US 12,034,750 B1
Tracking of user login sessions
Murat Bog, Fremont, CA (US); Vikram Kapoor, Cupertino, CA (US); Samuel Joseph Pullara, III, Los Altos, CA (US); Yijou Chen, Cupertino, CA (US); and Harish Kumar Bharat Singh, Mountain View, CA (US)
Assigned to Lacework Inc., Mountain View, CA (US)
Filed by Lacework, Inc., San Jose, CA (US)
Filed on Sep. 3, 2021, as Appl. No. 17/466,718.
Application 17/466,718 is a continuation of application No. 16/519,519, filed on Jul. 23, 2019, granted, now 11,134,093.
Application 16/519,519 is a continuation of application No. 16/134,798, filed on Sep. 18, 2018, granted, now 10,425,437, issued on Sep. 24, 2019.
Claims priority of provisional application 62/650,971, filed on Mar. 30, 2018.
Claims priority of provisional application 62/590,986, filed on Nov. 27, 2017.
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 16/901 (2019.01); G06F 21/57 (2013.01); H04L 67/306 (2022.01); H04L 67/50 (2022.01)
CPC H04L 63/1425 (2013.01) [G06F 16/9024 (2019.01); G06F 21/57 (2013.01); H04L 63/10 (2013.01); H04L 67/306 (2013.01); H04L 67/535 (2022.05)] 19 Claims
OG exemplary drawing
 
1. A system comprising:
a processor configured to:
determine that a first user login session and a second user login session have a parent-child relationship that indicates that a particular user is associated with both the first and second user login sessions; and
link first user login activity performed during the first user login session and second user login activity performed during the second user login session to the user; and
a memory coupled to the processor and configured to provide the processor with instructions;
wherein the determining that the first user login session and the second user login session have the parent-child relationship includes matching a pair of ssh connection records occurring within a first time period, wherein a first member of a matched pair corresponds to a source of a connection and wherein a second member of the matched pair corresponds to a destination of the connection.