Method and system for characterization of online behavior

• US 7,991,901 B2
• Filed: 03/31/2009
• Issued: 08/02/2011
• Est. Priority Date: 09/20/2001
• Status: Expired due to Fees

• Current Assignee: Connexity Audience, Inc.
• Original Assignee: Hitwise Pty. Ltd. (Experian plc)
• Inventors: Tarquini, Maureen Mendick, Sandefur, Robert Asheville Jr., Robertson, Michael Chad
• Primary Examiner(s): Lin; Kenny S
• Application Number:
  US12/415,992
• Publication Number:
  US 20090265461A1
• Time in Patent Office: 854 Days
• Field of Search: 709/228, 709/229
• US Class Current: 709/228
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/875 Monitoring of systems including the internet
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

Data about computer network traffic is collected as user website visit recording sessions. The data captured is analyzed and organized with sufficient level of detail or granularity to determine a single request from a server. Each data request is analyzed to determine if it comes from a server with which an ongoing end user interaction or open site visit is occurring. If not, a new site visit is created as a general proposition. If the data request is part of an open site visit, then the time is compared to the time of the last interaction and if the interval is sufficiently small, the data request is treated as a continuation of the visit. If the interval is large, a new site visit is created.

Claims

1. A method of collecting and classifying data about computer network traffic as user website visit recording sessions, comprising:

reading a plurality of log entries, comprising data relating to network requests from a user and directed to a plurality of network servers;

determining an open site visit based on the log entries, the open site visit being associated with one or more network servers of interest to which the user directed at least one request;

reading an additional log entry relating to an additional network request from the user and directed to a network server different from the network servers of interest;

determining that the additional log entry is part of a user ongoing interaction in the open site visit based on a determination that the additional log entry relates to forced content; and

creating a record of the log entry as a continuation of the open site visit based on the determination that the additional log entry is part of the user ongoing interaction;

wherein the method is performed by a computer system.

2. The method of claim 1, further comprising:

assembling a data table made up of known hosts that direct a user to a specific website;

collecting and classifying the computer network traffic corresponding to said sessions by tracking each user request to the known hosts for the specific website; and

characterizing the network traffic for each website independent of which host is used by a user to request data from each website.

3. The method of claim 1, further comprising collecting and classifying computer network traffic for said sessions by concurrently running said sessions for each browser opened by users having multiple browsers open.

4. The method of claim 1, further comprising detecting and recording the port numbers of the additional log entry and determining whether the additional log entry indicates secure socket layer transactions.

5. The method of claim 1, further comprising determining the duration of the open site visit by subtracting the start time of a session for a user from the latest end time.

6. The method of claim 5, wherein the end of a the open site visit by a user is determined by detecting when the user closes a session.

7. The method of claim 5, wherein the end of a the open site visit is determined by detecting when a predetermined time interval of inactivity has elapsed.

8. The method of claim 1, wherein the determination that the additional log entry relates to forced content is based at least in part on matching a portion of the additional log entry against a table of hosts and/or URL types.

9. The method of claim 1, wherein the determination that the additional log entry relates to forced content comprises, at least in part, a determination that the additional log entry relates to a request for an image.

10. The method of claim 1, wherein the determination that the additional log entry relates to forced content comprises, at least in part, a determination that the additional log entry relates to a request for an advertisement, banner, or counter.

11. The method of claim 1, wherein the determination that the additional log entry relates to forced content is based at least in part on a table of hosts and URL types.

12. The method of claim 1, wherein the determination that the additional log entry relates to forced content is based at least in part on a host associated with the additional log entry.

13. A method of organizing content requests into session records, comprising:

identifying a first content request generated by a user computing device, said content request directed to a first network location associated with a first network domain;

associating the first content request with a first session;

identifying a second content request generated by the user computing device, said second content request directed to a second network location associated with a second network domain;

determining, based on the second network location, whether the second content request is a forced content request; and

determining, when the second content request is determined to be a forced content request, to treat the second content request as part of said first session rather than as the start of a second session;

said method performed in its entirety by a computer system.

14. The method of claim 13, wherein the first network domain is different from the second network domain.

15. The method of claim 13, wherein determining whether the second content request is a forced content request comprises matching a portion of the additional log entry against a table of hosts and/or URL types.

16. The method of claim 13, wherein determining whether the second content request is a forced content request comprises determining whether the additional log entry relates to a request for an image.

17. The method of claim 13, wherein determining whether the second content request is a forced content request comprises determining whether the additional log entry relates to a request for an advertisement, banner, or counter.

18. The method of claim 13, wherein the wherein determining whether the second content request is a forced content request comprises comparing a host associated with the additional log entry to a table of hosts and URL types.