IoT Anomaly Detection Without Domain Knowledge

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional anomaly detection methods for IoT systems require prior domain knowledge and are limited in handling high-dimensional data and temporal relationships, making them ineffective for detecting abnormal activities or behaviors without manual intervention.

Innovation Solution

A detective system that combines unsupervised machine learning for preprocessing sensor data, Natural Language Processing to discover activities, and supervised machine learning to build activity-or-behavior models, enabling automatic detection of abnormal activities without prior domain knowledge, and capable of handling multidimensional sensor data from multiple types of sensors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If conventional statistical modeling methods are used for anomaly detection, then data anomaly detection capability is provided, but domain knowledge is required and high-dimensional data handling is limited

Engineering Contradiction:
Improveanomaly detection capabilityVSAvoiddomain knowledge requirement
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system performs self-service by automatically discovering activities and building detection models without requiring domain knowledge. The unsupervised learning component clusters sensor data to identify normal activity patterns autonomously, while the NLP component automatically generates activity descriptions from clustered data, eliminating the need for expert intervention in model construction.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system transforms the detection approach by changing parameters from statistical modeling to machine learning-based activity recognition. This involves transitioning from unidimensional statistical analysis to multidimensional activity pattern recognition using clustering algorithms and NLP, enabling effective handling of high-dimensional sensor data without domain knowledge constraints.

Inventive Principle:
Principle #35Parameter changes

2Quantity of substance

If unsupervised machine learning clustering is used, then multidimensional data handling is enabled, but temporal relationships between data samples cannot be captured

Engineering Contradiction:
Improvedata dimensionality handlingVSAvoidtemporal relationship information
Core Design Contradiction:
Quantity of substanceVSLoss of information

Solution Approach 1:

The system applies preliminary action by performing clustering on sensor data to identify activity patterns before temporal analysis. The unsupervised learning component first clusters multidimensional sensor data into activity groups, then the NLP component processes these clusters to discover activity descriptions, preserving temporal relationships in the sequential processing pipeline.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If supervised machine learning is used for activity detection, then activity classification capability is improved, but domain knowledge is required for label derivation

Engineering Contradiction:
Improveactivity classification accuracyVSAvoidmanual intervention requirement
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system achieves self-service by replacing manual label derivation with automated NLP-based activity discovery. The NLP component automatically generates activity descriptions and labels from clustered sensor data, enabling supervised learning models to be trained without domain expert intervention while maintaining high classification accuracy.

Inventive Principle:
Principle #25Self-service

4Reliability

If conventional detection methods are used, then detection capability is provided, but adaptability to different systems is limited

Engineering Contradiction:
Improvedetection capabilityVSAvoidcross-system applicability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system achieves universality by designing a detection framework that can be applied across different IoT systems without system-specific customization. The unsupervised learning and NLP components automatically adapt to various sensor types and system configurations, enabling the same detection methodology to be deployed across diverse applications from smart homes to industrial systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11301759B2Detective method and system for activity-or-behavior model construction and automatic detection of the abnormal activities or behaviors of a subject system without requiring prior domain knowledge
Publication Date: 2022.04.12 NAT TAIWAN UNIV
  • US11301759B2 patent drawing
  • US11301759B2 patent drawing
  • US11301759B2 patent drawing

AI summary

A detective method, applied in a detective system comprising an activity-or-behavior model constructor, for activity-or-behavior model construction and automatic detection of activities of a subject system, comprises steps of using an unsupervised machine learning technique, a Natural Language Processing technique (NLP) and a supervised machine learning technique. As such, an activity-or-behavior model is built for predicting the future behaviors of the subject system and automatically detecting abnormal activities or behaviors of the subject system. The activity-or-behavior model is capable to handle multidimensional sensor data input from a plurality of sensor data streams and incorporate the sensor data values and a selected temporal information about at least one sensor data stream and between different sensor data streams.