Agent Risk Score Determination Using Action and Entitlement Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a system to monitor and determine whether an agent's actions pose a risk to an entity and/or a customer's information, including quantifying the risk associated with individual or cumulative actions over time, as existing systems lack effective risk assessment and monitoring capabilities.
Innovation Solution
A method and system for determining a risk score for an agent by receiving information about their actions and entitlements, allowing for the assessment of whether actions pose a risk to customer accounts and other information, and generating alerts based on predetermined thresholds.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a system monitors agent actions to determine risk, then security and protection of customer information is improved, but device complexity and system overhead increase
Solution Approach 1:
The risk determination system is divided into separate functional modules: an information receiving module that collects agent action data, a risk score determination module that processes the data using predefined criteria, and an alert generation module that notifies stakeholders. This segmentation allows each component to be independently developed, maintained, and optimized, reducing overall system complexity while maintaining comprehensive security monitoring capabilities
Solution Approach 2:
The patent introduces a risk score as an intermediary metric that quantifies the risk level of agent actions without requiring direct complex analysis of each individual action. The risk score serves as a simplified representation that enables efficient risk assessment and comparison, reducing the computational complexity of the monitoring system while preserving security effectiveness
2Measurement precision
If the system determines risk scores based on multiple factors including entitlements and actions, then measurement precision of risk assessment is improved, but the difficulty of detecting and measuring increases
Solution Approach 1:
The risk determination module is designed to handle multiple types of input data (agent actions, entitlements, account information) through a unified processing framework. The same module evaluates different data types using consistent risk criteria and weighting mechanisms, simplifying the measurement process while improving assessment precision through comprehensive multi-factor analysis
Solution Approach 2:
The system transforms complex qualitative risk factors into quantitative parameters by assigning numerical risk scores to different agent actions and entitlements. These parameterized risk factors can then be mathematically combined and processed, making the measurement process more systematic and less complex while improving the precision of the overall risk assessment
3Reliability
If the system monitors actions over a predetermined period of time, then reliability of risk detection is improved, but loss of time for processing increases
Solution Approach 1:
The system pre-establishes risk criteria, evaluation rules, and threshold values before monitoring begins. These predefined parameters allow the risk determination module to quickly assess agent actions without requiring complex real-time analysis, reducing processing time while maintaining reliable risk detection through the use of预先 established evaluation standards
Solution Approach 2:
The monitoring system operates continuously, collecting and processing agent action data in real-time rather than through periodic batch processing. This continuous operation maintains up-to-date risk assessments with minimal delay while using efficient processing algorithms that preserve reliability without proportionally increasing processing time
Data Source
AI summary
Embodiments of the invention are directed to systems, methods and computer program products for determining a risk score for an agent associated with an entity. In some embodiments, a method includes: (a) receiving first information associated with an agent's action related to an account and/or an agent's actions over a predetermined period of time related to one or more applications, and (b) determining a first risk score based at least partially on the first information. In some embodiments, the method further includes: (c) receiving, from a data system, second information associated with the agent, where the second information comprises one or more entitlements granted to the agent by the entity, and (d) determining a second risk score based at least partially on both the first information and the second information. Embodiments of the invention allow an entity to monitor an agent's actions and determine whether the agent's actions, either singly or cumulatively, pose a risk to the customer's account and/or other information provided by the customer.