Patent ID: 9710857
Date: 2017-07-18
CPC Classifications: G06Q

Claim:
1. A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one processor, cause the at least one processor to perform operations comprising: receiving, at a server, data representing a plurality of user transactions performed by a plurality of users of an enterprise resource management system, the plurality of user transactions comprising a plurality of electronic transactions within the enterprise resource management system; grouping, at the server, each of the plurality of user transactions into at least one subset of user transactions according to at least one user transaction type associated with each transaction of the plurality of user transactions, such that each of the at least one subset of user transactions includes user transactions of the plurality of user transactions having a similar user transaction type, wherein each of the at least one user transaction types are associated with at least one activity performed by the plurality of users; generating, at the server, a directed acyclic graph based on the grouping, the directed acyclic graph defining relationships among the at least one subset of user transactions; determining, at the server, whether user transactions of a first subset are anomalous in relation to other subsets of user transactions in the grouped user transactions by at least searching the directed acyclic graph for a predetermined parameter, wherein the searching for the predetermined parameter comprises determining whether at least one user associated with the first subset performs at least one of: providing, by the server and via a network, an indication to a client device that a transaction activity associated with the at least one user is determined to be anomalous such that the client device may perform one of causing the transaction activity to be displayed to a key user via a display device, sending an electronic notification to the key user, causing a record of the transaction activity to be stored at a storage device, causing a printed record of the transaction activity to be generated, and causing a visible or audible alert to be activated.