Methods and systems for monitoring user, application or device activity

• US 20050183143A1
• Filed: 02/13/2004
• Published: 08/18/2005
• Est. Priority Date: 02/13/2004
• Status: Abandoned Application

• Current Assignee: Sergeant Laboratories, Inc.
• Original Assignee: Sergeant Laboratories, Inc.
• Inventors: Anderholm, Eric John, Losen, David Ronald
• Application Number:
  US10/779,535
• Publication Number:
  US 20050183143A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 11/32 with visual or acoustical indication of the functioning of the machine
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 2201/86 Event-based monitoring

Abstract

Methods and systems are provided for capturing usage data from a user computer, processing a subset of such data to form output, and offering access to selective views of such output, such as to assist a company'"'"'s management in monitoring computer usage in a work environment. The output may be processed and viewed according to software application, device, or specified user. The output, or a report generated therefrom, may be accessible in differing degrees to individuals having appropriate levels of permission.

Claims

1. A method of managing security in an enterprise, comprising:

detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

storing such events in a data facility;

organizing the events by user, by computer and by event type; and

presenting a summary of the events in a report, wherein a viewer of the report may select the organization of the report by user, by computer and by event type.

2. A method of claim 1, wherein the report is in a graphical format.

3. A method of claim 1, further comprising limiting access to the report based on a predetermined level of authority of the party seeking access.

4. A method of claim 1, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

5. A method of claim 1, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

6. A method of claim 1, wherein the report relates to compliance with a policy of the enterprise.

7. A method of claim 1, wherein the report relates to security of the enterprise.

8. A method of claim 1, wherein the report relates to performance of an objective of the enterprise.

9. A method of claim 1, wherein the report relates to content viewed by the user, the content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

10. A method of managing compliance with policies of an enterprise, comprising:

detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

storing such events in a data facility;

organizing the events by user, by computer and by event type; and

presenting a summary of the events in a graphical-format report, wherein a viewer of the report may select the organization of the report.

11. A method of claim 10, further comprising limiting access to the report based on a predetermined level of authority of the party seeking access.

12. A method of claim 10, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

13. A method of claim 10, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

14. A method of claim 10, wherein the report relates to compliance with a policy of the enterprise.

15. A method of claim 10, further comprising sending an alert if a user is suspected of committing a security violation based on the user interactions with the computer.

16. A method of claim 10, further comprising increasing the rate of capture of user interactions if a user is suspected of committing a security violation.

17. A method of claim 10, wherein the report relates to content viewed by the user, the content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

18. A method of managing productivity of individuals operating within a business enterprise, comprising:

detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

storing such events in a data facility;

organizing the events by user, by computer and by event type; and

presenting a summary of the events in a graphical-format report, wherein a viewer of the report may select the organization of the report.

19. A method of claim 18, further comprising limiting access to the report based on a predetermined level of authority of the party seeking access.

20. A method of claim 18, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

21. A method of claim 18, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

22. A method of claim 18, wherein the event relates to an employee'"'"'s usage of the Internet.

23. A method of claim 22, further comprising providing an alert if an employee'"'"'s usage of the Internet exceeds a predetermined amount during a predetermined period of time.

24. A method of claim 18, wherein the report relates to content viewed by the user, the content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

25. A system for managing security in an enterprise, coman agent for detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

a data facility for storing the events detected by the agent; and

a reporting facility for organizing and reporting the events by user, by computer and by event type.

26. A system of claim 25, wherein the reporting facility generates a report in a graphical format.

27. A system of claim 25, further comprising a security facility for limiting access to the report based on a predetermined level of authority of the party seeking access.

28. A system of claim 27, wherein the security facility comprises an encryption facility.

29. A system of claim 27, wherein the security facility comprises a password.

30. A system of claim 25, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

31. A system of claim 25, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

32. A system of claim 25, wherein the reporting facility reports compliance with a policy of the enterprise.

33. A system of claim 25, wherein the reporting facility reports security events.

34. A system of claim 25, wherein the reporting facility reports on performance of an objective of the enterprise.

35. A system of claim 25, wherein the report facility reports on interaction by the user with content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

36. A system for managing compliance with policies of an enterprise, comprising:

an agent for detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

a data facility for storing such events by user, by computer and by event type; and

a reporting facility for presenting a summary of the events in a graphical-format report, wherein a viewer of the report may select the organization of the report.

37. A system of claim 36, further comprising a security facility for limiting access to the report based on a predetermined level of authority of the party seeking access.

38. A system of claim 37, wherein the security facility comprises an encryption facility.

39. A system of claim 37, wherein the security facility comprises a password.

40. A system of claim 36, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

41. A system of claim 36, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

42. A system of claim 36, wherein the reporting facility reports events relating to compliance with a policy of the enterprise.

43. A system of claim 36, further comprising a communication facility for sending an alert if a user is suspected of committing a security violation based on the user interactions with the computer.

44. A system of claim 36, further comprising a dynamic facility of the agent for increasing the rate of capture of user interactions if a user is suspected of committing a security violation.

45. A system of claim 36, wherein the report reporting facility reports content viewed by the user, the content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

46. A system for managing productivity of individuals operating within a business enterprise, comprising:

an agent for detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

a data facility for storing such events by user, by computer and by event type; and

a reporting facility for presenting a summary of the events in a graphical-format report, wherein a viewer of the report may select the organization of a report generated by the reporting facility.

47. A system of claim 46, further comprising limiting access to the report based on a predetermined level of authority of the party seeking access.

48. A system of claim 46, wherein the events are selected from the group consisting of keyboard event, a mouse event, an intellipoint event, a trackball event, a cursor event, a screen event, sensor event, a touchpad event, a tablet event, a touchscreen event, a joystick event, a pen event, a voice recognition event, and biometric event.

49. A system of claim 46, wherein the user is selected from the group consisting of an employee, a consultant, a teacher, a student, a government official, a patient, a volunteer, an attendant, a team member, a system administrator, a contractor, a vendor, a clerk, a cashier, a teller, a comptroller, an accountant, an attorney, a financial officer, a principal, an administrator, a human resources employee, a broker, a gaming employee, a guard, a banker, a government official, a trustee, a guardian, a steward, an authorized user and a non-authorized user.

50. A system of claim 46, wherein the event relates to an employee'"'"'s usage of the Internet.

51. A system of claim 50, further comprising an alarm facility for providing an alert if an employee'"'"'s usage of the Internet exceeds a predetermined amount during a predetermined period of time.

52. A system of claim 46, wherein the report relates to content viewed by the user, the content selected from the group consisting of chat room content, content relating to securities, insider trading information, content relating to gaming, pornographic content, illegal content, vulgar content, prurient content, gambling content, entertainment content, video game content, trade secret content, proprietary content, engineering content, drug-related content, health-related content, a medical record, a patient record, a financial record, account information, educational information, indication of harassment, indication of a crime, indication of policy or regulatory non-compliance, identification of a competitive entity, identification of an adverse entity, identification of a specific individual, transcript information, access to an employment-oriented website, content designated prohibited by policy, and trading information.

53. A method of managing security in an enterprise, comprising:

detecting at periodic intervals events that correspond to user interactions with computers connected to a network of the enterprise;

storing such events in a data facility;

organizing the events by user, by computer and by event type;

permitting access by an individual to the stored events; and

logging events that indicate the nature of the access by the individual to the stored events.