Patent ID: 9047608
Filing Date: 2015-06-02
Classification: G06Q

Abstract:
1. A method comprising: obtaining, by a processing device, data for a transaction pertaining to access to an application, the transaction data comprising a machine identifier of a machine associated with the transaction; determining, by the processing device, at least one of a number of transactions for the machine identifier or a number of distinct users associated with the machine identifier; determining, by the processing device, a percentile that is assigned to the machine identifier of the transaction based on the at least one of the number of transactions for the machine identifier or the number of distinct users for the machine identifier, and cross-user transaction data for a plurality of transactions associated with a plurality of users, the percentile representing a number of other machine identifiers from the cross-user transaction data that are related to the at least one of the number of transactions for the machine identifier or the number of distinct users for the machine identifier; modifying, by the processing device, a user-level risk evaluation of the transaction based on the percentile assigned to the machine identifier; determining, by the processing device, whether to intervene in the transaction based on the modified risk evaluation; and sending, by the processing device, a message to an application server via a network indicating at least one of the application server to allow the transaction or the application to terminate the transaction based on the determining whether to intervene in the transaction.