Method and process for the Forensic Inspection of real time streams FIRST Engine

• US 20090292775A1
• Filed: 05/20/2008
• Published: 11/26/2009
• Est. Priority Date: 05/20/2008
• Status: Abandoned Application

• Current Assignee: Scott Wayne Flenniken
• Original Assignee: Scott Wayne Flenniken
• Inventors: Flenniken, Scott Wayne
• Application Number:
  US12/123,486
• Publication Number:
  US 20090292775A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

The present invention relates generally to a business method, computer system and software implemented method in the field of internet based security for facilitating the analysis and inspection of real time data streams, which will allow a user to actively monitor chat and email information. The present invention will inspect a plurality of user browsing information such as, but not limited to, the web pages and search queries respectively visited and submitted by users, the emails sent and received by users, and the manner in which users browse the Internet and search for content. More particularly the present invention facilitates the real time forensic inspection of data streams using pattern and keyword matching techniques.

Claims

1. Method and process for the forensic inspection of realtime streams characterized in that the said invention facilitates the analysis and inspection of data streams to allow a user to actively monitor email information.

2. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said invention facilitates the analysis and inspection of data streams to allow a user to actively monitor chat information.

3. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said invention includes one or a multitude of computer code based filters that act to analyse and inspect the data streams.

4. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said invention captures user input in xml format and sents it to a centralized server.

5. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said xml formatted data is parsed using regular expressions in php script.

6. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said captured data is compared in grep or other unix style method to a predefined table of patterns and/or keywords.

7. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said data is marked true with a flag if a match is established with the said pattern.

8. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said data passes through to the keyword match if it does not match.

9. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said data is marked true with a flag if a match is established with the said keyword.

10. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein the said data passes through the engine if there are no matches.

11. Method and process for the forensic inspection of real-time streams as claimed in claim 1 wherein an email or SMS is dispatched to the subscriber in case of an established pattern or keyword match.