Behavioral predictions based on network activity locations
First Claim
1. A computer-implemented method for constructing network activity profiles, comprising:
- obtaining a plurality of records of network activities originating from an activity source, the activity source corresponding to a particular user account, network browser or application program, on the network, and each record corresponding to an interaction by the activity source with a network resource via the network, wherein each record comprises at least a network endpoint address associated with a physical device, the physical device providing access to the network and the network endpoint address used in the interaction between the activity source and the network resource, and wherein each record further comprises an indication of a time of the interaction by the activity source with the network resource;
for each record, determining one or more record geographical locations corresponding to the network endpoint address associated with the physical device by mapping the network endpoint address to the geographical location or locations, wherein the determined record geographical location(s) are based in part on a selected desired level or levels of geographic precision;
associating the determined record geographical location or locations with that record; and
constructing at least one profile for the activity source based on the plurality of records and at least one geographical location associated with the plurality of records, wherein each profile comprises a time-based behavior pattern associated with the at least one geographical location.
9 Assignments
0 Petitions
Accused Products
Abstract
A computer-implemented method for constructing network activity profiles is provided, which comprises the following: obtaining a plurality of records of network activities from an activity source, each record corresponding to an interaction with a network resource via the network from the activity source, wherein each record comprises at least a network endpoint address from where the interaction originates and an indication of a time of the interaction; for each record, determining a geographical location corresponding to the network endpoint address of that record and associating the determined geographical location with that record; and constructing at least one profile for the activity source based on the plurality of records and at least one geographical location associated with the records, wherein each profile comprises a time-based behavior pattern associated with the at least one geographical location.
47 Citations
24 Claims
-
1. A computer-implemented method for constructing network activity profiles, comprising:
-
obtaining a plurality of records of network activities originating from an activity source, the activity source corresponding to a particular user account, network browser or application program, on the network, and each record corresponding to an interaction by the activity source with a network resource via the network, wherein each record comprises at least a network endpoint address associated with a physical device, the physical device providing access to the network and the network endpoint address used in the interaction between the activity source and the network resource, and wherein each record further comprises an indication of a time of the interaction by the activity source with the network resource; for each record, determining one or more record geographical locations corresponding to the network endpoint address associated with the physical device by mapping the network endpoint address to the geographical location or locations, wherein the determined record geographical location(s) are based in part on a selected desired level or levels of geographic precision; associating the determined record geographical location or locations with that record; and constructing at least one profile for the activity source based on the plurality of records and at least one geographical location associated with the plurality of records, wherein each profile comprises a time-based behavior pattern associated with the at least one geographical location. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A computer-implemented method for predicting future behaviors, comprising:
-
constructing at least one profile for an activity source based on a plurality of records of network activities from the activity source and at least one geographical location associated with the records, the activity source corresponding to a particular user account, network browser or application program, on the network, and wherein each record corresponds to an interaction by the activity source with a network resource via the network originated from a record geographical location corresponding to the network endpoint address in the record, and each record comprises the record geographical location and an indication of a time of the interaction by the activity source with the network resource, the record geographical location determined based at least in part on a network endpoint address associated with a physical device and on a selected desired level of geographic precision, wherein the physical device provides access to the network and the network endpoint address is used in the interaction between the activity source and the network resource; and
each profile comprises a time-based behavior pattern associated with the at least one geographical location; andpredicting future behaviors of the activity source based on the at least one profile. - View Dependent Claims (16, 17, 18, 19, 20, 21, 22)
-
-
23. A computer program product for constructing network activity profiles comprising a non-transitory computer-readable medium having a plurality of computer program instructions stored therein, which are operable to cause at least one computing device to:
-
obtain a plurality of records of network activities originating from an activity source, the activity source corresponding to a particular user account, network browser or application program, on the network, and each record corresponding to an interaction by the activity source with a network resource via the network, wherein each record comprises at least a network endpoint address associated with a physical device, the physical device providing access to the network and the network endpoint address used in the interaction between the activity source and the network resource, and wherein each record further comprises an indication of a time of the interaction by the activity source with the network resource; for each record, determining determine one or more record geographical locations corresponding to the network endpoint address associated with the physical device by mapping the network endpoint address to the geographical location or locations, wherein the determined record geographical location(s) are based in part on a selected desired level or levels of geographic precision; associate the determined record geographical location or locations with that record; and construct at least one profile for the activity source based on the plurality of records and at least one geographical location associated with the plurality of records, wherein each profile comprises a time-based behavior pattern associated with the at least one geographical location.
-
-
24. A computer program product predicting future behaviors comprising a non-transitory computer-readable medium having a plurality of computer program instructions stored therein, which are operable to cause at least one computing device to:
-
construct at least one profile for an activity source based on a plurality of records of network activities from the activity source and at least one geographical location associated with the records, the activity source corresponding to a particular user account, network browser or application program, on the network, and wherein each record corresponds to an interaction by the activity source with a network resource via the network originated from a record geographical location corresponding to the network endpoint address in the record, and each record comprises the record geographical location and an indication of a time of the interaction by the activity source with the network resource, the record geographical location determined based at least in part on a network endpoint address associated with a physical device and on a selected desired level of geographic precision, wherein the physical device provides access to the network and the network endpoint address is used in the interaction between the activity source and the network resource, and each profile comprises a time-based behavior pattern associated with the at least one geographical location; and predict future behaviors of the activity source based on the at least one profile.
-
Specification