Segmented Billing Anomaly Detection for Cloud Fraud Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Determining appropriate charging mechanisms for complex computer environments is challenging due to the multitude of nodes and applications, especially in securing environments susceptible to fraudulent billing attacks and inadvertent errors.

Innovation Solution

A method involving segmenting a computer environment into multiple areas, calculating payment prices for each segment, detecting anomalies by comparing data usage and pricing, and performing an end-to-end simulation to verify consistency in resource usage and pricing across the environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If a complex charging mechanism is implemented to account for multiple nodes and applications, then billing accuracy is improved, but system complexity increases and susceptibility to fraudulent attacks worsens

Engineering Contradiction:
Improvebilling accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the computing platform into multiple billable segments (I/O segments, compute segments, storage segments, network segments) and bills customers based on actual usage of each segment. This segmentation approach simplifies the charging mechanism by breaking down complex resource usage into discrete, measurable units while maintaining billing accuracy for each segment independently.

Inventive Principle:
Principle #1Segmentation

2Productivity

If traditional billing methods are used without anomaly detection, then processing speed is improved, but fraudulent billing attacks cannot be detected

Engineering Contradiction:
Improveprocessing speedVSAvoidfraud detection capability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements anomaly detection mechanisms that continuously monitor billing data against established baselines and thresholds before fraudulent charges are finalized. By performing preliminary anomaly detection on billing anomalies (such as unexpected spikes in resource usage or inconsistent pricing patterns), the system can identify and prevent fraudulent billing attacks before they cause significant financial loss, while maintaining efficient processing through automated threshold-based detection.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If comprehensive monitoring of all segments is performed, then fraud detection accuracy is improved, but computational overhead increases

Engineering Contradiction:
Improvefraud detection accuracyVSAvoidcomputational overhead
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent applies different monitoring and analysis intensities to different segments based on their fraud risk profiles and business importance. High-value segments with higher fraud risk undergo more comprehensive anomaly detection and simulation checks, while lower-risk segments use simpler monitoring approaches. This local quality differentiation maintains high fraud detection accuracy for critical segments while reducing overall computational overhead by avoiding uniform intensive monitoring across all segments.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS20240062311A1Fraud prevention associated with service management of a computing platform
Publication Date: 2024.02.22 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US20240062311A1 patent drawing
  • US20240062311A1 patent drawing
  • US20240062311A1 patent drawing

AI summary

A method, computer system, and a computer program product managing data usage integrity is provided. In one embodiment, the method comprises receiving data connected with data usage of at least one user in a computer environment. The pricing information is then for the user relating to the data usage. The computer embodiment is segmented into a plurality of segment areas and a payment price is calculated for each segment area. An anomaly is detected by comparing the data usage and the associated pricing for each of segmented areas according to a preselected value. If an anomaly is selected, an end-to-end simulation check is performed for the computer environment to ascertain whether the payment price for the segment may be inconsistent with a resource usage affecting an end-to-end flow for the computer environment.