Granted Patent B2

US 9,123,006 · App. 12/607,103 · Granted Sep 1, 2015

Abstract

Claims (39)

1. A method implemented and residing within a computer-readable storage medium that is executed by one or more processors of a network to perform the method, comprising:

gathering data from a plurality of disparate sources and disparate locations over a network at predefined time intervals, the network is a combination of the Internet and selective Intranets, and the data gathered from emails, Simple Network Management Protocol (SNMP) histories, operating system logs, Instant Message histories, system logs, directories, web portals, data produced by applications/services, text message histories, histories on social networking websites, Application Programming Interface (API) generated data, and event streams;

filtering and then normalizing the data to get modified data;

creating relationships between elements of the modified data to establish structured data;

correlating components of the structured data to establish correlated data based at least in part on a reputation concerning a geographic location associated with the data, an individual identity associated with the data, and a group identity associated with the data and correlating components of the structured data to establish the correlated data based at least in part on temporal correlation patterns;

tagging pieces of the correlated data to create tagged data based on tagging patterns;

inserting a tag addendum into the correlated data as a tagging instruction for subsequent investigation as a potential new tag for inclusion in the tagging patterns, wherein the tag addendum does not alter evaluation of the correlated data;

merging portions of the tagged data with other previously tagged data to provide a distributed knowledge store; and

distributing the method processing over multiple network machines and distributing the distributed knowledge store over the network.

2. The method of claim 1 , wherein gathering further includes collecting the data from: the applications/services modified to supply the data, operating systems that collect and report the data, and application programming interfaces that collect the data from specific sources.

3. The method of claim 1 , wherein gathering further includes collecting the data from the plurality of disparate sources periodically and in accordance with a collection policy.

4. The method of claim 1 , wherein filtering further includes querying the data using predefined searches and matching portions of the data using predefined regular expressions.

5. The method of claim 1 , wherein creating further includes: loading the elements into one or more relational databases, loading the elements into one or more object oriented databases, and/or loading the elements into one or more extensible markup language (XML) databases.

6. The method of claim 1 , wherein creating further includes applying semantics against the structured data to create semantic categories for the structured data.

7. The method of claim 1 , wherein correlating further includes applying statistical correlations for business intelligence patterns, reputations, and historical events to the components to obtain the correlated data.

8. The method of claim 1 , wherein tagging further includes inserting tags to identify pieces of the correlated data to establish patterns, classifications, and predefined types of correlated data in the tagged data.

9. The method of claim 1 , wherein merging further includes applying one or more templates to merge the portions of the tagged data and the other tagged data into a visualization of the distributed knowledge store.

10. The method of claim 1 , wherein merging further includes generating a custom report from the merged portions of the tagged data and the other tagged data.

11. A method implemented and residing within a computer-readable storage medium that is executed by one or more processors of a network to perform the method, comprising:

matching patterns in data gathered from a plurality of data sources and from a plurality of network locations at predefined time intervals, the network locations include the Internet and selective Intranets;

normalizing the patterned data;

creating relationships in the normalized data;

correlating the relationship data based at least in part on a reputation concerning a geographic location associated with the data, an individual identity associated with the data, and a group identity associated with the data;

tagging the correlated data based on tagging patterns;

inserting a tag addendum into the correlated data as a tagging instruction for subsequent investigation as a potential new tag for inclusion in the tagging patterns, wherein the tag addendum does not alter evaluation of the correlated data;

integrating the tagged data into a distributed knowledge store; and

distributing the method processing over multiple network locations and distributing the distributed knowledge store over the network locations.

12. The method of claim 11 further comprising maintaining and authenticating identities for authors, editors, and consumers of the tagged data within the distributed knowledge store.

13. The method of claim 11 , wherein creating further includes applying semantic templates to the normalized data to establish semantic relationships within the normalized data.

14. The method of claim 11 , wherein correlating further includes applying statistical patterns, reputation ratings, and historical significant ratings to the correlated data.

15. The method of claim 11 , wherein tagging further includes adding tags to the correlated data, each tag mapping to one or more information hierarchies.

16. The method of claim 11 , wherein integrating further includes generating a custom report from the distributed knowledge store using a report that selectively assembles the tagged data.

17. A multiprocessor-implemented system, comprising:

a semantic relationship builder implemented and residing in a non-transitory computer-readable storage medium, the semantic relationship builder executes on one or more processors of a network;

a correlator residing in a non-transitory computer-readable medium, the correlator executes on the one or more processors of the network; and

an integration service residing in a non-transitory computer-readable medium, the integration service executes on the one or more processors of the network;

the semantic relationship builder is configured to establish relationships in distributed data collected over the network at predefined time intervals, and wherein the correlator is configured to establish correlations between elements of the data based at least in part on a reputation concerning a geographic location associated with the distributed data, an individual identity associated with the distributed data, and a group identity associated with the distributed data, and the integration service is configured to integrate the elements of the data into a distributed knowledge store, the data collected over the network where the network is a combination of the Internet and selective Intranets and the processing of the semantic relationship builder, the correlator, and the integration service are distributed over multiple network machines and the distributed knowledge store distributed over the network, and wherein the integration service is further configured to: i) tag the elements based on tagging patterns, ii) insert a tag addendum into the data as a tagging instruction for subsequent investigation as a potential new tag for inclusion in the tagging patterns, wherein the tag addendum is does not alter evaluation of the data, and iii) use tags assigned to the elements to integrate the elements within other elements of other data that already exists in the distributed knowledge store.

18. The system of claim 17 , wherein the semantic relationship builder is configured to use semantic templates to establish semantic categories within the relationships.

19. The system of claim 17 , wherein the correlator is configured to create business correlations, reputations correlations, and historical correlations between the elements of the data.

Assignments (16)