Systems and interactive user interfaces for automatic generation of temporal representation of data objects

• US 9,823,818 B1
• Filed: 04/06/2016
• Issued: 11/21/2017
• Est. Priority Date: 12/29/2015
• Status: Active Grant

• Current Assignee: Palantir Technologies Incorporated
• Original Assignee: Palantir Technologies Incorporated
• Inventors: Ryan, Paul, Hao, Sharon, Engel, Bradley, Wang, Xinyi, Grossman, Jack, Martin, Gregory, Elder, Andrew, Xie, Ryan, Hamilton, Brian, Zavilla, Joshua, Richbourg, Christopher, Beiermeister, Ryan, Frankel, Marc
• Primary Examiner(s): To, Jennifer
• Assistant Examiner(s): Spratt, Beau
• Application Number:
  US15/092,456
• Time in Patent Office: 594 Days
• Field of Search: None
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 3/04845 for image manipulation, e.g. dragging, rotation, expansion or change of colour
• CPC Class Codes: G06F 40/169 Annotation, e.g. comment data or footnotes
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: G06T 11/206 Drawing of charts or graphs

Abstract

Computer-implemented systems and methods are disclosed for automatically generating and displaying a chronology of events, where events may be represented by data objects in one or more databases. Events/data objects may be identified as relevant to an investigation or analysis based on specified criteria. A timeline may be generated based on the identified set of relevant events, and interactive user interfaces may be generated and displayed that present the events as a timeline and a list. Events may be selected from the timeline or the list, may be identified as key events in the chronology, and additional events related to a selected event may be determined and added to the chronology. Timelines may be compared to other data sets, including other timelines, other event lists, and other relevant data.

Claims

1. A system comprising:

a data store configured to store computer-executable instructions; and

a processor, wherein the computer-executable instructions, when executed, configure the processor to;

obtain a plurality of events, each of the plurality of events comprising event attributes, the event attributes comprising at least an event timestamp;

obtain one or more criteria associated with event attributes;

determine, based at least in part on the one or more criteria, a set of relevant events within the plurality of events;

determine, based at least in part on the one or more criteria, that one or more events within the set of relevant events are key events;

generate for display a user interface based at least in part on the set of relevant events and the corresponding event attributes, the user interface comprising;

a timeline interface for display of a timeline, wherein positions of individual relevant events within the timeline interface are determined based at least in part on respective event timestamps, and wherein the timeline interface displays the one or more events as key events;

wherein the timeline is displayed as a horizontal line and time increments displayed in short vertical or hash indications intersecting the horizontal line,

wherein key events are displayed as icons offset from the horizontal line and connected to the line by vertical lines intersecting the horizontal line at a position corresponding to the timestamps and at a position corresponding proportionally to the time increments;

wherein the key event icons comprise indications of event type;

a list interface for display of the set of relevant events, wherein the list interface is displayed in rows and columns with a single row corresponding to a single one of the plurality of events, and wherein additional information corresponding to the event is displayed in columns;

cause display of the user interface; and

display, in response to a user selection of an event icon, a highlighted row corresponding to an event and comprising related events not displayed on the timeline, wherein each related event is separate from the highlighted event and has a different timestamp as the highlighted event, and wherein the related event is determined to be related based on having one or more event attributes in common with the highlighted event.

2. The system of claim 1, wherein the event attributes further comprise at least one of an event source, an event type, an event icon, an event duration, an event title, a set of event participants, a set of event keywords, and a set of event annotations.

3. The system of claim 1, wherein the processor is further configured to:

obtain input identifying a selected event displayed within the user interface;

generate for display a first update to the user interface, the first update comprising;

an indication of selection of the selected event within the timeline interface; and

an indication of selection of the selected event within the list interface; and

cause display of the first update to the user interface.

4. The system of claim 1, wherein the processor is further configured to:

determine that at least one of the plurality of events has been updated;

generate an alert indicating that the at least one of the plurality of events has been updated; and

cause transmission of the alert to a computing device, wherein transmission of the alert causes the computing device to activate an application for display of the alert, and wherein the alert enables display of an updated user interface, the updated user interface based at least in part on an updated event of the plurality of events.

5. The system of claim 3, wherein the processor is further configured to:

determine, based at least in part on the selected event, one or more related events from within the plurality of events;

generate for display an event selection interface for display of the one or more related events; and

cause display of the event selection interface.

6. The system of claim 5, wherein the processor configured to determine the one or more related events is configured to determine the one or more related events based at least in part on one or more attributes of the selected event.

7. The system of claim 5, wherein the processor is further configured to:

obtain input identifying a related event within the one or more related events, the input indicating that the related event should be added to the set of relevant events;

generate for display a second update to the user interface, the second update comprising;

display of the related event within the timeline interface; and

display of the related event within the list interface; and

cause display of the second update to the user interface.

8. A computer-implemented method comprising:

obtaining a plurality of events, each of the plurality of events comprising event attributes;

determining, based at least in part on one or more criteria associated with event attributes, a set of relevant events within the plurality of events;

determining, based at least in part on the one or more criteria associated with event attributes, that a subset of the set of relevant events are key events;

generating for display a user interface based at least in part on the set of relevant events, the user interface comprising;

a timeline interface for display of a timeline, wherein positions of individual relevant events within the timeline interface are determined based at least in part on respective event attributes, wherein the timeline interface displays the subset of the set of relevant events as key events, wherein the timeline is displayed as a horizontal line and time increments displayed in short vertical or hash indications intersecting the horizontal line, wherein key events are displayed as icons offset from the horizontal line and connected to the line by vertical lines at a position corresponding to event timestamps and to the time increments, and wherein the key event icons comprise indications of event type; and

a list interface for display of the set of relevant events, wherein the list interface is displayed in a table with a designated portion of the table corresponding to a single one of the plurality of events, and wherein additional information corresponding to the event is displayed in the table and not displayed on the timeline;

displaying the user interface; and

displaying, in response to a user selection of an event icon, a highlighted row corresponding to an event and comprising related events not displayed on the timeline, wherein each related event is separate from the highlighted event and has a different timestamp as the highlighted event, and wherein the related event is determined to be related based on having one or more event attributes in common with the highlighted event.

9. The computer-implemented method of claim 8, wherein the event attributes include at least one configurable attribute.

10. The computer-implemented method of claim 9, wherein the at least one configurable attribute comprises an event annotation, an event icon, an event description, or an event keyword.

11. The computer-implemented method of claim 9 further comprising:

obtaining an input indicative of a modification of a configurable attribute for a relevant event;

modifying the configurable attribute for the relevant event;

generating for display a first update to the user interface, the first update comprising at least one of a modified configurable attribute within the timeline interface and a modified configurable attribute within the list interface; and

causing display of the first update to the user interface.

12. The computer-implemented method of claim 8 further comprising:

obtaining one or more updates to the plurality of events;

determining, based at least in part on the one or more updates, an update to the set of relevant events;

generating for display an alert message, the alert message indicating the update to the set of relevant events; and

displaying the alert message.

13. The computer-implemented method of claim 12 further comprising:

generating for display an updated user interface based at least in part on the update to the set of relevant events, the updated user interface comprising an updated timeline interface and an updated list interface; and

displaying the updated user interface.

14. A non-transitory computer-readable storage medium including computer-executable instructions that, when executed by a processor, cause the processor to:

determine, based at least in part on a first set of criteria, a first set of relevant events within a plurality of events;

determine, based at least in part on the first set of criteria, that a first subset of the first set of relevant events are key events;

generate a first timeline corresponding to the first set of relevant events;

generate for display a first user interface based at least in part on the first set of relevant events, the first user interface comprising;

a timeline interface for display of at least a portion of the first timeline, wherein individual relevant events are positioned within the timeline interface based at least in part on respective attributes of the individual relevant events, wherein the timeline interface displays the first subset as key events, wherein the timeline is displayed as a horizontal line with time increments indicated on the horizontal line, wherein events are displayed as icons offset from the horizontal line and connected to the horizontal line by other lines intersecting the horizontal line at a position corresponding to event timestamps and to the time increments, and wherein the event icons comprise indications of event type; and

a list interface for display of at least the portion of the first set of relevant events, wherein the list interface is displayed in rows with a single row corresponding to a single one of the plurality of events, and wherein additional information not displayed on the timeline corresponding to the event is displayed in the row;

cause display of the first user interface; and

display, in response to a user selection of an event icon, a highlighted row corresponding to an event and comprising related events not displayed on the timeline, wherein each related event is separate from the highlighted event and has a different timestamp as the highlighted event, and wherein the related event is determined to be related based on having one or more event attributes in common with the highlighted event.

15. The non-transitory computer-readable medium of claim 14, wherein the first set of criteria is associated with event attributes, and wherein the first set of relevant events comprises events that satisfy the first set of criteria.

16. The non-transitory computer-readable medium of claim 14, wherein the computer-executable instructions further cause the processor to:

determine, based at least in part on a second set of criteria, a second set of relevant events within the plurality of events;

determine, based at least in part on the second set of criteria, that a second subset of the second set of relevant events are key events;

generate a second timeline corresponding to the second set of events;

generate for display a second user interface based at least in part on the second set of relevant events; and

cause display of the second user interface.

17. The non-transitory computer-readable medium of claim 16, wherein the first set of relevant events and the second set of relevant events have at least one event in common.

18. The non-transitory computer-readable medium of claim 16, wherein the second user interface comprises:

a combined timeline interface for display of a combined timeline, the combined timeline comprising the first timeline and at least a portion of the second timeline;

a first list interface for display of the first set of relevant events; and

a second list interface for display of the second set of relevant events.

19. The non-transitory computer-readable medium of claim 18, wherein the computer-executable instructions further cause the processor to generate the combined timeline based at least in part on the first timeline and the second timeline.

20. The non-transitory computer-readable medium of claim 18, wherein the second user interface further comprises:

at least a portion of the first set of relevant events positioned above the combined timeline; and

at least a portion of the second set of relevant events positioned below the combined timeline.