METHOD AND SYSTEM FOR PROCESSING INTELLIGENCE INFORMATION

• US 20130227046A1
• Filed: 04/15/2013
• Published: 08/29/2013
• Est. Priority Date: 06/27/2002
• Status: Active Grant

• Current Assignee: Siebel Systems Inc. (Oracle Corporation)
• Original Assignee: Siebel Systems Inc. (Oracle Corporation)
• Inventors: Malden, Matthew Scott, Israel, Daniel Edward, Pinkerton, Robert Brent, Bishop, Frank Warren Jr., Patel, Prashant B., Nash, Christopher Scott, Viswanathan, Rahul, Abichandani, Arun, Yelkur, Rajani, Wong, Hang Yee, Chan, Jackson
• Granted Patent: US 10,116,595 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

A method and system for routing intelligence information related to security. The security system provides rules that identify conditions and routing instructions that are to be applied to intelligence information. A security organization may create and modify rules to ensure the appropriate routing of intelligence information in a timely manner. The security system may receive intelligence information from various sources. Regardless of the form or source of intelligence information, the security system analyzes the intelligence information to determine whether any conditions of the rules are satisfied. When a condition of a rule is satisfied, the security system sends a notification of the intelligence information in accordance with the routing instructions for that rule. In this way, intelligence information can be automatically and quickly routed to the appropriate security personnel for further processing.

Claims

1. A method in a computer system for routing intelligence information relating to security, the method comprising:

providing rules indicating conditions and routing instructions;

receiving intelligence information relating to security;

analyzing the received intelligence information to determine whether any conditions of the provided rules are satisfied; and

when a condition of a provided rule is satisfied, sending a notification of the intelligence information in accordance with the routing instructions of the provided rule.

2. The method of claim 1 wherein the intelligence information is received via an electronic mail message.

3. The method of claim 1 wherein the intelligence information is received via a data entry display page.

4. The method of claim 1 wherein the routing instructions identify a category of agents to whom the received intelligence information is to be routed.

5. The method of claim 1 wherein the routing instructions indicate that the intelligence information is to be queued for processing by available security personnel.

6. The method of claim 5 wherein the available security personnel is qualified to process the intelligence information.

7. The method of claim 5 wherein the available security personnel has security to review the intelligence information.

8. The method of claim 1 wherein the analyzing includes identifying keywords within the intelligence information.

9. The method of claim 1 wherein the analyzing includes identifying a suspect in the intelligence information.

10. A computer program product comprising:

a plurality of instructions, configured to route intelligence information relating to security by virtue of comprising

a first set of instructions, executable on a computer system, configured to provide rules indicating conditions and routing instructions,

a second set of instructions, executable on the computer system, configured to receive intelligence information relating to security,

a third set of instructions, executable on the computer system, configured to analyze the received intelligence information to determine whether any conditions of the provided rules are satisfied, and

a fourth set of instructions, executable on the computer system, configured to, when a condition of a provided rule is satisfied, send a notification of the intelligence information in accordance with the routing instructions of the provided rule; and

a computer-readable storage medium, wherein the instructions are encoded in the computer-readable storage medium.

11. The computer program product of claim 10, wherein the intelligence information is received via an electronic mail message.

12. The computer program product of claim 10, wherein the intelligence information is received via a data entry display page.

13. The computer program product of claim 10, wherein the routing instructions identify a category of agents to whom the received intelligence information is to be routed.

14. The computer program product of claim 10, wherein the routing instructions indicate that the intelligence information is to be queued for processing by available security personnel.

15. The computer program product of claim 14, wherein the available security personnel is qualified to process the intelligence information.

16. The computer program product of claim 14, wherein the available security personnel has security to review the intelligence information.

17. The computer program product of claim 10, wherein the analyzing includes identifying keywords within the intelligence information.

18. The computer program product of claim 10, wherein the analyzing includes identifying a suspect in the intelligence information.

19. A computer system comprising:

a processor;

a computer-readable storage medium coupled to the processor; and

a plurality of instructions, encoded in the computer-readable storage medium and configured to cause the processor to

provide rules indicating conditions and routing instructions,

receive intelligence information relating to security,

analyze the received intelligence information to determine whether any conditions of the provided rules are satisfied, and

send a notification of the intelligence information in accordance with the routing instructions of the provided rule, when a condition of a provided rule is satisfied.

20. The computer system of claim 19, wherein the routing instructions indicate that the intelligence information is to be queued for processing by available security personnel.