IP Library Granted Patent US 8,489,522
Granted Patent B1
US 8,489,522 · App. 12/750,440 · Granted Jul 16, 2013

Pattern learning system

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,489,522
App. No.
12/750,440
Granted
Jul 16, 2013
Kind
B1
Abstract

According to one embodiment, a pattern learning system includes a pattern learning tool that receives event messages in a sequential manner from multiple sensors and forms multiple sub-sequences that each includes a trigger event message, a consequence event message, and one or more intermediary event messages. The pattern learning tool then generates multiple graphs that each represents a sub-sequence of the plurality of event messages. The pattern learning tool then combines the graphs into a combined graph according to a type of each event message, and determines a causal sequence from the combined graph according to a heaviest weighted directed path from the trigger event message to the consequence event message.

Claims (46)

1. A pattern learning system comprising:

a pattern learning tool comprising memory storing instructions executable on a computing system, the pattern learning tool operable to:

receive a plurality of sequential event messages from one or more sensors;

generate a plurality of graphs that each represents a sub-sequence of the plurality of event messages, each graph comprising a trigger event message, a consequence event message, and one or more intermediary event messages;

combine the plurality of graphs to form a combined graph according to a type of each event message; and

determine a causal sequence from the combined graph according to a heaviest weighted directed path from the trigger event message to the consequence event message.

2. The pattern learning system of claim 1 , wherein the trigger event message is known, the pattern learning tool operable to:

for each sub-sequence, select the consequence event message to be a specified period of time after the trigger event message.

3. The pattern learning system of claim 1 , wherein the consequence event message is known, the pattern learning tool operable to:

for each sub-sequence, select the trigger event message to be a specified period of time before the consequence event message.

4. The pattern learning system of claim 1 , wherein each of the plurality of graphs include a plurality of edges representing a possible causal path between subsequent event messages, the pattern learning tool operable to:

combine the plurality of edges according to the type of each message associated the plurality of edges; and

determine the causal sequence according to the heaviest weighted directed path of the combined edges from the trigger event message to the consequence event message.

5. The pattern learning system of claim 1 , wherein the pattern learning tool is operable to:

determine one or more noisy event messages from among the one or more intermediary event messages, the one or more noisy event messages comprising those intermediary event messages that do not lie along the determined causal sequence.

6. The pattern learning system of claim 5 , wherein the pattern learning tool is operable to determine the one or more noisy event messages according to a specified threshold level.

7. A pattern learning method comprising:

receiving a plurality of sequential event messages from one or more sensors;

generating a plurality of graphs that each represents a sub-sequence of the plurality of event messages, each graph comprising a trigger event message, a consequence event message, and one or more intermediary event messages;

combining the plurality of graphs to form a combined graph according to a type of each event message; and

determining a causal sequence from the combined graph according to a heaviest weighted directed path from the trigger event message to the consequence event message.

8. The pattern learning method of claim 7 , further comprising:

for each sub-sequence, select the consequence event message to be a specified period of time after the trigger event message that is known.

9. The pattern learning method of claim 7 , further comprising:

for each sub-sequence, select the trigger event message to be a specified period of time before the consequence event message that is known.

10. The pattern learning method of claim 7 , further comprising:

combining the plurality of edges according to the type of each message associated a plurality of edges representing a possible causal path between subsequent event messages; and

determining the causal sequence according to the heaviest weighted directed path of the combined edges from the trigger event message to the consequence event message.

11. The pattern learning method of claim 7 , further comprising:

determining one or more noisy event messages from among the one or more intermediary event messages, the one or more noisy event messages comprising those intermediary event messages that do not lie along the determined causal sequence.

12. The pattern learning method of claim 11 , further comprising determining the one or more noisy event messages according to a specified threshold level.

13. A non-transitory, computer-readable storage medium having computer-readable instructions stored thereon that, when executed by a processor, implement a method, the method comprising:

receiving a plurality of sequential event messages from one or more sensors;

generating a plurality of graphs that each represents a sub-sequence of the plurality of event messages, each graph comprising a trigger event message, a consequence event message, and one or more intermediary event messages;

combining the plurality of graphs to form a combined graph according to a type of each event message; and

determining a causal sequence from the combined graph according to a heaviest weighted directed path from the trigger event message to the consequence event message.

14. The computer-readable storage medium of claim 13 , wherein the method further comprises:

for each sub-sequence, selecting the consequence event message to be a specified period of time after the trigger event message that is known.

15. The computer-readable storage medium of claim 13 , wherein the method further comprises:

for each sub-sequence, selecting the trigger event message to be a specified period of time before the consequence event message that is known.

16. The computer-readable storage medium of claim 13 , further operable to:

combining the plurality of edges according to the type of each message associated a plurality of edges representing a possible causal path between subsequent event messages; and

determining the causal sequence according to the heaviest weighted directed path of the combined edges from the trigger event message to the consequence event message.

17. The computer-readable storage medium of claim 13 , wherein the method further comprises:

determining one or more noisy event messages from among the one or more intermediary event messages, the one or more noisy event messages comprising those intermediary event messages that do not lie along the determined causal sequence.

18. The computer-readable storage medium of claim 17 , to wherein the method further comprises determining the one or more noisy event messages according to a specified threshold level.

Assignments (12)
CHANGE OF NAME Recorded Mar 21, 2025
From: FORCEPOINT FEDERAL HOLDINGS LLC
To: EVERFOX HOLDINGS LLC
Reel/Frame 070585/0625 →
PARTIAL PATENT RELEASE AND REASSIGNMENT AT REEL/FRAME 055052/0302 Recorded Oct 3, 2023
From: CREDIT SUISSE, AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: FORCEPOINT FEDERAL HOLDINGS LLC (F/K/A FORCEPOINT LLC)
Reel/Frame 065103/0147 →
SECURITY INTEREST Recorded Sep 29, 2023
From: FORCEPOINT FEDERAL HOLDINGS LLC
To: APOLLO ADMINISTRATIVE AGENCY LLC, AS COLLATERAL AGENT
Reel/Frame 065086/0822 →
CHANGE OF NAME Recorded May 12, 2021
From: FORCEPOINT LLC
To: FORCEPOINT FEDERAL HOLDINGS LLC
Reel/Frame 056216/0309 →
PATENT SECURITY AGREEMENT Recorded Jan 20, 2021
From: REDOWL ANALYTICS, INC.; FORCEPOINT LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 055052/0302 →
RELEASE OF SECURITY INTEREST IN PATENTS Recorded Jan 8, 2021
From: RAYTHEON COMPANY
To: WEBSENSE, INC.; PORTAUTHORITY TECHNOLOGIES, LLC (FKA PORTAUTHORITY TECHNOLOGIES, INC.); RAYTHEON OAKLEY SYSTEMS, LLC; FORCEPOINT FEDERAL LLC (FKA RAYTHEON CYBER PRODUCTS, LLC, FKA RAYTHEON CYBER PRODUCTS, INC.)
Reel/Frame 055492/0146 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 1, 2017
From: FORCEPOINT FEDERAL LLC
To: FORCEPOINT LLC
Reel/Frame 043397/0460 →
CHANGE OF NAME Recorded Feb 16, 2016
From: RAYTHEON CYBER PRODUCTS, LLC
To: FORCEPOINT FEDERAL LLC
Reel/Frame 037821/0818 →
PATENT SECURITY AGREEMENT Recorded Jun 9, 2015
From: WEBSENSE, INC.; RAYTHEON OAKLEY SYSTEMS, LLC; RAYTHEON CYBER PRODUCTS, LLC (FORMERLY KNOWN AS RAYTHEON CYBER PRODUCTS, INC.); PORT AUTHORITY TECHNOLOGIES, INC.
To: RAYTHEON COMPANY
Reel/Frame 035859/0282 →
CHANGE OF NAME Recorded Jun 2, 2015
From: RAYTHEON CYBER PRODUCTS, INC.
To: RAYTHEON CYBER PRODUCTS, LLC
Reel/Frame 035806/0367 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 28, 2015
From: RAYTHEON COMPANY
To: RAYTHEON CYBER PRODUCTS, INC.
Reel/Frame 035774/0322 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 20, 2010
From: HIRSCH, MICHAEL J.; GEISS, JOHN T.
To: RAYTHEON COMPANY
Reel/Frame 024417/0634 →