Back to results
US 12,603,945 B2Granted
Systems and methods for inferring user activities from IoT network traffic
AssigneeArizona Board of Regents on behalf of Arizona State University
InventorsGuoliang Xue, Yinxin Wan, Kuai Xu, Feng Wang
Life of this patent
Estimating the term…
Abstract
A system includes a processor that accesses a sequence of device events S from IoT network traffic and a plurality of user activity signatures, each user activity signature U in the plurality of user activity signatures being a known sequence of device events. The processor is configured to infer a user activity by way of approximate user activity signature matching.
Claims14
A system, comprising:
- a processor in communication with a memory, the memory including instructions executable by the processor to:
- access a sequence of device events S,
- access a plurality of user activity signatures, each user activity signature U in the plurality of user activity signatures comprising a known sequence of device events, and
- infer user activity from the sequence of device events S, wherein the processor:
- calculates a minimum cost of changing a subsequence of S into an activity signature U, and
- determines a plurality of approximate matches between the sequence of device events S and each activity signature U in the plurality of user activity signatures by:
- identification of a plurality of subsequences of S with an associated cost in less than or equal to a parameter k, the parameter k being predetermined and associated with approximation,
- iterative removal of each subsequence in the plurality of subsequences of S if the subsequence still exists in S,
- inclusion of the removed subsequence in the plurality of approximate matches,
- wherein iterative removal of the subsequence of device events from the sequence of events is such that the subsequences of device events with a smallest cost are removed first, and, if the cost of two or more of the subsequences are equal, removing the subsequence of the activity signature of greatest length first.
7 more elements
A method, comprising:
- accessing a sequence of device events;
- accessing a plurality of user activity signatures, each user activity signature of the plurality of user activity signatures encompassing a known sequence of device events;
- and
- inferring a set of user activities from the sequence of device events by iterative identification of one or more approximate matches of a user activity signature of the plurality of user activity signatures from the sequence of device events, each approximate match of the one or more approximate matches being a subsequence of the sequence of device events having a removal cost from the sequence of device events that is less than or equal to a maximum approximation value, including
- comparing a first length of a first user activity signature associated with a first subsequence with a second length of a second user activity signature associated with a second subsequence where respective removal costs of the first subsequence and the second subsequence are equal and where the first length is greater than the second length;
- removing the first subsequence from the sequence of device events;
- and
- removing the second subsequence from the sequence of device events following removal of the first subsequence from the sequence of device events.
5 more elements
A method, comprising:
- accessing a sequence of device events;
- accessing a plurality of user activity signatures, each user activity signature of the plurality of user activity signatures encompassing a known sequence of device events;
- and
- inferring a set of user activities from the sequence of device events by iterative identification of one or more approximate matches of a user activity signature of the plurality of user activity signatures from the sequence of device events, each approximate match of the one or more approximate matches being a subsequence of the sequence of device events having a removal cost from the sequence of device events that is less than or equal to a maximum approximation value, including
- comparing a first approximate match associated with a first user activity signature to a second approximate match associated with a second user activity signature, the first approximate match and the second approximate match having an overlapping event index and the first user activity signature being a subset of the second user activity signature;
- and
- removing the first approximate match from the one or more approximate matches.
4 more elements
Dependencies are inferred from the claim text.