At&t Intellectual Property I, LP

Other

At&t Mobility Ii LLC

Tripos, Inc.

Edmond J Abrahamian

Ana Armenta

Prince Paulraj

Andrew Campbell

Robert D Clark

Peter T Fox

David Patterson

Elijah Hall

Surya Murali

Essam Metwally

James H Pratt

Sheldon Kent Meredith

Lauren Savage

Maisam Shahid Wasti

Jean Luo

Anomalies associated with events relating to users or user accounts can be detected. An anomaly detection management component (ADMC) determines embedded arrays comprising data bit groups representative of groups of properties and groups of relationships between properties associated with users, based on analysis of data related to events associated with users. ADMC trains a neural network (NN) based on applying embedded arrays to NN, in accordance with an artificial intelligence (AI) analysis process. ADMC determines an embedded array comprising data bits representative of properties and relationships between properties associated with a user based on analysis of data associated with the user. Trained NN can determine a pattern relating to the properties and relationships associated with the user based on AI-based analysis of the embedded array. Trained NN can detect an anomaly in the pattern based on AI-based analysis of the pattern, wherein the anomaly relates to an event.

Anomaly detection relating to communications using information embedding

A processing system may obtain a request to add at least a first feature to a feature graph database, where the request comprises a first feature ontology of the first feature, and where the first feature ontology comprises: a label of the first feature and a relationship of the first feature to a concept or to another feature. The processing system may then identify whether the first feature is a duplicate of a second feature in the feature graph database based at least upon the first feature ontology and a second feature ontology of the second feature and generate an indication of whether the first feature is a duplicate in response to the identifying.

Disambiguation of feature graph databases

A processing system may maintain a relationship graph that includes nodes and edges representing phone numbers and device identifiers having associations with the phone numbers. The processing system may obtain an identification of a first phone number or a first device identifier for a fraud evaluation and extract features from the relationship graph associated with at least one of the first phone number or the first device identifier. The plurality of features may include one or more device identifiers associated with the first phone number, or one or more phone numbers associated with the first device identifier. The processing system may then apply the features to a prediction model that is implemented by the processing system and that is configured to output a fraud risk value of the first phone number or the first device identifier and implement at least one remedial action in response to the fraud risk value.

Relationship graphs for telecommunication network fraud detection

A method for detecting threat pathways using sequence graphs includes constructing a sequence graph from a set of data containing information about activities in a telecommunications service provider network, where the sequence graph represents a subset of the activities that occurs as a sequence, providing an embedding of the sequence graph as input to a machine learning model, wherein the machine learning model has been trained to detect when an input embedding of a sequence graph is likely to indicate a threat activity, determining, based on an output of the machine learning model, whether the subset of the activities is indicative of the threat activity, and initiating a remedial action to mitigate the threat activity.

Detecting threat pathways using sequence graphs

A processing system may obtain a customer identifier at a first retail location of a telecommunication network service provider, determine a recency factor of the identifier, obtain an identification of items of interest to the customer, and determine whether the customer has visited a second retail location of the provider within a time period prior to the customer being at the first retail location. The processing system may then apply, to a fraud detection machine learning model, a plurality of factors comprising: a quantity of items of interest, a value of the items, a factor associated with whether the customer has visited the second retail location within the time period, and the recency factor, where the fraud detection machine learning model outputs a fraud indicator value, determine that the fraud indicator value meets a warning threshold and present a warning to a device at the first retail location.

Machine learning telecommunication network service fraud detection

An example method performed by a processing system obtaining a first port-in number for a first mobile device from a first mobile communications service provider, wherein the first port-in number is known to be involved in fraudulent activity, constructing a social graph of communications between the first port-in number and a plurality of other numbers associated with a plurality of other communications devices, identifying, by the processing system, a maximal subgraph of the social graph, wherein the maximal subgraph connects the first port-in number and a subset of the plurality of other numbers that includes those of the plurality of other numbers for which a usage metric is below a predefined threshold for a defined period of time prior to the first port-in number being ported into the first mobile communications service provider, and identifying, by the processing system, a potential fraud ring, based on the maximal subgraph.

Detecting fraud rings in mobile communications networks

A method and apparatus for identifying a plurality of users of a service of a network service provider as users known to each other are disclosed. For example, the method implemented via a processor obtains location information of a plurality of users of a service of a network service provider, selects a subset of users from the plurality of users that are deemed to be stationary, generates a score for each particular pair of users selected from the subset of users, determines for each particular pair of users, whether the score that is generated is greater than or equal to a threshold, identifies the pair of users as users who know each other, when the score for the particular pair of users is greater than or equal to the threshold, and performs an analysis to provide an offer to the pair of users, wherein the offer is based on the pair of users being identified as users who know each other.

Method and apparatus for identifying users who know each other

Methods, computer-readable media and devices for calculating fraud scores for pending payment transactions are disclosed. A method includes a processor receiving a request for a fraud score. The request comprises a notification of a pending payment transaction that is associated with a credit card of a user and associated with a first location. The processor then detects a location of a device associated with the user, calculates a fraud score based upon the location of the device and the first location, and sends a response comprising the fraud score that is calculated.

Fraud detection via mobile device location tracking

Steric features inherent in the three dimensional disposition of atoms in molecules can be represented as multiplets using a defined set of steric descriptors. The resulting multiplets can be encoded in a compressed form of bitstring known as a bitmap. Such bitmaps can be generated in compressed form and used to compare individual conformers or ensembles of conformers of molecules to each other without decompression. Such comparisons are useful in molecular similarity analysis, in molecular diversity analysis, in database searching, and in conformational analysis.

Growing community of inventors

Richmond Heights, MO, United States of America

Edmond J Abrahamian