User identification using multifaceted footprints
First Claim
1. A method for a computer having at least one processor for identifying an unknown user according to a plurality of facets of user activity in a plurality of contexts, the method comprising:
- receiving a plurality of priors for the facets with respect to the contexts;
receiving a plurality of footprints of known users;
aggregating the footprints of the users to determine an ensemble prior;
receiving a plurality of network traces relevant to an unknown user in a computer environment;
matching the network traces against each of the footprints to determine a plurality of matches;
aggregating the matches using the ensemble prior according to the facets and the contexts; and
outputting a probable user identity for the unknown user.
1 Assignment
0 Petitions
Accused Products
Abstract
A method for identifying an unknown user according to a plurality of facets of user activity in a plurality of contexts includes receiving a plurality of priors for the facets with respect to the contexts, receiving a plurality of footprints of known users, aggregating the footprints of the users to determine an ensemble prior, receiving a plurality of network traces relevant to an unknown user in a computer environment, matching the network traces against each of the footprints to determine a plurality of matches, aggregating the matches using the ensemble prior according to the facets and the contexts, and outputting a probable user identity for the unknown user.
12 Citations
12 Claims
-
1. A method for a computer having at least one processor for identifying an unknown user according to a plurality of facets of user activity in a plurality of contexts, the method comprising:
-
receiving a plurality of priors for the facets with respect to the contexts; receiving a plurality of footprints of known users; aggregating the footprints of the users to determine an ensemble prior; receiving a plurality of network traces relevant to an unknown user in a computer environment; matching the network traces against each of the footprints to determine a plurality of matches; aggregating the matches using the ensemble prior according to the facets and the contexts; and outputting a probable user identity for the unknown user. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A method for identifying an unknown user, the method comprising:
-
receiving a plurality of historical network traces of user activity; extracting a footprint for each of a plurality of users from the historical network traces; aggregating the footprints of the users to determine an ensemble prior; receiving a plurality of network traces relevant to an unknown user in a computer environment; matching the network traces against each of the footprints to determine a plurality of matches; aggregating the matches using the ensemble prior according to a plurality of contexts and a plurality of facets; and outputting a probable user identity for the unknown user. - View Dependent Claims (8, 9, 10, 11, 12)
-
Specification