公开(公告)号：US20040111305A1

公开(公告)日：2004-06-10

申请号：US10627033

申请日：2003-07-24

Applicant: WorldCom, INC.

Inventor： John Gavan ,  Kevin Paul ,  Jim Richards ,  Charles A. Dallas ,  Hans Van Arkel ,  Cheryl Herrington ,  Saralyn Mahone ,  Terreil J. Curtis ,  James J. Wagner

IPC: G06F017/60

CPC classification number: G06Q20/401 ,  H04J3/175 ,  H04L41/0604 ,  H04L41/0631 ,  H04L41/16 ,  H04M3/2218 ,  H04M3/36 ,  H04M15/00 ,  H04M15/08 ,  H04M15/47 ,  H04M2215/0148 ,  H04M2215/62 ,  H04Q3/0062

Abstract: A system, method and computer program product for processing event records. The present invention includes a detection layer, an analysis layer, an expert systems layer and a presentation layer. The layered system includes a core infrastructure and a configurable, domain-specific implementation. The detection layer employs one or more detection engines, such as, for example, a rules-based thresholding engine and a profiling engine. The detection layer can include an AI-based pattern recognition engine for analyzing data records, for detecting new and interesting patterns and for updating the detection engines to insure that the detection engines can detect the new patterns. In one embodiment, the present invention is implemented as a telecommunications fraud detection system. When fraud is detected, the detection layer generates alarms which are sent to the analysis layer. The analysis layer filters and consolidates the alarms to generate fraud cases. The analysis layer preferably generates a probability of fraud for each fraud case. The expert systems layer receives fraud cases and automatically initiates actions for certain fraud cases. The presentation layer also receives fraud cases for presentation to human analysts. The presentation layer permits the human analysts to initiate additional actions.

Abstract translation: 用于处理事件记录的系统，方法和计算机程序产品。 本发明包括检测层，分析层，专家系统层和表示层。 分层系统包括核心基础设施和可配置的域特定实现。 检测层采用一个或多个检测引擎，例如基于规则的阈值引擎和轮廓引擎。 检测层可以包括用于分析数据记录的基于AI的模式识别引擎，用于检测新的和有趣的模式，并且用于更新检测引擎以确保检测引擎可以检测新的模式。 在一个实施例中，本发明被实现为电信欺诈检测系统。 当检测到欺诈时，检测层产生发送到分析层的报警。 分析层过滤并整合警报以产生欺诈案例。 分析层优选地针对每个欺诈情况产生欺诈的概率。 专家系统层收到欺诈案件，并自动启动针对某些欺诈案件的行为。 演示层还会收到欺诈案件，以呈现给人类分析人员。 演示层允许人类分析人员发起额外的动作。