Determining usage predictions and detecting anomalous user activity through traffic patterns
First Claim
Patent Images
1. A method of using a computer to detect anomalies in the data traffic of a mobile device, the computer performing the steps of:
- collecting from the mobile device, usage data relating to data usage for the mobile device for a given time period;
setting threshold values based at least in part on a mobile device data plan and an amount of data used by the mobile device within a set time period and on historical usage data of the mobile device, where the weighting afforded the historical usage data is related to the amount of stored history;
comparing the usage data against the threshold values;
identifying an anomaly if a statistic of the usage data exceeds a corresponding threshold of the threshold values;
updating the threshold values based on a running average of each statistic of the usage data;
the computer further performing the steps of;
saving existing usage data or predicted data or both;
generating a graphical user interface including at least one statistic of the usage data;
overlaying at least one statistic of the existing usage data or predicted data or both onto the at least one statistic of the usage data.
2 Assignments
0 Petitions
Accused Products
Abstract
A system for selecting and monitoring data plans for telecommunications systems, and methods of determining, learning and estimating usage patterns in-order to predict usage and tie this to cost and the overlaying of plan selection for cost optimization. Further, additional methods are applied to determine anomalous user behaviors and raise security and data leakage related events.
10 Citations
10 Claims
-
1. A method of using a computer to detect anomalies in the data traffic of a mobile device, the computer performing the steps of:
-
collecting from the mobile device, usage data relating to data usage for the mobile device for a given time period; setting threshold values based at least in part on a mobile device data plan and an amount of data used by the mobile device within a set time period and on historical usage data of the mobile device, where the weighting afforded the historical usage data is related to the amount of stored history; comparing the usage data against the threshold values; identifying an anomaly if a statistic of the usage data exceeds a corresponding threshold of the threshold values; updating the threshold values based on a running average of each statistic of the usage data; the computer further performing the steps of; saving existing usage data or predicted data or both; generating a graphical user interface including at least one statistic of the usage data; overlaying at least one statistic of the existing usage data or predicted data or both onto the at least one statistic of the usage data. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
Specification