Method and apparatus for providing fraud detection using connection frequency thresholds
AssigneeVerizon Business Global LLC
InventorsSaralyn M. Mahone, Matthew J. Gilbert, Thomas E. Stepp, Arthur L. Springer, John Hans Van Arkel
Life of this patent
Estimating the term…
Abstract
An approach provides detection of unauthorized use of data services. A determination is made as to whether connections supporting remote access to a data network are completed. The number of completed connections associated with a selected attribute is tracked over a time period. It is then determined whether the number of completed connections satisfies a connection frequency threshold. A fraud alert is generated if the connection frequency threshold is satisfied.
Claims17
A computer-implemented method for detecting unauthorized use of data services, the method comprising a processor configured to perform the steps of:
- determining whether connections supporting remote access to a data network are completed;
- tracking number of completed connections associated with a selected attribute over a time period for a given usage account, wherein the time period is determined according to a sliding window, wherein the completed connections each includes successful establishment of a connection and termination of the connection, and wherein the selected attribute specifies one or more reasons for connection termination;
- determining whether the number of completed connections satisfies a connection frequency threshold that is established based on a baseline usage pattern for the given usage account;
- and
- generating a fraud alert if the connection frequency threshold is satisfied.
An apparatus for detecting unauthorized use of data services, the apparatus comprising:
- a communication interface configured to receive information on number of completed connections associated with a selected attribute over a time period for a given usage account, wherein the time period is determined according to a sliding window, wherein the completed connections support remote access to a data network, wherein the completed connections each includes successful establishment of a connection and termination of the connection, and wherein the selected attribute specifies one or more reasons for connection termination;
- and
- a processor configured to determine whether the number of completed connections satisfies a connection frequency threshold that is established based on a baseline usage pattern for the given usage account, wherein a fraud alert is generated if the connection frequency threshold is satisfied.
An apparatus for detecting unauthorized use of data services, the apparatus comprising:
- means for determining whether connections supporting remote access to a data network are completed;
- means for tracking number of completed connections associated with a selected attribute over a time period for a given usage account, wherein the time period is determined according to a sliding window, wherein the completed connections each includes successful establishment of a connection and termination of the connection, and wherein the selected attribute specifies one or more reasons for connection termination;
- means for determining whether the number of completed connections satisfies a connection frequency threshold that is established based on a baseline usage pattern for the given usage account;
- and
- means for generating a fraud alert if the connection frequency threshold is satisfied.
Dependencies are inferred from the claim text.