Mci Communications Corporation

Verizon Patent and Licensing Inc.

Mci, Inc.

Worldcom, Inc.

John Charles Gavan

Kevin Paul

Saralyn M Mahone

Charles Alan Dallas

James J Wagner

Jim Richards

Hans Van Arkel

Cheryl Herrington

Terrill J Curtis

Terrell J Curtis

Terril J Curtis

A system, method and computer program product for processing event records. The present invention includes a detection layer, an analysis layer, an expert systems layer and a presentation layer. The layered system includes a core infrastructure and a configurable, domain-specific implementation. The detection layer employs one or more detection engines, such as, for example, a rules-based thresholding engine and a profiling engine. The detection layer can include an AI-based pattern recognition engine for analyzing data records, for detecting new and interesting patterns and for updating the detection engines to insure that the detection engines can detect the new patterns. In one embodiment, the present invention is implemented as a telecommunications fraud detection system. When fraud is detected, the detection layer generates alarms which are sent to the analysis layer. The analysis layer filters and consolidates the alarms to generate fraud cases. The analysis layer preferably generates a probability of fraud for each fraud case. The expert systems layer receives fraud cases and automatically initiates actions for certain fraud cases. The presentation layer also receives fraud cases for presentation to human analysts. The presentation layer permits the human analysts to initiate additional actions.

System and method for detecting and managing fraud

A system, method and computer program product for processing event records. The present invention includes a detection layer, an analysis layer, an expert systems layer and a presentation layer. The layered system includes a core infrastructure and a configurable, domain-specific implementation. The detection layer employs one or more detection engines, such as a rules-based thresholding engine and a profiling engine. The detection layer can include an Artificial Intelligence based pattern recognition engine for analyzing data records, for detecting new and interesting patterns and for updating the detection engines to insure that the detection engines can detect the new patterns. In one embodiment, the present invention is implemented as a telecommunications fraud detection system. When fraud is detected, the detection layer generates alarms which are sent to the analysis layer. The analysis layer filters and consolidates the alarms to generate fraud cases. The analysis layer preferably generates a probability of fraud for each fraud case. The expert systems layer receives fraud cases and automatically initiates actions for certain fraud cases. The presentation layer also receives fraud cases for presentation to human analysts. The presentation layer permits the human analysts to initiate additional actions.

System, method and computer program product for processing event records

A configurable and scalable rules-based thresholding system, method and computer program product for processing event records includes a core infrastructure and a configurable domain-specific implementation. The core infrastructure is generically employed regardless of the actual type of network being monitored. The domain-specific implementation is provided with user specific data and rules. The core infrastructure includes an event record enhancer which enhances events with additional data and a threshold detector which determines whether an enhanced event record, alone or in light of prior event records, exceeds one or more thresholds. The enhancer can access external databases for additional information related to an event record. In one embodiment, the enhancer generates feature vectors to represent enhanced event records. The threshold detector receives enhanced event records from the event record enhancer. The threshold detector selects one or more threshold rules from a database of threshold rules for applying to the enhanced event records. Where enhanced event records are in the form of feature vectors containing features and feature values, the threshold detector selects one or more threshold rules based upon the features or feature values in the vector. Where the feature vector includes a threshold for a feature value, the threshold detector tests the feature values against the threshold. The threshold detector may access prior event records in order to apply one or more threshold rules.

System, method and computer program product for a dynamic rules-based threshold engine

A system, method and computer program product for interactively enhancing and presenting event data includes an enhancing portion and a presentation server. The enhancing portion includes a case enhancer that uses configuration data and an optional rules-based enhancing engine to enhance cases. The case enhancer includes a first informant that retrieves data from external data systems. The presentation server includes a presentation interface which interfaces one or more client workstations with a case data base. The presentation server also includes a second informant which interfaces the presentation interface with external data systems. The presentation server also includes an enforcer which interfaces the presentation interface with external action systems. A multi-level security system controls access to databases, the second informant and to the enforcer. In an exemplary embodiment, the security system includes a core infrastructure and a domain-specific implementation. The core infrastructure comprises client access rules which specify an upper threshold, or greater realm, of data that a client may access. The domain-specific implementation comprises user access rules which further limit access by individual users. In an exemplary embodiment, the presentation server utilizes display scripts to control display of enhanced event data instead of compiled code. Display scripts may be flagged as prototype display scripts that can be used only by authorized users during runtime.

System, method and computer product for interactively presenting event

An intelligent services network platform (ISN) of a telephone carrier network is equipped with a fax store and forward system (FSFS) capable of relaying fax transmissions between a customer's fax machine and an international destination. An autodialer associated with the fax machine automatically dials an 800 number designating the FSFS. It also automatically dials the preselected destination number and concurrently transmits an identification of the transmitting fax machine. An automatic call distributor in the ISN responds to the 800 number and transfers the fax transmission to an automated response unit which validates the customer's call. Thereafter, The FSFS is enabled to communicate directly with the sending fax machine to receive and store the transmitted fax. The FSFS will subsequently relay the fax transmission, even if repeated attempts are necessary, to the international destination through a bridging switch in the ISN and an international gateway switch connected to the network, external of the ISN. The FSFS generates confirmations for the customer and billing data.

Intelligent network-based store and forward fax system

Growing community of inventors

Colorado Springs, CO, United States of America

John Charles Gavan