Analyzing Activity Data of an Information Management System

Abstract

In an information management system, activity data is collected and analyzed for patterns. The information management system may be policy based. Activity data may be organized as entries including information on user, application, machine, action, object or document, time, and location. When checking for patterns in the activity or historical data, techniques may include inferencing, frequency checking, location and distance checking, and relationship checking, and any combination of these. Analyzing the activity data may include comparing like types or categories of information for two or more entries.

The invention claimed is: 
     
         1 . A method of operating an information management system comprising:
 providing a plurality of devices coupled to a network of the information management system, wherein a plurality of users can log into the information management system using the devices;   collecting usage information on operations performed by users using the plurality of devices; and   analyzing the usage information to detect when a user has attempted to access a specific document of the information management system more than X times during a Y time period, where X divided by Y is a value Z.