| CPC H04L 63/104 (2013.01) [H04L 63/102 (2013.01); H04L 63/107 (2013.01)] | 20 Claims |

|
1. A method for automatically assigning users of a computer system to user groups by reference to a data collection of information about previously classified activities of a plurality of grouped users of the computer system, the method comprising:
monitoring activity of a first user of the computer system;
creating and storing a first user activity log for the monitored first user from the monitored first user activity;
calculating a user behavior signature of monitored first user activity as a new behavior vector of values representing events related to the monitored activity;
calculating a degree of variance (DoV) of the monitored first user activity from a behavior signature of the previously classified activities, wherein the behavior signature of the previously classified activities is a previous behavior vector of values representing events related to the previously classified activity, and the DoV is the distance between the new behavior vector and the previous behavior vector;
comparing the (DoV) to a predetermined threshold;
when the calculated DoV is less than or equal the predetermined threshold, determining that the first user will be assigned to a group with the previously grouped users associated with the behavior signature of the previously classified activities;
when the calculated DoV is greater than the predetermined threshold, determining that the first user will not be assigned in the same group with the previously grouped users associated with the behavior signature of the previously classified activities;
identifying the first user with the data collection of information about previously classified activities of a plurality of grouped users of the computer system; and
sending an indication to a destination in the computer system about the determination of group assignment for the first user.
|