Layered Graphical Event Mapping

• US 20080162556A1
• Filed: 12/28/2006
• Published: 07/03/2008
• Est. Priority Date: 12/28/2006
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Corporate Services Group Incorporated (Verizon Communications Inc.)
• Inventors: McConnell, James T.
• Granted Patent: US 9,008,617 B2
• Time in Patent Office: Days
• US Class Current: 707/104.1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A system, method and computer program product for graphically overlaying multiple types of events in order to facilitate determining one or more courses of action are each disclosed. Events are received from an event detection system or from another source, correlated with an address or location, and representatively mapped on an electronic map configured to be displayed on a display device. Mapped events may include cyber attacks or intrusions, credit card fraud based on the location of use of the credit card, check (and check-card) fraud based on usage location, 911 calls, law enforcement demographic data, and telecommunications based fraud.

Claims

1. A method comprising:

receiving fraud information about a fraud event;

receiving intrusion information identifying a point in a network at which an intrusion has occurred;

receiving physical crime information that includes at least one physical crime location that is associated with the physical crime information and a description of the physical crime;

correlating the intrusion information with location information for the identified network point;

correlating the fraud information with location information to determine at least one physical location associated with the fraud event; and

generating a map displaying in layers a geographical location of the at least one physical location associated with the fraud event, a geographical location of the identified network point and a geographical location of the physical crime location on the map.

2. The method of claim 1, wherein receiving fraud information about a fraud event comprises receiving a description of the fraud event and at least one telephone number.

3. The method of claim 2, wherein correlating the fraud information with location information to determine at least one physical location associated with the fraud event comprises electronically correlating the at least one phone number with at least one of an inventory database and a billing database to determine the at least one physical location associated with the fraud event.

4. The method of claim 1, wherein receiving fraud information about a fraud event comprises receiving from a fraud detection system that electronically reviews call detail records a description of the fraud event and at least one telephone number.

5. The method of claim 1, wherein generating a map displaying in layers a geographical location of the at least one physical location associated with the fraud event, a geographical location of the identified network point and a geographical location of the physical crime location on the map comprises electronically generating a map with a computing device and mapping software and electronically displaying on a display device computer-generated icons that show the geographical location of the at least one physical location associated with the fraud event, the geographical location of the identified network point and the geographical location of the physical crime location.

6. A system comprising:

a fraud detection system configured to electronically review call detail records and identify suspected fraudulent events by creating fraud information;

a location/GPS engine configured to receive said fraud information from said fraud detection system and correlate said fraud information with one or more physical locations;

an electronic mapping system configured to receive at least said one or more physical locations from said location/GPS engine and map said one or more physical locations on an electronic map that is displayed on a display device.

7. The system of claim 6, wherein said fraud information is comprised of at least a portion of one or more telephone numbers.

8. The system of claim 6, wherein correlating said fraud information with one or more physical locations comprises using said at least a portion of one or more telephone numbers correlated against a location database to determine said one or more physical locations.

9. The system of claim 8, wherein the location database is comprised of at least one of an inventory database and a billing database.

10. The system of claim 6, wherein said one or more physical locations are provided as one of street addresses, latitude and longitude, horizontal and vertical coordinates, or combinations thereof.

11. The system of claim 6 further comprised of:

an intrusion detection system configured to electronically review network information and identify one or more intrusion points in a network, wherein the location/GPS engine is configured to receive said one or more intrusion points from said intrusion detection system and correlate said one or more intrusion points with location information for each of the one or more intrusion points and said electronic mapping system is configured to receive said location information for said at least said one or more intrusion points from said location/GPS engine and map said location information for said one or more intrusion points on the electronic map that is displayed on the display device.

12. The system of claim 6 further comprised of:

a physical crimes database comprised of at least the location of the occurrence of a physical crime, wherein the location/GPS engine is configured to obtain from said physical crimes database physical crime location information comprised of the location of one or more physical crime and said electronic mapping system is configured to receive said physical crime location information from said location/GPS engine and map said physical crime location information for said physical crimes on the electronic map that is displayed on the display device.

13. A system comprising:

a fraud database comprised of fraud information associated with one or more fraud events;

an intrusion database comprised of intrusion information associated with one or more intrusion points in a network;

a physical crimes database comprised of physical crime information that is associated with at least the location of the occurrence of one or more physical crimes;

a location/GPS engine configured to retrieve said fraud information from said fraud database and said intrusion information from said intrusion database and correlate said fraud information and said intrusion information with one or more physical locations;

a mapping database configured to receive at least said one or more physical locations from said location/GPS engine and said location of the occurrence of one or more physical crimes from the physical crimes database to form mapping information; and

an electronic mapping system map that is configured to retrieve said mapping information from said mapping database and display said one or more physical locations of said fraud events, intrusion points and physical crimes on an electronic map that is displayed on a display device.

14. The system of claim 13, wherein said fraud information is comprised of at least a portion of one or more telephone numbers.

15. The system of claim 14, wherein correlating said fraud information with one or more physical locations comprises using said at least a portion of one or more telephone numbers correlated against a location database to determine said one or more physical locations.

16. The system of claim 15, wherein the location database is comprised of at least one of an inventory database and a billing database.

17. The system of claim 13, wherein said intrusion information is comprised of at least a portion of one or more IP addresses.

18. The system of claim 17, wherein correlating said intrusion information with one or more physical locations comprises using said at least a portion of one or more IP addresses correlated against a location database to determine said one or more physical locations.

19. The system of claim 18, wherein the location database is comprised of at least an ARP database.

20. A computer program product, comprising:

a memory having computer readable code embodied therein, for execution by a computing device having at least a processor and a memory, said code comprising;

a) a first executable code portion adapted to receive fraud information about a fraud event;

b) a second executable code portion adapted to receive intrusion information identifying a point in a network at which an intrusion has occurred;

c) a third executable code portion adapted to receive physical crime information that includes at least one physical crime location that is associated with the physical crime information and a description of the physical crime;

d) a fourth executable code portion adapted to correlate the intrusion information with location information for the identified network point;

e) a fifth executable code portion adapted to correlate the fraud information with location information to determine at least one physical location associated with the fraud event; and

f) a sixth executable code portion adapted to generate a map displaying in layers a geographical location of the at least one physical location associated with the fraud event, a geographical location of the identified network point and a geographical location of the physical crime location on the map.

21. The computer program product of claim 20, wherein the first executable code portion is also adapted to receive a description of the fraud event and at least one telephone number.

22. The computer program product of claim 20, wherein the fifth executable code portion is also adapted to electronically correlate the at least one phone number with at least one of an inventory database and a billing database to determine the at least one physical location associated with the fraud event.

23. The computer program product of claim 20, wherein the first executable code portion is further adapted to receive from a fraud detection system that electronically reviews call detail records a description of the fraud event and at least one telephone number.

24. The computer program product of claim 20, wherein the sixth executable code portion is further adapted to electronically generate a map with a computing device and mapping software and electronically display on a display device computer-generated icons that show the geographical location of the at least one physical location associated with the fraud event, the geographical location of the identified network point and the geographical location of the physical crime location.