CPC G06Q 20/1085 (2013.01) [G06F 16/164 (2019.01); G06Q 40/00 (2013.01); G07F 19/207 (2013.01); G07F 19/209 (2013.01)] | 20 Claims |
1. A server device in communication with a plurality of automated teller machines (ATMs), the server device comprising:
a memory including a database that stores mapped transaction data and metadata for the mapped transaction data for each of the plurality of ATMs; and
one or more processors in communication with the memory and configured to:
receive reports on operation of each of the plurality of ATMs, wherein the reports are generated based on a least a portion of the metadata for the mapped transaction data for each of the plurality of ATMs;
detect suspicious activity occurring at one or more of the plurality of ATMs; and
determine a threat signature for the suspicious activity based on analysis of one or more of the database for the plurality of ATMs or the reports on operation of the plurality of ATMs.
|