System for detecting unauthorized activity

A method, the method comprising:

• receiving sensor data generated by a plurality of sensors distributed about a space, wherein each sensor of the plurality of sensors is operable to generate the sensor data associated with properties of one or more people in the space
• determining a first feature value, based at least in part on the received sensor data, wherein the first feature value corresponds to an amount of change in a first property of a person in the space;
• determining an event score, based at least in part on the first feature value, wherein the event score corresponds to a probability that an actionable event occurred within the space;
• comparing the event score to predefined response criteria;
• determining, based at least in part on the comparison of the event score to the predefined response criteria, that an actionable event is detected and identify an automated response to initiate for the detected actionable event;
• and
• providing one or both of an alert and instructions in order to initiate the automated response.

An automated response subsystem comprising:

• a memory operable to store predefined response criteria;
• and
• at least one processor communicatively coupled to the memory and configured to:
• receive sensor data generated by a plurality of sensors distributed about a space, wherein each sensor of the plurality of sensors is operable to generate the sensor data associated with properties of one or more people in the space;
• determine a first feature value, based at least in part on the received sensor data, wherein the first feature value corresponds to an amount of change in a first property of a person in the space;
• determine an event score, based at least in part on the first feature value, wherein the event score corresponds to a probability that an actionable event occurred within the space;
• compare the event score to the predefined response criteria;
• determine, based at least in part on the comparison of the event score to the predefined response criteria, that an actionable event is detected and identify an automated response to initiate for the detected actionable event;
• and
• provide one or both of an alert and instructions in order to initiate the automated response.