Patent ID: 8682293
Filing Date: 2014-03-25
Classification: H04M

Abstract:
1. Computer-readable media having computer-executable instructions embodied thereon that, when executed by one or more processors, perform a method of determining a threshold for generating fraud indications related to communications devices, the method comprising: calculating a fraud metric for each user in a first set of users who have previously been determined to be fraudulent, thereby obtaining a first distribution of fraud metrics; calculating the fraud metric for each user in a second set of users who have previously been determined not to be fraudulent, thereby obtaining a second distribution of fraud metrics; determining a classification threshold according to a predetermined policy, the first distribution of metrics, and the second distribution of metrics on the basis of specified criteria; calculating the fraud metric for each user in a third set of users; comparing the fraud metric for each user in the third set of users to the classification threshold; generating a tentative classification for each user in the third set of users, wherein said user is classified as fraudulent if said fraud metric exceeds said threshold and nonfraudulent if said fraud metric does not exceed said threshold; obtaining feedback for said tentative classifications, said feedback including one or more of a false positive rate and a false negative rate; making adjustments to said threshold in response to said feedback, said adjustments including one or more of (A) lowering the threshold when said false positive rate exceeds a maximum permissible false positive rate, and (B) raising the threshold when said false negative rate exceeds a maximum permissible false negative rate; repeating the steps of calculating the metric for each user in the third set of users, comparing the metric to the threshold as adjusted, generating a tentative classification for each user according to the results of said comparison, obtaining feedback for said tentative classifications, and making adjustments to the threshold, until the threshold simultaneously satisfies the maximum permissible false positive rate and the maximum permissible false negative rate.