Predictive fraud prevention for collaboration conferencing systems
Aspects of the present disclosure involve systems and methods for detecting a potentially fraudulent access of a collaboration conferencing system on a telecommunications network and executing a corrective action in response to the detected access attempt. In some instances, the corrective action includes denying access to the collaboration system when the fraudulent access attempt occurs. In other instances, the corrective action includes providing a warning to the caller, rerouting the communication to another system within the network, or reporting and storing of the fraudulent attempt. To detect the possible fraudulent access attempt, a device may detect more than one fraudulent access attempt to the collaboration conferencing system and determine a pattern. With the pattern of attempts known, the system accesses a database to determine if a valid account is likely to be accessed by the fraudulent attempts and takes actions to prevent access to the valid account.
1. A telecommunications system comprising:
at least one conference bridge; and
at least one routing device configured to:
receive a plurality of incorrect access codes from a communication device connected to the telecommunications network;
generate a set of predicted access codes using pattern recognition, wherein the set of predicted access codes is based on the plurality of incorrect access codes;
compare the generated set of predicted access codes to a database of valid access codes; and
when at least one predicted access code of the set of predicted access codes is in the database of valid access codes, execute a corrective action on an account of a collaboration conferencing system, wherein the corrective action on the account prevents access to the collaboration conferencing system from the communication device using the at least one predicted access code.
2. The telecommunications system of claim 1 wherein the at least one routing device is further configured to correlate the communication device connected to the telecommunications network to an automatic number identification (ANI) associated with the communication device.
3. The telecommunications system of claim 1 wherein a first incorrect access code of the plurality of incorrect access codes comprises at least one incrementing digit from a previously received incorrect access code of the plurality of incorrect access codes.
4. The telecommunications system of claim 1 wherein a first incorrect access code of the plurality of incorrect access codes comprises at least one decrementing digit from a previously received incorrect access code of the plurality of incorrect access codes.
5. The telecommunications system of claim 1 wherein the at least one routing device is further configured to calculate an estimated time to receiving the at least one predicted access code from the communication device.
6. The telecommunications system of claim 5 wherein the at least one routing device is further configured to measure a time between receiving at least two consecutive incorrect access codes from the plurality of incorrect access codes received from the communication device.
7. The telecommunications system of claim 6 wherein the estimated time to receiving the at least one predicted access code from the communication device is based at least on the measure of the time between receiving the at least two consecutive incorrect access codes from the plurality of incorrect access codes.
8. The telecommunications system of claim 7 wherein the corrective action comprises suspending the account of a collaboration conferencing system to prevent access to the collaboration conferencing system from the communication device.
9. The telecommunications system of claim 8 wherein the suspension of the account of the collaboration conferencing system is executed for at least the estimated time to receiving the at least one predicted access code from the communication device.
10. The telecommunications system of claim 7 wherein the at least one routing device is further configured to receive the at least one predicted access code from the communication device and the suspension of the account of the collaboration conferencing system is executed until the at least one predicted access code is received at the at least one routing device.
11. A method for operating a collaboration conference, the method comprising:
receiving a plurality of incorrect access codes from a communication device connected to a telecommunications network hosting the collaboration conference;
generating a set of predicted access codes based on the plurality of incorrect access codes using pattern recognition;
comparing the generated set of predicted access codes to a database of valid access codes; and
executing a corrective action on an account of a collaboration conferencing system in response to the comparison of the generated set of predicted access codes to the database of valid access codes, wherein the corrective action on the account prevents access to the collaboration conferencing system from the communication device.
12. The method of claim 11 further comprising:
correlating the communication device connected to the telecommunications network to an automatic number identification (ANI) associated with the communication device.
13. The method of claim 11 wherein a first incorrect access code of the plurality of incorrect access codes comprises at least one incrementing digit from a previously received incorrect access code of the plurality of incorrect access codes.
14. The method of claim 11 wherein a first incorrect access code of the plurality of incorrect access codes comprises at least one decrementing digit from a previously received incorrect access code of the plurality of incorrect access codes.
15. The method of claim 11 further comprising:
calculating an estimated time to receiving at least one predicted access code of the generated set of predicted access codes from the communication device.
16. The method of claim 15 further comprising:
measuring a time between receiving at least two consecutive incorrect access codes from the plurality of incorrect access codes received from the communication device.
17. The method of claim 16 wherein the estimated time to receiving the at least one predicted access code from the communication device is based at least on the measure of the time between receiving the at least two consecutive incorrect access codes from the plurality of incorrect access codes.
18. The method of claim 17 wherein the corrective action comprises suspending the account of a collaboration conferencing system in response to the comparison of the generated set of predicted access codes to the database of valid access codes to prevent access to the collaboration conferencing system from the communication device.
19. The method of claim 18 wherein the suspension of the account of the collaboration conferencing system is executed for at least the estimated time to receiving the at least one predicted access code from the communication device.
20. The method of claim 17 further comprising:
receiving the at least one predicted access code from the communication device and the suspension of the account of the collaboration conferencing system is executed until the at least one predicted access code is received at the at least one routing device.