Method and apparatus for monitoring network activity

• US 20070206741A1
• Filed: 03/01/2006
• Published: 09/06/2007
• Est. Priority Date: 03/01/2006
• Status: Abandoned Application

• Current Assignee: SBC Knowledge Ventures LP (AT&T, Inc.)
• Original Assignee: SBC Knowledge Ventures LP (AT&T, Inc.)
• Inventors: Tiliks, Dianna, Heinmiller, Wayne, Gruchala, Carol
• Application Number:
  US11/366,922
• Publication Number:
  US 20070206741A1
• Time in Patent Office: Days
• US Class Current: 379/106.20
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04M 2203/056 non-invasive testing, i.e. in operation testing without service interruption
• CPC Class Codes: H04M 3/2218 Call detail recording
• CPC Class Codes: H04M 3/2281 Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections

Abstract

A method (200) and apparatus (102, 108) are disclosed for monitoring network activity. An apparatus that incorporates teachings of the present disclosure may include, for example, an activity notification system (ANS) (102) having a controller (104) that manages operations of a communications interface (110) for communicating with network elements (101) in a communication system. The controller can be programmed to monitor (202) network activities associated with a plurality of communication devices of an end user, generate (204) from the monitored activities an end user profile that predicts a behavior of the end user, and transmit (212, 222) a notice when a change in the monitored activities differs from a behavior predicted by the end user profile. Additional embodiments are disclosed.

Claims

1. An activity notification system (ANS), comprising:

a controller that manages operations of a communications interface to communicate with network elements in a communication system, wherein the controller is programmed to;

monitor network activities associated with a plurality communication devices of an end user;

generate from the monitored activities an end user profile that predicts a behavior of the end user; and

transmit a notice when a change in the monitored activities differs from a behavior predicted by the end user profile.

2. The ANS of claim 1, wherein the controller is programmed to transmit the notice to at least one among the end user, a family member of the end user, someone associated with the end user, an emergency service, a law enforcement service, and someone identified by the end user.

3. The ANS of claim 1, wherein the controller is programmed to transmit the notice to at least one among an emergency service, and someone identified by the end user when the change in the monitored activities shows a noticeable decrease in activities when compared to the behavior predicted by the end user profile.

4. The ANS of claim 1, wherein the controller is programmed to transmit the notice to the end user when the change in the monitored activities shows a noticeable increase in activities when compared to the behavior predicted by the end user profile.

5. The ANS of claim 1, wherein the activities monitored for each of the one or more communication devices comprise at least one among egress data traffic, ingress data traffic, purchases fulfilled by the end user, outgoing calls initiated, incoming calls accepted, Internet usage, and multimedia program selections.

6. The ANS of claim 1, wherein the monitored activities comprise signaling control information, and wherein the controller is programmed to generate the end user profile from monitoring the signaling control information associated with the one or more communication devices of the end user.

7. The ANS of claim 1, wherein the signaling control information comprises at least one among a group of protocols comprising SIP (Session Initiation Protocol), Signaling System 7 (SS7), and Advanced Intelligent Network (AIN).

8. The ANS of claim 1, wherein the one or more communication devices comprise at least one among a telephony device, a computer, and an Internet Protocol TV (IPTV) device, and wherein the communication system supports at least one among Voice over IP (VoIP) services, Plain Old Telephone Services (POTS), IPTV services, and wireless communication services.

9. The ANS of claim 1, wherein the controller is programmed to transmit the notice in at least one among a group of message formats comprising an email, a short message service (SMS) message, and a telecommunications call.

10. The ANS of claim 1, wherein the controller is programmed to:

initiate a call to a communication device of a party;

transmit a voice message corresponding to the notice upon acceptance of the call by the party; and

receive a response from the party.

11. The ANS of claim 10, wherein the controller is programmed to update the end user profile according to the response once an identification supplied in said response has been authenticated.

12. The ANS of claim 10, wherein the controller is programmed to:

update the end user profile upon receiving in the response a validation of the change in activities monitored; and

transmit the notice to a guardian upon receiving in the response an invalidation of the change in activities monitored.

13. A computer-readable storage medium in an activity notification system (ANS), comprising computer instructions for:

monitoring in a communication system activities associated with a plurality communication devices of an end user operating therein; and

transmitting a notice when a change in the monitored activities differs from a behavior expected of the end user.

14. The storage medium of claim 13, comprising computer instructions for transmitting the notice to a guardian when the change in monitored activities falls below a threshold associated with the expected behavior of the end user.

15. The storage medium of claim 13, comprising computer instructions for transmitting the notice to the end user when the change in monitored activities exceeds a threshold associated with the expected behavior of the end user.

16. The storage medium of claim 13, comprising computer instructions for transmitting the notice to one of the communication devices of the end user, wherein the notice comprises as a voice message describing the change detected and a request for a clarification response from the end user.

17. The storage medium of claim 16, comprising computer instructions for receiving the response from the end user, wherein the response comprises one among one or more Dual Tone Multi Frequency (DTMF) tones entered by the end user, and a voice response from the end user.

18. The storage medium of claim 16, comprising computer instructions for:

detecting no response from the end user within an allotted response time; and

transmitting the notice to a communication of an alternate third party.

19. A method in a communication device, comprising sharing behavioral information associated with an end user of the communication device with an activity notification system (ANS) that detects anomalous changes in the behavioral information.

20. The method of claim 19, comprising receiving a notice from the ANS requesting a clarification on anomalous changes detected in the behavioral information.

21. The method of claim 19, wherein the behavioral information comprises at least one among a location of the end user, and operations of the communication device manipulated by the end user.