Determining the degree of relevance of alerts in an entity resolution system over alert disposition lifecycle
First Claim
1. A computer-implemented method for processing identity records received by an entity resolution system:
- receiving a first identity record;
associating the identity record with the first entity;
evaluating at least the first entity against one or more conditions specified in a relevance detection rule; and
upon determining that the one or more conditions specified by the relevance detection rule are satisfied;
generating an alert,assigning an original alert relevance score to the alert, determined, at least in part, on a rule relevance score associated with the relevance detection rule, andassigning an alert disposition status to the alert selected from a plurality of alert statuses.
1 Assignment
0 Petitions
Accused Products
Abstract
An entity resolution system and alert analysis system configured to process inbound identity records and to generate alerts based on relevant identities, entities, conditions, activities, or events is disclosed. One process of resolving identity records and detecting relationships between entities may be performed using a pre-determined or configurable entity resolution rules. Further, the entity resolution system may include an alert analysis system configured to allow analysts to review and analyze alerts, entities, and identities, as well as provide comments or assign a disposition to alerts generated by the entity resolution system. Furthermore, the entity resolution system may be configured to handle duplicate alerts, i.e., one or more identical or near-identical alerts generated using the same entities and/or identities as well as assign a relevance score to the particular entities and identities included in the alert.
-
Citations
24 Claims
-
1. A computer-implemented method for processing identity records received by an entity resolution system:
-
receiving a first identity record; associating the identity record with the first entity; evaluating at least the first entity against one or more conditions specified in a relevance detection rule; and upon determining that the one or more conditions specified by the relevance detection rule are satisfied; generating an alert, assigning an original alert relevance score to the alert, determined, at least in part, on a rule relevance score associated with the relevance detection rule, and assigning an alert disposition status to the alert selected from a plurality of alert statuses. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A computer-readable storage medium containing a program, which, when executed by a processor, performs an operation for processing identity records received by an entity resolution system, the operation comprising:
-
receiving a first identity record; associating the identity record with the first entity; evaluating at least the first entity against one or more conditions specified in a relevance detection rule; and upon determining that the one or more conditions specified by the relevance detection rule are satisfied; generating an alert, assigning an original alert relevance score to the alert, determined, at least in part, on a rule relevance score associated with the relevance detection rule, and assigning an alert disposition status to the alert selected from a plurality of alert statuses. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A system, comprising:
-
a processor; and a memory containing a program, which, when executed by the processor is configured to process identity records received by an entity resolution system by performing a method comprising; receiving a first identity record; associating the identity record with the first entity; evaluating at least the first entity against one or more conditions specified in a relevance detection rule; and upon determining that the one or more conditions specified by the relevance detection rule are satisfied; generating an alert, assigning an original alert relevance score to the alert, determined, at least in part, on a rule relevance score associated with the relevance detection rule, and assigning an alert disposition status to the alert selected from a plurality of alert statuses. - View Dependent Claims (18, 19, 20, 21, 22, 23, 24)
-
Specification