Systems and methods for evaluation of events based on a reference baseline according to temporal position in a sequence of events
First Claim
Patent Images
1. A method for evaluation of events, implemented by a physical processor executing computer readable instructions, the method comprising:
- generating, by the processor, a user-specific reference baseline comprising a set of temporally-ordered sequences of events identified from page-by-page traversal data of the user through a financial system, wherein the reference baseline includes timing statistics for each of the sequence of events;
receiving, by the processor, an event of a sequence of events in a current session;
determining, by the processor, whether the event at least partially matches the reference baseline using an attribute of the event and based on a temporal position of the event within the sequence of events in the current session; and
analyzing, by the processor, a condition of a rule based on the determination of whether the event at least partially matches the reference baseline.
12 Assignments
0 Petitions
Accused Products
Abstract
Systems and methods for evaluation of events are provided. A user-specific reference baseline comprising a set of temporally-ordered sequences of events. An event of a sequence of events in a current session is received. A determination is made as to whether the event at least partially matches the reference baseline using an attribute of the event and a temporal position of the event within the sequence of events in the current session.
16 Citations
20 Claims
-
1. A method for evaluation of events, implemented by a physical processor executing computer readable instructions, the method comprising:
-
generating, by the processor, a user-specific reference baseline comprising a set of temporally-ordered sequences of events identified from page-by-page traversal data of the user through a financial system, wherein the reference baseline includes timing statistics for each of the sequence of events; receiving, by the processor, an event of a sequence of events in a current session; determining, by the processor, whether the event at least partially matches the reference baseline using an attribute of the event and based on a temporal position of the event within the sequence of events in the current session; and analyzing, by the processor, a condition of a rule based on the determination of whether the event at least partially matches the reference baseline. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 16, 17, 18, 19, 20)
-
-
9. A system for evaluation of events, the system comprising:
a physical processor implementing machine readable instructions stored on a non-transitory machine-readable storage medium that cause the system to; store a data list including a plurality of user-specific reference baselines; generate a first user-specific reference baseline of the plurality of user-specific reference baselines, the first user-specific reference baseline comprising a set of temporally-ordered sequences of events, wherein each reference baseline includes timing statistics for each of the sequence of events; receive an event of a sequence of events in a current session; determine whether the event at least partially matches the reference baseline using an attribute of the event and based on a temporal position of the event within the sequence of events in the current session; analyze a condition of a rule based on the determination of whether the event at least partially matches the reference baseline; and generate a correlation event. - View Dependent Claims (10, 11, 12, 13)
-
14. A non-transitory computer-readable medium storing a plurality of instructions to control a data processor to evaluate events, the plurality of instructions comprising instructions that cause the data processor to:
-
generate a user-specific reference baseline, the reference baseline comprising a set of temporally-ordered sequences of transactional events identified from page-by-page traversal data of the user through a financial system, wherein the reference baseline includes timing statistics for each of the sequence of events; receive a transactional event of a sequence of transactional events in a current session; determine whether the transactional event at least partially matches the reference baseline using an attribute of the transactional event and based on a temporal position of the transactional event within the sequence of transactional events in the current session; analyze a condition of a rule based on the determination of whether the transactional event at least partially matches the reference baseline; and correlate the transactional event with a security-related event. - View Dependent Claims (15)
-
Specification