Patent ID: 9552356
Date: 2017-01-24
CPC Classifications: G06F,G06Q

Claim:
1. A method comprising: receiving page requests made by a user of a client computing device, the page requests corresponding to webpages of a website associated with an online entity; storing the received page requests in a server-side log; receiving website-navigation interactions made by the user of the client computing device on the webpages of the website requested in the page requests, the website-navigation interactions made by the user on the webpages of the website being transparent to the server-side log; modifying a first format of the received web site-navigation interactions made by the user of the client computing device on the webpages of the website to match a second format of the received page requests stored in the server-side log; storing the received web site-navigation interactions made by the user on the webpages of the website in a client-side log; merging together the server-side log and the client-side log to form a merged log containing the received page requests and the received website-navigation interactions made by the user on the webpages of the website in a common format; determining, based at least in part on analyzing the merged log, a click stream of the user of the client computing device as the user navigated the webpages of the website associated with the online entity; analyzing the click stream to determine a number of the received web site-navigation interactions made by the user on the webpages of the website per webpage; and determining, based at least in part on the number, whether one or more of the received web site-navigation interactions made by the user on the webpages of the website have characteristics of fraudulent activity.