SYSTEMS AND METHODS FOR DETECTING UNAUTHORIZED BROADBAND INTERNET ACCESS SHARING
Data describing broadband internet usage is collected from a user equipment device associated with each respective user account. The data are then input into a machine learning model that is trained on broadband internet usage data of a plurality of user accounts in a single geographic area. An n-dimensional metric for each user account is then obtained as output from the machine learning model. Using the n-dimensional metric, at least one candidate user account suspected of being engaged in broadband internet access sharing is identified, and a list of candidate user accounts is generated.
1 . A method comprising:
identifying a plurality of devices connected to a user equipment device, wherein each of the plurality of devices is associated with a user account from a list of candidate user accounts;
determining a first signal strength at a first time for each of the plurality of devices;
identifying a subset of the plurality of devices, wherein each of the subset of the plurality of devices is determined to have the first signal strength at the first time below a first threshold of signal strength;
determining a second signal strength at a second time for each of the subset;
determining a change between the first signal strength and the second signal strength for each of the subset;
determining that the change for a first device in the subset is more than a second threshold, the second threshold corresponding to a threshold change in signal strength;
determining that the second signal strength for the first device is more than the first threshold of signal strength; and
removing the first device from the subset of the plurality of devices.
2 . The method of claim 1 , further comprising:
determining that the subset of the plurality of devices is empty; and
removing the user account from the list of candidate user accounts.
3 . The method of claim 1 , comprising:
determining that the change for the first device in the subset is less than the second threshold;
receiving location data associated with the first device in the subset;
identifying a user account associated with the first device in the subset;
accessing a display map of a portion of a building associated with the user account; and
generating for display the display map indicating a location of the first device based on the received location data.
4 . The method of claim 3 , further comprising:
determining that the location of the first device is within the portion of the building associated with the user account; and
removing the first device from the subset of the plurality of devices.
5 . The method of claim 1 , further comprising:
determining that a percentage of a subset number of devices in the subset of devices compared to a total number of devices in the plurality of devices exceeds a third threshold; and
sending to each of the devices in the subset of devices a request for an identifier.
6 . The method of claim 5 , wherein the identifier is at least one of a password, a name of a device on a network, a last bill amount, a last bill payment date, a specific service detail, a specific video channel, a last on-site service detail, a last customer service call detail, a parental profile name, and a device model name.
7 . The method of claim 3 , further comprising:
receiving new location data associated with the first device in the subset;
determining a new location of the first device;
determining that a location change between the location and the new location is greater than a fourth threshold of location change;
determining that the second signal strength is same as the first signal strength; and
removing the first device from the subset of the plurality of devices.
8 . The method of claim 1 , further comprising:
for each device in the subset of the plurality of devices, receiving location data associated with each device in the subset; and
generating for display a display map indicating a location of each device in the subset based on the received location data.
9 . The method of claim 1 , wherein the determining the first signal strength at the first time and the determining the second signal strength at the second time comprises:
receiving the first signal strength from a user equipment device at the first time; and
receiving the second signal strength from a user equipment device at the second time.
10 . The method of claim 1 , wherein the determining the first signal strength at the first time and the determining the second signal strength at the second time comprises:
sending a first request for the first signal strength at the first time to each of the plurality of devices;
receiving the first signal strength from each of the plurality of devices;
sending a second request for the second signal strength at the second time to the first device; and
receiving the second signal strength from the device.
11 . A system comprising:
control circuitry configured to:
identify a plurality of devices connected to a user equipment device, wherein each of the plurality of devices is associated with a user account from a list of candidate user accounts;
determine a first signal strength at a first time for each of the plurality of devices;
identify a subset of the plurality of devices, wherein each of the subset of the plurality of devices is determined to have the first signal strength at the first time below a first threshold of signal strength;
determine a second signal strength at a second time for each of the subset;
determine a change between the first signal strength and the second signal strength for each of the subset;
determine that the change for a first device in the subset is more than a second threshold, the second threshold corresponding to a threshold change in signal strength;
determine that the second signal strength for the first device is more than the first threshold of signal strength; and
remove the first device from the subset of the plurality of devices.
12 . The system of claim 11 , wherein the control circuitry is further configured to:
determine that the subset of the plurality of devices is empty; and
remove the user account from the list of candidate user accounts.
13 . The system of claim 11 , wherein the control circuitry is configured to:
determine that the change for the first device in the subset is less than the second threshold;
receive location data associated with the first device in the subset;
identify a user account associated with the first device in the subset;
access a display map of a portion of a building associated with the user account; and
generate for display the display map indicating a location of the first device based on the received location data.
14 . The system of claim 13 , wherein the control circuitry is further configured to:
determine that the location of the first device is within the portion of the building associated with the user account; and
remove the first device from the subset of the plurality of devices.
15 . The system of claim 11 , wherein the control circuitry is further configured to:
determine that a percentage of a subset number of devices in the subset of devices compared to a total number of devices in the plurality of devices exceeds a third threshold; and
send to each of the devices in the subset of devices a request for an identifier.
16 . The system of claim 15 , wherein the identifier is at least one of a password, a name of a device on a network, a last bill amount, a last bill payment date, a specific service detail, a specific video channel, a last on-site service detail, a last customer service call detail, a parental profile name, and a device model name.
17 . The system of claim 13 , wherein the control circuitry is further configured to:
receive new location data associated with the first device in the subset;
determine a new location of the first device;
determine that a location change between the location and the new location is greater than a fourth threshold of location change;
determine that the second signal strength is same as the first signal strength; and
remove the first device from the subset of the plurality of devices.
18 . The system of claim 11 , wherein the control circuitry is further configured to:
for each device in the subset of the plurality of devices, receive location data associated with each device in the subset; and
generate for display a display map indicating a location of each device in the subset based on the received location data.
19 . The system of claim 11 , wherein the control circuitry configured to determine the first signal strength at the first time and the control circuitry configured to determine the second signal strength at the second time is configured to:
receive the first signal strength from a user equipment device at the first time; and
receive the second signal strength from a user equipment device at the second time.
20 . The system of claim 11 , wherein the control circuitry configured to determine the first signal strength at the first time and the control circuitry configured to determine the second signal strength at the second time is configured to:
send a first request for the first signal strength at the first time to each of the plurality of devices;
receive the first signal strength from each of the plurality of devices;
send a second request for the second signal strength at the second time to the first device; and
receive the second signal strength from the device.