Device tracking service

A method comprising:

• obtaining, by a computer comprising a processor and from a network monitor that accesses an interface of a network, a call event data set comprising data that defines call events associated with a plurality of instances of user equipment;
• obtaining, by the processor and from a data source, transit data that defines geographic locations and routes associated with public transit and network topology data that defines geographic locations of network infrastructure associated with the network;
• identifying, by the processor and based on the call event data set, the transit data, and the network topology data, a plurality of movements associated with the plurality of instances of user equipment;
• determining, by the processor and based on the plurality of movements, if two or more of the plurality of instances of user equipment are moving in unison;
• in response to a determination that the two or more of the plurality of instances of user equipment are moving in unison, publishing, by the processor, a macrorecord to a device tracking log, the macrorecord including a count of the two or more of the plurality of instances of user equipment, an average speed of the two or more of the plurality of instances of user equipment, and a travel mode associated with the two or more of the plurality of instances of user equipment;
• and
• in response to a determination that the two or more of the plurality of instances of user equipment are not moving in unison, updating, by the processor, the call event data set with information that defines a device identifier, a type of device, the travel mode, and a geographic location associated with at least one of the plurality of instances of user equipment.

A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

• obtaining, from a network monitor that accesses an interface of a network, a call event data set comprising data that defines call events associated with a plurality of instances of user equipment;
• obtaining, from a data source, transit data that defines geographic locations and routes associated with public transit and network topology data that defines geographic locations of network infrastructure associated with the network;
• identifying, based on the call event data set, the transit data, and the network topology data, a plurality of movements associated with the plurality of instances of user equipment;
• determining, based on the plurality of movements, if two or more of the plurality of instances of user equipment are moving in unison;
• in response to a determination that the two or more of the plurality of instances of user equipment are moving in unison, publishing a macrorecord to a device tracking log, the macrorecord including a count of the two or more of the plurality of instances of user equipment, an average speed of the two or more of the plurality of instances of user equipment, and a travel mode associated with the two or more of the plurality of instances of user equipment;
• and
• in response to a determination that the two or more of the plurality of instances of user equipment are not moving in unison, updating the call event data set with information that defines a device identifier, a type of device, the travel mode, and a geographic location associated with at least one of the plurality of instances of user equipment.