Addressable smart agent data technology to detect unauthorized transaction activity
AssigneeBrighterion, Inc.
InventorAkli Adjaoute
Life of this patent
Estimating the term…
Abstract
A computer implemented and electronic process is provided that uses artificial intelligence to detect unauthorized activity by an insider or hacker. Electronic systems that employ artificial intelligence and machine learning to detect unauthorized transaction activity by insiders or hackers for a computer network system are also provided. Hardware required for carrying out the invention typically include a plurality of networked computers. Specialized software and/or firmware is typically needed in connection with the hardware for carrying out the invention.
Claims20
A computer-implemented method for detecting unauthorized activities on a network, comprising:
- receiving, at one or more processors, an activity report comprising data regarding one or more actions performed by a system administrator on the network;
- retrieving, via the one or more processors, a plurality of task smart agents corresponding to a job of the system administrator, each of the plurality of task smart agents including a long-term profile establishing at least one normal value for an attribute of a corresponding task based on historical performance of the job by the system administrator;
- determining, via the one or more processors, that the activity report data reflect one or more deviations by the system administrator from the normal values for the attributes of the plurality of task smart agents, the one or more deviations respectively being of least a corresponding threshold degree;
- generating, via the one or more processors, an output flag for each of the one or more deviations;
- submitting, via the one or more processors, the one or more output flags to a judging module;
- issuing, via the one or more processors and based on the one or more output flags, a lockout output restricting access to the network by the system administrator.
At least networked computer for detecting unauthorized activities on a network, comprising:
- one or more processors;
- and
- a non-transitory computer-readable storage media having computer-executable instructions stored thereon, wherein when executed by the one or more processors the computer-readable instructions cause the one or more processors to—
- receive an activity report comprising data regarding one or more actions performed by a system administrator on the network;
- retrieve a plurality of task smart agents corresponding to a job of the system administrator, each of the plurality of task smart agents including a long-term profile establishing at least one normal value for an attribute of a corresponding task based on historical performance of the job by the system administrator;
- determine that the activity report data reflect one or more deviations by the system administrator from the normal values for the attributes of the plurality of task smart agents, the one or more deviations respectively being of least a corresponding threshold degree;
- generate an output flag for each of the one or more deviations;
- submit the one or more output flags to a judging module;
- issue, based on the one or more output flags, a lockout output restricting access to the network by the system administrator.
Dependencies are inferred from the claim text.