System and method for identifying associated subjects from location histories

    公开(公告)号:US11622231B2

    公开(公告)日:2023-04-04

    申请号:US17236461

    申请日:2021-04-21

    发明人: Shlomo Rothschild

    IPC分类号: H04W4/02 H04W4/029

    摘要: Systems and methods to track the respective locations of subjects over time. The system identifies subjects who, overtime, were co-located with one another suggesting they are associated with one another, and the pairs are analyzed. For each of the subjects, the system produces a vector that quantifies the subject's location history by including a respective weight for each combination of a time interval with a geographical area. The vectors are compared using a distance metric, and any pair of subjects whose vectors are sufficiently close are flagged as being an associated pair. The respective vector belonging to each subject is normalized to account for the total number of other subjects who were co-located with the subject. For each interval-area pair, the system may compute the frequency of the interval-area pair, and then divide each weight that corresponds to the interval-area pair by the frequency of the interval-area pair.

    System and method for storing and querying document collections

    公开(公告)号:US11442973B2

    公开(公告)日:2022-09-13

    申请号:US16658323

    申请日:2019-10-21

    IPC分类号: G06F16/33 G06F16/31

    摘要: A system for storing document collections in a manner that facilitates efficient querying. Each document vector is hashed, by applying a suitable hash function to the components of the vector. The hash function maps the vector to a particular hash value, corresponding to a particular hyperbox in the multidimensional space to which the vectors belong. The vector, or a pointer to the vector, is then stored in a hash table in association with the vector's hash value. Subsequently, given a document of interest, documents similar to the document of interest may be found by hashing the vector of the document of interest, and then returning the vectors that are associated, in the hash table, with the resulting hash value.

    System and method for combined network-side and off-air monitoring of wireless networks

    公开(公告)号:US11432139B2

    公开(公告)日:2022-08-30

    申请号:US16703241

    申请日:2019-12-04

    发明人: Eithan Goldfarb

    摘要: A monitoring system monitors authentication sessions both on the air interface between the terminals and the network, and on at least one wired network-side interface between network-side elements of the network. The monitoring system constructs a database of sets of network-side authentication parameters using network-side monitoring. Each set of network-side authentication parameters originates from a respective authentication session and is associated with the International Mobile Station Identity (IMSI) of the terminal involved in the session. In order to start decrypting the traffic of a given terminal, the system obtains the off-air authentication parameters of that terminal using off-air monitoring, and finds an entry in the database that matches the air-interface authentication parameters. From the combination of correlated network-side and off-air authentication parameters, the processor is able to extract the parameters needed for decryption.

    System and method for maintaining a dynamic dictionary

    公开(公告)号:US11386135B2

    公开(公告)日:2022-07-12

    申请号:US16752955

    申请日:2020-01-27

    发明人: Yitshak Yishay

    摘要: An apparatus and techniques for constructing and utilizing a “dynamic dictionary” that is not a compiled dictionary, and therefore does not need to be recompiled in order to be updated. The dynamic dictionary includes respective data structures that represent (i) a management automaton that includes a plurality of management nodes, and (ii) a runtime automaton that is derived from the management automaton and includes a plurality of runtime nodes. The runtime automaton may be used to search input data, such as communication traffic over a network, for keywords of interest, while the management automaton manages the addition of keywords to the dynamic dictionary. Typically, at least two (e.g., exactly two) such dynamic dictionaries are used in combination with a static dictionary.

    SYSTEM AND METHOD FOR IDENTIFYING DEVICES BEHIND NETWORK ADDRESS TRANSLATORS

    公开(公告)号:US20220174008A1

    公开(公告)日:2022-06-02

    申请号:US17518879

    申请日:2021-11-04

    摘要: An apparatus for monitoring a plurality of devices that use a plurality of networks includes a network interface and a processor. The processor is configured to receive, via the network interface, a plurality of packets that were collectively communicated, from the devices, via all of the networks, to aggregate the packets, using at least one field that is included in respective packet headers of the packets, into a plurality of packet aggregations, such that all of the packets in each one of the packet aggregations were collectively communicated from no more than one of the devices, to group the packet aggregations into a plurality of groups, such that there is a one-to-one correspondence between the groups and the devices, in that all of the packets in each of the groups were collectively communicated from a different respective one of the devices, and to generate an output in response thereto.

    System and method for identifying pairs of related application users

    公开(公告)号:US11336609B2

    公开(公告)日:2022-05-17

    申请号:US17159544

    申请日:2021-01-27

    摘要: Systems and methods for passive monitoring of computer communication that does not require performing any decryption. A monitoring system receives the traffic exchanged with each relevant application server, and identifies, in the traffic, sequences of messages—or “n-grams”—that appear to belong to a communication session between a pair of users. Subsequently, based on the numbers and types of identified n-grams, the system identifies each pair of users that are likely to be related to one another via the application, in that these users used the application to communicate (actively and/or passively) with one another. The system may identify those sequences of messages that, by virtue of the sizes of the messages in the sequence, and/or other properties of the messages that are readily discernable, indicate a possible user-pair relationship.

    Diarization using linguistic labeling

    公开(公告)号:US11322154B2

    公开(公告)日:2022-05-03

    申请号:US16703099

    申请日:2019-12-04

    IPC分类号: G10L15/26 G10L17/00 G10L17/02

    摘要: Systems and methods of diarization using linguistic labeling include receiving a set of diarized textual transcripts. At least one heuristic is automatedly applied to the diarized textual transcripts to select transcripts likely to be associated with an identified group of speakers. The selected transcripts are analyzed to create at least one linguistic model. The linguistic model is applied to transcripted audio data to label a portion of the transcripted audio data as having been spoken by the identified group of speakers. Still further embodiments of diarization using linguistic labeling may serve to label agent speech and customer speech in a recorded and transcribed customer service interaction.