System and method for monitoring and reporting peer communications

• US 9,460,299 B2
• Filed: 12/01/2011
• Issued: 10/04/2016
• Est. Priority Date: 12/09/2010
• Status: Active Grant

• Current Assignee: Smith Micro Software Incorporated
• Original Assignee: Location Labs (Gen Digital Inc.)
• Inventors: Weiss, Andrew, Hodges, Daniel, Anakata, Joseph
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): Elmore, Gregory M
• Application Number:
  US13/308,697
• Publication Number:
  US 20120151046A1
• Time in Patent Office: 1,769 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/308 retaining data, e.g. retaining successful, unsuccessful communication attempts, internet access, or e-mail, internet telephony, intercept related information or call content

Abstract

A computer-implemented subject monitoring method is provided. The method includes providing an online-monitoring agent configured for monitoring a personal computing device, receiving identifying information associated with at least one of an account, email address, site, and service from the personal computing device via the online-monitoring agent, and monitoring via a network the at least one of the account, email address, site, and service based on the identifying information received via the online-monitoring agent.

Claims

1. A computer-implemented monitoring and reporting method comprising:

receiving via a network identifying information associated with at least one of an account, email address, site, or service corresponding to a particular subject;

providing an on-line monitoring agent for locally monitoring the particular subject on a personal computing device, wherein said on-line monitoring agent includes a redirection agent for redirecting network traffic of the particular subject;

receiving with a proxy server via the redirection agent an outgoing connection to a targeted application server;

monitoring via a network connectable computing system an account associated with the targeted application server at least by scraping an application interface for at least one communication received by or generated by the particular subject;

monitoring overall activity, number of friend associations and content metrics associated with the at least one of an account, email address, site, or service corresponding to the particular subject;

analyzing a plurality of communications between the particular subject and at least one peer to determine at least one of a particular sentiment of the particular subject or a particular topic of a communication; and

reporting analyzed results to the user.

2. The computer-implemented monitoring method of claim 1, further comprising monitoring the targeted application server to obtain at least one of an account, email address, site, or service via an Application Program Interface API.

3. The computer-implemented monitoring method of claim 1, wherein monitoring comprises monitoring at least one of social networking application activity, electronic messaging activity, email activity, or telephone communication activity.

4. The computer-implemented monitoring method of claim 3, wherein monitoring content metrics comprises comparing text within the at least one of the social networking application activity, electronic messaging activity, email activity, or telephone communication activity with at least one of a trigger term or a trigger phrase, wherein analyzing the plurality of communications comprises detecting the at least one of the trigger term or the trigger phrase.

5. The computer-implemented monitoring method of claim 4, wherein analyzing the plurality of communications further comprises detecting the at least one of the trigger term or the trigger phrase a predetermined number of times for a predetermined duration.

6. The computer-implemented monitoring method of claim 3, wherein analyzing the plurality of communications further comprises determining that a plurality of communications including at least one of a trigger term or a trigger phrase originate from a particular peer in communication with the particular subject.

7. The computer-implemented monitoring method of claim 6, further comprising reporting content of the plurality of communications with the particular peer.

8. The computer-implemented monitoring method of claim 6, further comprising:

recording a phone or video conversation between the particular peer and the particular subject; and

providing the recorded conversation to the user.

9. The computer-implemented monitoring method of claim 6, further comprising:

determining a severity level of the plurality of communications originating from the particular peer based on a frequency of the plurality of communications, and

reporting the determined severity level.

10. The computer-implemented-monitoring method of claim 1, wherein monitoring content metrics comprises:

detecting a triggering criterion within the targeted application server at least by determining that the plurality of communications include triggering data from a particular peer in communication with the particular subject; and

determining a severity level of the plurality of communications at a plurality of times based on at least one of frequency of the plurality of communications, frequency of triggering data in the plurality of communications, or a quality of the triggering data in the plurality of communications originating from the particular peer;

the method further comprising;

generating an activity history based on the determination of the severity level including a history of the severity level; and

reporting the activity history to the user.

11. The computer-implemented-monitoring method of claim 1, wherein monitoring comprises monitoring a social networking application server.

12. The computer-implemented monitoring method of claim 3, wherein monitoring content metrics comprises:

detecting images within the targeted application server within the at least one of the social networking application activity, electronic messaging activity, email activity, or telephone communication activity; and

comparing the detected images with at least one of predetermined image profiles, colors, luminosities, shapes, or patterns; and

wherein analyzing the plurality of communications comprises matching the detected images with the at least one of the predetermined image profiles, colors, luminosities, shapes, or patterns.

13. The computer-implemented-monitoring method of claim 1, further comprising:

comparing at least one of a frequency or an amount of the plurality of communications during a first time period with at least one of the frequency or the amount of the plurality of communications during a second time period;

detecting a change in the at least one of the frequency or the amount of the plurality of communications from the first time period to the second time period; and

reporting the detected change to the user.

14. The computer-implemented monitoring method of claim 13, wherein detecting the change comprises detecting a change in at least one of a frequency or amount of communication with a particular peer of the particular subject.

15. The computer-implemented monitoring method. of claim 13, wherein detecting the change comprises detecting a change in at least one of a frequency or amount of communication with a particular peer of the particular subject relative to at least one of a frequency or amount of communication with other peers of the particular subject.

16. The computer-implemented monitoring method of claim 10 wherein monitoring the content metrics comprises applying a machine learning classifier to the plurality of communications to determine a classifier score, wherein detecting the triggering criterion comprises determining a classifier score exceeding a first predetermined threshold.

17. The computer-implemented monitoring method of claim 1, further comprising:

determining if an outgoing connection to the targeted application server website should use HTTP or HTTPS to meet the security requirements of the targeted application server website, and if a stored URL list indicates a HTTP level of security, accessing with the proxy server the targeted application server website via HTTP, and if the URL list indicates a HTTPS level of security, accessing with the proxy server the targeted application server website via HTTPS.

18. The computer-implemented-monitoring method of claim 1, further comprising:

removing an automatic redirect when the targeted application server executes a HTTP redirect process;

accessing a website of the targeted application server and intercepting at least one website page; and

rewriting the intercepted at least one website page to retain a connection using HTTP.

19. The computer-implemented monitoring method of claim 1, further comprising:

comparing the plurality of communications with trigger data;

for each of the plurality of communications which correspond to the trigger data, modifying an indicator corresponding to the peer who at least one of generated or received the communication;

when the indicator for the peer crosses a predetermined threshold, designating the peer as at risk for involvement in aggressive or bullying activity with the particular subject; and

reporting the aggressive or bullying activity to the user.

20. The method of claim 1, further comprising:

obtaining login credentials by detecting credentials provided by the particular subject; and

using the login credentials to enable scraping the application interface.

21. The computer-implemented monitoring method of claim 1, wherein analyzing the at least one communication comprises applying a machine learning classifier to the at least one communication to determine a classifier score.

22. The computer-implemented monitoring method of claim 1, wherein analyzing the plurality of communications comprises:

training a classifier for the at least one of the particular sentiment or the particular topic; and

applying the trained classifier to detect the at least one of the particular sentiment or the particular topic.

23. The computer-implemented monitoring method of claim 1, wherein analyzing the plurality of communications for sentiment comprises determining a severity level of the at least one communication.

24. The method of claim 1, further comprising:

intercepting an outgoing communication to prevent transmission to a particular recipient;

determining that the at least one of the particular sentiment or the particular topic of the outgoing communication is objectionable based on at least one criterion;

providing a notification to the particular subject that the at least one of the particular sentiment or the particular topic of the outgoing communication is objectionable; and

providing an interface for the user to selectively enable transmission of the intercepted outgoing communication to the particular recipient.

25. The method of claim 1, wherein analyzing the plurality of communications comprises determining based on at least one criterion that the plurality of communications correspond to bullying activity associated with a particular peer, the method further comprising:

responsive to determining the at least one communication corresponds to bullying activity, accessing a social networking application enabled by social networking application server and determining if the particular subject and the particular peer are recognized as contacts by the social networking application; and

reporting to the user regarding a contact status of the particular peer and the particular subject in the social networking application.

26. The method of claim 1, further comprising:

analyzing the plurality of communications to determine a plurality of particular sentiments over a period of time;

generating a history comprising the plurality of particular sentiments over the period of time; and

reporting the history to the user.

27. The method of claim 1, further comprising:

analyzing the plurality of communications to determine a plurality of particular topics over the period of time;

generating a history comprising the plurality of particular topics over the period of time; and

reporting the history to the user.

28. The method of claim 1, wherein analyzing the plurality of communications to determine the at least one of the particular sentiment or the particular topic comprises determining at least one of a feeling of depression, a feeling of sadness, a feeling of anger, or a feeling of aggression.

29. The method of claim 1, wherein analyzing the plurality of communications to determine the at least one of the particular sentiment and the particular topic comprises determining at least one of a topic concerning sex, a topic concerning alcohol, or a topic concerning drugs.

30. The method of claim 1, further comprising

intercepting a particular communication from the particular subject to the particular peer and preventing the particular communication;

providing a warning to the particular subject via the personal computing device and a user interface allowing for an active confirmation and cancellation of the intercepted communication;

receiving a confirmation from the particular subject via the user interface; and

allowing the particular communication responsive to receipt of the confirmation from the particular subject.

31. The method of claim 1, further comprising:

enabling a user interface which allows for designation by the particular subject of a plurality of peers;

receiving a designation of a particular peer by the particular subject via the user interface;

setting a particular threshold responsive to receiving the designation of the particular peer; and

detecting a triggering criterion within the targeted application server at least by determining that at least one communication between the particular subject and the particular peer includes triggering data corresponding to the particular threshold.

32. The method of claim 1, further comprising:

comparing a photo of the at least one peer with data scraped from the targeted application server to determine an identity of the at least one peer;

enabling a user interface which allows for designation by the particular subject of faces of a plurality of peers;

receiving a designation of the face of e at least one peer by the particular subject via the user interface;

setting a particular threshold responsive to receiving the designation of the at least one peer; and

detecting a triggering criterion within the targeted application server at least by determining that at least one communication between the particular subject and the at least one peer includes triggering data corresponding to the particular threshold.

34. The computer-implemented-monitoring method of claim 1, wherein monitoring content metrics comprises detecting a triggering criterion within the targeted application server at least by determining that the plurality of communications include triggering data from a particular peer in communication with the particular subject, the method further comprising:

enabling a user interface which allows for designation of the particular peer by the particular subject;

receiving a designation of the particular peer by the particular subject via the user interface;

setting a particular threshold responsive to receiving the designation of the particular peer; and

detecting a triggering criterion within the targeted application server at least by determining that at least one communication between the particular subject and the particular peer includes triggering data corresponding to the particular threshold.

35. The computer-implemented-monitoring method of claim 1, wherein monitoring content metrics comprises:

determining a particular activity level based on the account activity of a particular group of users; and

comparing the overall activity corresponding to the particular subject with the particular activity level to determine that the at least one of the account, email address, site, or service corresponds o a decoy account of the particular subject;

the method further comprising reporting that the at least one of the account, email address, site, or service corresponds to a decoy account of the particular subject to the user.

36. The computer-implemented-monitoring method of claim 1, further comprising:

receiving from the user a designation of a photo corresponding to a face of a particular peer;

comparing the designated photo with images of a plurality of peers of the monitored subject on the targeted application server to determine an identity of the particular peer; and

monitoring the communications between the particular peer and the particular subject based on the determined identity of the particular peer.

33. The method of claim wherein monitoring overall activity comprises determining a particular peer is communicating with the particular subject during a particular time period, the method further comprising:

setting a particular threshold corresponding to the particular peer responsive to determining that the particular peer is communicating with the particular subject during the particular time period; and

detecting a triggering criterion within the targeted application server at least by determining that at least one communication between the particular subject and the particular peer includes triggering data corresponding to the particular threshold.

37. A computer activity monitoring and reporting system comprising:

at least one computing system including at least one memory comprising instructions operable to enable the at least one computing system to perform a procedure comprising;

providing an on-line monitoring agent for locally monitoring a particular subject, wherein said on-line monitoring agent includes a redirection agent for redirecting network traffic of the particular subject;

receiving via a network identifying information associated with at least one of an account, email address, site, or service corresponding to the particular subject;

sending to a proxy server via the redirection agent an outgoing connection to a targeted application server based on the identifying information;

monitoring via a network the targeted application server to obtain at least one communication received by or generated by the particular subject;

monitoring overall activity, number of friend associations and content metrics associated with the at least one of an account, email address, site, or service corresponding to the particular subject;

analyzing a plurality of communications between the particular subject and at least one peer to determine at least one of a particular sentiment or a particular topic; and

reporting analyzed results to a user;

wherein monitoring the targeted application server comprises scraping an application interface to obtain the at least one communication.

38. A computer-implemented monitoring and reporting method comprising:

receiving via a network identifying information associated with a social networking account corresponding to a particular subject;

monitoring via a network by a network connectable computing system the social networking account based on the received identifying information at least by scraping an application interface for at least one communication received by or generated by the particular subject;

monitoring overall activity, number of friend associations and content metrics associated with the at least one of an account, email address, site, or service corresponding to the particular subject;

analyzing a plurality of communications between the particular subject and at least one peer to determine at least one of a particular sentiment or a particular topic;

reporting analyzed results to a user.

39. The method of claim 38, further comprising friending a peer of the particular subject using a third party account, wherein scraping the application interface comprises scraping data related to the peer via the third party account.

40. The method of claim 38, further comprising monitoring the social networking account by monitoring a targeted application server.

41. A computer-implemented monitoring and reporting method comprising:

providing an on-line monitoring agent for monitoring a particular subject, wherein said on-line monitoring agent includes a redirection agent for redirecting network traffic of the particular subject;

receiving via a network identifying information associated with at least one of an account, email address, site, or service corresponding to the particular subject;

sending to a proxy server via the redirection agent an outgoing connection to a targeted application server based on the identifying information;

monitoring via a network the targeted application server to determine an activity level of the at least one of the account, email address, site, or service corresponding to the particular subject;

monitoring overall activity, number of friend associations and content metrics associated with the at least one of an account, email address, site, or service corresponding to the particular subject;

analyzing a plurality of communications between the particular subject and at least one peer to determine at least one of a particular sentiment of the particular subject or a particular topic of a communication;

comparing the activity level with a particular threshold to determine that the at least one of the account, email address, site, or service corresponds to a decoy account of the particular subject; and

reporting analyzed results including that the at least one of the account, email address, site, or service corresponds to a decoy account of the particular subject to a user.

42. A computer-implemented monitoring and reporting method comprising:

receiving via a network identifying information associated with at least one of an account or an electronic address corresponding to a particular subject;

monitoring via a network by a network connectable computing system the at least one of the account or the electronic address based on the received identifying information to determine an activity level corresponding to the particular subject;

monitoring overall activity, number of friend associations and content metrics associated with the at least one of the account or the electronic address corresponding to the particular subject;

analyzing a plurality of communications between the particular subject and at least one peer to determine at least one of a particular sentiment of the particular subject or a particular topic of a communication;

comparing the activity level with a particular threshold to determine that the at least one of the account or the electronic address corresponds to at least one of a decoy account or a decoy electronic address of the particular subject; and

reporting analyzed results including that the at least one of the account or the electronic address corresponds to at least one of a decoy account or a decoy electronic address of the particular subject.

43. The method of claim 42, further comprising determining the particular threshold based on account activity of a particular group of account users.

44. The method of claim 42, wherein the activity level corresponds to a number of friend associations of the particular subject.

45. The method of claim 42, further comprising determining the activity level based on content metrics.

46. The method of claim 42, further comprising monitoring the at least one of the account or the electronic address by monitoring a targeted application server.