US5706338A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Real-time communications fraud monitoring system
Assignee: AT&T Inc
•
Filing: 1996-07-25
•
Granted: 1998-01-06
•
Expires: 2016-07-25
Abstract
Abstract Increased network security is provided by monitoring in real time one or more characteristics or attributes of telephone calls that are placed through the network and notifying the network customer (i.e., the party responsible for paying for the telephone calls), in real time, when the attributes are indicative of abnormal or fraudulent network usage. The network customer, once notified of the abnormal usage, is in a position to take steps to minimize unauthorized network usage. For example, the network customer can selectively block network usage, deny access to the network on a call-by-call basis, or trace the call to catch the unauthorized user while the call is still in progress.
Inventors
- 👤 Wayne E. Relyea
- 👤 Suzanne E. Ronca
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 18:35
CPC Classifications
H; H04; H04M; H04M15/00; H04M15/47; H04M7/00; H04M7/006; H04M7/0081; H04M7/0084; H04M3/00; H04M3/22; H04M3/36; H04M3/38; H04M3/42; H04M3/4228; H04Q; H04Q3/00; H04Q3/0016; H04Q3/0029; H04Q3/58; H04Q3/62; H04M2203/00; H04M2203/60; H04M2203/6027; H04M2215/00; H04M2215/01; H04M2215/0148; H04Q2213/00; H04Q2213/13092; H04Q2213/13093; H04Q2213/13095; H04Q2213/13097; H04Q2213/13103; H04Q2213/1313; H04Q2213/13139; H04Q2213/13179; H04Q2213/13204; H04Q2213/13216; H04Q2213/1322; H04Q2213/13284; H04Q2213/13383; H04Q2213/13512; H04Q2213/13515; H04Q2213/13545
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
142 words
A method of monitoring a telephone call from a calling communication station to a called communication station through a communications network to detect abnormal usage of the communications network, the method comprising the steps of: collecting in real time a plurality of predetermined attributes of the telephone call; retrieving from a database predetermined criteria, the predetermined criteria representing abnormal usage of the communications network; comparing the plurality of predetermined attributes collected for the telephone call to the retrieved predetermined criteria to determine in real time whether the telephone call represents abnormal usage of the communications network; generating in real time an indication of abnormal usage of the communications network when the plurality of predetermined attributes satisfy the predetermined criteria; and delivering in real time the indication of abnormal usage to a network customer responsible for paying for usage of the communications network.
Claim 2
Independent Claim
142 words
A method of monitoring a telephone call from a calling communication station to a called communication station through a communications network to detect abnormal usage of the communications network, the method comprising the steps of: collecting in real time a plurality of predetermined attributes of the telephone call; retrieving from a database predetermined criteria, the predetermined criteria representing abnormal usage of the communications network; comparing the plurality of predetermined attributes collected for the telephone call to the retrieved predetermined criteria to determine in real time whether the telephone call represents abnormal usage of the communications network; generating in real time an indication of abnormal usage of the communications network when the plurality of predetermined attributes satisfy the predetermined criteria; and delivering in real time the indication of abnormal usage to a network customer responsible for paying for usage of the communications network.
Claim 3
Dependent Claim
20 words
The invention as described in claim 1 wherein the plurality of predetermined attributes are collected while the call is in-progress.
Claim 4
Dependent Claim
19 words
The invention as described in claim 1 wherein the generating step is performed while the call is in progress.
Claim 5
Dependent Claim
22 words
The invention as described in claim 1 wherein the predetermined criteria are thresholds indicative of possible unauthorized use of the communications network.
Claim 6
Dependent Claim
24 words
The invention as described in claim 4 wherein the thresholds are indicative of abnormal usage for calls originating from a predetermined originating telephone number.
Claim 7
Dependent Claim
23 words
The invention as described in claim 4 wherein the thresholds are indicative of abnormal usage for calls placed using a predetermined authorization code.
Claim 8
Dependent Claim
23 words
The invention as described in claim 4 wherein the thresholds are indicative of abnormal usage for calls placed using a predetermined 800 number.
Claim 9
Dependent Claim
23 words
The invention as described in claim 4 wherein the thresholds are indicative of abnormal usage for calls placed to a predetermined termination location.
Claim 10
Dependent Claim
78 words
The invention as described in claim 1 further comprising the steps of: processing at least one of the predetermined attributes to derive at least one derived attribute; retrieving from the database additional predetermined criteria, the additional predetermined criteria representing abnormal usage of the communications network; comparing the at least one derived attribute with the additional predetermined criteria; and generating a second indication of abnormal use of the communications network when the derived attribute satisfies the additional predetermined criteria.
Claim 11
Dependent Claim
26 words
The invention as described in claim 1 further comprising the step of tracing the telephone call when the plurality of predetermined attributes satisfy the predetermined criteria.
Claim 12
Dependent Claim
31 words
The invention as described in claim 1 further comprising the step of modifying, in real time, access to the communications network when the plurality of predetermined attributes satisfy the predetermined criteria.
Claim 13
Dependent Claim
16 words
The invention as described in claim 11 wherein the modifying step comprises terminating the telephone call.
Claim 14
Dependent Claim
20 words
The invention as described in claim 11 wherein the modifying step comprises automatically blocking completion of a subsequent telephone call.
Claim 15
Independent Claim
156 words
A method of monitoring a telephone call from a calling communication station to a called communication station through a communications network to detect abnormal usage of the communications network, the method comprising the steps of: collecting in real time a plurality of predetermined attributes of the telephone call; retrieving from a database predetermined criteria, the predetermined criteria representing abnormal usage of the communications network; comparing the plurality of predetermined attributes collected for the telephone call to the retrieved predetermined criteria to determine, in real time, whether the telephone call represents abnormal usage of the communications network; modifying, in real time, access to the network in accordance with action previously authorized by a network customer responsible for paying for usage of the communications network when the comparison of plurality of predetermined attributes and the predetermined criteria indicates abnormal usage of the communications network is occurring; and notifying the network customer of abnormal usage of the communications network.
Claim 16
Independent Claim
156 words
A method of monitoring a telephone call from a calling communication station to a called communication station through a communications network to detect abnormal usage of the communications network, the method comprising the steps of: collecting in real time a plurality of predetermined attributes of the telephone call; retrieving from a database predetermined criteria, the predetermined criteria representing abnormal usage of the communications network; comparing the plurality of predetermined attributes collected for the telephone call to the retrieved predetermined criteria to determine, in real time, whether the telephone call represents abnormal usage of the communications network; modifying, in real time, access to the network in accordance with action previously authorized by a network customer responsible for paying for usage of the communications network when the comparison of plurality of predetermined attributes and the predetermined criteria indicates abnormal usage of the communications network is occurring; and notifying the network customer of abnormal usage of the communications network.
Claim 17
Dependent Claim
20 words
The invention as described in claim 14 wherein the plurality of predetermined attributes are collected while the call is in-progress.
Claim 18
Dependent Claim
22 words
The invention as described in claim 14 wherein the predetermined criteria are thresholds indicative of possible unauthorized use of the communications network.
Claim 19
Dependent Claim
25 words
The invention as described in claim 14 wherein the predetermined criteria are indicative of abnormal usage for calls originating from a predetermined originating telephone number.
Claim 20
Dependent Claim
24 words
The invention as described in claim 14 wherein the predetermined criteria are indicative of abnormal usage for calls placed using a predetermined authorization code.
Claim 21
Dependent Claim
24 words
The invention as described in claim 14 wherein the predetermined criteria are indicative of abnormal usage for calls placed using a predetermined 800 number.
Claim 22
Dependent Claim
24 words
The invention as described in claim 14 wherein the predetermined criteria are indicative of abnormal usage for calls placed to a predetermined termination location.
Claim 23
Dependent Claim
77 words
The invention as described in claim 14 further comprising the steps of: processing at least one of the predetermined attributes to derive at least one derived attribute; retrieving from the database additional predetermined criteria, the additional predetermined criteria representing abnormal usage of the communications network; comparing the at least one derived attribute with the additional predetermined criteria; and generating an indication of abnormal use of the communications network when the derived attribute satisfies the additional predetermined criteria.
Claim 24
Independent Claim
201 words
A method for monitoring a communications network to detect abnormal usage of the communications network, the method comprising the steps of: receiving in real time a call detail record for a telephone call placed through the communications network, the call detail record including a plurality of attributes of the telephone call and an authorization code for obtaining access to the communications network; determining the authorization code for the telephone call from the call detail record; searching a database of authorization codes and predetermined criteria associated with each of the authorization codes, using the authorization code for the telephone call, to determine if predetermined criteria are associated with the authorization code for the telephone call; comparing the plurality of attributes of the call detail record for the telephone call with the predetermined criteria associated with the authorization code for the telephone call; generating, in real time, an indication of abnormal usage of the communications network for the authorization code when the plurality of attributes of the call detail record for the telephone call satisfy the predetermined criteria for the authorization code; and notifying a network customer responsible for paying for usage of the communications network of abnormal usage of the communications network.
Claim 25
Independent Claim
201 words
A method for monitoring a communications network to detect abnormal usage of the communications network, the method comprising the steps of: receiving in real time a call detail record for a telephone call placed through the communications network, the call detail record including a plurality of attributes of the telephone call and an authorization code for obtaining access to the communications network; determining the authorization code for the telephone call from the call detail record; searching a database of authorization codes and predetermined criteria associated with each of the authorization codes, using the authorization code for the telephone call, to determine if predetermined criteria are associated with the authorization code for the telephone call; comparing the plurality of attributes of the call detail record for the telephone call with the predetermined criteria associated with the authorization code for the telephone call; generating, in real time, an indication of abnormal usage of the communications network for the authorization code when the plurality of attributes of the call detail record for the telephone call satisfy the predetermined criteria for the authorization code; and notifying a network customer responsible for paying for usage of the communications network of abnormal usage of the communications network.
References Cited (Backward Citations)
US4811378A
Cited
US4799255A
Cited
US4761808A
Cited
US5223699A
Cited
US5163086A
Cited
US5353335A
Cited
US5357564A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-01-05 | 2001-07-07 | 2002-01-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-01-05 | 2005-07-07 | 2006-01-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-01-05 | 2009-07-07 | 2010-01-06 | $7700.00 | Window Closed / Lapsed |