Abstract: A system and method collects activity data from one or more data sources recording activities of users and other entities and identifies anomalous activity using a statistical analysis of behaviors that are defined using one or more activities, optionally performed in a sequence, optionally performed within a limited time period, and optionally meeting or being excluded from, a filter. The analysis may incorporate the use of a normal, and any number of special, periods, where the analysis uses data from prior periods of the same type.

Abstract: A computer system includes memory configured to store a document database and a machine learning model. The document database includes multiple historical documents each having at least one version labeled as compliant and at least one version labeled as non-compliant. The system includes a creator user interface, a compliance user interface, an automated distribution module, and a model building module configured to train the machine learning model to classify a document according to a compliance score indicating a likelihood of document compliance with one or more compliance criteria. The system also includes an orchestrator module configured to receive the compliance score for the submitted document from the machine learning model, determine whether the compliance score is greater than or equal to a compliance score threshold, and supply the submitted document to the compliance user interface for transmission to the compliance team device when the compliance score is above a threshold.

Abstract: A system and method uses different authentication techniques, including weak passive authentication techniques, to authenticate users by generating a score and comparing it to a threshold selected according to the feature the user is requesting.

Abstract: A system includes processor hardware and memory hardware that stores instructions. The instructions include, in response to receiving a request, determining a request type of the request, retrieving a first set of collected information, and selecting a first set of instructions corresponding to the request type. The instructions include constructing a first result by executing each instruction of the first set of instructions to create the first entry as a nested entry within the first result including data of the first set of collected information identified in the first set of instructions as nested or retrieve first data of the first set of collected information identified by the first instruction and add the first data to the first entry of the first result. The instructions include transforming a display of the operator device to complete a set of fields displayed on the display with corresponding entries of the first result.

Abstract: A system and method allows a light colored image of an object such as a check to be detected and captured on a light colored background for uploading to a server for processing. Detection involves detecting edges of objects on the image, drawing a rectangle around the detected edges, testing for an aspect ratio of the rectangle within an approved range, testing for the rectangle being outside of a margin of the image and being a certain percentage of the image, and testing for blur within a tolerable range.

Abstract: A system, apparatus, method, and non-transitory computer readable medium for providing an omni-channel content mapper framework may include a server caused to receive a content request from at least one user device, the content request including a unique content identifier associated with the requested content and desired content type information corresponding to the requested content, determine a desired content mapper (CM) plugin corresponding to the desired content type information from a plurality of CM plugins, obtain content data corresponding to the unique content identifier from a content database, generate an application-agnostic structured data document using the determined content mapper plugin, the application-agnostic structured data document including the obtained content data, and transmit the application-agnostic structured data document to the at least one user device in response to the content request.

Abstract: A system and method identifies the review order of a set of documents and then sends documents to parties for review according to the precedence identified. The parties review the documents and provide approvals or rejections. The documents approved may be used to open accounts.

Abstract: A method includes receiving client data of a client that includes at least one of clickstream data and analytic data of the client. For each of a number of trained machine learning (ML) models corresponding, respectively, to a number of campaigns, campaign-specific features are extracted from the client data, and a campaign interest prediction score is generated by inputting the campaign-specific features extracted for the ML model into the ML model. At least one campaign, from among the plurality of campaigns, is assigned to the client based on the generated campaign interest prediction scores. The clickstream data includes a plurality of pages visited by the client, and the analytic data of the client includes at least one of phone call data, chat message data, email data, or survey data of the client.

Abstract: A computationally-efficient system for encoding a message object implements instructions including determining a token of the message object. The token identifies a structure of the message object. The instructions include obtaining a dictionary definition based on the token. The dictionary definition describes the structure of the message. The message includes multiple entries. Each of the entries is characterized by a data type and a field identifier. The dictionary definition defines an order of the entries. The instructions include, according to an order specified by the dictionary definition, selecting each entry of a set of entries in the message in sequence and writing the entry to a byte queue exclusive of the data type and the field identifier. The instructions include initiating transmission of the byte queue over a communications network.

Abstract: A system and method receives a request for an event that is not fully specified, and predicts sufficient details of the event to instruct a hardware distributor to route the request to an agent that can handle the predicted request.

Abstract: A computer server includes processor and processing circuitry. The processing circuitry executes instructions to cause the computer server to select, from a database, a user from a plurality of users, encode a unique identifier for the selected user into an image uniform resource locator (URL), transmit a communication incorporating the image URL to a user agent associated with the selected user, receive, from the user agent, a hypertext transfer protocol (HTTP) request for an image associated with the image URL, parse the received HTTP request to identify whether an impression cookie is present, and in response to the impression cookie being present, extract a set of impressions from the impression cookie and generate a new impression cookie based on the extracted set of impressions.

Abstract: A device, method, and non-transitory computer readable medium for obfuscating text data by selectively masking incoming tokens within the text data based on allowed tokens within an allow list, and storing a result thereof within a memory.

Abstract: A server for detecting anomalies associated with users accessing a network is caused to receive a dataset including static data and dynamic data. The static data includes location data of resources associated with the network and user data, and the dynamic data includes user access events. The server is further caused to detect, with a plurality of unsupervised machine learning models, an anomaly associated with a user accessing the network based on the static data and the dynamic data, determine whether the detected anomaly is critical, and in response to determining the detected anomaly is critical, generate and transmit a security alert specific to the detected anomaly to a security operation center. Other example servers, systems, apparatuses, methods, and non-transitory computer readable medium for detecting anomalies associated with users accessing a network are also disclosed.

Abstract: A method includes storing a test database of tests and corresponding test rules, storing a user information database, storing a profile database, and storing a threshold database including thresholds corresponding to test scores and similarity scores. The method includes, in response to receiving interaction parameters of an interaction performed by a user, identifying a set of tests based on the interaction parameters. The method includes, for each of the set of tests: calculating a score using user data of the user, corresponding test rules, and the interaction parameters; adjusting the score based on the user's profile; obtaining a threshold corresponding to the identified test; and, in response to the score exceeding the threshold, categorizing the interaction within a first category. The method also includes generating and transmitting an alert in response to the interaction being categorized within the first category.

Abstract: A system, apparatus, method, and non-transitory computer readable medium for performing co-trading changepoint detection may include a server caused to, receive a transaction dataset, the transaction dataset including a plurality of transactions for analysis, each transaction of the plurality of transactions associated with a user account involved in the transaction, a transaction object involved in the transaction, and transaction timestamp information corresponding to a time of occurrence of the transaction, the user account being one of a plurality of user accounts, generate a first network graph based on the transaction dataset, the first network graph including object nodes and user account nodes representing each of the transactions of the transaction dataset, transform the first network graph into at least one time-dependent transformed graph, and generate at least one potential fraud alert based on results of the network analysis.

Abstract: A system and method identifies a score for a user using the user's response to questions from a number of different financial and other-than-financial planning dimensions.

Abstract: A recommendation system includes a content similarity analyzer configured to determine a first set of content item identifiers similar to a set of viewed content items based on respective similarity scores and add them to a first list. A similar user content extraction module identifies a set of similar user identifiers from a user similarity database; obtains, based on respective viewing histories of the set, a second set of content item identifiers; and adds them to the first list. The recommendation system includes a content filter configured to select a subset of content item identifiers from the first list based on the corresponding similarity scores between content item identifiers of the first list and a viewing history. The content filter is configured to transmit the subset of content item identifiers for display of the corresponding content items via a web portal on a user interface of a first user device.

Abstract: A system and method graphically displays and receives order status and allows order status to be replayed in time.

Abstract: A system includes a processor and a memory. The memory stores a parameter database including parameters for entities and instructions for execution by the processor. The instructions include, in response to receiving a request control signal including a scaling factor from a user device, obtaining a set of actions and a corresponding equivalence value for each action from the parameter database. The instructions include filtering the set of actions based on the corresponding equivalence value of the set of actions. The instructions include, for each action of the filtered set of actions, obtaining a set of parameters from the parameter database, computing a recommendation factor based on the set of parameters, and adding the corresponding action to a recommendation list in response to the recommendation factor being less than a threshold. The instructions include transforming an interface of the user device by rendering a graphical depiction of the recommendation list.

Abstract: A system and method operates a family of exchange traded funds or mutual funds with different weighted average maturities.