Patent ID: 11943235
Assignee: SAUDI ARABIAN OIL COMPANY
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A computer-implemented system, comprising:
one or more processors; and
a non-transitory computer-readable storage medium coupled to the one or more processors and storing programming instructions for execution by the one or more processors, the programming instructions instructing the one or more processors to perform operations comprising:
filtering, for users, user login data, including monitoring workstations and servers accessed by users to obtain the user login data;
creating user login records for a current time period based, at least in part, on the user login data;
determining, as a determined anomaly score, an anomaly score for each user, wherein the anomaly score indicates a deviation by the user from historical login patterns of the user;
updating, based on the determined anomaly score, a user machine learning (ML) model;
maintaining, over time using the user login data, user period login records;
training the user ML model using the user periodic login records;
generating using the user ML model and the user periodic login records, enriched login statistics;
generating, in a graphical user interface, a report that includes the enriched login statistics; and
disabling, using the enriched login statistics and a rule set defining automatic actions to be performed in response to certain login conditions, a user account of the user when the anomaly score for the user exceeds a threshold and when the user does not have one or more of an associated valid change request and a recent role change.