System, method and computer program product for processing event records

A fraud detection system for use with a telecommunications system, the telecommunications system including at least one type of communications network, the at least one type of telecommunications network being configured to generate network event records in a network specific format, each network event record being generated in response to an event occurring in the telecommunications network, the fraud detection system comprising:

• a domain specific infrastructure configured to receive network event records from the at least one type of telecommunications network, the domain specific infrastructure being dynamically reconfigurable to operate in accordance with a domain specific implementation of the at least one type of communications network, the domain specific infrastructure also being reconfigurable by way of user-specific implementation rules, a core, infrastructure being non-domain specific, wherein the domain specific infrastructure and the core infrastructure operate in unison to detect an occurrence of fraud, and to perform a fraud prevention action in response thereto.

A method for preventing fraud in a telecommunications system including at least one telephone network, the method being performed in system comprising a scalable, nondomain specific core infrastructure and a user-configurable, domain-specific implementation corresponding to the at least one telephone network, the method comprising the steps of analyzing historical network event records to identify normal and fraudulent patterns, and generate fraudulent usage profiles and threshold rules based on the analysis;

• determining whether a network event record violates a selected threshold rule by comparing the network event record with a selected fraudulent usage profile, the network event record being based on a real time event;
• and
• generating an alarm when the network event record violates the selected threshold rule.

A system for processing event records generated by a telecommunications system, the event records being generated in response to an event occurring in the telecommunications system in accordance with a specific format, the system comprising:

• a scalable core infrastructure configured to implement each event record processing application without requiring an alteration to the core infrastructure;
• and
• a configurable, domain-specific implementation coupled to the scalable core infrastructure, the configurable, domain-specific implementation including configurable rules adapted to the specific format.