Systems and methods for fraudulent activity detection

Patent metadata

Field	Value
Publication number	US-12321951-B2
Application number	US-202217722196-A
Country	US
Kind code	B2
Filing date	Apr 15, 2022
Priority date	Apr 16, 2021
Publication date	Jun 3, 2025
Grant date	Jun 3, 2025

Abstract

An apparatus for detecting fraudulent activity includes a device property data processing circuit, a security analysis circuit, an alert circuit, and an alert provisioning circuit. The device property data processing circuit is structured to interpret device property data corresponding to a device registered with an Internet of Things (IoT) device registry. The security analysis circuit is structured to determine, based at least in part on the device property data, that the device is subject to a fraud event. The alert circuit is structured to generate, responsive to the determined fraud event, a message that identifies the device. The alert provisioning circuit is structured to transmit the message.

First claim

What is claimed is:

1. An apparatus, comprising:
a device registration circuit structured to:
interpret a device registration request for a device, wherein the device registration request has first device property data;
generate, based at least in part on the first device property data, an Internet of Things Universal ID (IoT UID) in response to the registration request, the IoT UID comprising a meta identity component and a service identity component; and
store the first device property data with the IoT UID in a record in a database;

a device property data processing circuit structured to interpret second device property data corresponding to the device;
a security analysis circuit structured to determine, based at least in part on the second device property data and the first device property data, that the device is subject to a fraud event;
an alert circuit structured to generate, responsive to the determined fraud event, a message that identifies the device; and
an alert provisioning circuit structured to transmit the message.

2. The apparatus of claim 1 , wherein the security analysis circuit comprises:
an artificial intelligence circuit structured to detect the fraud event, based at least in part on analyzing the first device property data and the second device property data using an artificial intelligence process.

3. The apparatus of claim 2 , wherein the artificial intelligence process includes a neural network.

4. The apparatus of claim 3 , wherein the neural network is trained on detecting correlations between the fraud event and at least one of:
a cyber-attack;
a software version;
a firmware version;
a hardware version;
an unauthorized access;
a device failure event;
device ownership;
a device manufacturer;
a location; or
a network outage.

5. The apparatus of claim 2 , wherein the artificial intelligence process is based at least in part on a deep learning network.

6. The apparatus of claim 1 , further comprising:
a visualization circuit structured to generate and transmit fraud event visualization data configured to depict a visualization of the fraud event on an electronic display.

7. The apparatus of claim 6 , wherein the visualization is a map.

8. A method, comprising:
interpreting, via a device registration circuit, a device registration request for a device, wherein the device registration request has first device property data;
generating, via the device registration circuit and based at least in part on the first device property data, an Internet of Things Universal ID (IoT UID) in response to the registration request, the IoT UID comprising a meta identity component and a service identity component;
storing, via the device registration circuit, the first device property data with the IoT UID in a record in a database;
interpreting, via a device property data processing circuit, second device property data corresponding to the device;
determining, via a security analysis circuit based at least in part on the second device property data and the first device property data, that the device is subject to a fraud event;
generating, responsive to the determined fraud event, via an alert circuit, a message that identifies the device; and
transmitting, via an alert provisioning circuit, the message.

9. The method of claim 8 , further comprising transmitting, via the alert provisioning circuit, the message to at least one of:
a device management platform corresponding to the device;
a user of the device;
a manufacturer of the device; or
an entity that monitors the device.

10. The method of claim 8 , further comprising displaying the message via a display circuit.

11. The method of claim 8 , further comprising logging the fraud event in a database via a fraud event log circuit.

12. The method of claim 8 , further comprising:
interpreting, via a device management platform, the message transmitted by the alert provisioning circuit; and
by the device management platform, at least one of:
quarantining the device;
disabling the device; or
patching the device.

13. The method of claim 8 , further comprising providing a trust indicator for the device, based at least in part on the determined fraud event.

14. The method of claim 8 , further comprising interpreting a device event message and updating the record based at least in part on the device event message.

15. An apparatus, comprising:
a device registration circuit structured to:
interpret a device registration request for a device, wherein the device registration request has device property data;
generate, based at least in part on the device property data, an Internet of Things Universal ID (IoT UID) in response to the registration request, the IoT UID comprising a meta identity component and a service identity component; and
store the device property data with the IoT UID in a record in a database;

a device property data processing circuit structured to:
at a first time, interpret the device property data corresponding to the device; and
at a second time, interpret the device property data corresponding to the device;

a change detection circuit structured to detect a change in the device property data between the first time and the second time;
a fraud detection circuit structured to determine that the change corresponds to a fraud event;
an alert circuit structured to generate, responsive to the determining that the change corresponds to a fraud event, a message that identifies the device corresponding to the device property data; and
an alert provisioning circuit structured to transmit the message.

16. The apparatus of claim 15 , wherein the fraud detection circuit comprises:
an artificial intelligence circuit structured to detect the fraud event, based at least in part on analyzing the device property data using an artificial intelligence process.

17. The apparatus of claim 16 , wherein the artificial intelligence process includes a neural network.

18. The apparatus of claim 17 , wherein the neural network is trained on detecting correlations between the fraud event and at least one of:
a cyber-attack;
a software version;
a firmware version;
a hardware version;
an unauthorized access;
a device failure event;
device ownership;
a device manufacturer;
a location; or
a network outage.

Assignees

• Somos Inc

Inventors

• Brazao Eduardo Correia Da Silva
• Brumer Steven Norman
• Klein Ian Michael
• Kong Li
• Plante Marc Rudloff
• Ramachandran Sridhar
• Shyu Kimberly Tashner
• Sliwa Robert Janusz
• Smith Jeffrey Scott
• Wendt Christopher Anton
• Yu Haofang

Classifications

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L43/0817

  by checking functioning · CPC title

• H04L41/0813

  characterised by the conditions triggering a change of settings · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title