Fraud detection system and method

• US 8,006,298 B1
• Filed: 07/11/2006
• Issued: 08/23/2011
• Est. Priority Date: 07/11/2006
• Status: Expired due to Fees

• Current Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Balasubramanian, Balagurunathan, Perez, Richard R., Kuruvalli, Bharath N., Himawan, Rudi
• Primary Examiner(s): LaForgia; Christian
• Assistant Examiner(s): TURCHEN, JAMES R
• Application Number:
  US11/484,420
• Time in Patent Office: 1,869 Days
• Field of Search: 713/159, 726/17, 726/18, 726 26- 28
• US Class Current: 726/18
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A computer implemented method is provided for detecting potential fraud or unauthorized activity when resetting an application password in an application in which a computer system including a call center dashboard system and a fraud detection interface. The method includes the steps of initiating the resetting of a user'"'"'s application password for an application. The method further includes the steps of determining when an application ID is duplicated in the call center dashboard data store for the application and preparing an error report when the application ID is duplicated in the data store. The method also includes the steps of submitting a reset password for the application using the password criteria of the application. The method further includes the steps of storing the reset password in the user profile of the user when the application ID is not duplicated and the password conforms to the password criteria.

Claims

1. A computer implemented method for detecting potential fraud when resetting an application password, comprising:

providing a computer system including a call center dashboard system with a call center dashboard data store;

storing, in the call center dashboard data store at least two user profiles of at least two call center dashboard users that are not a team leader, wherein each user profile contains a system ID, a system password, and at least one an application user ID and an application password corresponding to at least one call center application;

initiating the resetting of a selected the application password corresponding to a selected call center application selected from the at least one call center application for a selected call center dashboard user selected from the at least two call center dashboard users that are not a team leader;

determining, in response to initiating the resetting of the application password corresponding to the selected call center application for the selected call center dashboard user, whether the application user ID corresponding to the selected call center application for the selected call center dashboard user is duplicated among the at least two call center dashboard users that are not a team leader in the call center dashboard data store for the selected call center application;

preparing an error report when the application user ID corresponding to the selected call center application for the selected call center dashboard user is duplicated among the at least two call center dashboard users that are not a team leader in the call center dashboard data store for the selected call center application;

supplying a reset application password using a password criteria of the selected call center application when the application user ID corresponding to the selected call center application for the selected call center dashboard user is not duplicated among the at least two call center dashboard users that are not a team leader in the call center dashboard data store for the selected call center application; and

storing the reset application password in the user profile of the selected call center dashboard user when the application user ID corresponding to the selected call center application for the selected call center dashboard user is not duplicated among the at least two call center dashboard users that are not a team leader in the call center dashboard data store for the selected call center application and the reset application password conforms to the password criteria of the selected call center application.

2. The computer implemented method of claim 1, further comprising:

determining when a selected system ID of the selected call center dashboard user is duplicated in the call center dashboard data store;

preparing an error report when the selected system ID is duplicated in the call center dashboard data store; and

wherein storing the reset application password is not performed when the selected system ID is duplicated in the call center dashboard data store.

3. The computer implemented method of claim 2, wherein initiating the resetting of the selected password is performed by a timing cycle of the selected application.

4. The computer implemented method of claim 2, wherein initiating the resetting of the selected password is performed by a call center dashboard system administrator.

5. The computer implemented method of claim 2, wherein supplying the reset application password is performed by a keyboard script of the call center dashboard system.

6. The computer implemented method of claim 2, wherein the error report prepared when the application user ID corresponding to the selected call center application for the selected call center dashboard user is duplicated in the call center dashboard data store further identifies instances wherein a user profile corresponding to the selected call center application has an application user ID corresponding to the selected application that is not identical to a system ID of the corresponding user profile.

7. The computer implemented method of claim 2 wherein the application user ID is the same as the selected system ID.

8. The computer implemented method of claim 1 wherein the resetting of the application password corresponding to the selected application for the selected call center dashboard user is performed without any input by the selected call center dashboard user.

9. A computer implemented method for detecting potential fraud during self-registration of an application, comprising:

providing a computer system including a call center dashboard system with a call center dashboard data store;

storing in the call center dashboard data store at least two user profiles of at least two call center dashboard users that are not a team leader, wherein each user profile contains a system ID, a system password, and at least one application user ID and a corresponding application password;

receiving selection for self-registration of a selected application from a first call center dashboard user of the at least two call center dashboard users that are not a team leader;

receiving a selected application user ID for the selected application in the self-registration of the selected application;

determining whether the selected application user ID is duplicated for the selected application among the at least two call center dashboard users that are not a team leader in the call center dashboard data store when the selected application user ID is not a team leader application user ID;

preparing an error report when the selected application user ID is duplicated among the at least two call center dashboard users that are not a team leader in the call center dashboard data store for the selected application;

receiving a selected application password for the selected application in the self-registration of the selected application;

determining the validity of the selected application password with regards to conforming to a password criteria of the selected application when the selected application user ID is not a team leader application user ID;

receiving another selected application password when the previously entered selected application password fails to conform to the password criteria of the selected application;

storing the selected application user ID and application password in the user profile in the call center dashboard data store for the first call center dashboard user when the selected application user ID is not a team leader application user ID, the selected application user ID is not duplicated among the at least two call center dashboard users that are not a team leader, and the selected application password conforms to the password criteria of the selected application;

launching the selected application when the selected application user ID is stored in the user profile of the first call center dashboard user; and

launching the selected application for a single use when the selected application user ID is a team leader application user ID, and the selected application password is a team leader application password for the selected application.

10. The computer implemented method of claim 9, further comprising:

determining when a system ID of the first call center dashboard user is duplicated in the call center dashboard data store; and

printing an error report when the system ID of the first call center dashboard user is duplicated in the call center dashboard data store;

wherein storing the application user ID and application password is not performed when the selected system ID is duplicated in the call center dashboard data store; and

wherein launching the selected application is not performed when the selected system ID is duplicated in the call center dashboard data store.

11. The computer implemented method of claim 10, further comprising:

requesting the team leader application password for the selected application when the application user ID is the team leader application user ID.

12. The computer implemented method of claim 11, further comprising:

providing the team leader application password for the selected application after entry of a team leader system ID and a team leader system password, when the selected application user ID is the team leader application user ID.

13. The computer implemented method of claim 9, wherein the error report prepared when the selected application user ID is duplicated in the call center dashboard data store further identifies instances wherein a user profile corresponding to the selected application has an application user ID of the selected application that is not identical to a system ID of the corresponding user profile.

14. The computer implemented method of claim 10, wherein the submitted application user ID is the same as the system ID in the user profile of the first call center dashboard user.

15. A computer system including a call center dashboard system comprising a call center application storing two or more user profiles of two or more corresponding call center dashboard users that are not a team leader, wherein each user profile comprises a system ID, a system password, and one or more application user IDs and corresponding application passwords, and a fraud detection interface comprising:

a duplicate application user ID section that prepares an unauthorized activity error report when a submitted application user ID is not a team leader application user ID and the submitted application user ID, provided for self-registration with a selected application for a first call center dashboard user of the two or more call center dashboard users that are not a team leader, has one or more duplicate application user IDs associated with the selected application among the two or more call center dashboard users that are not a team leader;

a password criteria section that verifies a validity of a submitted application password when the submitted application user ID is not a team leader user ID, the submitted application password provided for self-registration with the selected application, the validity of the submitted application password verified by comparing the submitted application password with a password criteria of the selected application, wherein when the submitted application is not valid, a new submitted application password is received to replace the submitted application password; and

a storage section that stores the submitted application user ID and the submitted application password in a user profile of the first call center dashboard user when the submitted application user ID is not a team leader application user ID, the submitted application user ID is not duplicated, and the submitted application password is valid, and wherein when the submitted application user ID is stored, the selected application is launched through the call center dashboard system.

16. The fraud detection interface as in claim 15, further comprising:

a unique identity section that prepares an audit error report when a system ID of the first call center dashboard user has a duplicate system ID in the call center data store; and

wherein the storage section will not store the application user ID and the application password when the system ID is duplicated in the call center data store.

17. The fraud detection interface as in claim 16, further comprising:

a team leader identification section that requests a team leader application password for the selected application when the submitted application user ID is a team leader application user ID; and

wherein the selected application is launched for a single use without storing the team leader application user ID and the team leader application password in the user profile of the first call center dashboard user.

18. The fraud detection interface as in claim 15 wherein the unauthorized activity report further identifies instances wherein a user profile corresponding to the selected application has an application user ID of the selected application that is not identical to a system ID of the corresponding user profile.

19. The fraud detection interface as in claim 17, further comprising:

a team leader security section that requests a team leader system ID and a team leader system password prior to providing the team leader application password for the selected application when the submitted application user ID is the team leader application user ID.

20. The fraud detection interface as in claim 15 wherein the submitted application user ID is the same as the system ID of the first call center user.