GAMING PLATFORM UTILIZING A FRAUD DETECTION PLATFORM

• US 20130296039A1
• Filed: 04/11/2013
• Published: 11/07/2013
• Est. Priority Date: 04/11/2012
• Status: Active Grant

• Current Assignee: Zynga Incorporated
• Original Assignee: Zynga Incorporated
• Inventors: Purkayastha, Prashun, Roychowdhary, Anandamoy, Engineer, Sunu
• Granted Patent: US 9,305,028 B2
• Time in Patent Office: Days
• US Class Current: 463/29
• CPC Class Codes: A63F 13/12 involving interaction between a plurality of game devices, e.g. transmisison or distribution systems protocols for networked virtual reality, networked games H04L29/06034
• CPC Class Codes: A63F 13/30 Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
• CPC Class Codes: A63F 13/35 Details of game servers
• CPC Class Codes: A63F 13/45 Controlling the progress of the video game
• CPC Class Codes: A63F 13/79 involving player-related data, e.g. identities, accounts, preferences or play histories
• CPC Class Codes: A63F 13/80 Special adaptations for executing a specific game genre or game mode
• CPC Class Codes: A63F 2300/552 for downloading to client devices, e.g. using OS version, hardware or software profile of the client device
• CPC Class Codes: A63F 2300/5533 using program state or machine event data, e.g. server keeps track of the state of multiple players on in a multiple player game
• CPC Class Codes: A63F 2300/556 Player lists, e.g. online players, buddy list, black list
• CPC Class Codes: A63F 2300/5586 for enforcing rights or rules, e.g. to prevent foul play
• CPC Class Codes: A63F 2300/572 Communication between players during game play of non game information, e.g. e-mail, chat, file transfer, streaming of audio and streaming of video
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system, computer-readable storage medium storing at least one program, and a computer-implemented method for detecting fraud in a social gaming environment is disclosed herein. For example, game events generated responsive to a player playing a game executing on a client device are received. The game events may then be used to build a player profile for the player. The player profile may characterize the game actions performed by the player. The player profile is then compared with a golden profile. The golden profile may specify an expected gaming behavior. Based on the comparison between the player profile and the expected gaming behavior specified by the golden profile, a player account associated with the player may be marked as suspicious.

Claims

1. A computer-implemented method comprising:

receiving game events generated responsive to a player playing a game executing on a client device;

using the game events to build a player profile for the player, the player profile characterizing the game actions performed by the player;

comparing, by at least one processor, the player profile with a golden profile, the golden profile specifying an expected gaming behavior for the player of the game; and

based on the comparison between the player profile and the expected gaming behavior specified by the golden profile, marking a player account associated with the player as suspicious.

2. The computer-implemented method of claim 1, wherein using the game events to build the player profile comprises tracking at least one of the following metrics:

a rate of game activity, a pattern of game actions, a period of time per session, or an interval time between sessions.

3. The computer-implemented method of claim 1, wherein the player profile specifies a rate of change for a property of the game, the golden profile specifies an expected rate of change for the property of the game, and the comparing the player profile with the golden profile includes comparing the rate of change for the property of the game with the expected rate of change for the property of the game.

4. The computer-implemented method of claim 1, wherein the game events represent user initiated game actions performed on the client device.

5. The computer-implemented method of claim 1, further comprising:

obtaining a social graph associated with the player, the social graph including a plurality of nodes that each represent a friend of the player;

comparing each node of the social graph with a shell account profile specified by the golden profile; and

based on the comparisons of each of the nodes from the social graph and the shell account profile, marking the player account associated with the player as is suspicious.

6. The computer-implemented method of claim 5, wherein the shell account profile specifies a social connection threshold.

7. The computer-implemented method of claim 5, wherein the shell account profile specifies a social activity threshold.

8. The computer-implemented method of claim 1, wherein the player profile specifies a session duration, the golden profile specifies an expected session duration, and the comparing the player profile with the golden profile includes comparing the session duration specified by the player profile with the with the expected session duration specified by the golden profile.

9. A computer system, comprising:

at least one processor; and

a thin gaming server implemented by the at least one processor and configured to;

receive game events generated responsive to a player playing a game executing on a client device;

use the game events to build a player profile for the player, the player profile characterizing the game actions performed by the player;

compare the player profile with a golden profile, the golden profile specifying an expected gaming behavior; and

based on the comparison between the player profile and the expected gaming behavior specified by the golden profile, mark a player account associated with the player as suspicious.

10. The computer system of claim 9, wherein the thin gaming server is configured to use the game events to build the player profile by tracking at least one of the following metrics:

a rate of game activity, a pattern of game actions, a period of time per session, or an interval time between sessions.

11. The computer system of claim 9, wherein the player profile specifies a rate of change for a property of the game, the golden profile specifies an expected rate of change for the property of the game, and the comparing the player profile with the golden profile includes comparing the rate of change for the property of the game with the expected rate of change for the property of the game.

12. The computer system of claim 9, wherein the game events represent user initiated game actions performed on the client device.

13. The computer system of claim 9, wherein the thin gaming server is further configured to:

obtain a social graph associated with the player, the social graph including a plurality of nodes that each represent a friend of the player;

compare each node of the social graph with a shell account profile specified by the golden profile; and

based on the comparisons of each of the nodes from the social graph and the shell account profile, mark the player account associated with the player as suspicious.

14. The computer system of claim 13, wherein the shell account profile specifies a social connection threshold.

15. The computer system of claim 13, wherein the shell account profile specifies a social activity threshold.

16. The computer system of claim 9, wherein the player profile specifies a session duration, the golden profile specifies an expected session duration, and the comparing the player profile with the golden profile includes comparing the session duration specified by the player profile with the with the expected session duration specified by the golden profile.

17. A non-transitory computer-readable medium storing executable instructions thereon, which, when executed by a processor, cause the processor to perform operations comprising:

receiving game events generated responsive to a player playing a game executing on a client device;

using the game events to build a player profile for the player, the player profile characterizing the game actions performed by the player;

comparing, by at least one processor, the player profile with a golden profile, the golden profile specifying an expected gaming behavior; and

based on the comparison between the player profile and the expected gaming behavior specified by the golden profile, marking a player account associated with the player as suspicious.

18. The non-transitory computer-readable medium of claim 17, wherein using the game events to build the player profile comprises tracking at least one of the following metrics:

a rate of game activity, a pattern of game actions, a period of time per session, or an interval time between sessions.

19. The non-transitory computer-readable medium of claim 17, wherein the player profile specifies a rate of change for a property of the game, the golden profile specifies an expected rate of change for the property of the game, and the comparing the player profile with the golden profile includes comparing the rate of change for the property of the game with the expected rate of change for the property of the game.

20. The non-transitory computer-readable medium of claim 17, wherein the game events represent user initiated game actions performed on the client device.