Patent ID: 8918430

Claim:
A method for storing data about events in an event chain, the method comprising: creating a DocString identifier; receiving a first data item related to a first event, the first data item having a first identifier; modifying the DocString identifier using the first identifier; receiving a second data item related to a second event, the second data item having a second identifier; modifying the DocString identifier using the second identifier; receiving a third data item comprising data about the third event, wherein the third data item has a third identifier; modifying the DocString identifier using the third identifier; identifying a relationship between the first, second, and third data items using the DocString identifier; and providing information relating to the event chain, including using the DocString identifier to access the first data item and the second data item, wherein providing information relating to the event comprises: comparing the event chain to data from an event sequence library to generate comparison data, wherein the data in the event sequence library defines at least one pre-defined event sequence comprising a plurality of events, and wherein the comparison data is based at least upon an event order of the first event and the second event and an order of events in the at least one pre-defined event sequence, and wherein the event sequence library comprises: data related to a known dangerous event sequence; and data related to a suspect event sequence; and generating a report based on the comparison data.