US 12,323,442 B2
Determining physical real estate utilization from network and security data
Steven Earhart, Kirkwood, MO (US); Leila Hassan, Ballwin, MO (US); James J. Arnott, Berthoud, CO (US); and Adam Suarez, Raleigh, NC (US)
Assigned to MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed by MASTERCARD INTERNATIONAL INCORPORATED, Purchase, NY (US)
Filed on Dec. 29, 2021, as Appl. No. 17/564,746.
Prior Publication US 2023/0208865 A1, Jun. 29, 2023
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1425 (2013.01) [H04L 63/0272 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method of determining physical real estate utilization comprising:
receiving network and security data of an enterprise;
identifying a sign of work from the network and security data;
for each identified sign of work:
determining an Internet Protocol (IP) address and user identifier from the network and security data associated with the sign of work;
determining one or more user characteristics of a user associated with the user identifier, wherein the one or more user characteristics of the user comprises one or more of: primary work location of the user, department of the user, and employment status of the user;
determining a physical location of the user at a particular time based on the IP address; and
storing the one or more user characteristics of the user and the physical location of the user associated with the particular time;
for each identified sign of work, if user characteristics cannot be determined for a particular user identifier, flagging the user as an unknown user;
removing physical location information associated with unknown users;
after removing the physical location information associated with unknown users, generating one or more insights on physical real estate utilization, including occupancy of one or more particular physical locations, based on at least two features from the group consisting of: the one or more user characteristics of each user of a plurality of users determined from identified signs of work from the network and security data, the physical location of each user of the plurality of users determined from identified signs of work from the network and security data, and temporal data from the received network and security data of the enterprise; and
outputting a set of insights from the generated insights.