# US 2019/0319862 A1 · Varying data flow aggregation period relative to data value > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0319862 A1 - Document ID: US20190319862A1 - Status: Published application - Kind: A1 - Application number: 15/952,829 - Filed: 2018-04-13 - Published: 2019-10-17 - Earliest claimed: 2018-04-13 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Arthur Zaifman; John Mark Mocenigo; Joseph Dorsey, JR. - Web page: https://patentgrep.com/patent/US20190319862A1 ## CPC - H04L 43/026: using flow identification - G06F 16/22: Indexing; Data structures therefor; Storage structures - G06F 16/24568: {Data stream processing; Continuous queries} - H04L 41/50: Network service management, e.g. ensuring proper service fulfilment according to agreements - H04L 43/04: Processing captured monitoring data, e.g. for logfile generation - G06F 2216/03: Data mining - Y02D 30/50: in wire-line communication networks, e.g. low power modes or reduced link rate - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE ## Abstract In one example, the present disclosure describes a device, computer-readable medium, and method for varying the aggregation periods for data flows relative to the values of the data contained in the flows. For instance, in one example, a method includes intercepting a first flow and a second flow traversing a communications network, assigning a first value to the first flow and a second value to the second flow, wherein the first value is higher than the second value, aggregating the first flow into a first database record according to a first aggregation period, aggregating the second flow into a second database record according to a second aggregation period that is longer than the first aggregation period, and storing the first database record and the second database record in a database. ## Claims ### Claim 1 A method, comprising: intercepting a first flow and a second flow traversing a communications network; assigning a first value to the first flow and a second value to the second flow, wherein the first value is higher than the second value; aggregating the first flow into a first database record according to a first aggregation period; aggregating the second flow into a second database record according to a second aggregation period that is longer than the first aggregation period; and storing the first database record and the second database record in a database. ### Claim 2 (depends on 1) The method of claim 1, further comprising: mining the database for metadata indicating a use pattern of a first endpoint device connected to the communications network; and tailoring service over the communications network to the first endpoint device based on the metadata. ### Claim 3 (depends on 1) The method of claim 1, wherein the first value represents an impact of network traffic contained in the first flow on the communications network, and the second value represents an impact of network traffic contained in the second flow on the communications network. ### Claim 4 (depends on 1) The method of claim 1, wherein the first value is based on a number of data packets in contained in the first flow. ### Claim 5 (depends on 1) The method of claim 1, wherein the first value is based on durations of data packets contained in the flow in the first flow. ### Claim 6 (depends on 1) The method of claim 1, wherein the assigning comprises: binding the first flow to a first endpoint device connected to the communications network; and determining the first value based at least in part on a subscriber table that associates a first profile with the first endpoint device. ### Claim 7 (depends on 6) The method of claim 6, wherein the first profile identifies a pattern of usage of the first endpoint device in the communications network. ### Claim 8 (depends on 7) The method of claim 7, wherein the pattern of usage identifies applications that are most frequently used on the first endpoint device at specific times of day. ### Claim 9 (depends on 7) The method of claim 7, wherein the pattern of usage identifies applications that are most frequently used on the first endpoint device on specific days of the week. ### Claim 10 (depends on 7) The method of claim 7, wherein the pattern of usage identifies web sites that are most frequently visited using the first endpoint device. ### Claim 11 (depends on 7) The method of claim 7, wherein the pattern of usage identifies types of network traffic that are most frequently sent to and from the first endpoint device when connected to the communications network. ### Claim 12 (depends on 1) The method of claim 1, wherein the first value at least meets a predefined threshold, and the second value does not meet the predefined threshold. ### Claim 13 (depends on 1) The method of claim 1, wherein the first value and the second value are each numerical values that fall along a scale of values. ### Claim 14 (depends on 13) The method of claim 13, wherein each of the numerical values that falls along the scale of values is associated with a different aggregation period. ### Claim 15 (depends on 1) The method of claim 1, wherein the first value and the second value are each categories that fall along a rubric. ### Claim 16 (depends on 1) The method of claim 1, wherein the first aggregation period defines a first frequency with which flows are aggregated into the first database record, and the second aggregation period defines a second frequency with which flows are aggregated into the second database record. ### Claim 17 A computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations comprising: intercepting a first flow and a second flow traversing a communications network; assigning a first value to the first flow and a second value to the second flow, wherein the first value is higher than the second value; aggregating the first flow into a first database record according to a first aggregation period; aggregating the second flow into a second database record according to a second aggregation period that is longer than the first aggregation period; and storing the first database record and the second database record in a database. ### Claim 18 (depends on 17) The computer-readable medium of claim 17, wherein the operations further comprise: mining the database for metadata indicating a use pattern of a first endpoint device connected to the communications network; and tailoring service over the communications network to the first endpoint device based on the metadata. ### Claim 19 (depends on 17) The computer-readable medium of claim 17 wherein the first aggregation period defines a first frequency with which flows are aggregated into the first database record, and the second aggregation period defines a second frequency with which flows are aggregated into the second database record. ### Claim 20 A device, comprising: a processor; and a computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations comprising: intercepting a first flow and a second flow traversing a communications network; assigning a first value to the first flow and a second value to the second flow, wherein the first value is higher than the second value; aggregating the first flow into a first database record according to a first aggregation period; aggregating the second flow into a second database record according to a second aggregation period that is longer than the first aggregation period; and storing the first database record and the second database record in a database.