System, method and computer readable medium for determining an event generator type

• US 8,838,786 B2
• Filed: 11/02/2011
• Issued: 09/16/2014
• Est. Priority Date: 05/05/2009
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Paul A. Lipari, Suboti, LLC
• Inventors: Hauser, Robert R
• Primary Examiner(s): Gillis, Brian J
• Application Number:
  US13/287,233
• Publication Number:
  US 20120047256A1
• Time in Patent Office: 1,049 Days
• Field of Search: 709/220, 709/224, 709/231, 726/22, 706/12
• US Class Current: 709/224
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: H04L 45/08 Learning-based routing, e.g. using neural networks or artificial intelligence
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Human interaction with a webpage may be determined by processing an event stream generated by the client device during the webpage interaction. A classification server receives the event stream and compares components of the event stream, including components of an event header message, with prerecorded datasets. The datasets include prerecorded event streams having a known interaction type. Training clients may be provided for generating the prerecorded datasets.

Claims

1. A method of recording a web page interaction, the method comprising:

identifying on a client a web page interaction of arbitrary unmodified web pages or web page application code with a web page server;

recording an event generator type indicating a type of the web page interaction between a client and the web page server;

generating an event stream message based on the web page interaction;

recording client data from an event header message of the event stream message comprising an interaction ID uniquely identifying the web page interaction between the client and the web server and aids to identify a particular event stream of at least one of an operating system, browser type, client device type, and screen size;

determining, from the event stream message, that the event generator type has changed since a previous interaction; and

recording a new event generator type to reflect the changes.

2. The method of claim 1, wherein the event generator type is included in an event header message of an event stream message, the event generator type comprising at least one of a human interaction, a computer assisted human interaction, a computer-based interaction, a robot interaction, a natural action interaction, a simulated input device interaction, and a fluctuating input device interaction.

3. The method of claim 1, further comprising:

recording event information based on a plurality of interactions from a plurality of different clients, the event information comprising at least one of;

operating system type, browser type, and event generator type including human and computer initiated event generation.

4. The method of claim 1, further comprising:

initiating a learning phase to record events observed during the web page interaction or plurality of web page interactions;

recording and labeling the observed events; and

utilizing the recorded events to determine whether subsequent web page interactions are human-based or computer-based interactions.

5. The method of claim 4, further comprising:

retrieving an event stream message including at least one newly created event; and

comparing the at least one newly created event to the recorded events to determine whether a match is made.

6. The method of claim 5, wherein determining whether a match is made comprises determining whether the comparing operation provides a degree of confidence above a predefined threshold.

7. An apparatus configured to record a web page interaction, the apparatus comprising:

a memory configured to record an event generator type indicating a type of web page interaction between a client and a web page server; and

a processor configured to

identify on a client a web page interaction of arbitrary unmodified web pages or web page application code with a web page server;

generate an event stream message based on the web page interaction;

record client data from an event header message of the event stream message comprising an interaction ID that uniquely identifies the web page interaction between the client and the web server and aids to identify a particular event stream of at least one of an operating system, browser type, client device type, and screen size;

determine from the event stream message that the event generator type has changed since a previous interaction; and

record a new event generator type to reflect the changes.

8. The apparatus of claim 7, wherein the event generator type is included in an event header message of an event stream message, the event generator type comprising at least one of a human interaction, a computer assisted human interaction, a computer-based interaction, a robot interaction, a natural action interaction, a simulated input device interaction, and a fluctuating input device interaction.

9. The apparatus of claim 7, wherein the memory is further configured to record event information based on a plurality of interactions from a plurality of different clients, the event information comprising at least one of:

operating system type, browser type, and event generator type including human and computer initiated event generation.

10. The apparatus of claim 7, wherein the processor is further configured to

initiate a learning phase to record events observed during the web page interaction or plurality of web page interactions;

record and labeling the observed events; and

utilize the recorded events to determine whether subsequent web page interactions are human-based or computer-based interactions.

11. The apparatus of claim 10, wherein the processor is further configured to

retrieve an event stream message including at least one newly created event;

and

compare the at least one newly created event to the recorded events to determine whether a match is made.

12. The apparatus of claim 11, wherein the processor is further configured to determine whether a match is made by determining whether the comparing operation provides a degree of confidence above a predefined threshold.

13. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform recording a web page interaction, the processor being further configured to perform:

identifying on a client a web page interaction of arbitrary unmodified web pages or web page application code with a web page server;

recording an event generator type indicating a type of the web page interaction between a client and the web page server;

generating an event stream message based on the web page interaction;

recording client data from an event header message of the event stream message comprising an interaction ID uniquely identifying the web page interaction between the client and the web server and aids to identify a particular event stream of at least one of an operating system, browser type, client device type, and screen size;

determining, from the event stream message, that the event generator type has changed since a previous interaction; and

recording a new event generator type to reflect the changes.

14. The non-transitory computer readable storage medium of claim 13, wherein the event generator type is included in an event header message of an event stream message, the event generator type comprising at least one of a human interaction, a computer assisted human interaction, a computer-based interaction, a robot interaction, a natural action interaction, a simulated input device interaction, and a fluctuating input device interaction.

15. The non-transitory computer readable storage medium of claim 13, wherein the processor is further configured to perform:

recording event information based on a plurality of interactions from a plurality of different clients, the event information comprising at least one of;

operating system type, browser type, and event generator type including human and computer initiated event generation.

16. The non-transitory computer readable storage medium of claim 13, wherein the processor is further configured to perform:

initiating a learning phase to record events observed during the web page interaction or plurality of web page interactions;

recording and labeling the observed events; and

utilizing the recorded events to determine whether subsequent web page interactions are human-based or computer-based interactions.

17. The non-transitory computer readable storage medium of claim 16, wherein the processor is further configured to perform:

retrieving an event stream message including at least one newly created event; and

comparing the at least one newly created event to the recorded events to determine whether a match is made.