Confidential fraud detection system and method
Various embodiments for maintaining security and confidentiality of data and operations within a fraud detection system. Each of these embodiments utilizes a secure architecture in which: (1) access to data is limited to only approved or authorized entities; (2) confidential details in received data can be readily identified and concealed; and (3) confidential details that have become non-confidential can be identified and exposed.
1. A fraud detection system for detecting fraudulent transactions, comprising:
an interface for inputting transaction data and outputting analysis results; and
a tamper-resistant secure data processing unit (SDPU), wherein the SDPU includes:
a security system that can restrict access to data and program execution;
an analysis system for analyzing inputted transactions;
a plurality of surveillance algorithms stored in an encrypted database wherein the plurality of surveillance algorithms make a determination regarding a probability that inputted transactions are fraudulent; and
a selection program for selecting at each of a sequence of random times a different surveillance algorithm to be used by the analysis system.
2. The fraud detection system of claim 1 , wherein the SDPU further includes an algorithm performance system that assists the selection program in selecting surveillance algorithms.
3. The fraud detection system of claim 1 , wherein the selection program includes a random selection program for selecting surveillance algorithms.
4. The fraud detection system of claim 1 , wherein the security system includes an encryption system for encrypting and decrypting data.
5. A method for detecting fraudulent transactions, comprising:
providing an interface for inputting transaction data and receiving analysis results;
providing a secure data processing unit (SDPU) that provides a secret and tamper-resistant computing environment, wherein the SDPU can restrict access to data and program execution;
providing a plurality of surveillance algorithms stored in an encrypted database;
analyzing inputted transactions for fraud with a surveillance algorithm within the SDPU; and
selecting a different surveillance algorithm from the plurality of surveillance algorithms for analyzing future inputted transactions.
6. The method of claim 5 , wherein the step of selecting a different surveillance algorithm utilizes a random selection process.
7. The method of claim 6 , comprising the further steps of:
measuring algorithm performance; and
using the measured performance in selecting surveillance algorithms.
8. The method of claim 7 , comprising the further steps of:
measuring a randomness of the algorithm selection process using a technique selected from the group consisting of correlation and entropy measures; and
issuing an alert if the randomness goes under a predetermined threshold.
9. The method of claim 5 , wherein the SDPU prevents observation by an outside observer of which surveillance algorithm is selected.
10. The method of claim 5 , including the further step of decrypting the selected surveillance algorithm.