Abstract: User identification with an input profile record (IPR). In one embodiment, a server includes a memory and an electronic processor. The electronic processor is configured to receive a plurality of input profile records (IPRs) associated with a first user, the plurality of IPRs each based on a plurality of user inputs and indicative of identity of the first user, control the memory to store the plurality of IPRs in the input profile record repository, receive a current IPR associated with a second user, determine whether the second user is the first user by comparing a first one or more biometric features based on the plurality of IPRs and a second one or more biometric features based on the current IPR, and responsive to determining that the second user is the first user, output an identity confirmation that the second user is the first user.

Abstract: Devices, methods, and computer-readable media that perform frictionless multi-factor authentication. In one embodiment, a server includes a memory including a frictionless multi-factor authentication (fMFA) service, and an electronic processor communicatively coupled to the memory.

Abstract: The disclosure relates to methods and systems of automatically generating rules based on an evolutionary algorithm. A system may generate an initial population of rule candidates bound by a respective constraint. The system may perform a crossover of the initial population of rule candidates with one another to generate a plurality of crossover child rules and may apply a probabilistic mutation to at least some of the plurality of crossover child rules. The system may evaluate performance of the plurality of crossover child rules based on one or more fitness evaluation metrics that measure performance of a given crossover child rule and select a subset of the plurality of crossover child rules based on the evaluated performance. The system may repeat the process until a specified number of evolutionary generations is reached.

Abstract: Systems, methods, and non-transitory computer-readable media for forming an extensible data warehouse. A data ingestor application receiving raw data having a first structure. Forming a data lake in the third memory using the raw data. Continuously receive additional raw data having a plurality of structures. The plurality of structures including the first structure and one or more different structures. The additional raw data supplementing the raw data. Determining each structure of the plurality of structures. Generating a dataset based on the additional raw data and the plurality of structures that are determined. Extracting metadata associated with the additional raw data from the dataset. Creating a catalog of the dataset based on the metadata that is extracted. Modifying the data lake in the third memory to include the additional raw data based on the dataset and the catalog.

Abstract: A system includes memory hardware configured to store instructions and one or more electronic processors configured to execute the instructions. The instructions include logging historical behavioral biometric metadata from one or more computing platforms, generating a user profile based on the logged historical behavioral biometric metadata, receiving an authentication request from a client computing platform, providing the first behavioral biometric metadata and the user profile to a trained machine learning model to generate a biometric match, generating a positive control signal in response to a positive biometric match, sending the positive control signal to the client computing platform, updating the historical behavioral biometric metadata with the first behavioral biometric metadata, and retraining the trained machine learning model using the updated historical behavioral biometric metadata. The authentication request includes first behavioral biometric metadata.

Abstract: Embodiments herein provide a server including a memory and an electronic processor. The server includes a UDID database. The electronic processor is configured to receive an identification request regarding a currently-observed user device having a first set of attributes associated with the currently-observed user device. The first set of attributes includes an IP address of the currently-observed user device. The electronic processor is further configured to generate an IP hardened UDID associated with the currently-observed user device based on the first set of attributes, and store the IP hardened UDID in the UDID database. The generation of the IP hardened UDID compensates for changes in the IP address of the currently-observed user device over a period of time.

Abstract: Devices, methods, and computer-readable media that perform sessions correlation for multiple device authentication. In one embodiment, a server may include an electronic processor communicatively coupled to the memory, the electronic processor is configured to: establish a first session with a first user interface device, establish a second session with a second user interface device that is different from the first user interface device, receive, from a third-party server, a score request including information that correlates the second session with the first session, generate a score on a correlation of the first session to the second session, and output the score indicating a level of multiple device authentication, the score also being a control signal for authorizing or denying a multi-factor authentication at the third-party server.

Abstract: Methods and systems for providing offline fraud assessments with respect to customer login data. One system includes an electronic processor configured to receive an electronic file. The electronic processor is also configured to perform an offline batch processing on the electronic file, where the offline batch processing includes performing a fraud evaluation on the electronic file using a ruleset. The electronic processor is also configured to determine a fraud assessment for the electronic file based on the fraud evaluation. The electronic processor is also configured to generate and transmit a fraud report for display, the fraud report including the fraud assessment.

Abstract: Protecting sensitive data in an internet-of-things (IoT) device. In one embodiment, a computing device includes network communications, a memory, and an electronic processor communicatively coupled to the memory and the network communications. The electronic processor is configured to receive a transaction setup request, determine, with the network communications, whether minimally required network environment attributes are available, prompt a user that sensitive data can be securely stored in the memory and to enter the sensitive data in response to determining that the minimally required network environment attributes are available, and prompt the user that the sensitive data cannot be securely stored in the memory in response to determining that the minimally required network environment attributes are not available.

Abstract: The disclosure relates to methods and systems of partitioning-based scalable weighted aggregation composition for embeddings learned from knowledge graphs for training neural networks to perform downstream machine-learning tasks. For example, a system may access a knowledge graph comprising a plurality of nodes and partition the knowledge graph into a plurality of partitions based on edge densities between nodes of the knowledge graph. The system may perform partition-wise encoding using compositional message passing between nodes that enables learning from neighboring nodes. The system may generate an embedding for each node and each relation type in each partition based on the partition-wise encoding using compositional message passing. The system may concatenate the generated embeddings from the plurality of partitions. The system may train a global neural network for a downstream prediction task based on the concatenated embeddings using one or more weight matrices.

Abstract: A fraud prevention system that includes a client server and a fraud prevention server. The fraud prevention server includes an electronic processor and a memory. The memory including a trust scoring service. When executing the trust scoring service, the electronic processor is configured to receive a trust score request of a device from the client server, generate, with a trust model, a trust score of the device, and responsive to generating the trust score, output the trust score to the client server in satisfaction of the trust score request, wherein the trust score is distinct from a risk factor, the trust score representing a predicted trust level of the device, and the risk factor representing a fraud risk level associated with the device based on one or more device behaviors.

Abstract: A fraud prevention system that includes a client server and a fraud prevention server. The fraud prevention server includes an electronic processor and a memory. The memory includes an online application origination (OAO) service. When executing the OAO service, the electronic processor is configured to determine a fraud score of an online application based on an online application origination (OAO) model that differentiates between a behavior of a normal user and a behavior of a nefarious actor during a submission of the online application on a device, and control the client server to approve, hold, or deny the online application based on the fraud score that is determined.

Abstract: Devices, systems, methods, and non-transitory computer-readable media for modular network architecture. In one embodiment, a server includes a memory and an electronic processor. The memory stores cloud infrastructure definitions, the cloud infrastructure definitions including a plurality of microservices and security groups that define communication between each of the plurality of microservices. The electronic processor is configured to deploy a first virtual private cloud including a first portion of the plurality of microservices and all of the security groups, deploy a second virtual private cloud including a second portion of the plurality of microservices and the all of the security groups, and deploy a third virtual private cloud including a third portion of the plurality of microservices and the all of the security groups.

Abstract: Systems, methods, and non-transitory computer-readable media for authentication and authorizing a payment request. In one embodiment, the system includes a server including a first memory and a first electronic processor communicatively connected to the first memory. The first electronic processor is configured to receive the payment request, three-domain secure (3DS) data, and fast ID online (FIDO) data, output an authentication request that includes a portion of the 3DS data and a portion of the FIDO data, receive an authentication response based on the 3DS data and the FIDO data, the authentication response including one or more authentications, output the payment request based on the authentication response, and receive an authorization or a denial of the payment request.

Abstract: An anomaly detection system that includes a database and a server. The server is connected to the database. The server is configured to identify anomalous web traffic for a certain time period based on one or more client keys from the certain time period. The client key(s) includes at least two characteristics related to web traffic data. The server includes a processing unit and a memory. The server is configured to receive the web traffic data from the database, calculate a z-score metric for the client key, calculate a change rate metric for the client key, calculate a failure metric for the client key, determine an anomaly score based on the z-score metric, the change rate metric, and the failure metric, and determine that the certain time period is an anomalous time period based on the anomaly score.

Abstract: Devices, methods, and non-transitory computer-readable media for user authentication with biometric data in conjunction with autofill assistance. In one example, an electronic computing device includes a memory including a user account and an electronic processor communicatively coupled to the memory. The electronic processor is configured to receive a request to access the user account and biometric data associated with the request, determine whether an autofill assistance occurred while the biometric data was captured, responsive to determining that the autofill assistance occurred while the biometric data was captured, identify data associated with the autofill assistance in the biometric data, generate second biometric data by excluding the data associated with the autofill assistance from the biometric data, and perform user authentication based on the second biometric data.

Abstract: A system may receive, from a monitored system, behavior data that indicates one or more types of computer activities requested by a requester. The system may identify a behavior profile that was generated during a training phase to learn behaviors of the requester, the behavior profile including information that identifies one or more computer activities that were monitored during the training phase. The system may provide, during a detection phase, the behavior data to the behavior classifier to detect whether the behavior data is anomalous. The system may generate an anomaly classification based on the behavior data and the behavior profile. The anomaly classification indicates a predicted anomalousness of the behavior data with respect to the behavior profile and is used to determine whether a mitigative action is to be taken in response to the one or more types of activities requested by the requester.

Abstract: Serverless containerization of a collaboration application improves deployment and security of the collaboration application. A system may generate a container within a private cloud. The container may execute the collaboration application. The container is assigned an Internet Protocol (IP) address and is associated with a security group that controls network traffic to and from the container. The system may include a network load balancer configured with the IP address assigned to the container that allocates computational resources for executing the collaboration application. The system may include serverless resources such as a database and filesystem that is accessible to the container within the private cloud. The system may include a private cloud (PC) endpoint configured to establish a private connection with an end user interface, wherein the private connection provides secure network traffic between the PC endpoint the end user interface within a private network of the PC endpoint.

Abstract: A fraud prevention system that includes a fraud prevention server including an electronic processor and a memory. The memory includes an online application origination (OAO) service. When executing the OAO service, the electronic processor is configured to determine whether the OAO service is enabled and whether a website configuration includes a list of multi-page placements for an online application, determine that input data needs to be stored in the memory and combined into multi-page input data, determine a fraud risk score of the online application based on the multi-page input data and an online application origination (OAO) model that differentiates between a behavior of a normal user and a behavior of a nefarious actor during a submission of the online application on a device, and control a client server to approve, hold, or deny the online application based on the fraud risk score that is determined.

Abstract: User identification with blended response from dual-layer identification service. In one embodiment, a server comprising an electronic processor configured to detect an access request by a user of a user interface device, retrieve a plurality of input profile records from an input profile record repository, perform an identification of the user with one or more passive biometrics models and the plurality of input profile records that are retrieved, generate an identification response and an additional identification request based on an outcome of the identification of the user, control the communication interface to transmit the additional identification request to the second server via the network, receive a second identification response from the second server, and generate a blended response by modifying one or more characteristics of the identification response with the second identification response, the blended response indicating the identification of the user.