The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jun. 16, 2026
Filed:
Dec. 21, 2023
Microsoft Technology Licensing, Llc, Redmond, WA (US);
Moran Neuhof, Tel Aviv, IL;
Jiahao Lu, Singapore, SG;
Katie Renae Jones, Wolfeboro, NH (US);
Edan Zwick, Tel-Aviv, IL;
Bin Zhu, Beijing, CN;
Shay Kels, Givatayim, IL;
Hang Dong, Beijing, CN;
Microsoft Technology Licensing, LLC, Redmond, WA (US);
Abstract
In certain embodiments, a time series-based anomaly detection method is provided, which is able to identify anomalous user accounts highly effectively. An activity predictor is used to model normal behaviors of individual accounts and to assess an extent to which a current behavior associated with differs from its past normal behavior. Part of an activity sequence is inputted to the activity predictor, and a resulting activity prediction (the activity predictor's prediction of normal behavior) is compared with the remaining part of the sequence. In preferred embodiments, a multi-stage approach is used, with a more lightweight form of anomaly detection applied in a first stage, and the time-series based detection performed in a second stage only on a subset of activity sequences escalated from the first stage.