Patent Document ID: 9491179
Application ID: 14861305

Base Claim:
1. A method for detecting unauthorized user account communications, comprising: sampling messages associated with an authorized user of an account to provide a plurality of message samples; creating an authorized profile based on language patterns extracted from the plurality of message samples; comparing by a processor a language pattern extracted from a recent message with the authorized profile to determine a deviation between the language pattern extracted from the recent message and the authorized profile; determining that the recent message is an unauthorized user account communication when the deviation is not within an allowable amount of deviation, the allowable amount of deviation being based on an amount of samples in the plurality of message samples; and generating an alert indicating that the recent message is an unauthorized user account communication in response to the determining that the recent message is an unauthorized user account communication.

---

Claim 5:
5. The method as recited in claim 1 , wherein sampling the messages comprises: sampling the messages associated with the authorized user until a predetermined number of samples is reached.