HUMAN MOBILITY RULE-BASED DEVICE LOCATION TRACKING

• US 20170094635A1
• Filed: 12/14/2016
• Published: 03/30/2017
• Est. Priority Date: 06/24/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Liu, Hui, Pandey, Santosh, Zhu, Jiang
• Granted Patent: US 9,756,601 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 64/003 locating network equipment

Abstract

Techniques are presented herein to provide human mobility pattern based modeling and tracking of a group of network enabled user devices associated with the same person. An association is made, at a tracking device, between a plurality of user devices and a user. Location information for each of the plurality of user devices is derived through network activity of the plurality of user devices. Locations for the plurality of user devices are derived from the location information. One or more predetermined user mobility pattern rules are applied to the plurality of user devices. User anomalies are detected when the tracked locations indicate that one or more of the plurality of user devices has violated one or more the predetermined user mobility rules.

Claims

1. A method comprising:

associating, at a tracking device, a plurality of network enabled user devices with a user;

deriving location information for each of the plurality of network enabled user devices from activity of the plurality of network enabled user devices on a network;

tracking locations for the plurality of network enabled user devices from the location information;

applying a user mobility pattern rule to tracked locations of the plurality of network enabled user devices, wherein the user mobility pattern rule requires that two or more of the plurality of network enabled user devices move in the same direction when the two or more of the plurality of network enabled user devices change location at the same time; and

detecting a user anomaly when the tracked locations indicate that a first of the plurality of network enabled user devices and a second of the plurality of network enabled user devices move in different directions when changing location at the same time.

2. The method of claim 1, wherein deriving location information for each of the plurality of network enabled user devices comprises receiving indications of network access points used to access the network by respective ones of the plurality of network enabled user devices.

3. The method of claim 1, wherein associating the plurality of network enabled user devices with the user comprises determining that one or more of the plurality of network enabled user devices has logged into the network with a login associated with the user.

4. The method of claim 1, further comprising determining a device type for each of the plurality of network enabled user devices.

5. The method of claim 4, wherein determining the device type for each of the plurality of network enabled user devices comprises determining that the first of the plurality of network enabled user devices is a first mobile network enabled user device and determining that the second of the plurality of network enabled user devices is a second mobile network enabled user device.

6. The method of claim 1, further comprising disabling network access for one or more of the plurality of network enabled user devices in response to detecting the user anomaly.

7. The method of claim 1, further comprising transferring network services from the first of the plurality of network enabled user devices to the second of the plurality of network enabled user devices in response to detecting the user anomaly.

8. A method comprising:

associating, at a tracking device, a plurality of network enabled user devices with a user;

deriving location information for each of the plurality of network enabled user devices from activity of the plurality of network enabled user devices on a network;

tracking locations for the plurality of network enabled user devices from the location information;

applying a user mobility pattern rule to tracked locations of the plurality of network enabled user devices, wherein the user mobility pattern rule requires that when two or more of the plurality of network enabled user devices leave a main location associated with the user, the two or more network enabled user devices return to the main location at the same time; and

detecting a user anomaly when the tracked locations indicate that a first of the plurality of network enabled user devices and a second of the plurality of network enabled user devices move from the main location, and the first of the plurality of network enabled user devices and the second of the plurality of network enabled user devices do not return to the main location at the same time.

9. The method of claim 8, wherein deriving location information for each of the plurality of network enabled devices comprises receiving indications of network access points used to access the network by respective ones of the plurality of network enabled user devices.

10. The method of claim 8, wherein associating the plurality of network enabled user devices with the user comprises determining that one or more of the plurality of network enabled user devices has logged into the network with a login associated with the user.

11. The method of claim 8, further comprising determining the main location from location information indicating where each of the plurality of network enabled user devices logged into the network.

12. The method of claim 8, further comprising determining a device type for each of the plurality of network enabled user devices.

13. The method of claim 12, wherein determining the device type for each of the plurality of network enabled user devices comprises determining that the first of the plurality of network enabled user devices is a first mobile network enabled user device and determining that the second of the plurality of network enabled user devices is a second mobile network enabled user device.

14. The method of claim 8, further comprising disabling network access for one or more of the plurality of network enabled user devices in response to detecting the user anomaly.

15. An apparatus comprising:

a network interface unit configured to send and receive messages over a network; and

a processor configured to;

associate a plurality of network enabled user devices with a user;

derive location information for each of the plurality of network enabled user devices from indications of activity of the plurality of network enabled user devices on the network received via the network interface unit;

track locations for the plurality of network enabled user devices from the derived location information;

apply a user mobility pattern rule to tracked locations of the plurality of network enabled user devices, wherein the user mobility pattern rule comprises at least one of;

a first user mobility pattern rule that requires that when two more of the plurality of network enabled user devices leave a main location associated with the user, the two or more network enabled user devices return to the main location at the same time;

or

a second user mobility pattern rule that requires that two or more network enabled user devices move in the same direction when the two or more network enabled user devices change location at the same time; and

detecting a user anomaly when the tracked locations indicate that at least one of;

a first of the plurality of network enabled user devices and a second of the plurality of network enabled user devices move from the main location, and the first of the plurality of network enabled user devices and the second of the plurality of network enabled user devices do not return to the main location at the same time, or

the first of the plurality of network enabled user devices and the second of the plurality of network enabled user devices move in different directions when changing location at the same time.

16. The apparatus of claim 15, wherein the processor is further configured to associate the plurality of network enabled user devices with the user by determining that one or more of the plurality of network enabled user devices has logged into the network with a login associated with the user.

17. The apparatus of claim 15, wherein the processor is further configured to determine the main location from location information indicating where each of the plurality of network enabled user devices logged into the network.

18. The apparatus of claim 15, wherein the processor is further configured to determine a device type for each of the plurality of network enabled user devices.

19. The apparatus of claim 18, wherein the processor is further configured to determine a device type for each of the plurality of network enabled user devices by determining that the first of the plurality of network enabled user devices is a first mobile network enabled user device and determining that the second of the plurality of network enabled user devices is a second mobile network enabled user device.

20. The apparatus of claim 15, wherein the processor is further configured to disable network access for one or more of the plurality of network enabled user devices in response to detecting the user anomaly.