System and method for detecting fraudulent network usage patterns using real-time network monitoring

Patent 5627886 Issued on May 6, 1997. Estimated Expiration Date:

September 15, 2015. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.

Abstract Claims Description Full Text

Patent References

Apparatus for detecting and preventing subscriber number cloning in a cellular mobile telephone system
Patent #: 5335265
Issued on: 08/02/1994
Inventor: Cooper, et al.

Fraud prevention system and process for cellular mobile telephone networks
Patent #: 5335278
Issued on: 08/02/1994
Inventor: Matchett, et al.

Apparatus and method for detecting fraudulent telecommunication activity
Patent #: 5345595
Issued on: 09/06/1994
Inventor: Johnson, et al.

Telecommunications fraud prevention system and method Patent #: 5351290
Issued on: 09/27/1994
Inventor: Naeini, et al.

Inventor

Bowman, William B.

Assignee

Electronic Data Systems Corporation

Application

No. 528746 filed on 09/15/1995

US Classes:

379/111, WITH USAGE MEASUREMENT (E.G., CALL OR TRAFFIC REGISTER)379/145, Fraud or interference prevention379/189Fraud or improper use mitigating or indication (e.g., "blue box", "black box")

Examiners

Primary: Chin, Stephen
Assistant: Kim, Kevin

Attorney, Agent or Firm

Griebenow; L. Joy

Foreign Patent References

0583135A2 EP 02/13/1994

International Classes

H04M 015/00
H04M 003/00

Abstract

A computerized system and method for detecting fraudulent network usage patterns using real-time network monitoring of at least two disparate networks is shown which receives at least one event record from each of the disparate networks, analyzes each of the received event records to determine its type based on user-defined parameters, identifies predetermined fields in the analyzed event record to be used as keys, measures network usage associated with the key, summarizes usage statistics against at least of the keys, compares statistic totals to predefined thresholds, and responds with an alarm or the like when the thresholds are met or exceeded.