METHODS TO IMPROVE FRAUD DETECTION ON CONFERENCE CALLING SYSTEMS BY DETECTION OF NON-TYPICAL USEAGE OF MODERATOR PASSCODE

• US 20110135081A1
• Filed: 12/04/2009
• Published: 06/09/2011
• Est. Priority Date: 12/04/2009
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Lingafelt, Charles Steven, Swantek, James Thomas, Murray, James William
• Application Number:
  US12/631,425
• Publication Number:
  US 20110135081A1
• Time in Patent Office: Days
• US Class Current: 379/203.01
• CPC Class Codes: H04M 2201/12 Counting circuits
• CPC Class Codes: H04M 2203/5027 Dropping a party from a conference
• CPC Class Codes: H04M 3/56 Arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities video conference systems H04N7/15

Abstract

An embodiment of the invention includes a method for detecting fraudulent use in a conference calling system. One or more access parameters are received, wherein the access parameters include an authorized day of week parameter, an authorized time of day parameter, and/or an authorized location parameter. One or more requests to access the conference calling system are received, wherein each request includes a user passcode and one or more request parameters. A processor determines whether the request parameters match the access parameters. Access to the conference calling system is granted when the request parameters match the access parameters; however, the processor performs actions when a request parameter does not match an access parameter.

Claims

1. A method for detecting fraudulent use in a conference calling system, said method including:

receiving at least one access parameter;

receiving a request to access the conference calling system, the request including at least one of a user passcode and at least one request parameter;

determining whether the request parameter matches the access parameter with a processor; and

performing actions with the processor when the request parameter does not match the access parameter.

2. The method according to claim 1, further including permitting access to the conference calling system when the request parameter matches the access parameter.

3. The method according to claim 1, wherein the access parameter includes an authorized day of week parameter, the authorized day of week parameter indicating at least one day of week where access to the conference calling system is authorized, and

wherein the request parameter includes a request day of week parameter, the request day of week parameter indicating a day of week that the request is received.

4. The method according to claim 1, wherein the access parameter includes an authorized time of day parameter, the authorized time of day parameter indicating at least one time of day where access to the conference calling system is authorized, and wherein the request parameter includes a request time of day parameter, the request time of day parameter indicating a time of day that the request is received.

5. The method according to claim 1, wherein the access parameter includes an authorized location parameter, the authorized location parameter indicating at least one location where access to the conference calling system is authorized, and wherein the request parameter includes a request location parameter, the request location parameter indicating a location where the request is sent from.

6. The method according to claim 1, further including obtaining first information from a person assigned the user passcode, wherein said performing of the actions includes

obtaining second information from a person who sent the request to access the conference call, and

determining whether the first information matches the second information.

7. The method according to claim 6, wherein said performing of the actions includes, sending an alert to the person who sent the request to access the conference calling system if the first information matches the second information, the alert indicating that the request parameter does not match the access parameter.

8. The method according to claim 6, wherein the first information includes at least one of an employee number, an identification badge number, a home a telephone number, a home address, a mobile telephone number, an e-mail address, an office telephone number, an office address, and at least one answer to at least one security question entered by the person assigned the user passcode.

9. The method according to claim 1, wherein said performing of the actions includes sending an alert to at least one of an administrator of the conference calling system, a person who sent the request to access the conference calling system, participants of a conference call of the conference calling system, and at least one security personnel, the alert indicating that the request parameter does not match the access parameter.

10. The method according to claim 1, wherein said performing of the actions includes at least one of permitting an administrator of the conference calling system to enter a conference call of the conference calling system, terminating the conference call, and voiding the user passcode.

11. The method according to claim 1, wherein said performing of the actions includes generating and storing a report, where the report includes at least one of the user passcode, the access parameter, the request parameter, and the actions performed.

12. The method according to claim 11, wherein the actions include first information from a person assigned the passcode, and second information from a person who sent the request to access the conference call.

13. A method for detecting fraudulent use in a conference calling system, said method including:

receiving at least one unauthorized access parameter;

receiving a request to access the conference calling system, the request including at least one of a user passcode and at least one request parameter;

determining whether the request parameter matches the unauthorized access parameter with a processor; and

performing at least one of validation actions and alert actions with the processor when the request parameter matches the unauthorized access parameter.

14. The method according to claim 13, wherein the unauthorized access parameter includes an unauthorized day of week parameter, the unauthorized day of week parameter indicating at least one day of week where access to the conference calling system is unauthorized, and wherein the request parameter includes a request day of week parameter, the request day of week parameter indicating a day of week that the request is received.

15. The method according to claim 13, wherein the unauthorized access parameter includes an unauthorized time of day parameter, the unauthorized time of day parameter indicating at least one time of day where access to the conference calling system is unauthorized, and wherein the request parameter includes a request time of day parameter, the request time of day parameter indicating a time of day that the request is received.

16. The method according to claim 13, wherein the unauthorized access parameter includes an unauthorized location parameter, the unauthorized location parameter indicating at least one location where access to the conference calling system is unauthorized, and wherein the request parameter includes a request location parameter, the request location parameter indicating a location where the request is sent from.

17. A system for detecting fraudulent use in a conference calling system, said system including:

an electronic storage device including at least one access parameter;

a receiver for receiving a request to access said conference calling system, the request including at least one of a user passcode and at least one request parameter; and

a processor operatively connected to said electronic storage device and said receiver,

said processor determines whether the request parameter matches the access parameter, and

said processor performs actions when the request parameter does not match the access parameter.

18. The system according to claim 17, wherein the access parameter includes an authorized day of week parameter, the authorized day of week parameter indicating at least one day of week where access to said conference calling system is authorized, and wherein the request parameter includes a request day of week parameter, the request day of week parameter indicating a day of week that the request is received.

19. The system according to claim 17, wherein the access parameter includes an authorized time of day parameter, the authorized time of day parameter indicating at least one time of day where access to said conference calling system is authorized, and wherein the request parameter includes a request time of day parameter, the request time of day parameter indicating a time of day that the request is received.

20. The system according to claim 17, wherein the access parameter includes an authorized location parameter, the authorized location parameter indicating at least one location where access to said conference calling system is authorized, and wherein the request parameter includes a request location parameter, the request location parameter indicating a location where the request is sent from.

21. The system according to claim 17, wherein said receiver receives first information from a person assigned the user passcode and second information from a person who sent the request to access the conference call, and wherein said processor determines whether the first information matches the second information.

22. The system according to claim 17, wherein said processor includes an alert module, said alert module sends an alert to at least one of an administrator of said conference calling system, a person who sent the request to access said conference calling system, participants of a conference call of said conference calling system, and at least one security personnel, the alert indicating that the request parameter does not match the access parameter.

23. The system according to claim 17, wherein said processor does at least one of permits an administrator of said conference calling system to enter a conference call of said conference calling system, terminates the conference call, and voids the user passcode.

24. The system according to claim 17, further including a report generating module for generating and storing a report, where the report includes at least one of the user passcode, the access parameter, the request parameter, and the actions performed.

25. A computer program product for detecting fraudulent use in a conference calling system, said computer program product including:

a computer readable storage medium;

first program instructions to receive at least one access parameter;

second program instructions to receive a request to access the conference calling system, the request including at least one of a user passcode and at least one request parameter;

third program instructions to determine whether the request parameter matches the access parameter with a processor; and

fourth program instructions to perform actions with the processor when the request parameter does not match the access parameter,

wherein said first program instructions, said second program instructions, said third program instructions, and said fourth program instructions are stored on said computer readable storage medium.