# US 2021/0240791 A1 · Ranking services and top n rank lists

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0240791 A1
- Document ID: US20210240791A1
- Status: Published application
- Kind: A1
- Application number: 17/161,436
- Filed: 2021-01-28
- Published: 2021-08-05
- Earliest claimed: 2020-01-31
- Assignees: Infoblox Inc.
- Applicants: Infoblox Inc.
- Inventors: Laura Teixeira da Rocha; Renee Carol Burton
- Web page: https://patentgrep.com/patent/US20210240791A1

## CPC

- G06F 16/9536: Search customisation based on social or collaborative filtering
- G06F 16/24578: {using ranking}
- H04L 61/4511: using domain name system [DNS]
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Techniques for ranking services and top N rank lists are disclosed. In some embodiments, a system, process, and/or computer program product for ranking services and top N rank lists includes receiving a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related event data; aggregating the DNS related event data over a period of time and rank order by popularity; and generating a top N rank list for ranking popularity over the period of time for a set of domains using the aggregated DNS related event data and rank order by popularity.

## Claims

### Claim 1

A system, comprising:
a processor configured to:
receive a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related event data;
aggregate the DNS related event data over a period of time and rank order by popularity; and
generate a top N rank list for ranking popularity over the period of time for a set of domains using the aggregated DNS related event data and rank order by popularity; and
a memory coupled to the processor and configured to provide the processor with instructions.

### Claim 2 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals using the top N rank list.

### Claim 3 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals using the top N rank list and normalize the data to generate confidence intervals.

### Claim 4 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals using the top N rank list by aggregating the data over a set of consecutive period of days to obtain ranks over the period of time for the set of domains.

### Claim 5 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals to generate a most likely rank and an interval range for the set of domains.

### Claim 6 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals to generate a most likely rank and an interval range for the set of domains; and
output a rank intervals list for the set of domains.

### Claim 7 (depends on 1)

The system recited in claim 1, wherein the processor is further configured to:
determine rank intervals to generate a most likely rank and an interval range for the set of domains; and
output a rank intervals list for the set of domains that is used by a network device to enforce a network policy using the rank intervals list.

### Claim 8

A method, comprising:
receiving a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related event data;
aggregating the DNS related event data over a period of time and rank order by popularity; and
generating a top N rank list for ranking popularity over the period of time for a set of domains using the aggregated DNS related event data and rank order by popularity.

### Claim 9 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals using the top N rank list.

### Claim 10 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals using the top N rank list and normalize the data to generate confidence intervals.

### Claim 11 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals using the top N rank list by aggregating the data over a set of consecutive period of days to obtain ranks over the period of time for a set of domains.

### Claim 12 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals to generate a most likely rank and an interval range for the set of domains.

### Claim 13 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals to generate a most likely rank and an interval range for the set of domains; and
outputting a rank intervals list for the set of domains.

### Claim 14 (depends on 8)

The method of claim 8, further comprising:
determining rank intervals to generate a most likely rank and an interval range for a set of domains; and
outputting a rank intervals list for the set of domains that is used by a network device to enforce a network policy using the rank intervals list.

### Claim 15

A computer program product, the computer program product being embodied in a non-transitory, tangible computer readable storage medium and comprising computer instructions for:
receiving a set of network related event data, wherein the set of network related event data includes Domain Name System (DNS) related event data;
aggregating the DNS related event data over a period of time and rank order by popularity; and
generating a top N rank list for ranking popularity over the period of time for a set of domains using the aggregated DNS related event data and rank order by popularity.

### Claim 16 (depends on 15)

The computer program product recited in claim 15, further comprising computer instructions for:
determining rank intervals using the top N rank list.

### Claim 17 (depends on 15)

The computer program product recited in claim 15, further comprising computer instructions for:
determining rank intervals using the top N rank list and normalize the data to generate confidence intervals.

### Claim 18 (depends on 15)

The computer program product recited in claim 15, further comprising computer instructions for:
determining rank intervals using the top N rank list by aggregating the data over a set of consecutive period of days to obtain ranks over the period of time for a set of domains.

### Claim 19 (depends on 15)

The computer program product recited in claim 15, further comprising computer instructions for:
determining rank intervals to generate a most likely rank and an interval range for the set of domains.

### Claim 20 (depends on 15)

The computer program product recited in claim 15, further comprising computer instructions for:
determining rank intervals to generate a most likely rank and an interval range for the set of domains; and
outputting a rank intervals list for the set of domains that is used by a network device to enforce a network policy using the rank intervals list.