Network usage analysis system and method for updating statistical models
First Claim
Patent Images
1. A method for analyzing a stream of network usage data comprising:
- generating a statistical model from a set of usage data record events from the stream of network usage data;
receiving a most recent record event;
updating the statistical model using the most recent record event by adding the most recent record event to the statistical model, wherein an identifier is associated with each record event, including updating only a portion of the statistical model associated with the identifier;
storing the set of record events in a history cache, and wherein if the history cache is full, updating the statistical model includes removing a least recent record event from the statistical model; and
defining the statistical model to include an aggregation of each record event set stored in the history cache;
wherein generating a statistical model from the set of record events includes generating an aggregation table for tracking an aggregation of record events associated with an identifier; and
wherein the most recent record event is associated with an identifier; and
wherein updating the statistical model includes updating only the aggregation of record events in the tracking table for that identifier.
3 Assignments
0 Petitions
Accused Products
Abstract
In one embodiment, the present invention provides a system and method for analyzing a stream of network data. The method includes generating a statistical model from a set of record events. A most recent record event is received. The statistical model is updated using the most recent record event by adding the most recent record event to the statistical model.
64 Citations
22 Claims
-
1. A method for analyzing a stream of network usage data comprising:
-
generating a statistical model from a set of usage data record events from the stream of network usage data; receiving a most recent record event; updating the statistical model using the most recent record event by adding the most recent record event to the statistical model, wherein an identifier is associated with each record event, including updating only a portion of the statistical model associated with the identifier; storing the set of record events in a history cache, and wherein if the history cache is full, updating the statistical model includes removing a least recent record event from the statistical model; and defining the statistical model to include an aggregation of each record event set stored in the history cache; wherein generating a statistical model from the set of record events includes generating an aggregation table for tracking an aggregation of record events associated with an identifier; and wherein the most recent record event is associated with an identifier; and
wherein updating the statistical model includes updating only the aggregation of record events in the tracking table for that identifier. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15)
-
-
16. A method for analyzing a stream of network usage data over a rolling time interval comprising:
-
defining a statistical model for analyzing the stream of network usage data over the rolling time interval; defining the rolling time interval to include a plurality of update time intervals; receiving a record event set from the stream of data for each update time interval, each record event set including one or more record events, wherein each record event is associated with a user identifier; storing the record event set for each update interval in a history cache; generating the statistical model over the rolling time interval using each record event stored in the history cache; updating only a portion of the statistical model associated with the most recent record event for a most recent update time interval; defining the statistical model to include an aggregation table having an aggregation table entry for tracking an aggregation of each record event set stored in the history cache for each user identifier; and generating a histogram from the aggregation table; wherein the step of updating the statistical model includes the step of updating only the aggregation table entry associated with the most recent record event; and wherein updating the statistical result includes updating only the portion of the histogram associated with the aggregation table entry associated with the most recent record event. - View Dependent Claims (17)
-
-
18. A network usage analysis system for analyzing a stream of network usage data comprising:
-
a data analysis system server which generates a statistical model from a set of usage data record events, and upon receiving a most recent record event, the data analysis system server updates the statistical model using the most recent record event by adding the most recent record event to the statistical model, wherein customer usage is associated with each record event, including updating only a portion of the statistical model associated with the customer usage; defining a history cache, wherein the data analysis system server stores the set of record events in the history cache, and wherein if the history cache is full, updating the statistical model includes removing a least recent record event from the statistical model; and defines the statistical model to include an aggregation of each record event set stored in the history cache; wherein an identifier is associated with each record event, and wherein generating a statistical model from the set of record events includes the data analysis system server generating an aggregation table for tracking an aggregation of record events associated with an identifier; and wherein the most recent record event is associated with an identifier; and
wherein the data analysis system server updating the statistical model includes updating only the aggregation of record events in the tracking table for that identifier. - View Dependent Claims (19, 20)
-
-
21. A method for analyzing a stream of network usage data comprising:
-
generating a statistical model from a set of network usage record events; receiving a most recent record event; and
updating the statistical model using the most recent record event by adding the most recent record event to the statistical model further comprising the steps of;storing the set of record events in a history cache; wherein if the history cache is full, updating the statistical model includes removing a least recent record event from the statistical model, further comprising; defining the statistical model to include an aggregation of each record event set stored in the history cache, wherein an identifier is associated with each record event, and wherein generating a statistical model from the set of record events includes generating an aggregation table for tracking an aggregation of record events associated with an identifier, wherein the most recent record event is associated with an identifier; and wherein updating the statistical model includes updating only the aggregation of record events in the tracking table for that identifier, further comprising generating a histogram statistical model from the aggregation table, wherein the history cache is an array of memory segments, wherein the number of memory segments is equal to the number of update time intervals in the rolling time interval, and storing each record event in a memory segment in the history cache, and defining an index array associated with the statistical model including a set of contiguous index segments, wherein each index segment includes a pointer to the memory segment in the history cache storing the next consecutive record event, further defining a first pointer to the index segment associated with the memory segment storing the least recent record event, wherein upon receiving a most recent record event the method replacing the least recent record event stored in the history cache with the most recent record event, and further moving the first pointer to the next contiguous index segment. - View Dependent Claims (22)
-
Specification