PATENT CLAIM ANALYSIS

Application Number: 15918758
Application Type: Utility
Filing Date: 2018-03
Publication Date: 2018-07
Patent Classification: ["726", "001000"]

Abstract:
A system and method are provided for detecting fraud and/or misuse of data in a computer environment through generating a rule for monitoring at least one of transactions and activities that are associated with the data. The rule can be generated based on one or more criteria related to the at least one of the transactions and the activities that is indicative of fraud or misuse of the data. The rule can be applied to the at least one of the transactions and the activities to determine if an event has occurred, where the event occurs if the at least one criteria has been met. A hit is stored if the event has occurred and a notification can be provided if the event has occurred. A compilation of hits related to the rule can be provided.

Claim (Index 1):
A method of detecting improper access of protected data by an authorized user, the method comprising:\n extracting event data from an event log file including information associated with an attempt to access protected data, the extracting being performed by a computer system configured to recognize and parse the event data within the event log file for each of a plurality of different file formats to enable a monitoring system implemented by a processor to oversee user activity across a plurality of applications for determining the attempt to access the protected data is fraudulent or indicative of probable misuse; normalizing the event data based on a predefined format; processing the normalized event data to determine an identifier associated with the attempt to access the protected data; processing the normalized event data and the identifier to determine whether the attempt to access the protected data is fraudulent or indicative of probable misuse based on at least one rule applied by the monitoring system, the rule comprising at least one criterion related to accesses in excess of a specific volume, accesses during a pre-determined time interval, or accesses by a specific user; and generating a notification based on a determination that the attempt to access the protected data is fraudulent or indicative of probable misuse, wherein\n the monitoring system continuously processes the normalized event data and the identifier according to a predefined schedule, and \n the event log file corresponds with an application of the plurality of applications accessible by the authorized user, each application of the plurality of applications has a corresponding event log file, and the event log file of each application of the plurality of applications has a file format of the plurality of different file formats.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 90.0
- Lexical Diversity: 2.32787
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['14954470', '11687864', '14102017', '11307303', '10657328']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2544288318173053
- 35 USC 102 Novelty (BERT): 0.5471157578557435
- Combined Prediction Score: 0.2836975244211491
- Mean Citation Score: 272.276052
- Max Citation Score: 390.60455
- Similarity Product: 386.7274242771447

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test