# US 10,771,562 B2 · Analyzing device-related data to generate and/or suppress device-related alerts > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,562 B2 - Document ID: US10771562B2 - Status: Granted - Kind: B2 - Application number: 16/225,983 - Filed: 2018-12-19 - Published: 2020-06-25 - Granted: 2020-09-08 - Earliest claimed: 2018-12-19 - Assignees: Accenture Global Solutions Limited - Applicants: Accenture Global Solutions Limited - Inventors: Vijay Desai; Kun Qiu; Qiang Song - Web page: https://patentgrep.com/patent/US10771562B2 ## CPC - G06Q 10/00: Administration; Management - H04L 41/0636: {based on a decision tree analysis} - H04L 41/0668: by dynamic selection of recovery network elements, e.g. replacement by the most appropriate element after failure - H04L 41/0893: Assignment of logical groups to network elements - H04L 41/14: Network analysis or design - H04L 41/145: {involving simulating, designing, planning or modelling of a network} - H04L 41/16: using machine learning or artificial intelligence - H04L 41/5064: {Customer relationship management} - H04L 67/025: for remote control or remote monitoring of applications - H04L 67/125: involving control of end-device applications over a network - H04L 67/30: Profiles - H04M 3/493: Interactive information services, e.g. directory enquiries {; Arrangements therefor, e.g. interactive voice response [IVR] systems or voice portals} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) ## Abstract A device may receive data related to operations of a plurality of managed devices. The device may determine, after receiving the data, a multi-entity profile for the data. The device may determine, using the multi-entity profile, a set of sub-models for the data after determining the multi-entity profile. The set of sub-models may be associated with processing the data in a contextualized manner. The device may generate a model based on the set of sub-models. The device may perform one or more actions related to the plurality of managed devices or the at least one alert based on respective scores associated with the plurality of managed devices after generating the model. ## Claims ### Claim 1 A method, comprising: receiving, by a device, an indication of at least one alert related to operations of a plurality of managed devices and data related to the operations of the plurality of managed devices, wherein the indication of the at least one alert is received from a monitoring system that is monitoring the operations of the plurality of managed devices; determining, by the device and after receiving the data, a multi-entity profile for the data, wherein the multi-entity profile includes a set of groupings of the data by one or more attributes of the plurality of managed devices; processing, by the device, the multi-entity profile using a kernel density estimation (KDE) model after determining the multi-entity profile; determining, by the device and using the multi-entity profile, a set of sub-models for the data based on processing the multi-entity profile using the KDE model, wherein at least one sub-model, of the set of sub-models, is associated with contextualizing the data to the plurality of managed devices; generating, by the device, a model based on the set of sub-models; determining, by the device and utilizing the model after generating the model, respective scores for the plurality of managed devices, wherein the respective scores are used to identify at least one of: one or more alerts, of the at least one alert, to suppress, or one or more managed devices, of the plurality of managed devices, to replace; and performing, by the device, one or more actions related to at least one of the plurality of managed devices and the at least one alert after determining the respective scores for the plurality of managed devices, wherein performing the one or more actions comprises: generating a work order related to replacing the at least one of the plurality of managed devices. ### Claim 2 (depends on 1) The method of claim 1, wherein the plurality of managed devices includes a plurality of network devices. ### Claim 3 (depends on 1) The method of claim 1, wherein determining the set of sub-models comprises: determining a set of metric sub-models, of the set of sub-models, based on processing the multi-entity profile using the KDE model. ### Claim 4 (depends on 1) The method of claim 1, further comprising: grouping the plurality of managed devices based on the one or more attributes of the plurality of managed devices after determining the multi-entity profile, or generating a multivariate metric model for the plurality of managed devices after determining the multi-entity profile; and wherein determining the set of sub-models comprises: determining a set of device sub-models, of the set of sub-models, after grouping the plurality of managed devices or based on the multivariate metric model. ### Claim 5 (depends on 1) The method of claim 1, wherein generating the model comprises: generating, as the model, at least one of: an isolation forest, or a neural network; and wherein determining the respective scores comprises: determining the respective scores utilizing the at least one of the isolation forest or the neural network. ### Claim 6 (depends on 1) The method of claim 1, wherein determining the multi-entity profile comprises: determining the multi-entity profile based on at least one of: respective types of the plurality of managed devices, respective ages of the plurality of managed devices, or respective locations of the plurality of managed devices. ### Claim 7 (depends on 1) The method of claim 1, further comprising: determining respective qualities of the operations of the plurality of managed devices based on the respective scores for the plurality of managed devices; and wherein performing the one or more actions comprises: preventing the one or more alerts from being sent to a client device associated with managing the plurality of managed devices, to suppress the at least one or more alerts; and providing a message, for display via a display, that identifies that the at least one or more alerts was suppressed. ### Claim 8 A device, comprising: one or more memories; and one or more processors, communicatively coupled to the one or more memories, to: receive at least one alert related to operations of a plurality of managed devices and data related to the operations of the plurality of managed devices, wherein the at least one alert is received from a device monitoring system associated with the plurality of managed devices, and wherein the data related to the operations is received from the plurality of managed devices; determine, after receiving the data, a multi-entity profile for the data based on one or more attributes of the plurality of managed devices; process the multi-entity profile using a kernel density estimation (KDE) model after determining the multi-entity profile; determine, using the multi-entity profile, a set of sub-models for the data related to the operations based on processing the multi-entity profile using the KDE model, wherein the set of sub-models is associated with processing the data in a contextualized manner; generate a model based on the set of sub-models, wherein the model is associated with identifying at least one of: one or more alerts, of the at least one alert, to suppress, or one or more managed devices, of the plurality of managed devices, to replace; and perform one or more actions related to the plurality of managed devices or the at least one alert after determining respective scores for the operations, wherein the one or more processors, when performing the one or more actions, are to: generate a work order related to replacing the at least one of the plurality of managed devices. ### Claim 9 (depends on 8) The device of claim 8, wherein the one or more processors are further to: determine, utilizing the model after generating the model, the respective scores for the operations of the plurality of managed devices, wherein the respective scores indicate respective qualities of the operations of the plurality of managed devices; and wherein the one or more processors, when performing the one or more actions, are to: generate a recommendation to suppress the one or more alerts based on the respective scores. ### Claim 10 (depends on 9) The device of claim 9, wherein the one or more processors, when performing the one or more actions, are to: determine, based on the respective scores after determining the respective scores, that the one or more managed devices, of the plurality of managed devices, need to be replaced; and generate the work order after determining that the one or more managed devices need to be replaced. ### Claim 11 (depends on 8) The device of claim 8, wherein the one or more processors, when generating the model, are to: generate the model based on combining a set of metric sub-models, of the set of sub-models, and a set of device sub-models, of the set of sub-models, into the model. ### Claim 12 (depends on 8) The device of claim 8, wherein the data related to the operations of the plurality of managed devices identifies values for at least one of: respective input utilizations for the plurality of managed devices, respective output utilizations for the plurality of managed devices, respective central processing unit (CPU) utilizations for the plurality of managed devices, or respective jitters associated with communications of the plurality of managed devices. ### Claim 13 (depends on 8) The device of claim 8, wherein the one or more processors, when performing the one or more actions, are to: power down a first managed device, of the plurality of managed devices, based on a first score, of the respective scores, for the first managed device; and power on a second managed device, of the plurality of managed devices, after powering down the first managed device based on the first score. ### Claim 14 (depends on 8) The device of claim 8, wherein the multi-entity profile includes a set of groupings of the data related to the operations by the one or more attributes of the plurality of managed devices. ### Claim 15 A non-transitory computer-readable medium storing instructions, the instructions comprising: one or more instructions that, when executed by one or more processors, cause the one or more processors to: receive data related to a plurality of managed devices, wherein the data includes at least one of: diagnostic data associated with operations of the plurality of managed devices, call dispatch data associated with respective service histories associated with the plurality of managed devices, or customer data associated with respective customers associated with the plurality of managed devices; determine, after receiving the data, a multi-entity profile for the data, wherein the multi-entity profile includes a set of groupings of the data by one or more attributes of the plurality of managed devices; process the multi-entity profile using a kernel density estimation (KDE) model after determining the multi-entity profile; determine, using the multi-entity profile, a set of sub-models for the data based on processing the multi-entity profile using the KDE model, wherein the set of sub-models is associated with processing the data in a contextualized manner; generate a model based on the set of sub-models; and perform, after generating the model, one or more actions related to the plurality of managed devices based on respective scores for the plurality of managed devices. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to: determine, from the data, the respective service histories of the plurality of managed devices after receiving the data. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the one or more instructions, when executed by the one or more processors, cause the one or more processors to: determine, utilizing the model, the respective scores for the plurality of managed devices, wherein the respective scores indicate respective qualities of the operations of the plurality of managed devices based on the respective service histories. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to: receive a service request telephone call related to a managed device of the plurality of managed devices; and wherein the one or more instructions, that cause the one or more processors to perform the one or more actions, cause the one or more processors to: determine a priority for the service request telephone call based on a score, of the respective scores, associated with the operations of the managed device. ### Claim 19 (depends on 18) The non-transitory computer-readable medium of claim 18, wherein the one or more instructions, that cause the one or more processors to perform the one or more actions, cause the one or more processors to: transfer, based on the priority, the service request telephone call to at least one of: a telephone associated with a customer service representative, or an interactive voice response (IVR) system. ### Claim 20 (depends on 18) The non-transitory computer-readable medium of claim 18, wherein the one or more instructions, that cause the one or more processors to perform the one or more actions, cause the one or more processors to: send a message to a network technician to dispatch the network technician to a location of the managed device associated with the service request telephone call based on the priority.