US Patent No. 10,924,567

DETERMINING ACTIVE APPLICATION USAGE THROUGH A NETWORK TRAFFIC HUB


Patent No. 10,924,567
Issue Date February 16, 2021
Title Determining Active Application Usage Through A Network Traffic Hub
Inventorship Leonid Kuperman, Los Angeles, CA (US)
Attila Egri, El Segundo, CA (US)
Gabor Takacs, Gyor (HU)
Paulius Ulozas, El Segundo, CA (US)
Assignee Cujo LLC, El Segundo, CA (US)

Claim of US Patent No. 10,924,567

1. A method, comprising:receiving, by a cloud server, an augmented netflow representative of network traffic from a user device including a client application, the augmented netflow comprising a plurality of sampled packets selected from the network traffic, wherein the plurality of sampled packets are aggregated from a larger number of packets from the network traffic over an aggregation time period;
determining, by the cloud server, based at least in part on content of one or more of the sampled packets in the augmented netflow, that the augmented netflow is associated with the client application;
in response to determining that the augmented netflow is associated with the client application, classifying, by the cloud server, the augmented netflow as an active usage of the client application or a passive usage of the client application based on the sampled packets of the augmented netflow, wherein an active usage classification is deemed to constitute network traffic caused by user interactions with the client application and a passive usage classification is deemed to constitute network traffic not caused by user interactions with the client application;
in response to classifying the augmented netflow as an active usage of the client application, accessing, by the cloud server, a total amount of active usage of the client application within a previous time interval based on previously received augmented netflows representative of previous network traffic from the user device that were previously classified as active usage augmented netflows, the previously received augmented netflows comprising a plurality of packets aggregated from a larger number of packets from the previous network traffic received over a previous different aggregation time period; and
in response to the total amount of active usage of the client application within the previous time interval exceeding an active usage threshold, providing, by the cloud server, a network traffic management instruction to the user device to control subsequent traffic of the client application.