Patent ID: 11875242
Assignee: NCS PEARSON, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 12:
13. A method comprising:
receiving, by a processor of a resource management server, a notification that an exam delivery event has ended;
in response to the notification, identifying, by the processor, entities related to the exam delivery event, wherein the entities include at least three of a candidate, an exam, a test center, an exam registration event during which the candidate interacts with the system to register to take the exam at the test center, a proctor, or the exam delivery event during which the exam is administered to the candidate under supervision of the proctor;
instructing, by the processor, a model server communicatively coupled to the resource management server to perform a risk assessment of at least a first entity, a second entity, and a third entity of the entities;
retrieving, by a model server from a first entity data store of a data store server, first entity data corresponding to the first entity;
retrieving, by the model server from a second entity data store of the data store server, second entity data corresponding to the second entity;
retrieving, by the model server from a third entity data store of the data store server, third entity data corresponding to the third entity;
generating, by a first machine learning model of the model server, a first entity risk score for the first entity based on the first entity data;
generating, by a second machine learning model of the model server, a second entity risk score for the second entity based on the second entity data;
generating, by a third machine learning model of the model server, a third entity risk score for the third entity based on the third entity data;
receiving, by an aggregate machine learning model of the model server, the first entity risk score, the second entity risk score, and the third entity risk score;
generating, by the aggregate machine learning model, an aggregate risk score based on at least the first entity risk score, the second entity risk score, and the third entity risk score;
receiving, by the processor, the aggregate risk score from the model server;
determining, by the processor, that the aggregate risk score exceeds a predetermined threshold; and
modifying, by the processor, a database entry associated with the exam delivery event, in response to determining that the aggregate risk score exceeds the predetermined threshold, to trigger a fraud investigation of the first entity.