User behavior analyzer
US9529777B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Oct 26, 2012 |
| Grant date | Dec 27, 2016 |
| Priority date | — |
| Expiry date | Oct 18, 2033 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06Q10/0631
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system and method is shown for identifying abnormal client behavior with respect to communications between one or more servers and one or more client devices communicatively coupled to the one or more servers. Messages are received at a server from one or more client devices communicatively coupled to the server. The plurality of messages are grouped into subsets of messages using a learn module of the server. Each subset of messages is associated with a unique client identifier, and all messages within a subset are associated with the same unique client identifier. Each message within a subset of messages is identified as belonging to a defined type of message. Sequences of the defined types of messages within each of said subsets of messages are recorded using the learn module. Time intervals between the defined types of messages are measured using the learn module. The recorded sequences of defined types of messages and the measured time intervals between the defined types of messages are designated as constituting normal client behavior.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.