Patent ID: 11935385
Assignee: THETARAY LTD.
Field: Control (Instruments)
Classification: CPC G | IPC G

Claim 8:
9. A computer system, comprising: a hardware processor configurable to perform a method comprising:
a) receiving input data including a plurality n of multidimensional data points (MDDPs), each MDDP having m≥2 features, and storing the data in a memory in a matrix X={x1, . . . , xn}⊂m with size n×m;
b) using an anomaly detection engine, applying a dictionary based projection (DBP) iteratively to the input data to construct a dictionary D with a size smaller than X, wherein the DBP is associated with a preselected threshold μ>0, wherein μ≥∥PD(x)−x∥ where PD(x) is an orthogonal projection for all xϵX over a space spanned by D,
wherein the applying the DBP iteratively to the input data to construct dictionary D includes using a Gaussian kernel as an input to a kernel dictionary based projection (KDBP) to construct dictionary D, wherein the Gaussian kernel is an affinity matrix A of size p×p defined on the input data and wherein p≤n,
and wherein applying the DBP iteratively to the input data further comprises iteratively computing a maximal vector element {circumflex over (x)}=argmaxxϵX∥x∥ in X, and setting a tracking number associated with a construction size of D, δ=∥{circumflex over (x)}∥;
c) using the anomaly detection engine to apply the dictionary D to determine whether a newly arrived MDDP (NAMDDP) is normal or is an anomaly, whereby the use of dictionary D instead of matrix X to determine whether the NAMDDP is normal or an anomaly reduces computational requirements for anomaly detection; and,
d) responsive to the anomaly detection engine detecting an anomaly, the computer performing any one of the following actions:
i. invoking a management module to take an action associated with the operation of the engine, or
ii. using a communication module, sending a notification to a user or to a data client system.