Method and system for processing intelligence information

• US 20070198275A1
• Filed: 10/21/2002
• Published: 08/23/2007
• Est. Priority Date: 06/27/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Siebel Systems Inc. (Oracle Corporation)
• Inventors: Abichandani, Arun, Viswanathan, Rahul, Yelkur, Rajani, Malden, Matthew, Chan, Jackson, Wong, Hang, Nash, Christopher, Israel, Daniel, Patel, Prashant, Bishop, Frank, Pinkerton, Robert
• Granted Patent: US 8,423,374 B2
• Time in Patent Office: Days
• US Class Current: 705/1.1
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

A method and system for routing intelligence information related to security. The security system provides rules that identify conditions and routing instructions that are to be applied to intelligence information. A security organization may create and modify rules to ensure the appropriate routing of intelligence information in a timely manner. The security system may receive intelligence information from various sources. Regardless of the form or source of intelligence information, the security system analyzes the intelligence information to determine whether any conditions of the rules are satisfied. When a condition of a rule is satisfied, the security system sends a notification of the intelligence information in accordance with the routing instructions for that rule. In this way, intelligence information can be automatically and quickly routed to the appropriate security personnel for further processing.

Claims

1-9. -9. (canceled)

10. A method in a computer system for identifying duplicate records relating to a suspect in an investigation, the method comprising:

generating a de-duplication key for each record derived from content of various fields of the record;

determining whether any de-duplication key for a record matches a de-duplication key for another record; and

when it is determined that de-duplication keys match, indicating that the records with the matching keys may be duplicates.

11. The method of claim 10 wherein de-duplication keys match when they are the same.

12. The method of claim 10 wherein de-duplication keys match when a metric indicates that the de-duplication keys are close enough that they may represent duplicate records.

13. The method of claim 12 wherein the metric calculates a distance between the de-duplication keys.

14. The method of claim 10 wherein the de-duplication keys include information derived from names of suspects.

15. The method of claim 10 wherein the de-duplication keys include information derived from physical characteristics of suspects.

16. The method of claim 10 wherein the de-duplication keys include information derived from addresses of suspects.

17. The method of claim 10 wherein the de-duplication keys include information derived from aliases of suspects.

18-27. -27. (canceled)

28. A method for identifying records that relate to the same entity, the method comprising:

generating a key for a record of a security system and a key for a record of another security system, the keys derived from name and alias content of the records;

comparing the generated key of the record of the security system to the generated key of the record of the other security system; and

when the comparison indicates that the compared keys may represent the same entity,

presenting an indication to a user that the record of the security system and the record of the other security system may represent the same entity; and

receiving from the user an indication as to whether the records represent the same entity.

29. The method of claim 28 wherein the keys are de-duplication keys.

30. The method of claim 29 wherein the entity is an individual.

31. The method of claim 29 wherein the entity is a group of individuals.

32. The method of claim 29 wherein the comparing includes applying a metric to the generated de-duplication keys.

33. The method of claim 29 wherein the de-duplication keys are derived from characteristics of the entity.

34. The method of claim 29 wherein the names of the records represent different spellings of the same name.

35. The method of claim 29 including receiving alias information for an entity.

36. A security system for identifying records that relate to the same entity, comprising:

means for generating a de-duplication key for a record and a de-duplication key for another record, the de-duplication keys derived from content of the records;

means for comparing the generated de-duplication key of the record to the generated de-duplication key of the other record;

means for presenting an indication to a user that the records may represent the same entity when the comparison indicates that the compared de-duplication keys may represent the same entity;

means for receiving from the user an indication as to whether the records represent the same entity; and

means for combining the records into a single record.

37. The system of claim 36 wherein the entity is an individual.

38. The system of claim 36 wherein the entity is a group of individuals.

39. The system of claim 36 wherein the comparing includes applying a metric to the generated de-duplication keys.

40. The system of claim 36 wherein the de-duplication keys are derived from characteristics of the entity.

41. The system of claim 36 wherein the de-duplication keys are derived from alias information.

42. The system of claim 36 wherein the de-duplication keys are derived from name information.

43. The system of claim 36 wherein the names of the records represent different spellings of the same name.

44. The system of claim 36 including receiving alias information for an entity.

45. A computer-readable medium containing instructions for identifying records of a security system that relate to the same suspect, by a method comprising:

generating a de-duplication key for a record of the security system and a de-duplication key for another record of the security system, the de-duplication keys derived from alias information of the records;

comparing the generated de-duplication key of the record to the generated de-duplication key of the other record; and

when the comparison indicates that the records may represent the same suspect,

presenting an indication to a user that the records may represent the same suspect;

receiving from the user an indication as to whether the records represent the same suspect; and

when the user indicates that the records represent the same suspect, combining the records.

46. The computer-readable medium of claim 45 wherein the suspect is an individual.

47. The computer-readable medium of claim 45 wherein the suspect is a group of individuals.

48. The computer-readable medium of claim 45 wherein the comparing includes applying a metric to the generated de-duplication keys.

49. The computer-readable medium of claim 45 wherein the de-duplication keys are derived from characteristics of the suspect.

50. The computer-readable medium of claim 45 wherein the names of the records represent different spellings of the same name.

51. The computer-readable medium of claim 45 including receiving alias information for a suspect.