Patent ID: 8499355

Claim:
A method for performing risk analysis, comprising: receiving, by a risk engine device, a resource request from a client device; comparing, by the risk engine device, identification information associated with the resource request with a Bloom filtered authentication list, the Bloom filtered authentication list stored in memory associated with the risk engine device and the Bloom filtered authentication list being derived from a master authentication list; when detecting a lack of correspondence between the identification information and the Bloom filtered authentication list, refraining, by the risk engine device, from adjusting a risk score associated with the client device; when detecting a correspondence between the identification information and an entry in the Bloom filtered authentication list, comparing, by the risk engine device, the identification information with the master authentication list, the master authentication list stored in a database; when detecting a lack of correspondence between the identification information and the master authentication list, refraining, by the risk engine device, from adjusting the risk score associated with the client device; and when detecting a correspondence between the identification information and an entry in the master authentication list, adjusting, by the risk engine device, the risk score associated with the client device.