System and method for suspect entity detection and mitigation

Patent metadata

Field	Value
Publication number	US-9892465-B2
Application number	US-201414174798-A
Country	US
Kind code	B2
Filing date	Feb 6, 2014
Priority date	Mar 1, 2011
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A plurality of institutions (such as financial institutions) contribute data to a data analysis and linking system. The system analyzes the data to create data nodes (records) associated with an entity, where the entity may be, for example, a person/individual, business, organization, account, address, telephone number, etc. After data is linked, and in order to retrieve linked data, a requester may provide to the system an identifier associated with an entity. The linked data provided by the system in response to the identifier may be in the form of a network of data nodes associated with the entity and for use in assessing risk, such as risk associated with a transaction being conducted by a person. The linked data may also be analyzed at the system to score risk associated with the entity, and the risk score provided in conjunction with or in lieu of the network of data nodes.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a processing system, a plurality of data records from a plurality of data sources, the data records comprising information corresponding to a plurality of entities, each data record comprising one or more data elements, with at least some of the data elements relevant to risk;
comparing, by the processing system, data elements from the plurality of data records to determine if those data elements have common characteristics;
determining, by the processing system, when a data element from a data record in the plurality of data records has a characteristic in common with a data element in other data records in the plurality of data records, and in response to the determining, linking the data records that have data elements with common characteristics, including directly linking one data record to each of the other data records having the characteristic in common with the one data record, by creating, by the processing system, linking identifiers that each identifies one of the links between the one data record and each one of the other data records to which the one data record has been directly linked, and indirectly linking the one data record to other data records not directly linked by creating, by the processing system, linking identifiers that each identifies one of the links between data records directly linked to the one data record and other data records in the plurality of data records linked to the directly linked data records;
storing, by the processing system, the directly and indirectly linked data records in a database, wherein the directly and indirectly linked data records are represented in a form of corresponding data nodes, wherein the directly and indirectly linked data records and their corresponding nodes are grouped in a data network, and wherein the directly and indirectly linked data records and the data network in which they are grouped are associated with an entity;
storing in the database, by the processing system, in association with the one linked data record, the linking identifiers that each identifies one of the links between the directly and indirectly linked data records and their corresponding nodes grouped in the data network;
receiving, by the processing system, an entity identifier of the entity that is separate from the linking identifier, that identifies the entity, and that is used to access at least the one data record;
accessing the one data record in the database using the entity identifier;
in response to the accessing the one data record, providing, by the processing system, each linking identifier that identifies a link between that one data record and each of the other data records directly and indirectly linked to that one data record;
using, by the processing system, each linking identifier to access each of the other data records directly and indirectly linked to that one data record, and thereby provide access to the data network, in which the linked data records are grouped, in response to receiving the entity identifier;
assessing, by the processing system, risk for the entity based on analysis of the data network, including the linked data records; and
creating a risk score reflecting the assessed risk for the entity, based on the analysis of the data network.

2. The method of claim 1 , wherein the data sources comprise at least financial institutions and wherein the data records comprise at least financial information corresponding to the entities.

3. The method of claim 2 , wherein the data sources further comprise non-financial institutions, and wherein the data records are selected from the group consisting of death records, telephone number records, mailing address records, motor vehicle records, driver's license records, real estate property records, business filing records, court filing records, and social network data records.

4. The method of claim 2 , wherein the risk score is further based on an anticipated purpose for accessing the data network.

5. The method of claim 2 , further comprising:
prior to comparing data elements, parsing, by the processing system, each received data record in order to identify data elements of each received data record; and
removing, by the processing system, from the data record any data elements determined to be not useful to the analysis of the data network.

6. The method of claim 5 , wherein the removed data elements are maintained at a historical archive.

7. The method of claim 2 , further comprising:
ranking, by the processing system, the data network based on confidence in the degree of shared commonality between the linked data records having common characteristics.

8. The method of claim 7 , wherein other data networks are formed from grouping other data records having data elements with common characteristics, and wherein the method further comprises:
prioritizing, by the processing system, the data network in relation to the other data networks based on the ranking of the data network.

9. The method of claim 8 , further comprising:
analyzing, by the processing system, the data network based on its priority, wherein the linking of the data records is confirmed or rejected.

10. The method of claim 2 , wherein the accessed data network is provided to an end user, and wherein the method further comprises:
receiving, by the processing system, a perceived score from the end user, the perceived score reflecting the accuracy of the created risk score.

11. The method of claim 2 , wherein the entity identifier is received in connection with a financial transaction, and wherein the access to the data network is provided to an end user to evaluate a risk associated with the financial transaction.

12. The method of claim 2 , wherein the entity is selected from the group consisting of an individual, organization, address, event, device, account, or transaction.

13. The method of claim 2 , further comprising:
storing the created risk score in association with the data network.

14. The method of claim 1 , further comprising:
storing in the database, by the processing system, a node identifier for identifying each of the nodes grouped in the data network and a network identifier identifying the data network.

15. A system for assessing risk associated with an entity, comprising one or more processors programmed to:
create, in a database, a plurality of data nodes representing data received from a plurality of data sources, each data node comprising one or more data elements that are relevant to risk;
determine that a data element in one data node has an identified relationship to a data element in other data nodes in the plurality of data nodes;
create linking identifiers for linking the data nodes into a data node network, each linking identifier identifying a link that represents an identified relationship between at least one data element of one data node in the plurality of data nodes and at least one data element of other data nodes in the plurality of data nodes, including:
directly linking the one data node to each of other data nodes having data elements with the identified relationship to data elements of the one data node, by creating linking identifiers that each identifies one of the links between the one data node and each one of the other data nodes to which the one data node has been directly linked, and
indirectly linking the one data node to other data nodes not directly linked, by creating linking identifiers that each identifies one of the links between data nodes directly linked to the one data node and other data nodes in the pl

Assignees

• Early Warning Services Llc

Inventors

• Love Robin S
• Sgambati Glen
• Wedgeworth Frederick
• Winters Mary
• Lockwood Lucius L

Classifications

• G06Q40/08

  Insurance · CPC title

• G06Q10/10

  Office automation; Time management · CPC title

• G06Q40/12 Primary

  Accounting · CPC title