for determining the rate of interruptions on the basis of only the rate of failed suspicious calls.
Dependencies are inferred from the claim text.