Methods, systems and computer program products for geography and time monitoring of a server application user
First Claim
1. A method for monitoring login session activity for a client of a server application, the method comprising:
- (a) identifying a first geographic location of a first client initiating a first login session;
(b) identifying a second geographic location of a second client initiating a second login session;
(c) analyzing the first and second geographic locations to identify any geographic difference;
(d) identifying a time interval between the initiation of the first login session and the second login session; and
(e) analyzing the geographical difference and the time interval.
3 Assignments
0 Petitions
Accused Products
Abstract
Methods, systems and computer program products are disclosed for geography and time monitoring of a server application user in a computer network. The methods, systems, and computer program products can monitor communication data between a server application and a client. The methods, systems, and computer program products can also include applying one or more detectors to the communication data to identify a variety of predetermined activity. Further, the methods, systems, and computer program products can include generating a threat score associated with the predetermined activity by comparing the identified predetermined activity with a security threshold criteria.
129 Citations
39 Claims
-
1. A method for monitoring login session activity for a client of a server application, the method comprising:
-
(a) identifying a first geographic location of a first client initiating a first login session;
(b) identifying a second geographic location of a second client initiating a second login session;
(c) analyzing the first and second geographic locations to identify any geographic difference;
(d) identifying a time interval between the initiation of the first login session and the second login session; and
(e) analyzing the geographical difference and the time interval. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A system for monitoring login session activity for a client of a server application, the system comprising:
-
(a) a network interface operable to monitor communication data of a server application; and
(b) a detector operable to;
(i) identify a first geographic location of a first client initiating a first login session with the server application;
(ii) identify a second geographic location of a second client initiating a second login session with the server application;
(iii) analyze the first and second geographic locations to identify any geographic difference;
(iv) identify a time interval between the initiation of the first login session and the second login session; and
(v) analyze the geographical difference and the time interval. - View Dependent Claims (15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26)
-
-
27. A computer program product comprising computer-executable instructions embodied in a computer-readable medium for performing steps comprising:
-
(a) identifying a first geographic location of a first client initiating a first login session;
(b) identifying a second geographic location of a second client initiating a second login session;
(c) analyzing the first and second geographic locations to identify any geographic difference;
(d) identifying a time interval between the initiation of the first login session and the second login session; and
(e) analyzing the geographical difference and the time interval. - View Dependent Claims (28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39)
-
Specification