US 12,192,220 B1
Anomaly and causality detection
Syed Ahsan Ishtiaque, Renton, WA (US); Ketan Vijayvargiya, Redmond, WA (US); Mohammed Talal Yassar Azam, Snoqualmie, WA (US); Jill Blue Lin, Berkeley, CA (US); Mohammed Saad Ather, Sammamish, WA (US); Ankur Mehrotra, Seattle, WA (US); Peter Goetz, Leinfelden-Echterdingen (DE); Lenon Alexander Minorics, Stuttgart (DE); Patrick Bloebaum, Mountain View, CA (US); Dominik Janzing, Rottenburg (DE); David Kernert, Stuttgart (DE); Sadanand Murthy Sachidananda, Bothell, WA (US); Shashank Srivastava, Jersey City, NJ (US); Laurent Callot, Seattle, WA (US); and Ali Caner Turkmen, Berlin (DE)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Jun. 28, 2022, as Appl. No. 17/851,429.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1425 (2013.01) 20 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
receiving time-series data including a first time series and a second time series;
performing anomaly detection on the time-series data to detect anomalies using an anomaly detection model;
detecting a causal relationship between measures of the time-series data, wherein a set of measures are related when a first measure of the set of measures has a causal influence on a second measure of the set of measures, wherein a measure is a numerical or categorical quantity that describes the time-series data, and wherein detecting a causal relationship between measures of the time-series data comprises:
grouping the anomalies by measure to generate anomaly groups, wherein anomalies in the first time series that relate to the first measure are grouped together with anomalies in the second time series that relate to the first measure and anomalies in the first time series that relate to the second measure are grouped together with anomalies in the second time series that relate to the second measure;
scoring the anomaly groups;
inferring causal relationships between measures of the anomaly groups to generate a causal data structure; and
attributing anomalies of downstream measures to upstream measures using the causal data structure; and
outputting a result of the anomaly detection and the causal relationship between measures of the time-series data in a graphical user interface.