# US 8,571,982 B2 · Capacity customization for fraud filtering

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,571,982 B2
- Document ID: US8571982B2
- Status: Granted
- Kind: B2
- Application number: 13/187,690
- Filed: 2011-07-21
- Published: 2013-01-24
- Granted: 2013-10-29
- Earliest claimed: 2011-07-21
- Assignees: Bank of America Corporation
- Applicants: Somnath Choudhuri; Daniel Bodalski; Matthew Hoke; Sethu V. Iyer; Charles Pigg
- Inventors: Somnath Choudhuri; Daniel Bodalski; Matthew Hoke; Sethu V. Iyer; Charles Pigg
- Web page: https://patentgrep.com/patent/US8571982B2

## CPC

- G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03)
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/04: Payment circuits
- G06Q 20/10: specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q 30/02: Marketing; Price estimation or determination; Fundraising
- G06Q 30/06: Buying, selling or leasing transactions
- G06Q 40/04: Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
- G06Q 40/06: Asset management; Financial planning or analysis
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A multi-stage filtering process and system for fraud detection is disclosed. The multi-stage filtering process allows for the ability to dynamically increase/decrease server capacity, as well as application capacity to support fraud detection activities. The system monitors the queues of the transactions being made using various channels, and responds by adjusting the server and application resources needed for performing pre-filtering on the transactions in the queues. The invention allows for the fraud detection systems to maintain the capacity necessary to examine, at some level, if one or more of the transactions being processed by a financial institution are potentially fraudulent. The capacity can be changed during times of high and low volumes, thus allowing the allocation of resources based on transaction volume, which reduces the computing, energy, labor, etc. costs associated with fraud detection systems without losing the ability to detect almost all of the fraudulent transactions occurring.

## Claims

### Claim 1

A method for varying a capacity of a fraud detection system, the method comprising:
determining, by a processing device, a current transaction volume being processed by a financial institution, wherein the current transaction volume is a number of current transactions being received and sent by the financial institution per unit of time;
determining an estimated transaction volume for a future time period, wherein the estimated transaction volume for the future time period is a number of estimated transactions that will be received and sent by the financial institution per unit of time for the future time period based on a historical transaction volume of a same or similar time period;
varying the capacity of the filtering system or application based on the current transaction volume and the estimated transaction volume for the future time period;
receiving, by the processing device, transaction data related to one or more transactions from the transaction volume being processed; and
performing, by the processing device, multi-stage filtering on the transaction data received.

### Claim 2 (depends on 1)

The method of claim 1, wherein determining the transaction volume comprises monitoring transaction queues at the financial institution.

### Claim 3 (depends on 1)

The method of claim 1, wherein the historical transaction volume of the same or similar time period is a number of transactions per unit of time that occurred on a same day and time on a past date.

### Claim 4 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises increasing the capacity of a server.

### Claim 5 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises increasing the capacity of a memory.

### Claim 6 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises increasing a CPU speed.

### Claim 7 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises decreasing the capacity of a server.

### Claim 8 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises decreasing the capacity of the memory.

### Claim 9 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises decreasing a CPU speed.

### Claim 10 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises increasing software seats.

### Claim 11 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises decreasing software seats.

### Claim 12 (depends on 1)

The method of claim 1, wherein performing multi-stage filtering on the transaction data received comprises performing a preliminary stage filtering on the transaction data.

### Claim 13 (depends on 12)

The method of claim 12, wherein the preliminary stage filtering comprises one or more stages of filtering.

### Claim 14 (depends on 1)

The method of claim 1, wherein performing multi-stage filtering on the transaction data received comprises performing filtration utilizing rules defined by fraud investigators.

### Claim 15 (depends on 14)

The method of claim 14, wherein utilizing rules defined by fraud investigators comprises utilizing one or more rules in multiple stages of filtration.

### Claim 16 (depends on 1)

The method of claim 1, further comprising:
initiating a fraud detection-related action for one or more potentially fraudulent transactions identified by performing the multi-stage filtering on the transaction data received.

### Claim 17

A computer program product for varying a capacity of a fraud detection system, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:
an executable portion configured to determine a current transaction volume being processed by a financial institution, wherein the current transaction volume is a number of current transactions being received and sent by the financial institution per unit of time;
an executable portion configured to determine an estimated transaction volume for a future time period, wherein the estimated transaction volume for the future time period is a number of estimated transactions that will be received and sent by the financial institution per unit of time for the future time period based on a historical transaction volume of a same or similar time period;
an executable portion configured to vary the capacity of the filtering system or application based on the current transaction volume and the estimated transaction volume for the future time period;
an executable portion configured to receive transaction data related to one or more transactions from the transaction volume being processed; and
an executable portion configured to perform multi-stage filtering on the transaction data received.

### Claim 18 (depends on 17)

The computer program product of claim 17, wherein the executable portion for determining the transaction volume comprises monitoring transaction queues at the financial institution.

### Claim 19 (depends on 17)

The computer program product of claim 17, wherein the historical transaction volume of the same or similar time period is a number of transactions per unit of time that occurred on a same day and time on a past date.

### Claim 20 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises increasing the capacity of a server.

### Claim 21 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises increasing the capacity of a memory.

### Claim 22 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises increasing a CPU speed.

### Claim 23 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises decreasing the capacity of a server.

### Claim 24 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises decreasing the capacity of a memory.

### Claim 25 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises decreasing a CPU speed.

### Claim 26 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises increasing software seats.

### Claim 27 (depends on 17)

The computer program product of claim 17, wherein the executable portion for varying the capacity of the system comprises decreasing software seats.

### Claim 28 (depends on 17)

The computer program product of claim 17, wherein the executable portion for performing multi-stage filtering on the transaction data received comprises performing a preliminary stage filtering on the transaction data.

### Claim 29 (depends on 28)

The computer program product of claim 28, wherein performing the preliminary stage filtering comprises one or more stages of filtering.

### Claim 30 (depends on 17)

The computer program product of claim 17, wherein the executable portion for performing multi-stage filtering on the transaction data received comprises performing filtration utilizing rules defined by fraud investigators.

### Claim 31 (depends on 17)

The computer program product of claim 17, wherein utilizing rules defined by fraud investigators comprises utilizing one or more rules in multiple stages of filtration.

### Claim 32 (depends on 17)

The computer program product of claim 17, further comprising:
executable portion for initiating a fraud detection-related action for one or more potentially fraudulent transactions identified by performing the multi-stage filtering on the transaction data received.

### Claim 33

A system for varying a capacity of a fraud detection system, comprising:
a memory device;
a communication device; and
a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute computer-readable program code to:
determine a current transaction volume being processed by a financial institution, wherein the current transaction volume is a number of current transactions being received and sent by the financial institution per unit of time;
determine an estimated transaction volume for a future time period, wherein the estimated transaction volume for the future time period is a number of estimated transactions that will be received and sent by the financial institution per unit of time for the future time period based on a historical transaction volume of a same or similar time period;
vary the capacity of the filtering system or application based on the current transaction volume and the estimated transaction volume for the future time period;
receive transaction data related to one or more transactions from the transaction volume being processed; and
perform multi-stage filtering on the transaction data received.

### Claim 34 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to determine the transaction volume comprises monitoring transaction queues at the financial institution.

### Claim 35 (depends on 33)

The system of claim 33, wherein the historical transaction volume of the same or similar time period is a number of transactions per unit of time that occurred on a same day and time on a past date.

### Claim 36 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises increasing the capacity of a server.

### Claim 37 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises increasing the capacity of a memory.

### Claim 38 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises increasing a CPU speed.

### Claim 39 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises decreasing the capacity of a server.

### Claim 40 (depends on 1)

The method of claim 1, wherein varying the capacity of the system comprises decreasing the capacity of a memory.

### Claim 41 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises decreasing a CPU speed.

### Claim 42 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises increasing software seats.

### Claim 43 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to vary the capacity of the system comprises decreasing software seats.

### Claim 44 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to perform multi-stage filtering on the transaction data received comprises performing a preliminary stage filtering on the transaction data.

### Claim 45 (depends on 44)

The system of claim 44, wherein the preliminary stage filtering comprises one or more stages of filtering.

### Claim 46 (depends on 33)

The system of claim 33, wherein the processing device configured to execute computer-readable program code to perform multi-stage filtering on the transaction data received comprises performing filtration utilizing rules defined by fraud investigators.

### Claim 47 (depends on 46)

The system of claim 46, wherein utilizing rules defined by fraud investigators comprises utilizing one or more rules in multiple stages of filtration.

### Claim 48 (depends on 33)

The system of claim 33, wherein the processing device if further configured to execute computer-readable program code to initiate a fraud detection-related action for one or more potentially fraudulent transactions identified by performing the multi-stage filtering on the transaction data received.