US 9,544,317 B2Granted

Identification of potential fraudulent website activity

AssigneeVerizon Patent and Licensing Inc.

InventorsRajitha R. Kondapalli, Krishna Reddy, Iyer Kasinath, Rajesh Ranjan

Life of this patent

Estimating the term…

Loading patent…

Abstract

Identification of potential fraudulent website activity is performed based on log entry analysis. A log entry representing a user referral from an external referrer is processed to determine whether the referred user performed a log in procedure at a user account website of an organization. The external referrer is, for example, a phishing website. In one example, the referred user first accesses an enterprise website of the organization via the phishing website and subsequently accesses the user account website via the phishing website. In an alternate example, the referred user only accesses the user account website via the phishing website. Upon determining the referred user performed a log in procedure at the user account website, a fraud prevention system is notified.

Claims18

Dependent claims

A system, comprising:

a processor;
storage coupled to the processor;
and
a fraud predictor program stored in the storage, wherein execution of the fraud predictor program by the processor configures the system to implement functions, including functions to:
obtain, from a computer platform configured as a log server for receiving log entries generated by websites operated by an organization, a first log entry representing access by a user to a first website operated by the organization, the user being referred to the first website by an external referrer and the external referrer being an external website not operated by the organization that refers users for access to one or more of the websites operated by the organization;
determine whether the referred user performed a log in procedure for the first website or another one of the websites operated by the organization;
and
upon a determination that the referred user performed a log in procedure, notify a fraud prevention system of potential fraudulent activity related to the referred user;
wherein the implemented function to obtain the first log entry is responsive to a determination that the external referrer is ineligible to refer users for access to the websites operated by the organization.

6 more elements

A method, comprising:

obtaining, by a computer platform configured as a fraud predictor and from a computer platform configured as a log server for receiving log entries generated by websites operated by an organization, a first log entry representing access by a user to a first website operated by the organization, the user being referred to the first website by an external referrer and the external referrer being an external website not operated by the organization that refers users for access to one or more of the websites operated by the organization;
determining, by the fraud predictor, whether the referred user performed a log in procedure for the first website or another one of the websites operated by the organization;
and
upon determining that the referred user performed a log in procedure, notifying, by the fraud predictor, a fraud prevention system of potential fraudulent activity related to the referred user;
wherein the step of obtaining the first log entry is responsive to determining that the external referrer is ineligible to refer users for access to the websites operated by the organization.

2 more elements

A non-transitory machine-readable storage medium having instructions stored therein executable by a processor of a computer platform, wherein execution of the instructions by the processor configures the computer platform to perform functions, including functions to:

obtain, from a computer platform configured as a log server for receiving log entries generated by websites operated by an organization, a first log entry representing access by a user to a first website operated by the organization, the user being referred to the first website by an external referrer and the external referrer being an external website not operated by the organization that refers users for access to one or more of the websites operated by the organization;
determine whether the referred user performed a log in procedure for the first website or another one of the websites operated by the organization;
and
upon a determination that the referred user performed a log in procedure, notify a fraud prevention system of potential fraudulent activity related to the referred user;
wherein the implemented function to obtain the first log entry is responsive to a determination that the external referrer is ineligible to refer users for access to the websites operated by the organization.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/556,678Filed 1 Dec 2014
Published: US 2016/0156641 A12 Jun 2016
Granted: 10 Jan 2017
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/1408
For detecting or protecting against malicious traffic: by monitoring network traffic
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04L 63/1483
Countermeasures against malicious traffic: service impersonation, e.g. phishing, pharming or web spoofing