# US 10,122,809 B2 · System and method for detecting and reporting online activity using real-time content-based network monitoring > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,122,809 B2 - Document ID: US10122809B2 - Status: Granted - Kind: B2 - Application number: 15/620,721 - Filed: 2017-06-12 - Published: 2017-11-02 - Granted: 2018-11-06 - Earliest claimed: 2000-12-11 - Assignees: Peter K. Trzyna - Applicants: Peter K Trzyna - Inventors: Patrick Angeles - Web page: https://patentgrep.com/patent/US10122809B2 ## CPC - G06F 11/3476: {Data logging (G06F11/14, G06F11/2205 take precedence)} - G06F 11/3414: {Workload generation, e.g. scripts, playback} - G06F 11/3495: {for systems} - G06F 16/95: Retrieval from the web - G06F 16/954: Navigation, e.g. using categorised browsing - G06F 16/9566: {URL specific, e.g. using aliases, detecting broken or misspelled links} - G06F 16/986: {Document structures and storage, e.g. HTML extensions} - G06Q 30/02: Marketing; Price estimation or determination; Fundraising - G06Q 30/0601: Electronic shopping [e-shopping] - G06Q 40/12: Accounting - H04L 43/00: Arrangements for monitoring or testing data switching networks - H04L 61/10: of different types - H04L 61/4511: using domain name system [DNS] - H04L 63/0281: {Proxies} - H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes} - H04L 63/166: {at the transport layer} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L 69/329: in the application layer [OSI layer 7] - G06F 11/3438: {monitoring of user actions (tracking the activity of the user H04L67/535)} - G06F 2201/875: Monitoring of systems including the internet - H04L 43/045: for graphical visualisation of monitoring data - H04L 43/06: Generation of reports - H04L 43/16: Threshold monitoring - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computerized system and method for tracking and reporting online activity across a plurality of clients and servers is disclosed that intercepts and logs secure and non-secure HTTP request and response pages, analyzes each of the received page records, associates each page record to an event type based on user-defined parameters, identifies and extracts user-defined attributes of each page record based on its event type, and reports on the occurrence of the event along with its associated attributes. ## Claims ### Claim 1 A method of capturing on a computer-programmed digital electrical tracking system information about activity of a user browser accessing a Web server, the the tracking system connected to the user browser and the Web Server on the Internet, the method including: intercepting and logging HTTP requests and responses, including: providing the user browser with a Web page containing a URL specifying both an address of the tracking system and information that specifies a URL on the Web server; upon receipt by the tracking system of one of the HTTP requests comprising a Web page request from the user browser, determining a Web server URL from the Web page request; identifying and extracting captured information indicating that the user browser has requested the Web server URL, the captured information stored within one or more databases; encoding an original URL as part of the tracking system's URL path to construct at least one rewritten URL; embedding the rewritten URLs in a response such that a browser request to each of the rewritten embedded URLs is sent to the tracking system; causing the Web page specified by the Web server URL to be returned to the user browser; and providing profiling and analyzing at least one session, wherein the tracking system causes the analyzing by performing operations comprising reporting at least one of the following: a session detail; an event detail; a purchase detail; and a purchase summary. ### Claim 2 (depends on 1) The method of claim 1, further including capturing data relating to user activity in a central database; extracting the data from the central database based upon user profiles; and wherein the analysis includes analyzing to predict future Internet user activity. ### Claim 3 (depends on 1) The method of claim 1, wherein the tracking system causes generation of the purchase detail by operations comprising reporting at least one of the following: activity start and end dates, by a site name; a per purchase item record that matches at least one of the parameters; a purchase date; a time at which the purchase occurred; the site of the purchase; a name of the purchased item; a unit price of the item; a quantity; a price; a user identifier; and a credit-card type. ### Claim 4 (depends on 3) The method of claim 3, wherein said at least one comprises at least two. ### Claim 5 (depends on 3) The method of claim 3, wherein said at least one comprises at least three. ### Claim 6 (depends on 3) The method of claim 3, wherein said at least one comprises at least four. ### Claim 7 (depends on 3) The method of claim 3, wherein said at least one comprises at least five. ### Claim 8 (depends on 3) The method of claim 3, wherein said at least one comprises at least six. ### Claim 9 (depends on 3) The method of claim 3, wherein said at least one comprises at least seven. ### Claim 10 (depends on 3) The method of claim 3, wherein said at least one comprises at least eight. ### Claim 11 (depends on 3) The method of claim 3, wherein said at least one comprises at least nine. ### Claim 12 (depends on 3) The method of claim 3, wherein said at least one comprises at least ten. ### Claim 13 (depends on 3) The method of claim 3, wherein said at least one comprises at least eleven. ### Claim 14 (depends on 13) The method of claim 13, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 15 (depends on 3) The method of claim 3, wherein the method causes the generation of the purchase summary by operations comprising reporting at least one of the following reportings: activity start and end dates, by site; a site record that matches at least one of the parameters; the site name; a number of purchases on the site; a number of items purchased on the site; a value of purchases on the site; a number of page views on the site; and a duration of all the sessions within the site. ### Claim 16 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least two. ### Claim 17 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least three. ### Claim 18 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least four. ### Claim 19 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least five. ### Claim 20 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least six. ### Claim 21 (depends on 15) The method of claim 15, wherein said at least one of the following reportings comprises at least seven. ### Claim 22 (depends on 1) The method of claim 1, wherein the apparatus causes generation of the purchase summary by operations comprising reporting at least one of the following reportings: activity start and end dates, by site; a site record that matches at least one of the parameters; the site name; a number of purchases on the site; a number of items purchased on the site; a value of purchases on the site; a number of page views on the site; and a duration of all the sessions within the site. ### Claim 23 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least two. ### Claim 24 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least three. ### Claim 25 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least four. ### Claim 26 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least five. ### Claim 27 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least six. ### Claim 28 (depends on 22) The method of claim 22, wherein said at least one of the following reportings comprises at least seven. ### Claim 29 (depends on 1) The method of claim 1, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 30 (depends on 1) The method of claim 1, wherein the operations include the reporting of the purchase detail comprising at least a user identifier, and the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 31 (depends on 30) The method of claim 30, wherein the operations comprise reporting a purchase item. ### Claim 32 A method of capturing on a computer-programmed digital electrical tracking system information about activity of a user browser accessing a Web server, the tracking system connected to the user browser and the Web Server on the Internet, the method including: intercepting HTTP requests and responses, including: providing the user browser with a Web page containing a URL specifying both an address of the tracking system and information that specifies a URL on the Web server; upon receipt by the tracking system of one of the HTTP requests comprising a Web page request from the user browser, determining a Web server URL from the Web page request; identifying and extracting captured information indicating that the user browser has requested the Web server URL, the captured information stored within one or more databases; encoding an original URL as part of the tracking system's URL path to construct at least one rewritten URL; embedding the rewritten URLs in a response such that a browser request to each of the rewritten embedded URLs is sent to the tracking system; causing the Web page specified by the Web server URL to be returned to the user browser; capturing data relating to user activity in a central database; and providing profiling and analyzing at least one session, wherein the tracking system causes the analyzing by performing operations comprising: extracting the data from the central database based upon user profiles. ### Claim 33 (depends on 32) The method of claim 32, wherein the operations comprise analyzing to predict future Internet user activity. ### Claim 34 (depends on 33) The method of claim 33, wherein the operations comprise reporting at least one of the following: a purchase detail; and a purchase summary. ### Claim 35 (depends on 34) The method of claim 34, wherein the at least one includes at least two. ### Claim 36 (depends on 34) The method of claim 34, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 37 (depends on 33) The method of claim 33, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 38 (depends on 32) The method of claim 32, wherein the operations comprise reporting at least one of the following: a purchase detail; and a purchase summary. ### Claim 39 (depends on 38) The method of claim 38, wherein the at least one includes at least two. ### Claim 40 (depends on 38) The method of claim 38, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 41 (depends on 32) The method of claim 32, wherein the analysis includes analysis of online activity and of data including credit card type usage. ### Claim 42 (depends on 32) The method of claim 32, wherein the operations comprise reporting a purchase detail comprising at least a user identifier. ### Claim 43 (depends on 42) The method of claim 42, wherein the operations comprise reporting a purchase item. ### Claim 44 (depends on 43) The method of claim 43, wherein the analysis includes analysis of online activity and of data including credit card type usage.