Suspicious order monitoring system and method
View Patent ↗A system and method is provided for identifying and reporting suspicious orders for substances and/or products. The system executes an application to process order detail data included in a received order request for a particular item. The application includes a plurality of processing rules that identify suspicious orders based on the order detail data and historical data. The application assigns a hold attribute value to a hold flag associated with the order when the order is determined to be suspicious by one of the plurality of processing rules and transmits a hold notification via communication network to one or more predetermined individual/entities. The application also selectively stores detail data, audit data, and historical data in at least one of a plurality of data tables.
1. A method for identifying a suspicious order for an item, the method comprising:
retrieving, by at least one processor, at a particular interval of time, an electronic order from a memory queue, and processing the electronic order according to first in first out (FIFO) processing to parse order detail data from the electronic order;
receiving, by the at least one processor, the order detail data included in the electronic order received from one or more remote devices, the order detail data comprising an item identification code for a particular item, a customer identification for a particular customer, and an order type, the electronic order encapsulated in an order request generated at the one or more remote devices;
upon immediate receipt of the electronic order from the memory queue, processing the order detail data according to first processing rules of a set of processing rules to determine if the electronic order is a suspicious order, each processing rules of the set of processing rules corresponding to a tiered data table of a plurality of tiered data tables maintained in a database, and wherein the first processing rules determines that the electronic order is suspicious by determining that the electronic order was received from a particular customer based on the customer identification over a communications network;
storing the order detail data in a first data table of the plurality of tiered data tables, when the electronic order is determined to be a suspicious order based on the first processing rules;
processing the order detail data according to second processing rules to determine if the electronic order is a suspicious order by determining that the order request exceeds a threshold number of requests for the item during a predetermined period of time;
storing the order detail data in a second data table of the tiered data tables if the electronic order is determined to be a suspicious order based on the second processing rules;
processing the order detail data according to third processing rules to determine if the electronic order is a suspicious order when the order detail data has not been determined to be suspicious according to the first processing rules or the second processing rules;
assigning a hold attribute value to a hold flag associated with the electronic order when the order is determined to be suspicious by one of the first processing rules, second processing rules, or third processing rules, placing the electronic order on hold, and preventing the electronic order from executing; and
transmitting, in real-time, a hold notification via a communication network to network addresses of the one or more remote computing devices when the hold flag associated with the electronic order has the hold attribute value and displaying a notification that indicates that the electronic order is placed on hold on a user interface displayed by the one or more remote computing devices.
2. The method of claim 1 wherein processing the order detail data according to the first processing rules comprises:
identifying the particular customer, the particular item being ordered, and a desired quantity of the particular item;
retrieving a threshold quantity for the particular item for the particular customer from an allocation record in the first table; and
identifying the electronic order as suspicious when the desired quantity exceeds the threshold quantity for the particular item during a defined time period.
3. The method of claim 2 wherein the hold attribute value is assigned to the hold flag associated with the electronic order when the desired quantity exceeds the threshold quantity.
4. The method of claim 2 wherein processing the order detail data according to the first processing rules comprises:
querying the first table to:
identify a particular customer identification (ID) code for the particular customer;
identify a particular item identification (ID) code for the particular item;
querying historical order detail data in the first table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
identifying the electronic order as suspicious when the total quantity exceeds a total threshold quantity during the defined time period.
5. The method of claim 4 wherein the hold attribute value is assigned to the hold flag associated with the electronic order when the total quantity exceeds the total threshold quantity.
6. The method of claim 1 wherein processing the order detail data according to the second processing rules comprises:
updating monthly count data included in the second data table when the order detail data included on the electronic order has previously been processed according to the first processing rules or the third processing rules, wherein the updating monthly count data comprises:
identifying a particular customer identification (ID) code for the particular customer included in the order detail data;
identifying a particular item identification (ID) code for the particular item included in the order detail data;
querying historical order detail data in the second table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
updating the monthly count data in the second data table to correspond to the total quantity.
7. The method of claim 6 wherein processing the order detail data according to the second processing rules comprises:
retrieving a list of exempt items from a data source when the electronic order has not been processed according to the first processing rules or the third processing rules, the list of exempt items identifying one or more exempt item ID codes that are exempt from processing according to the second processing rules;
identifying the particular customer identification (ID) code for the particular customer included in the order detail data;
identifying the particular item identification (ID) code for the particular item included in the order detail data;
comparing the particular item ID code to the list of exempt items; and
exempting the order detail data from processing according to the second processing rules when the particular item ID code matches at least one of the exempt item ID codes included in the list of exempt items.
8. The method of claim 6 wherein processing the order detail data according to the second processing rules comprises:
querying historical order detail data in the second table to identify second matching orders received within the defined time period, each second matching order comprising a matching customer ID code that matches the particular customer ID code;
identifying an item order quantity associated with each second matching order;
calculating a global total order value based on the desired quantity and each item order quantity; and
identifying the electronic order as suspicious when the customer global total quantity exceeds a customer global total threshold quantity during the defined time period.
9. The method of claim 6 wherein processing the order detail data according to the second processing rules comprises:
querying historical order detail data in the second table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
calculating a global total item count based on the desired quantity identified in the electronic order and the desired quantity identified in all matching orders received during the defined time period;
calculating an average quantity threshold value based on average quantity of the particular item ordered by one or more customers over a predetermined period of time and a multiplier; and
identifying the electronic order as suspicious when the global total item count exceeds the average quantity threshold value during the defined time period.
10. The system of claim 6 wherein the application executed by the at least one processor further processes the order detail data according to the second processing rules by:
retrieving a list of exempt items from a data source when the electronic order has not been processed according to the first processing rules or the third processing rules, the list of exempt items identifying one or more exempt item ID codes that are exempt from processing according to the second processing rules;
identifying the particular customer identification (ID) code for the particular customer included in the order detail data;
identifying the particular item identification (ID) code for the particular item included in the order detail data;
comparing the particular item ID code to the list of exempt items; and
exempting the order detail data from processing according to the second processing rules when the particular item ID code matches at least one of the exempt item ID codes included in the list of exempt items.
11. The system of claim 6 wherein the application executed by the at least one processor further processes the order detail data according to the second processing rules by:
querying historical order detail data in the second table to identify second matching orders received within the defined time period, each second matching order comprising a matching customer ID code that matches the particular customer ID code;
identifying an item order quantity associated with each second matching order;
calculating a global total order value based on the desired quantity and each item order quantity; and
identifying the electronic order as suspicious when the customer global total quantity exceeds a customer global total threshold quantity during the defined time period.
12. The system of claim 6 wherein the application executed by the at least one processor further processes the order detail data according to the second processing rules by:
querying historical order detail data in the second table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
calculating a global total item count based on the desired quantity identified in the electronic order and the desired quantity identified in all matching orders received during the defined time period;
calculating an average quantity threshold value based on average quantity of the particular item ordered by one or more customers over a predetermined period of time and a multiplier; and
identifying the electronic order as suspicious when the global total item count exceeds the average quantity threshold value during the defined time period.
13. The method of claim 1 wherein processing the order detail data according to the third processing rules comprises:
identifying the particular customer identification (ID) code for the particular customer included in the order detail data;
retrieve an order limit from a third data table based on the particular customer, the order limit comprising a limit on the quantity of items for the particular customer based on an associated bill to address;
querying historical order detail data in the third table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
identifying the electronic order as suspicious when the total quantity exceeds a total threshold quantity during the defined time period.
14. A system for identifying a suspicious order for an item, the system comprising:
at least one processor;
at least one data source comprising:
a first data table;
a second data table; and
a third data table; and
an application executed by the at least one processor to:
retrieve at a particular interval of time, an electronic order from a memory queue, and process the electronic order according to first in first out (FIFO) processing to parse order detail data from the electronic order;
identify order detail data included in the electronic order received from the at least one processor, the order detail data comprising an item identification code for a particular item, a customer identification for a particular customer, and an order type, the electronic order encapsulated in an order request generated by the at least one processor;
upon immediate receipt of the electronic order from the memory queue, processing the order detail data according to first processing rules of a set of processing rules to determine if the electronic order is a suspicious order, each processing rules of the set of processing rules corresponding to a tiered data table of a plurality of tiered data tables maintained in a database, and wherein the first processing rules determines that the electronic order is suspicious by determining that the electronic order was received from a particular customer based on the customer identification over a communications network;
store the order detail data in the first data table of the plurality of tiered data tables when the electronic order is determined to be suspicious based on the first processing rules;
process the order detail data according to second processing rules to determine when the electronic order is suspicious when the order detail data has not been determined to be suspicious according to the first processing rules or third processing rules by determining that the order request exceeds a threshold number of requests for the item during a predetermined period of time;
store the order detail data in a second data table of the plurality of tiered data tables when the electronic order is determined to be suspicious order based on the second processing rules;
process the order detail data according to the third processing rules to determine if the electronic order is suspicious when the order detail data has not been processed according to the first processing rules or the second processing rules;
assign a hold attribute value to a hold flag associated with the electronic order when the electronic order is determined to be suspicious by one of the first processing rules, second processing rules, or third processing rules, place the electronic order on hold, and prevent the electronic order from executing; and
transmit, in real-time, a hold notification via a communication network to network addresses of one or more remote devices when the hold flag associated with the order has the hold attribute value and display a notification that indicates that the electronic order is placed on hold on a user interface displayed by the one or more remote devices.
15. The system of claim 14 wherein the application executed by the at least one processor processes the order detail data according to the first processing rules by:
identifying the particular customer, the particular item being ordered, and a desired quantity of the particular item;
retrieving a threshold quantity for the particular item for the particular customer from an allocation record in the first table; and
identifying the electronic order as suspicious when the desired quantity exceeds the threshold quantity for the particular item during a defined time period.
16. The system of claim 15 wherein the hold attribute value is assigned to the hold flag associated with the electronic order when the desired quantity exceeds the threshold quantity.
17. The method system of claim 15 wherein the application executed by the at least one processor processes the order detail data according to the first processing rules by:
querying the first table to:
identify a particular customer identification (ID) code for the particular customer;
identify a particular item identification (ID) code for the particular item;
querying historical order detail data in the first table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
identifying the electronic order as suspicious when the total quantity exceeds a total threshold quantity during the defined time period.
18. The system of claim 17 wherein the hold attribute value is assigned to the hold flag associated with the electronic order when the total quantity exceeds the total threshold quantity.
19. The system of claim 14 wherein the application executed by the at least one processor processes the order detail data according to the second processing rules by:
updating monthly count data included in the second data table when the order detail data included on the electronic order has previously been processed according to the first processing rules or the third processing rules, wherein the updating monthly count data comprises:
identifying a particular customer identification (ID) code for the particular customer included in the order detail data;
identifying a particular item identification (ID) code for the particular item included in the order detail data;
querying historical order detail data in the second table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
updating the monthly count data in the second data table to correspond to the total quantity.
20. The system of claim 14 wherein the application executed by the at least one processor processes the order detail data according to the third processing rules by:
identifying the particular customer identification (ID) code for the particular customer included in the order detail data;
retrieve an order limit from a third data table based on the particular customer, the order limit comprising a limit on the quantity of items for the particular customer based on an associated bill to address;
querying historical order detail data in the third table to identify matching orders received within the defined time period, each matching order comprising a matching customer ID code that matches the particular customer ID code and matching item ID code that matches the particular item ID code;
identifying a previous order quantity associated with each matching order;
calculating a total quantity based on the desired quantity and each previous order quantity; and
identifying the electronic order as suspicious when the total quantity exceeds a total threshold quantity during the defined time period.