# US 2014/0208381 A1 · Analyzing Usage Information of an Information Management System > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0208381 A1 - Document ID: US20140208381A1 - Status: Published application - Kind: A1 - Application number: 14/248,178 - Filed: 2014-04-08 - Published: 2014-07-24 - Earliest claimed: 2006-12-22 - Assignees: NextLabs, Inc. - Applicants: NextLabs, Inc. - Inventors: Keng Lim - Web page: https://patentgrep.com/patent/US20140208381A1 ## CPC - G06Q 10/06: Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling - G06F 3/0601: {Interfaces specially adapted for storage systems} - G06F 11/3006: {where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)} - G06F 16/122: {using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185)} - G06F 16/176: Support for shared access to files; File sharing support - G06F 16/93: Document management systems - G06F 16/958: Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking - G06F 21/125: {by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code} - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06Q 10/10: Office automation; Time management - H04L 51/234: for tracking messages - H04L 63/0263: {Rule management} - H04L 63/0272: {Virtual private networks} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/101: {Access control lists [ACL]} - H04L 63/102: {Entity profiles} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 67/303: Terminal profiles - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L 67/60: Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources (admission control or resource allocation H04L47/70) - G06F 2216/03: Data mining - G06F 2221/032: Protect output to user by software means - Y10S 707/922: Communications - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - Y10S: TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS ## Abstract In an information management system, activity data is collected and analyzed for patterns. The information management system may be policy based. Activity data may be organized as entries including information on user, application, machine, action, object or document, time, and location. When checking for patterns in the activity or historical data, techniques may include inferencing, frequency checking, location and distance checking, and relationship checking, and any combination of these. Analyzing the activity data may include comparing like types or categories of information for two or more entries. ## Claims ### Claim 1 A method comprising: providing a plurality of policies stored at a server, wherein the policies are applicable to a plurality of target profiles, each target profile having a set of target attributes, wherein each policy comprises a code component comprising a conditional expression having a policy abstraction and a corresponding action that will be performed when the conditional expression is satisfied, and each policy abstraction has a corresponding definition statement stored separately from the policy; at the server, analyzing a first policy of the plurality of policies to determine whether the first policy is relevant or irrelevant to a first specific target profile with a first set of specific target attributes without inspecting a first code component of the first policy; at the server, upon determining the first policy is relevant to the first specific target profile, inspecting the first code component of the first policy, otherwise when the first policy is determined not to be relevant to the first specific target profile, not inspecting the first code component of the first policy; at the server, when the first policy is determined to be relevant to the first specific target profile, based upon the inspecting of the first code component of the first policy, altering the first code component of the first policy to obtain a modified first code component of the first policy; and when the first policy is determined to be relevant to the first specific target profile, transferring the first policy to a first specific target with the first specific target profile by transferring the modified first code component, not the first code component, to the first specific target. ### Claim 2 (depends on 1) The method of claim 1 comprising: collecting usage information comprising denials of access to information on a plurality of device having the target profile, wherein usage information comprises a time the usage information occurs, an event type of the usage information, and a resource information of the usage information; and analyzing the usage information to detect when a user has been denied access to a first piece of information by a first rule and the user has been denied access to the first piece of information by a second rule. ### Claim 3 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises changing the conditional expression. ### Claim 4 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises removing a subexpression. ### Claim 5 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises replacing a subexpression. ### Claim 6 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises removing a common subexpression. ### Claim 7 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises dead code removal. ### Claim 8 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises comparison optimization. ### Claim 9 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises constant folding. ### Claim 10 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises comparison optimization. ### Claim 11 (depends on 1) The method of claim 1 wherein the altering the first code component of the first policy comprises redundant policy elimination.