Patent ID: 11922421
Assignee: ULFBERHT LABS CORP.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 6:
7. A system comprising:
one or more processors;
one or more storage devices operatively coupled to the processor;
instructions, stored on the one or more storage devices, which, when executed by the one or more processors, cause:
receiving, by a server, an event instance via a programming interface, the event instance representing an occurrence of a corresponding type of real-world event and comprising one or more variable values pertaining to the occurrence, the event instance stored in an event cache of the server;
periodically applying conditional logic via a rules engine in the server to a ruleset as applied to the event instance including, for each of one or more applications of the ruleset to the event instance:
binding one or more variables of one or more rules of the ruleset to one or more variable values of the event instance, and
binding one or more other variables of the one or more rules of the ruleset to one or more just-in-time variable values, the one or more just-in-time variable values received via one or more programming interfaces in context of the application of the ruleset, wherein the one or more programming interfaces includes a graph programming interface that provides access to one or more variable values that describe a graph, the graph including nodes that represent event instances and edges between the nodes that represent relationships between event instances; and

generating an alert, the alert reflecting a result of the application of the conditional logic to the ruleset, wherein the alert reflecting the result of the application of the conditional logic to the ruleset includes:
a first application of the conditional logic to that ruleset that includes a particular rule that is bound to a particular just-in-time variable value, and
a second application of the conditional logic to that ruleset that includes the particular rule that is bound to the particular just-in-time variable value;
wherein the second application of conditional logic occurs later in time than the first application of conditional logic;
wherein the first application of conditional logic includes applying the particular rule to obtain a first output label; and
wherein the second application of conditional logic includes applying the particular rule to obtain a second output label that is different from the first output label; and

determining a degree of fraudulent activity based on:
a number of rules of the ruleset that evaluate to a particular output label, and
weights assigned to each rule of the ruleset;
wherein the one or more rules of the ruleset that are bound to the one or more just-in-time variable values are assigned greater weight than the one or more rules of the ruleset that are bound to the one or more variable values of the event instance for determining the degree of fraudulent activity; and

wherein the alert is generated based on the degree of fraudulent activity.