Event Association System for Multi-Event Rule Application
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques for applying rules to events are limited as they only address individual events, failing to detect unwanted activity that spans multiple events, leading to inefficiencies in detection.
Innovation Solution
A system and method that associate multiple events based on identifiers and apply rules to these associated events, allowing for reactions to be performed if the collective events meet specific thresholds or conditions, thereby identifying and reacting to unwanted activity across multiple events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If rules are applied only to individual events, then the detection process is simple and fast, but unwanted activity spanning multiple events cannot be detected
Solution Approach 1:
The patent merges multiple individual events into an associated group based on common identifiers (such as user ID, device ID, or session ID). By combining events that are related through these identifiers, the system can apply rules to the aggregated set of events rather than treating each event in isolation. This enables detection of unwanted activity patterns that span across multiple events while maintaining a manageable analysis unit through the use of identifier-based grouping.
2Reliability
If multiple events are associated and analyzed together, then unwanted activity spanning multiple events can be detected, but the processing complexity and computational resources increase
Solution Approach 1:
The patent segments the event stream into distinct associated groups based on identifiers, allowing the system to process and analyze events in manageable chunks rather than treating all events as a single large dataset. Each associated group can be processed independently, reducing the computational burden on any single processing unit while still enabling comprehensive detection across multiple events through the aggregation of results from different groups.
3Measurement precision
If rules are applied to associated events with temporal proximity consideration, then false positives are reduced, but the analysis time increases
Solution Approach 1:
The patent performs preliminary grouping of events by identifier before applying rule analysis. By pre-organizing events into associated groups based on their identifiers and temporal relationships, the system eliminates the need to perform complex temporal analysis during the rule evaluation phase. This preliminary organization reduces false positives by ensuring that only temporally proximate events with matching identifiers are considered together, while significantly reducing the overall analysis time by avoiding redundant temporal checks during rule application.
Data Source
AI summary
A system, method, and computer program product are provided for applying a rule to associated events. In use, a plurality of events is associated based on at least one identifier. Additionally, at least one rule is applied to the associated events. Further, a reaction is performed based on the application of the at least one rule.