Patent ID: 11943235
Assignee: SAUDI ARABIAN OIL COMPANY
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method, comprising:
filtering, for users, user login data, including monitoring workstations and servers accessed by users to obtain the user login data;
creating user login records for a current time period based, at least in part, on the user login data;
determining, as a determined anomaly score, an anomaly score for each user, wherein the anomaly score indicates a deviation by the user from historical login patterns of the user;
updating, based on the determined anomaly score, a user machine learning (ML) model;
maintaining, over time using the user login data, user period login records;
training the user ML model using the user periodic login records;
generating, using the user ML model and the user periodic login records, enriched login statistics;
generating, in a graphical user interface, a report that includes the enriched login statistics; and
disabling, using the enriched login statistics and a rule set defining automatic actions to be performed in response to certain login conditions, a user account of the user when the anomaly score for the user exceeds a threshold and when the user does not have one or more of an associated valid change request and a recent role change.