Patent ID: 7856494

Claim:
A method for detecting and interdicting fraudulent activity on a network, the method comprising: receiving, by a fraud detection device, at least a portion of a user session comprising a plurality of interactions between a plurality of data centers and one or more devices, remote from the data centers, of a user, from a data reconstruction device; determining, at the fraud detection device and based on geo-location information associated with the at least a portion of the user session, whether a communication path between the plurality of data centers and the one or more remote devices includes a suspicious network to generate a fraudulent geo-location indicator; determining, at the fraud detection device and based on user behavior information associated with the at least a portion of the user session, whether the user behavior information deviates from a baseline of normal activity to generate a fraudulent behavior indicator; determining, at the fraud detection device and based on a plurality of application interactions associated with the at least a portion of the user session, whether the plurality of application interactions fall outside a normal range of interactions to generate a fraudulent application interaction indicator, wherein the plurality of application interactions originate from application modules at the plurality of data centers and the remote user devices; determining, at the fraud detection device and based on financial transaction information associated with the at least a portion of the user session, whether the financial transaction information includes pre-defined patterns associated with fraudulent financial account activity to generate a fraudulent financial transaction indicator; combining, at the fraud detection device, the fraudulent geo-location indicator, the fraudulent behavior indicator, the fraudulent application interaction indicator, and the fraudulent financial transaction indicator to generate a session confidence value; and interdicting, by the fraud detection device, the user session if the session confidence value falls below a predetermined threshold.