WO2008142682A2 - Methods, systems and computer code for finding outlier hyper cells in multidimentional hierachical data sets - Google Patents

Methods, systems and computer code for finding outlier hyper cells in multidimentional hierachical data sets Download PDF

Info

Publication number
WO2008142682A2
WO2008142682A2 PCT/IL2008/000684 IL2008000684W WO2008142682A2 WO 2008142682 A2 WO2008142682 A2 WO 2008142682A2 IL 2008000684 W IL2008000684 W IL 2008000684W WO 2008142682 A2 WO2008142682 A2 WO 2008142682A2
Authority
WO
WIPO (PCT)
Prior art keywords
hypercells
hypercell
outlier
categorized
cat
Prior art date
Application number
PCT/IL2008/000684
Other languages
French (fr)
Other versions
WO2008142682A3 (en
Inventor
Gad Solotorevsky
Original Assignee
Cvidya Networks Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Cvidya Networks Ltd filed Critical Cvidya Networks Ltd
Priority to US12/600,516 priority Critical patent/US8050989B2/en
Publication of WO2008142682A2 publication Critical patent/WO2008142682A2/en
Publication of WO2008142682A3 publication Critical patent/WO2008142682A3/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/10Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G06Q20/102Bill distribution or payments
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/28Databases characterised by their database models, e.g. relational or object models
    • G06F16/283Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce
    • G06Q30/04Billing or invoicing

Definitions

  • the present invention relates to methods and systems for finding outliners in Multidimensional Hierarchical Data Sets.
  • Outliers are rare or atypical data objects that do not comply with the general behavior or model of the data.
  • the statistics community has studied outlier detection extensively.
  • a typical method for finding outliers includes building a clustering model of the data, and tagging all the data elements which do not belong to any cluster as outliers.
  • Another typical technique is to fit a distribution function to the data, and tagging all those data points whose distance of the mean of the distribution function is more than a predefined number multiplied by the standard deviation as outliers.
  • a Multidimensional Hierarchical Dataset can be represented as an OLAP Cube (aka cube, aka hypercube).
  • Typical outlier search techniques will seek low level cells of the cube (i.e which correspond to the original elements of the dataset) as outliers.
  • the present invention relates to methods and systems for finding outliners in Multidimensional Hierarchical Data Sets.
  • a method and system for identifying outlier hyper-cells in an N- dimensional hierarchical datset having dimensions ⁇ X I ,...X ⁇ ⁇ are provided.
  • the method is applied recursively where (i) in accordance with outlier "scores," hypercells of a hypcell set P CIVEN are categorized S021 as "likely-outlier" or
  • hypercells are indicative of discrepancies between measurements provided by two different metering systems.
  • the presently disclosed techniques are useful for locating multiple "large" hypercells that are outliers, without a need to exhaustively search subcells of the identified "larger" outlier hypercells.
  • the outlier hypercells Once the outlier hypercells are identified, one or more actions may be taken.
  • a description of the identified outlier hypercells is output to a user, for example, via a display screen or as a printed report.
  • the outlier hypercells describe situations in which a subscriber was underbilled or overbilled.
  • the subscriber may be billed (i.e. if s/he was previously underbilled) or provided with a refund (i.e. if s/he was previously overbilled) in accordance with the identities of the outlier hypercells.
  • one or both of the metering systems may be "fixed” or “adjusted” (for example, by adjusting an operating parameter) in an attempt to correct, in the future, the cause of the "discrepancy" that caused the outlier hyerpcell.
  • the method comprisises: a) given a plurality P CIVEN of hypercells ⁇ hi,...ft M ⁇ for the N dimensions, each said hypercell ⁇ , e P GIVEN having a respective participating-dimension set A c ⁇ xi,...x ⁇ ⁇ , for said each hypercell /z, of said given plurality P CIVEN , categorizing, in accordance with a respective outlier score of said each hypercell h,, said each hypercell A, as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P 1 CAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P' ' ' CAT of said hyper
  • hypercells of P GlVEN are dimensionally inhomogenous.
  • hypercells of P CIVEN are dimensionally homogenous.
  • a majority of hypercells of P C1VEN are primitive hypercells where every dimension participates.
  • P CIVEN includes primitive hypercells from a majority of dimensions of the N dimensions of the dimensions ⁇ X I ,...X ⁇ .
  • P GIVEN includes a majority of possible primitive hypercells.
  • P CIVEN is a majority spanning plurality of hypercells.
  • the one-level extension of step (c) is dimensionally homogeneous.
  • the one-level extension of step (c) is dimensionally inhomogeneous.
  • P X G1VEN includes, for at least one hypercell of P CAT , a majority of possible one-dimensional extensions which are not previously considered hypercells and not subcells of a previously categorized likely-outlier hypercell.
  • the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b) providing a representation the ownedd outlier hypercells to a user.
  • the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), billing or crediting a subscriber.
  • the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), adjusting an operating parameter of at least one of the two metering systems.
  • both metering systems measures at least one of water consumption, oil consumption, gas consumption, electricity consumption and telecommunications services consumption.
  • a system for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions ⁇ X I ,...X ⁇ ⁇ comprising: a) a data storage 310 for storing a representation of a plurality P GIVEN of hypercells ⁇ A/,...A w ⁇ for the N dimensions, each said hypercell A, ; e P GIVEN having a respective participating-dimension set D 1 a ⁇ X I ,...X ⁇ ⁇ , for said each hypercell A, of said given plurality P GlVEN ', b) a hypercell categorizer 330 for categorizing S201, in accordance with a respective outlier score of said each hypercell A,, said each hypercell A/ as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P 1 CAT of said hypercells is categorized as likely-out
  • the hypercells are descriptive of discrepancies between two metering systems
  • the system further comprises: g) a user output module 190 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to provide a representation the owned by the user.
  • the hypercells are descriptive of discrepancies between two metering systems
  • the system further comprises: g) a billing adjuster 170 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to bill or credit a subscriber.
  • the hypercells are descriptive of discrepancies between two metering systems
  • the system further comprises: g) a meter adjuster 180 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to adjust an operating parameter of at least one of the metering systems.
  • FIG. 1 provides a flow chart of an exemplary routine for identifying outlier hypercells.
  • FIG. 2 provides a block diagram of an exemplary system in which the routine of FIG. 1 may be carried out.
  • FIG. 3 provides a block diagram of an exemplary outlier locator 150 in accordance with some embodiments of the present invention.
  • Exemplary multi dimensional hierarchical data sets include but are not limited to traffic volumes in a telecommunication network, Call Detailed Records (CDRs) in a mediation system, or CDRs in a billing system.
  • CDRs Call Detailed Records
  • the aforementioned use case/application relates to just one example of a "metering system” - i.e. outliers or discrepancies between data generated by two metering systems measuring the same "metered commodity" are detected.
  • Other metered commodities include but are not limited to energy/power consumption, computer resource consumption, and water consumption.
  • the presently disclosed method includes analyzing a multi dimensional data set for outliners (aka anomalies).
  • outliners aka anomalies
  • the Multidimensional Hierarchical Datasets as if it is represented by an OLAP cube (aka cube, aka hypercube), and we will use the common OLAP nomenclature.
  • the method and invention apply to Multidimensional Hierarchical Datasets none regarding their representation, and moreover it is always possible to represent a multidimensional hierarchical dataset as an OLAP cube.
  • the OLAP cube is compounded from two types of values Dimensions, and Measurements, for the sake of simplicity we will assume that it includes a single measurement
  • Multidimensional Dataset is a special case of an Multidimensional Hierarchical Dataset, therefore the disclosure invention applies also to Multidimensional Hierarchical Dataset.
  • a hyper-cell is a slice of a cube in which 1) At least one of the dimensions of the cube participates, 2) for each dimension that participates at exactly one value is selected.
  • a hyper-cell can be represented as a set of pairs, in which each pair includes a dimension name, and one of the dimension possible values.
  • the degree of a hyper-cell is the number of dimensions that participate in it
  • a cell is a slice of a cube for which 1) All the dimensions of the cube participate, 2) for each dimension that participates, exactly one value is selected
  • a cell also referred to as a 'primitive hypercelP or 'lowest level hypercelF is a special case of a hyper-cell.
  • the set of possible values is ⁇ Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday ⁇ .
  • the set of possible values is ⁇ Between 0:00 and 1:00, Between 1:00 and 2:00, Between 2:00 and 3:00, Between 3:00 and 4:00, ... Between 21:00 and 22:00, Between 22:00 and 23:00, Between 23:00 and 24:00 ⁇ .
  • a dimensions values pair is an ordered pair of a dimension and a value of that dimension.
  • the possible dimensions are (i) days of the week; (ii) hours of the day; (iii) area code; (iv) days of the months.
  • one "dimensions value pair” is the pair ⁇ Day of Week,Monday ⁇ .
  • Another "dimensions value pair” is the pair ⁇ Area Code,609 ⁇ .
  • Another "dimensions value pair” is the pair ⁇ Hour of the Day, between 4 PM and 5 PM ⁇ .
  • Another “dimensions value pair” is the pair ⁇ Day of the Month, 3 r day of the month ⁇ .
  • a hyper-cell a is contained in a hyper-cell b, if and only if all the dimensions values pairs that appear in b also appear in a, and there is in a at least one additional dimension value pair that does not appear in b.
  • a is also referred to as a "sub-cell" of b.
  • the hyper-cell b is as follows: [ ⁇ Days of the Week, Monday ⁇ , ⁇ Hours of the Day,Between 3 PM and 4 PM ⁇ ].
  • the hyper-cell a is as follows: [ ⁇ Days of the Week, Monday ⁇ , ⁇ Hours of the Day,Between 3 PM and 4 PM ⁇ , ⁇ Area Code,201 ⁇ ].
  • hyper-cell a is a subcell (or is "contained in") hyper-cell b.
  • hypercell c Another example of a sub-cell of hyper-cell b is hypercell c defined as [ ⁇ Days of the Week, Monday ⁇ , ⁇ Hours of the Day,Between 3 PM and 4 PM ⁇ , ⁇ Area Code,201 ⁇ , ⁇ Days Of the Month,Third Day of the Month ⁇ ].
  • a hyper-cell b is a one level extension of a hyper-cell a, if a is contained in b, and in b there is exactly one dimension value pair that does not appear in a.
  • hypercell "a” is a "one level extension" of hypercell "b”
  • hypercell "c” is a one level extension of hypercell "a.”
  • the value of a cell of a cube is its measure value; the value of a hyper-cell is the result of a certain central tendency function (for example, an average) or a measure of dispersion (for example, a variance) or a sum or a minimum or maximum function on the values of all the cells contained in it.
  • a certain central tendency function for example, an average
  • a measure of dispersion for example, a variance
  • a sum or a minimum or maximum function on the values of all the cells contained in it.
  • Whether or not a hypercell is an "outlier" is determined by deviation of a score of the hypercell from some central tendency over a population/? over multiple hypercells.
  • a value x of the measurement will be considered to be an outliner if it
  • the 'score' of a hypercell is an indication of a deviation between the hypercelFs value and values of hypercells of a given population of hypercells p (for example, a 'large' population of millions or billions or more hypercells).
  • One example of a score of a hyper-cell given a statistical distribution D with mean ⁇ and Standard deviation ⁇ , is
  • the first metering system is a "switch metering system” which provides a first metric of call traffic (i.e. by measuring traffic at the switch(es)) and the second metering system is a billing system which provides a second metric of call traffic (i.e. since billing is depends on the call traffic).
  • the causes for the differences may be various, e.g., different call rounding and duration calculation methods, rightfully dropped information (test calls dropped by the mediation, 0 duration calls dropped by the billing), or dropped due to mal-function, e.g., an overloaded Switch may stop producing CDRs (call detail records) to reduce its overload.
  • CDRs call detail records
  • discrepancies will vary as a function of different parameters — i.e. there may be increased (or decreased) discrepancies on certain days of the week and/or at certain hours of the day and/or in traffic between certain area codes and/or on certain days of the month (for example, beginning of the month or middle of the month or end of the month).
  • the elevated discrepancies at certain times and/or certain area codes can be due to any number of reasons, and it is desired to determine the specific times and/or area codes in order to "zero in” on a source of a problem.
  • the call traffic data as determined by each metering system (and the difference in call traffic as determined by the two metering systems) is presented as a "multi-dimensional hierarchical dataset" where the "dimensions" are the
  • input parameters - i.e. day of week, day of month, source area code, destination area code, etc.
  • the search for sets of value(s) of the parameters can be implemented as a search for a subcubes.
  • the five dimensions are: (i) day of week (whose value is selected from ⁇ Sun,Mon,Tue,Wed,Thu,Fri ⁇ ), (ii) hour of day (whose value is selected from ⁇ [0:00-
  • the "dimensions" will be labeled xi , X 2 , X3, x/, x,- .
  • the xj or "day of the week” dimension can adopt one of seven values - Jt 1 1 (Sun), xf (Mon), .. x] (Sat);
  • the X 2 OT "hour of the day” dimension can adopt one of twenty four values - x[ [0:00-0:59], [1:00-1 :59], ..
  • a sub-cube (not necessarily a lowest level cell of the hypercell with all 5 dimensions participating) where there is excessive discrepancy between the network traffic as reported by the switching metering system and the network traffic as reported by the billing metering system - i.e. to determine which combinations of the days of week, hours of day, days of month, origin area code, destination area codes, etc. are associated with "outlier” or "excessive" deviations in measurements of total traffic between the two metric systems (i.e. the switching metric and the billing metric).
  • a potential "outlier” would be the hypercell ⁇ null, ⁇ 2 ,null,null,null ⁇ with a single participating 'non-null value' dimension (i.e. having a measure of 1) - this would indicate excessive differences in measured total call traffic volume (i.e. "outlier status") between the two metering systems (i.e. switching and billing) between [0:00-0:59] irrespective of other variables (i.e. irrespective of day of the week, day of the month, origin and destination area code).
  • null, null, null ⁇ , ⁇ x, 3 null, null, null, null ⁇ , ⁇ x, 4 , null, null, null, null ⁇ , ⁇ x, 5 , null, null, null, null ⁇ , ⁇ xf , null, null, null ⁇ , ⁇ xj, null, null, null, null ⁇ (i.e. all Sunday calls, all Monday calls, all Tuesday calls, all Wednesday calls, all Thursday calls, all Friday calls).
  • M 7.
  • the discrepancy between the reported traffic is greatest, in the present example, on Tuesdays and Wednesdays.
  • the score of each given hypercell h f e P GIVEN is analyzed to determine if the "given hypercell" is an outlier (i.e. by analyzing the magnitude of the score). If the score exceeds some numerical threshold (for example, 0.04), the given hypercell h t e P GIVEN is identified as an "outlier hypercell.”
  • some numerical threshold for example, 0.04
  • the metered traffic according to the two systems differs by a given threshold), there is no need to further investigate other parameters for the given day - the day "as a whole" is identifier as an outlier hypercell/tuple and there is no need to analyze sub-cubes of the identified "given" hypercell (i.e. no need to analyze the score of sub-cubes of the "identified outlier hypercell” that include additional participating dimensions - i.e. hour of the day, area code, etc).
  • Example 3 Handling Rejected Hypercells/Tuples of Example 2 By Constructing and Analyzing "1 -Level Extensions" of the Rejected Hyppercells/Tuples According to the first and second possibilities, one or more cells of P CIVEN are not classified as outliers - i.e. are "rejected" as outliers (according to our example where the threshold is 0.04, hi ft 2 , hs , ⁇ ⁇ j and h ⁇ would be "rejected.”
  • the rejected hypercells are further "extended.”
  • the participating dimension set of the hypercell with the given values i.e. in the example of the "Thursday” hypercell, the participating dimension set is "day of the week” or x / ) is not sufficient to identify the hypercell as an outlier.
  • Jt 1 5 ,null,null,null,null ⁇ may be "extended” to include an additional dimension (i.e. in this case, the "source area code” dimension).
  • the "rejected" hypercell may be "extended” to include an additional dimension (i.e. in this case, the "source area code” dimension).
  • ⁇ ⁇ :, 5 ,null,null,null,null ⁇ may be extended to generate the sub-hypercell ⁇ * 5 ,null,null, jcf 5 , null ⁇ .
  • FIG. 1 provides a flow chart of an exemplary technique for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions ⁇ X I ,...X ⁇ ⁇ according to some embodiments of the present invention.
  • the value of N is at least 5, or at least 10, or at least 15.
  • step S201 a plurality P GIyEN of hypercells ⁇ hi,... h M ⁇ , is provided and analyzed where Mis an integer greater than 1 (in many examples, greater than 10, or greater than 100).
  • the plurality of hypercells P crvEN is dimensionally homogenous - i.e. each hypercell h, (where i is an integer greater than or equal to 1, less than or equal to M) has the same set of participating dimensions.
  • the "starting set" of example 2 is one example where P G1VEN is dimensionally homogenous.
  • P GWEN is not dimensionally homogenous - i.e. dimensionally inhomogenous — i.e. there exist two distinct integers ij where both of i andy are greater than or equal to 1, less than or equal to M) where the set of participating dimensions for h, is different from the set of participating dimensions for h 3 .
  • P C1VEN is a "majority spanning" set of hypercells - i.e. P C i VEN is such that a majority of possible dimensions (i.e. at least N/2 dimensions)"participate" in P G/VEN , where P GIVEN includes at least int cells (where int is an integer that is equal to or greater than N/2) such that each cell of the at least int cells includes a different respective participating dimension.
  • P GIVEN includes a majority of possible primitive hypercells.
  • N 2 and the first dimension is a boolean dimension and the second dimension is the days of the week
  • the possible primitive hypercells are as follows: [ ⁇ Boolean,True ⁇ ], [ ⁇ Boolean,False ⁇ ], [ ⁇ Day of Week, Sunday ⁇ ], [ ⁇ Day of Week, Monday ⁇ ], [ ⁇ Day of Week, Tuesday ⁇ ], [ ⁇ Day of Week, Wednesday ⁇ ], [ ⁇ Day of Week, Thursday ⁇ ], [ ⁇ Day of Week, Friday ⁇ ].
  • P G/VEN includes primitive hypercells from a majority of possible dimensions.
  • P G1VEN may include both majority of possible primitive hypercells and primitive hypercells from a majority of possible dimensions.
  • step S201 the values of each hypercell are analyzed and compared.
  • the hypercells with the highest "outlier” score are designated/reported/accepted as hypercells.
  • Those cells P 1 CAT C P GIVEN which are designated as hypercells are designated as hypercells (in example 2 this would be hi and hj), are designated as "likely-outliers," while the other cells P 2 CAT in P GlVEN (i.e. P 2 CAT is the complement of
  • P 1 CAT inP C ⁇ VEN are designated as "less likely outliers" and are not identified as outliers at this stage.
  • step S201 all hypercells whose outlier score exceeds a given threshold may be selected. Alternatively or additionally, other criteria for determining what is and is not a "likely outlier" may be established. In one example, some fraction (for example, the "best 15%" of hypercells of P GIVEN ) may be categorized as outliers. The skilled artisan will appreciate that different variations are possible in step S201.
  • step S209 the cells of P 2 CAT handled.
  • the cells of P 2 CAT are divided into two subsets: (i) those "more likely to be outliers" among those previously rejected in step S205 (i.e. P SUB a P 2 CAT ) (these are informally known as the "winners of the losers”); and (ii) all other cells in P 2 CAT (these are informally known as the "losers of the losers").
  • the subset P SUB does not include any "lowest- level hypercells" when every dimension participates.
  • step S213 a set of 1-level extensions P 1 EXr is formed from P SUB where cells of P SUB are extended at least once to form a different respective at least 1-level extension.
  • step S225 it is decided for which hypercells is to desired to recurse.
  • This set of hypercells P' CIVEN for recursing includes at least some hypercells of P 1 EXr (i.e. formed in step S213) and optionally one or more additional hypoercells (for example, hypercells which were earlier considered "losers of losers" P 2 CAT ).
  • step S225 it is noted that set P' G[VEN is formed (i.e. the 'decision process' for which hypercells to include in P' GIVEN is carried out such that) such that there is at least one one-level extension of a member cell me me e P 2 CAT that is included in P' GIVEN only if: i) he is not a previously considered hypercell (i.e a hypercell which has not analyzed in step S201); and ii) he is not a subcell of a previously categorized likely-outlier hypercell (i.e. categorized/or reported in step S201).
  • This condition may reduce the number of hyercells that need to be analyzed.
  • P' GIVEN is empty S245 (or alternatively, according to another other stop condition - for example, number of iterations, amount of time the routine executes, number of outliers located or any other stop condition familiar to the skilled artisan), the routine stops in step S249.
  • P GIVEN is set to P' GIVEN and the routine continues with the new value of P GIVEN affording an opportunity to identify and/or locate and/or report even more outlier hypercells.
  • step S213 not every possible 1 -level extension is always formed.
  • no 1-level extension is formed (and/or no 1-level extension is subsequently analyzed) that is (i) the same as a previously analyzed cell (for example, if the hypercell of phone calls that are Monday between 4 PM and 5PM was already analyzed, we will not form and/or analyze the 1-level extension of ⁇ Monday ⁇ to ⁇ Monday, 4PM to 5PM ⁇ and we will not form and/or analyze the 1-level extension of ⁇ 4 PM to 5PM ⁇ to ⁇ 4 PM to 5 PM , Monday ⁇ ).
  • no 1-level extension is formed and/or analyzed (or alternatively, included in P' CIVEN in step S225) that is a sub-cell of a cell which was already reported/accepted as an "outlier" in step S205.
  • step S205 the hypercell ⁇ Thursday ⁇ is accepted, we will not form a 1-level extension of the hypercell ⁇ 10 AM to 11 AM ⁇ to form the 1-level extension ⁇ 10 AM to 11 AM, Thursday ⁇ because the hypercell ⁇ 10 AM to 11 AM, Thursday ⁇ is a subcell of the hypercell ⁇ Thursday ⁇ which was already accepted as an "outlier hypercell.”
  • the logic behind this constraint is that if "Thursday" as a whole is already a known hypercell, there is no need to investigate "sub-sets" of this hypercell. It is noted that these constraints of step S213 allow, in many situations, the technique described in FIG. 1 to analyze a very small subset of the total set of possible hypercells while still finding the most problematic hypercell.
  • the total number of dimensions is greater than 10, on average each dimension has a total number of 1,000 possible values, and between 1% and 5% of all hypercells are outliers.
  • the number of possible hypercells is more than a billion, yet a very small fraction of hypercells need to be analyzed in step S201
  • P SUB is determined from P 2 CAT in accordance with the absolute and/or relative "outlier" scores of hypercells of P SUB .
  • P GIVEN is handled as follows: i) those hypercells of P CIVEN whose "outlier score" exceeds a first threshold thresh ⁇ (i.e. a positive number associated with the greater discrepancy between the network traffic as reported by the "switch metering system” and the “billing metering system” - the greater the outlier score the greater the discrepancy between the two metering systems for the hypercell) are identified/reported as
  • P 1 CAT a P GIVEN The complement of P 1 CAT a P GIVEN is P 2 CAT CZ P GIVEN - hypercells whose "outlier score" does not exceed thresh ⁇ .
  • the importance of detecting sub cubes that are outliners, instead of mere low level cells that are outliners, is that by detecting the relevant sub cube we gain an insight of the communalities of the outliners, permitting faster identification and solution of underline problems that caused the outliners, resulting in many cases in substantial economical benefits, this is exemplified in more details in one of the preferred embodiments.
  • Example 6B Problems like incorrectly processed or dropped usage information like call records (e.g., CDRs) between two systems (e.g., output switch and vs. input to billing system, or output of switch vs.
  • the routine of FIG. 1 may detect a sub hyper cube in which the behavior is irregular, e.g. calls on Monday that started in [23:00 -23:59], from area code 03 to area code 04. By passing this information to the revenue assurance system the revenue assurance system can load and test only information related to the relevant calls, detailed comparing the calls in the sub hyper cube, and finding the specific dropped calls and calls whose duration is incorrect, making the process very efficient and requiring resources that justify its economical benefit.
  • FIG. 2 provides a block diagram of an exemplary system in which the routine of
  • FIG. 1 may be carried out.
  • the system includes data feed 130 (which provides data about metering system A 110 and metering system B 120), comparator 140 (for example, for determining discrepancies between measured values of each metering system under different conditions - i.e. time of day, area code, etc. thereby determining values or scores of different hypercells), and outlier locator 150 for locating and/or identifying hypercells.
  • the output of outlier locator 150 i.e.
  • a description or indication of the outlier hypercells may be fed to output module 190 (for example, a display screen or a printer for reporting hypercells - for example, see step S205), and/or billing system 160 (for example, for refunding a previously overbilled subscriber and/or charging a previously underbilled subscriber) and/or meter adjuster 180 (which may adjust operating parameter(s) of metering system A 110 and/or metering system B 120 in order to attempt to reduce future discrepancies).
  • output module 190 for example, a display screen or a printer for reporting hypercells - for example, see step S205
  • billing system 160 for example, for refunding a previously overbilled subscriber and/or charging a previously underbilled subscriber
  • meter adjuster 180 which may adjust operating parameter(s) of metering system A 110 and/or metering system B 120 in order to attempt to reduce future discrepancies.
  • FIG. 2 Any component in FIG. 2 may be implemented in any appropriate combination of hardware and/or software (for example, which may be executed by a processor).
  • the system (or any component thereof) of FIG. 2 may be deployed in any manner, either locally in a single location or in a 'distributed' manner at different locations.
  • FIG. 3 provides a block diagram of an exemplary outlier locator 150 in accordance with some embodiments of the present invention.
  • the system of FIG. 3 includes: a) a data storage 310 (for example, including volatile storage such as RAM and/or non- volatile storage such as flash or disk or any other volatile and/or non-volatile storage) for storing a representation of a plurality P GIVEN of hypercells ⁇ h h ...h M ⁇ for the N dimensions, each said hypercell A 1 .
  • e P CIVEN having a respective participating-dimension set D 1 c ⁇ x b ...x N ⁇ , for said each hypercell A, of said given plurality P C1VEN ;
  • a hypercell categorizer 330 for categorizing
  • each hypercell A in accordance with a respective outlier score of said each hypercell A, said each hypercell A / as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P 1 CAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P CAT of said hypercells is categorized as less-likely-outliers; c) a hypercell selector 350 operative to select S209 a sub-plurality P sm a P 1 CAT of hypercells ⁇ £ / ,...k L ⁇ from said second categorized plurality P 1 CAT of less-likely-outliers in accordance with said outlier scores of hypercells said sub-plurality P sm a P 2 CAT of hypercells; d) a hypercell extendor 370 operative to form S213 from said sub-plurality P S
  • S225 a set P' G1VEN which includes at least some hypercells of P ⁇ ⁇ x ⁇ such that there is at least one one-level-extension hypercell he, which is a one-level extension of a member cell me me G P 2 c4rthat is included in P' GIVEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and f) a recursion manager 430 operative to: A) pass the representation of P GlVEN to the hypercell categorizer 330 and receive a representation of P 1 CAT from the hypercell categorizer 330; B) pass the received representation of to the hypercell 350 selector and receive a representation of P SUB from the hypercell selector 350; C) pass the received representation of P SUB to the hypercell extender
  • FIG. 3 may be implemented in any appropriate combination of hardware and/or software (for example, which may be executed by a processor).
  • the system (or any component thereof) of FIG. 3 may be deployed in any manner, either locally in a single location or in a 'distributed' manner at different locations.

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Theoretical Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Development Economics (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Data Mining & Analysis (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

A method and system for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions {x1,…xN} are provided. In some embodiments, the method is applied recursively where (i) in accordance with outlier 'scores,' hypercells of a hypcell set PGIVEN are categorized S201 as 'likely-outlier' or 'winners' while other hypercells are (at least initially) rejected as a set of 'losers'; (ii) scores of hypercells of a subset of the initially rejected 'losers' are analyzed, and in accordance with these scores a subset of 'winners of losers' are selected S209; (iii) one-level extensions S213 of at least some hypercells of these 'winners of losers' are formed; (iv) a recussion set S226 is formed where at least one 'extension' hypercell hc is included in the recusion set only if the hypercell is not a previously considered hypercell and/or a subcell of a previously categorized (and/or reported) as 'outlier' hypercell; (v) the aforementioned steps are repeated after setting PGIVEN to the recursion set. In some embodiments, the hypercells are indicative of discrepancies between measurements provided by two different metering systems.

Description

METHODS, SYSTEMS AND COMPUTER CODE FOR FINDING OUTLIER HYPER CELLS IN MULTIDIMENTIONAL fflERACHICAL DATA SETS
FIELD OF THE INVENTION
The present invention relates to methods and systems for finding outliners in Multidimensional Hierarchical Data Sets.
BACKGROUND AND RELATED ART Outliers (aka anomalies) are rare or atypical data objects that do not comply with the general behavior or model of the data. The statistics community has studied outlier detection extensively. A typical method for finding outliers includes building a clustering model of the data, and tagging all the data elements which do not belong to any cluster as outliers. Another typical technique is to fit a distribution function to the data, and tagging all those data points whose distance of the mean of the distribution function is more than a predefined number multiplied by the standard deviation as outliers. A Multidimensional Hierarchical Dataset can be represented as an OLAP Cube (aka cube, aka hypercube). Typical outlier search techniques will seek low level cells of the cube (i.e which correspond to the original elements of the dataset) as outliers.
SUMMARY OF EMBODIMENTS
The present invention relates to methods and systems for finding outliners in Multidimensional Hierarchical Data Sets.
In particular, a method and system for identifying outlier hyper-cells in an N- dimensional hierarchical datset having dimensions {XI,...XΝ} are provided. In some embodiments, the method is applied recursively where (i) in accordance with outlier "scores," hypercells of a hypcell set PCIVEN are categorized S021 as "likely-outlier" or
"winners" while other hypercells are (at least initially) rejected as a set of "losers" ; (ii) scores of hypercells of a subset of the initially rejected "losers" are analyzed , and in accordance with these scores a subset of "winners of losers" are selected S209; (iii) one- level extensions S213 of at least some hypercells of these "winners of losers" are formed; (iv) a recussion set S226 is formed where at least one "extension" hypercell he is included in the recusion set only if the hypercell is not a previously considered hypercell and/or a subcell of a previously categorized (and/or reported) as 'outlier' hypercell; (v) the aforementioned steps are repeated after setting PCIVEN to the recursion set. In some embodiments, the hypercells are indicative of discrepancies between measurements provided by two different metering systems.
In different embodiments, the presently disclosed techniques are useful for locating multiple "large" hypercells that are outliers, without a need to exhaustively search subcells of the identified "larger" outlier hypercells. Once the outlier hypercells are identified, one or more actions may be taken. In one non-limiting example, a description of the identified outlier hypercells is output to a user, for example, via a display screen or as a printed report.
Alternatively or additionally, in some examples, the outlier hypercells describe situations in which a subscriber was underbilled or overbilled. Thus, in some embodiments, the subscriber may be billed (i.e. if s/he was previously underbilled) or provided with a refund (i.e. if s/he was previously overbilled) in accordance with the identities of the outlier hypercells.
Alternatively or additionally, one or both of the metering systems may be "fixed" or "adjusted" (for example, by adjusting an operating parameter) in an attempt to correct, in the future, the cause of the "discrepancy" that caused the outlier hyerpcell.
It is now disclosed for the first time a method of identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions {XI,...XΝ} . The method comprisises: a) given a plurality PCIVEN of hypercells {hi,...ftM} for the N dimensions, each said hypercell Λ, e PGIVEN having a respective participating-dimension set A c {xi,...xΝ}, for said each hypercell /z, of said given plurality PCIVEN, categorizing, in accordance with a respective outlier score of said each hypercell h,, said each hypercell A, as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P1CAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P' ''CAT of said hypercells is categorized as less-likely- outliers; b) selecting a sub-plurality PSUB CZ P2CAΓ of hypercells {£/,...£/,} from said second categorized plurality P2 CAT of less-likely-outliers in accordance with said outlier scores of hypercells said sub-plurality PSUB a P2 CAT of hypercells; c) from said sub- plurality Psm of hypercells, forming a one- level-extension hypercell set of P1EXT including, for each hypercell kj of PSUB, a respective at least one one-level extension of said each hypercell kj of PSUB ; d) defining a set P'GIVEN which includes at least some hypercells of P1EXr such that there is at least one one-level-extension hypercell he, which is a one-level extension of a member cell me me e P2 CAT that is included in P'GIVEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and e) assigning PGlVEN = P'GIVEN and repeating steps (a)-(d).
In some embodiments, hypercells of PGlVEN are dimensionally inhomogenous.
In some embodiments, hypercells of PCIVEN are dimensionally homogenous. In some embodiments, a majority of hypercells of PC1VEN are primitive hypercells where every dimension participates. In some embodiments, PCIVEN includes primitive hypercells from a majority of dimensions of the N dimensions of the dimensions {XI,...XΝ} .
In some embodiments, PGIVEN includes a majority of possible primitive hypercells.
In some embodiments, PCIVEN is a majority spanning plurality of hypercells.
In some embodiments, the one-level extension of step (c) is dimensionally homogeneous.
In some embodiments, the one-level extension of step (c) is dimensionally inhomogeneous.
In some embodiments, PX G1VEN includes, for at least one hypercell of P CAT , a majority of possible one-dimensional extensions which are not previously considered hypercells and not subcells of a previously categorized likely-outlier hypercell.
In some embodiments, i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b) providing a representation the categoried outlier hypercells to a user.
In some embodiments, i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), billing or crediting a subscriber.
In some embodiments, i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), adjusting an operating parameter of at least one of the two metering systems.
In some embodiments, both metering systems measures at least one of water consumption, oil consumption, gas consumption, electricity consumption and telecommunications services consumption.
It is now disclosed for the first time a system for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions {XI,...XΝ}, the system comprising: a) a data storage 310 for storing a representation of a plurality PGIVEN of hypercells{A/,...Aw} for the N dimensions, each said hypercell A, ; e PGIVEN having a respective participating-dimension set D1 a {XI,...XΝ}, for said each hypercell A, of said given plurality PGlVEN ', b) a hypercell categorizer 330 for categorizing S201, in accordance with a respective outlier score of said each hypercell A,, said each hypercell A/ as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P1 CAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P7 'CAT of said hypercells is categorized as less-likely- outliers; c) a hypercell selector 350 operative to select S209 a sub-plurality PSUB (^ P2CAT of hypercells {£y,...fø,} from said second categorized plurality P2 CAT of less-likely-outliers in accordance with said outlier scores of hypercells said sub- plurality PSUB c P2CAT of hypercells; d) a hypercell extender 370 operative to form S213 from said sub-plurality Psw of hypercells, a one-level-extension hypercell set of P1EXr including, for each hypercell kj of PSUB, a respective at least one one-level extension of said each hypercell kj of PSUB ; e) a recursion set selector 410 operative to define S225 a set P'CIVEN which includes at least some hypercells of P1EXT such that there is at least one one-level-extension hypercell he, which is a one-level extension of a member cell me me e P2 CAT that is included in P'CIVEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and f) a recursion manager 430 operative to: A) pass the representation of PGIVEN to the hypercell categorizer 330 and receive a representation of P2CAT from the hypercell categorizer 330; B) pass the received representation of P2 CAT to the hypercell 350 selector and receive a representation of PSUB from the hypercell selector 350; C) pass the received representation of PSUB to the hypercell extender 360 and receive a representation of P'EYΓ from the hypercell extender 360; D) pass the representation of Pιεxτ to the recursion set selector 350 and to receive a representation of P'CIVEN from the recursion set selector 350; E) set PGIVEN = P' GIVEN m tne memory and repeat steps (A)-(D).
In some embodiments, the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a user output module 190 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to provide a representation the categoried outlier hypercells to a user..
In some embodiments, the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a billing adjuster 170 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to bill or credit a subscriber.
In some embodiments, the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a meter adjuster 180 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to adjust an operating parameter of at least one of the metering systems.
It is noted that features described above as pertaining to certain embodiments may also be included in other embodiments, unless indicated to the contrary hereinbelow. BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 provides a flow chart of an exemplary routine for identifying outlier hypercells.
FIG. 2 provides a block diagram of an exemplary system in which the routine of FIG. 1 may be carried out.
FIG. 3 provides a block diagram of an exemplary outlier locator 150 in accordance with some embodiments of the present invention.
DETAILED DESCRIPTION OF EMBODIMENTS
The present invention will now be described in terms of specific, example embodiments. It is to be understood that the invention is not limited to the example embodiments disclosed. It should also be understood that not every feature of the presently disclosed apparatus, device and computer-readable code for finding outliners in Multidimensional Hierarchical Data Sets is necessary to implement the invention as claimed in any particular one of the appended claims. Various elements and features of devices are described to fully enable the invention. It should also be understood that throughout this disclosure, where a process or method is shown or described, the steps of the method may be performed in any order or simultaneously, unless it is clear from the context that one step depends on another being performed first.
Exemplary multi dimensional hierarchical data sets include but are not limited to traffic volumes in a telecommunication network, Call Detailed Records (CDRs) in a mediation system, or CDRs in a billing system.
In accordance with some embodiments of the present invention, methods are disclosed. It is noted that unless specified otherwise, these methods, systems and computer readable code can be implemented as software, hardware, or a combination thereof. Exemplary Use Case/Application In one non-limiting use case, the presently-disclosed technique for finding outliners in Multidimensional Hierarchical Data Sets is useful for detecting data inconsistencies which lead to Revenue leakage in a Communication service provider. A typical situation in a communications service provider environment is that the information about calls is generated by the switches, latter is processed by a mediation system, and latter by the billing systems, moreover equivalent calls information is generated by the signaling system (e.g., SS7). All these points Switch, Signaling System, Mediation, and Billing, have similar information; yet not exactly the same information. The causes for the differences may be various, e.g., different call rounding and duration calculation methods, rightfully dropped information (test calls dropped by the mediation, 0 duration calls dropped by the billing), or dropped due to mal-function, e.g., an overloaded Switch may stop producing CDRs to reduce its overload. Having discrepancies between the systems information, is not yet an alarming sign, having "unusual" levels of discrepancies, is an alarming sign that should be investigated and solved. Unusual levels of discrepancies, also traduce themselves to Revenue leakages (the Communication service provider do no charge for all the relevant calls). By identifying these outliners, finding the cause, and solving it, communication server providers can increase their revenues significantly. The speed in which this process takes place also has a great economical impact.
Brief Non-Limiting Discussion of Other Applications/Use Cases
The aforementioned use case/application relates to just one example of a "metering system" - i.e. outliers or discrepancies between data generated by two metering systems measuring the same "metered commodity" are detected. Other metered commodities include but are not limited to energy/power consumption, computer resource consumption, and water consumption.
Multidimensional Hierarchical Datasets and A Discussion of OLAP Nomenclature
It is now disclosed for the first time a method for finding outliner hyper cells in Multidimensional Hierarchical Datasets. The presently disclosed method includes analyzing a multi dimensional data set for outliners (aka anomalies). For the sake of simplicity we will address the Multidimensional Hierarchical Datasets as if it is represented by an OLAP cube (aka cube, aka hypercube), and we will use the common OLAP nomenclature. This is done only for simplicity sake, the method and invention apply to Multidimensional Hierarchical Datasets none regarding their representation, and moreover it is always possible to represent a multidimensional hierarchical dataset as an OLAP cube. The OLAP cube is compounded from two types of values Dimensions, and Measurements, for the sake of simplicity we will assume that it includes a single measurement
It should be noted that a Multidimensional Dataset is a special case of an Multidimensional Hierarchical Dataset, therefore the disclosure invention applies also to Multidimensional Hierarchical Dataset.
Given a hyper-cube with one or more dimension, which might be hierarchical dimensions, and at least one measurement, the following definitions are provided.
A hyper-cell is a slice of a cube in which 1) At least one of the dimensions of the cube participates, 2) for each dimension that participates at exactly one value is selected A hyper-cell can be represented as a set of pairs, in which each pair includes a dimension name, and one of the dimension possible values.
The degree of a hyper-cell is the number of dimensions that participate in it
A cell is a slice of a cube for which 1) All the dimensions of the cube participate, 2) for each dimension that participates, exactly one value is selected A cell (also referred to as a 'primitive hypercelP or 'lowest level hypercelF) is a special case of a hyper-cell.
For a given single dimension, there is a set of possible values for primitive hypercells of the dimension. For example, for the dimension "Day of the Week" the set of possible values is {Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday}. For the dimension "Hours of the day" the set of possible values is {Between 0:00 and 1:00, Between 1:00 and 2:00, Between 2:00 and 3:00, Between 3:00 and 4:00, ... Between 21:00 and 22:00, Between 22:00 and 23:00, Between 23:00 and 24:00}.
A dimensions values pair is an ordered pair of a dimension and a value of that dimension. In one example, the possible dimensions are (i) days of the week; (ii) hours of the day; (iii) area code; (iv) days of the months. In this example, one "dimensions value pair" is the pair {Day of Week,Monday}. Another "dimensions value pair" is the pair {Area Code,609}. Another "dimensions value pair" is the pair {Hour of the Day, between 4 PM and 5 PM}. Another "dimensions value pair" is the pair {Day of the Month, 3r day of the month}.
A hyper-cell a is contained in a hyper-cell b, if and only if all the dimensions values pairs that appear in b also appear in a, and there is in a at least one additional dimension value pair that does not appear in b. In this case, a is also referred to as a "sub-cell" of b.
Thus, in one example, the hyper-cell b is as follows: [{Days of the Week, Monday}, {Hours of the Day,Between 3 PM and 4 PM}]. The hyper-cell a is as follows: [{Days of the Week, Monday}, {Hours of the Day,Between 3 PM and 4 PM},{Area Code,201 }]. In this example, hyper-cell a is a subcell (or is "contained in") hyper-cell b. Another example of a sub-cell of hyper-cell b is hypercell c defined as [{Days of the Week, Monday}, {Hours of the Day,Between 3 PM and 4 PM},{Area Code,201 },{Days Of the Month,Third Day of the Month}]. A hyper-cell b is a one level extension of a hyper-cell a, if a is contained in b, and in b there is exactly one dimension value pair that does not appear in a. In the previous example, hypercell "a" is a "one level extension" of hypercell "b", and hypercell "c" is a one level extension of hypercell "a."
The value of a cell of a cube is its measure value; the value of a hyper-cell is the result of a certain central tendency function (for example, an average) or a measure of dispersion (for example, a variance) or a sum or a minimum or maximum function on the values of all the cells contained in it.
Whether or not a hypercell is an "outlier" is determined by deviation of a score of the hypercell from some central tendency over a population/? over multiple hypercells. In one example, given a measurement, and a statistical distribution D with mean μ standard deviation σ, and a constant k, a value x of the measurement, will be considered to be an outliner if it |x-μ| > k* σ. In other examples: (i) if a score x is bigger that a predefined constant K -if such case the score could be x/K or x-K (depending on the implementation); (ii) is a score x is bigger that the mean of the population p, in such a case the score can be x/mean(p) or x-mean(p) (depending on the implementation); (iii) a certain boolean function f of x and population p is provided - in the example in the text, f(x, p) will be true if abs(x- mean (p)) > k *std(p)) likewise the score is a function g of x and population p, g function represents the distance from x and the "regular behavior" of the population.
The 'score' of a hypercell is an indication of a deviation between the hypercelFs value and values of hypercells of a given population of hypercells p (for example, a 'large' population of millions or billions or more hypercells).
One example of a score of a hyper-cell given a statistical distribution D with mean μ and Standard deviation σ, is |x-μ|/ σ.
Several non-limiting examples are now presented for illustrative purposes. Example 1 - Outliers in a Telephone Network and Related Example Hypercells
In the present example, data from two "metering systems" related to call traffic volumes is analyzed. In this example, the first metering system is a "switch metering system" which provides a first metric of call traffic (i.e. by measuring traffic at the switch(es)) and the second metering system is a billing system which provides a second metric of call traffic (i.e. since billing is depends on the call traffic).
There are many situations where there are discrepancies between the first and second metering system. The causes for the differences may be various, e.g., different call rounding and duration calculation methods, rightfully dropped information (test calls dropped by the mediation, 0 duration calls dropped by the billing), or dropped due to mal-function, e.g., an overloaded Switch may stop producing CDRs (call detail records) to reduce its overload. Having discrepancies between the metering systems information, is not yet an alarming sign, having "unusual" levels of discrepancies, is an alarming sign that should be investigated and solved.
It is recognized that these discrepancies will vary as a function of different parameters — i.e. there may be increased (or decreased) discrepancies on certain days of the week and/or at certain hours of the day and/or in traffic between certain area codes and/or on certain days of the month (for example, beginning of the month or middle of the month or end of the month). The elevated discrepancies at certain times and/or certain area codes can be due to any number of reasons, and it is desired to determine the specific times and/or area codes in order to "zero in" on a source of a problem. In the present example, the call traffic data as determined by each metering system (and the difference in call traffic as determined by the two metering systems) is presented as a "multi-dimensional hierarchical dataset" where the "dimensions" are the
"input parameters" - i.e. day of week, day of month, source area code, destination area code, etc.
In the present examples, it is desired to search for and locate "outliers" - sets of value(s) for the parameters (i.e. where there is an elevated difference or discrepancy between the total traffic as reported by the two metering systems (i.e. switching and billing system). Because the Multidimensional Hierarchical Dataset can be represented as an
OLAP Cube (aka cube, aka hypercube), the search for sets of value(s) of the parameters (i.e. for outliers) can be implemented as a search for a subcubes.
In the present non-limiting example, we are working with a 5-dimensional dataset
- the five dimensions are: (i) day of week (whose value is selected from {Sun,Mon,Tue,Wed,Thu,Fri}), (ii) hour of day (whose value is selected from {[0:00-
0:59],[l:00-l :59],... [23:00-23:59]}, (iii) day of month (whose value is selected from
{ 1 ,2..31 }), (iv) origin area code, and (v) destination area code.
For the present example, the "dimensions" will be labeled xi , X2, X3, x/, x,- . Thus, in the present example, the xj or "day of the week" dimension can adopt one of seven values - Jt1 1 (Sun), xf (Mon), .. x] (Sat); the X2 OT "hour of the day" dimension can adopt one of twenty four values - x[ [0:00-0:59],
Figure imgf000012_0001
[1:00-1 :59], .. x2 24 [23:00-23:49}; the x3 or "day of the month" dimension can adopt one of 31 values; the x4 or "origin area code " dimension can adopt one of AC values (where AC is an integer that is the total number of area codes in the telephone network); the JC,- or "destination area code " dimension can adopt one of AC values (where AC is an integer that is the total number of area codes in the telephone network).
In the present example, it is desired to determine a sub-cube (not necessarily a lowest level cell of the hypercell with all 5 dimensions participating) where there is excessive discrepancy between the network traffic as reported by the switching metering system and the network traffic as reported by the billing metering system - i.e. to determine which combinations of the days of week, hours of day, days of month, origin area code, destination area codes, etc. are associated with "outlier" or "excessive" deviations in measurements of total traffic between the two metric systems (i.e. the switching metric and the billing metric).
In some embodiments, it is possible to locate 'large' possible hypercells that are outliers. This may save the need to search subcells of the hypercell.
One example of a potential "outlier" would be the hypercell {null,^2 ,null,null,null} with a single participating 'non-null value' dimension (i.e. having a measure of 1) - this would indicate excessive differences in measured total call traffic volume (i.e. "outlier status") between the two metering systems (i.e. switching and billing) between [0:00-0:59] irrespective of other variables (i.e. irrespective of day of the week, day of the month, origin and destination area code).
Another example of a potential "outlier" would be the hypercell { Jc1 4 , null, jcj.Jtf"5, JC5 91 } with 4 participating dimensions - this would indicate outlier status for the hypercell representing calls on Wednesday, on the first day of the month with area code "265" as the "origin area code" (where 265<AQ and area code "191" as the "destination area code" - irrespective of hour of the day. Example 2 -Analyzing Tuples/Hypercells of Example 1 in a Hypercell/Tuple Set PG1VEN
To Identify Outliers
According to a presently-disclosed search routine, we begin with a set of tuples or hypercells in the N-dimensional hierarchical data set (i.e. where N=S).
In the present example, the "starting" set {hi,.. MM} (M= 7) of hypercells PCIVEN =
{{
Figure imgf000013_0001
{ xf , null, null, null, null},{ x,3 , null, null, null, null },{ x,4, null, null, null, null },{ x,5 , null, null, null, null },{ xf , null, null, null, null },{ xj, null, null, null, null }} (i.e. all Sunday calls, all Monday calls, all Tuesday calls, all Wednesday calls, all Thursday calls, all Friday calls). In this example, M=7.
In the present example,
Figure imgf000013_0002
Figure imgf000013_0003
Thus, the discrepancy between the reported traffic (i.e. as reported by the two different metering systems - i.e. the switch metering system and the billing metering system) is greatest, in the present example, on Tuesdays and Wednesdays. In the present example, the score of each given hypercell hf e PGIVEN is analyzed to determine if the "given hypercell" is an outlier (i.e. by analyzing the magnitude of the score). If the score exceeds some numerical threshold (for example, 0.04), the given hypercell ht e PGIVEN is identified as an "outlier hypercell." Thus, in our example, if it is determined that a given day is an "outlier" (i.e. in our example, the metered traffic according to the two systems differs by a given threshold), there is no need to further investigate other parameters for the given day - the day "as a whole" is identifier as an outlier hypercell/tuple and there is no need to analyze sub-cubes of the identified "given" hypercell (i.e. no need to analyze the score of sub-cubes of the "identified outlier hypercell" that include additional participating dimensions - i.e. hour of the day, area code, etc).
In the present example, when analyzing the score of each hypercell ht e PG1VEN , one of three outcomes are possible: either (i) none of the cells of PavEN are classified (i.e. according to respective "outlier scores") as outliers - i.e. day of the week alone is not sufficient identify "outliers" between the switch metering system and the billing metering system; (ii) some of the cells of PGIVEN are classified (i.e. according to respective "outlier scores"); and (iii) all of the cell of PCIVEN are classified as outliers.
Example 3 - Handling Rejected Hypercells/Tuples of Example 2 By Constructing and Analyzing "1 -Level Extensions" of the Rejected Hyppercells/Tuples According to the first and second possibilities, one or more cells of PCIVEN are not classified as outliers - i.e. are "rejected" as outliers (according to our example where the threshold is 0.04, hi ft2, hs , λ<j and hγ would be "rejected."
There are two possible handlings for the rejected "hypercells." According to one handling, the rejected hypercells are further "extended." Thus, according to our present example, it is postulated that for a given hypercell (for example, the "Thursday" hypercell), the participating dimension set of the hypercell with the given values (i.e. in the example of the "Thursday" hypercell, the participating dimension set is "day of the week" or x/) is not sufficient to identify the hypercell as an outlier.
Nevertheless, it is possible that certain sub-regions or sub-cubes of the hypercell (i.e. "extensions") are indeed outliers. For example, it is possible that even if the "Thursday" hypercell (i.e. with a single participating dimension) is not an outlier, nevertheless, the discrepancy (i.e. for the two metering systems — in this case, switching and billing) of the data for Thursday with given "origin area code" (for example, area code 265) is so great that the sub-cell represented by the set of data for Thursday with the area code 265 is itself an outlier.
Thus, in our example, the "rejected" "Thursday" hypercell
{ Jt1 5 ,null,null,null,null} may be "extended" to include an additional dimension (i.e. in this case, the "source area code" dimension). In our example, the "rejected" hypercell
{ Λ:,5 ,null,null,null,null} may be extended to generate the sub-hypercell { *5 ,null,null, jcf5, null}.
Example 4 - A Discussion of the Flowchart of FIG. 1
FIG. 1 provides a flow chart of an exemplary technique for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions {XI,...XΝ} according to some embodiments of the present invention. In some embodiments, the value of N is at least 5, or at least 10, or at least 15.
In step S201, a plurality PGIyEN of hypercells {hi,... hM}, is provided and analyzed where Mis an integer greater than 1 (in many examples, greater than 10, or greater than 100).
In some embodiments, the plurality of hypercells PcrvEN is dimensionally homogenous - i.e. each hypercell h, (where i is an integer greater than or equal to 1, less than or equal to M) has the same set of participating dimensions. The "starting set" of example 2 is one example where PG1VEN is dimensionally homogenous.
Nevertheless, we note that this is not a limitation.
In some embodiments, PGWEN is not dimensionally homogenous - i.e. dimensionally inhomogenous — i.e. there exist two distinct integers ij where both of i andy are greater than or equal to 1, less than or equal to M) where the set of participating dimensions for h, is different from the set of participating dimensions for h3.
In example 2, only one dimension "participates" in PCIVEN , namely the first dimension of 5 possible dimensions. In some embodiments, multiple dimensions "participate" in PGWEN- For the present disclosure, when a dimension participate in a set of hypercells, the dimension participates in at least one hypercell within the set of hypercells.
Alternatively and preferably, PC1VEN is a "majority spanning" set of hypercells - i.e. PCiVEN is such that a majority of possible dimensions (i.e. at least N/2 dimensions)"participate" in PG/VEN , where PGIVEN includes at least int cells (where int is an integer that is equal to or greater than N/2) such that each cell of the at least int cells includes a different respective participating dimension.
In one example, PGIVEN includes a majority of possible primitive hypercells. In one example where N=2 and the first dimension is a boolean dimension and the second dimension is the days of the week, the possible primitive hypercells are as follows: [{Boolean,True}], [{Boolean,False}], [{Day of Week, Sunday}], [{Day of Week, Monday}], [{Day of Week, Tuesday}], [{Day of Week, Wednesday}], [{Day of Week, Thursday}], [{Day of Week, Friday}]. In one example, PG/VEN includes primitive hypercells from a majority of possible dimensions.
It is understood that any of these examples may be "combined" when appropriate - for example, PG1VEN may include both majority of possible primitive hypercells and primitive hypercells from a majority of possible dimensions. In step S201, the values of each hypercell are analyzed and compared. In step
S205, the hypercells with the highest "outlier" score (for example, all cells whose score exceeds a pre-determined "outlier" threshold, or a certain number of certain fraction of PGIVEN) are designated/reported/accepted as hypercells. Those cells P1 CAT C PGIVEN which are designated as hypercells (in example 2 this would be hi and hj), are designated as "likely-outliers," while the other cells P2 CAT in PGlVEN (i.e. P2CAT is the complement of
P1CAT inPC{VEN) are designated as "less likely outliers" and are not identified as outliers at this stage.
In one example, in step S201, all hypercells whose outlier score exceeds a given threshold may be selected. Alternatively or additionally, other criteria for determining what is and is not a "likely outlier" may be established. In one example, some fraction (for example, the "best 15%" of hypercells of PGIVEN) may be categorized as outliers. The skilled artisan will appreciate that different variations are possible in step S201.
In step S209 the cells of P2CAT handled. In particular, the cells of P2CAT are divided into two subsets: (i) those "more likely to be outliers" among those previously rejected in step S205 (i.e. PSUB a P2 CAT ) (these are informally known as the "winners of the losers"); and (ii) all other cells in P2 CAT (these are informally known as the "losers of the losers").
It is possible that more than one subset of P2 CAT may be selected. The subset PSUB does not include any "lowest- level hypercells" when every dimension participates.
In step S213, a set of 1-level extensions P1EXr is formed from PSUB where cells of PSUB are extended at least once to form a different respective at least 1-level extension.
In one example, for at least one 1-level extension, all possible 1-level extensions (or even a majority of possible 1 level extensions) are formed . In step S225, it is decided for which hypercells is to desired to recurse. This set of hypercells P'CIVEN for recursing includes at least some hypercells of P1EXr (i.e. formed in step S213) and optionally one or more additional hypoercells (for example, hypercells which were earlier considered "losers of losers" P2 CAT ).
In step S225, it is noted that set P'G[VEN is formed (i.e. the 'decision process' for which hypercells to include in P'GIVEN is carried out such that) such that there is at least one one-level extension of a member cell me me e P2 CAT that is included in P'GIVEN only if: i) he is not a previously considered hypercell (i.e a hypercell which has not analyzed in step S201); and ii) he is not a subcell of a previously categorized likely-outlier hypercell (i.e. categorized/or reported in step S201). This condition may reduce the number of hyercells that need to be analyzed.
In the event that P'GIVEN is empty S245 (or alternatively, according to another other stop condition - for example, number of iterations, amount of time the routine executes, number of outliers located or any other stop condition familiar to the skilled artisan), the routine stops in step S249.
Otherewise, PGIVEN is set to P'GIVEN and the routine continues with the new value of PGIVEN affording an opportunity to identify and/or locate and/or report even more outlier hypercells.
It is noted that in step S213, not every possible 1 -level extension is always formed. In one non-limiting example, no 1-level extension is formed (and/or no 1-level extension is subsequently analyzed) that is (i) the same as a previously analyzed cell (for example, if the hypercell of phone calls that are Monday between 4 PM and 5PM was already analyzed, we will not form and/or analyze the 1-level extension of {Monday} to {Monday, 4PM to 5PM} and we will not form and/or analyze the 1-level extension of {4 PM to 5PM} to {4 PM to 5 PM , Monday}).
Also, according to this non-limiting example, no 1-level extension is formed and/or analyzed (or alternatively, included in P'CIVEN in step S225) that is a sub-cell of a cell which was already reported/accepted as an "outlier" in step S205. Thus, in the event that in step S205 the hypercell {Thursday } is accepted, we will not form a 1-level extension of the hypercell {10 AM to 11 AM} to form the 1-level extension {10 AM to 11 AM, Thursday} because the hypercell {10 AM to 11 AM, Thursday} is a subcell of the hypercell {Thursday} which was already accepted as an "outlier hypercell." The logic behind this constraint (either enforced in step S213 and/or in step S225) is that if "Thursday" as a whole is already a known hypercell, there is no need to investigate "sub-sets" of this hypercell. It is noted that these constraints of step S213 allow, in many situations, the technique described in FIG. 1 to analyze a very small subset of the total set of possible hypercells while still finding the most problematic hypercell.
In one example, due the constraint enforced in step S213 and/or in step S225 the total number of dimensions is greater than 10, on average each dimension has a total number of 1,000 possible values, and between 1% and 5% of all hypercells are outliers. In this example, the number of possible hypercells is more than a billion, yet a very small fraction of hypercells need to be analyzed in step S201 Example 5 - Exemplary Criteria for Determining In Step S209 Which Rejected Hypercells Are Extended For Further Analysis (i.e. of Sub-regions) and Which Rejected Hypercells Not Extended
In this example, two of the 7 hypercells in PCIVEN are "accepted" or identified as outliers - say A3 and h4 (i.e. Tuesday and Wednesday are "outliers") (this is a first
"categorized set" of hypercells PλcAτ = { hi, h4), while five of the 7 hypercells in PGIVEN are "rejected" as outliers (this is the second "categorized set" of hypercells P2CAT = { hj, h2 , h5, h6, Ji7 }
In this example, only a subset Psm c P2 CAT of the rejected (or not-identified-as- outlier) hypercells are extended (i.e. the "winners of the losers"). The hypercells of the complement of the subset PSUB are not further analyzed and not extended.
According to one set of criteria, PSUB is determined from P2CAT in accordance with the absolute and/or relative "outlier" scores of hypercells of PSUB .
Thus, in one example, PGIVEN is handled as follows: i) those hypercells of PCIVEN whose "outlier score" exceeds a first threshold thresh^ (i.e. a positive number associated with the greater discrepancy between the network traffic as reported by the "switch metering system" and the "billing metering system" - the greater the outlier score the greater the discrepancy between the two metering systems for the hypercell) are identified/reported as
"outliers" and assigned to the "first categorized set" of hypercells P1CAΓ a PCIVEN Once these hypercells of PXCAT C PGIVEN are reported as outliers there is no need to construct extensions of these "outlier hypercells." In our example, threshλ = 0.04 and PxCAτ ={ hs, h4}.
The complement of P1 CAT a PGIVEN is P2 CAT CZ PGIVEN - hypercells whose "outlier score" does not exceed threshλ . In our example,
P2CAT = { hi, h2 , h5, h6, h7 } In one example, hypercells of P2 CAT are handled as follows: i) those hypercells of
Figure imgf000020_0001
"outlier score" does exceed a second threshold thresh2 <threshλ (for example, thresri2= 0.25) (i.e. those hypercells that exhibit a certain likelihood to be outliers or to have outlier "subregions" but not enough of a likelihood to be categorized themselves as outliers in and of themselves - the "winners of the losers") are "extended" - i.e. for each hypercell kj <≡ PSUB , a respective one-level extension is formed. Thus, in our example, extensions are only formed from PSUB={ he, hη } (i.e. Friday and Saturday are the "winners of the losers"). In different example, the requirements of step S213 must be met. ii) assigned to PcmN.
Example 6 Some applications of the routine of FIG. 1 are now discussed.
Example 6A
In one example, the importance of detecting sub cubes that are outliners, instead of mere low level cells that are outliners, is that by detecting the relevant sub cube we gain an insight of the communalities of the outliners, permitting faster identification and solution of underline problems that caused the outliners, resulting in many cases in substantial economical benefits, this is exemplified in more details in one of the preferred embodiments. Example 6B Problems like incorrectly processed or dropped usage information like call records (e.g., CDRs) between two systems (e.g., output switch and vs. input to billing system, or output of switch vs. output of signaling system like SS7) cause significant losses of money since users are not billed or are billed incorrectly for services they use (if they are under billed the lost is evident, if they are over billed the service provider is exposed to law suits that can result in significant losses). Identifying these problems typically requires analyzing and comparing either all the CDRs in the two systems, or taking a sample of them. Analyzing and comparing all the CDRs is an extremely computational resource demanding (bandwidth to pass all the information, CPU power, etc), and in many cases the high hardware and operational costs, do not justify the economical benefit from a detailed comparison. On the other hand just taking random samples, will lead in many cases to miss problems, and loose of money. The routine described in FIG. 1 permits spotting subsets of the hyper space where there are irregular behaviors, and this information may be passed to a revenue assurance system that uses it to compare all the information in the irregular hypercube - permitting on one hand to testing all the relevant information, but doing so with modest costs, achieving economical benefits. For example, assume that the switches generate 1 billion calls per day representing a total of 5 billion minutes, and that 900 million calls arrive to the billing system representing 4 billion minutes, a detailed comparison in an revenue assurance system, will require loading to the revenue assurance system 1.9 billion calls, and for each call in the mediation finding the correspondent call in the billing (if exists), and comparing their duration. This is extremely costly. On the other hand making a random sampling of calls, might lead not to detecting the problem specially if the problem is not distributed more or less uniformly. The routine of FIG. 1 may detect a sub hyper cube in which the behavior is irregular, e.g. calls on Monday that started in [23:00 -23:59], from area code 03 to area code 04. By passing this information to the revenue assurance system the revenue assurance system can load and test only information related to the relevant calls, detailed comparing the calls in the sub hyper cube, and finding the specific dropped calls and calls whose duration is incorrect, making the process very efficient and requiring resources that justify its economical benefit.
It is appreciated that certain features of the invention, which are, for clarity, described in the context of separate embodiments, may also be provided in combination in a single embodiment. Conversely, various features of the invention, which are, for brevity, described in the context of a single embodiment, may also be provided separately or in any suitable subcombination. EXAMPLE 7 FIG. 2 provides a block diagram of an exemplary system in which the routine of
FIG. 1 may be carried out. The system includes data feed 130 (which provides data about metering system A 110 and metering system B 120), comparator 140 (for example, for determining discrepancies between measured values of each metering system under different conditions - i.e. time of day, area code, etc. thereby determining values or scores of different hypercells), and outlier locator 150 for locating and/or identifying hypercells. In some embodiments, the output of outlier locator 150 (i.e. a description or indication of the outlier hypercells) may be fed to output module 190 (for example, a display screen or a printer for reporting hypercells - for example, see step S205), and/or billing system 160 (for example, for refunding a previously overbilled subscriber and/or charging a previously underbilled subscriber) and/or meter adjuster 180 (which may adjust operating parameter(s) of metering system A 110 and/or metering system B 120 in order to attempt to reduce future discrepancies).
Any component in FIG. 2 may be implemented in any appropriate combination of hardware and/or software (for example, which may be executed by a processor). The system (or any component thereof) of FIG. 2 may be deployed in any manner, either locally in a single location or in a 'distributed' manner at different locations. EXAMPLE 8
FIG. 3 provides a block diagram of an exemplary outlier locator 150 in accordance with some embodiments of the present invention. The system of FIG. 3 includes: a) a data storage 310 (for example, including volatile storage such as RAM and/or non- volatile storage such as flash or disk or any other volatile and/or non-volatile storage) for storing a representation of a plurality PGIVEN of hypercells {hh...hM} for the N dimensions, each said hypercell A1. e PCIVEN having a respective participating-dimension set D1 c {xb...xN}, for said each hypercell A, of said given plurality PC1VEN ; b) a hypercell categorizer 330 for categorizing
S201, in accordance with a respective outlier score of said each hypercell A,, said each hypercell A/ as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality P1 CAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P CAT of said hypercells is categorized as less-likely-outliers; c) a hypercell selector 350 operative to select S209 a sub-plurality Psm a P1 CAT of hypercells {£/,...kL} from said second categorized plurality P1CAT of less-likely-outliers in accordance with said outlier scores of hypercells said sub-plurality Psm a P2 CAT of hypercells; d) a hypercell extendor 370 operative to form S213 from said sub-plurality PSUB of hypercells, a one-level-extension hypercell set of PYEXT including, for each hypercell kj of PSUB, a respective at least one one-level extension of said each hypercell k} of PSUB; e) a recursion set selector 410 operative to define
S225 a set P'G1VEN which includes at least some hypercells of Pιεxτ such that there is at least one one-level-extension hypercell he, which is a one-level extension of a member cell me me G P2c4rthat is included in P'GIVEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and f) a recursion manager 430 operative to: A) pass the representation of PGlVEN to the hypercell categorizer 330 and receive a representation of P1 CAT from the hypercell categorizer 330; B) pass the received representation of
Figure imgf000023_0001
to the hypercell 350 selector and receive a representation of PSUB from the hypercell selector 350; C) pass the received representation of PSUB to the hypercell extender
360 and receive a representation of Pιεxτ from the hypercell extender 360; D) pass the representation of P1EXr to the recursion set selector 350 and to receive a representation of F" GIVEN fr°m me recursion set selector 350; E) set PCIVEN = P' GIVEN m me memory and repeat steps (A)-(D).
Any component in FIG. 3 may be implemented in any appropriate combination of hardware and/or software (for example, which may be executed by a processor). The system (or any component thereof) of FIG. 3 may be deployed in any manner, either locally in a single location or in a 'distributed' manner at different locations. Although the invention has been described in conjunction with specific embodiments thereof, it is evident that many alternatives, modifications and variations will be apparent to those skilled in the art. Accordingly, it is intended to embrace all such alternatives, modifications and variations that fall within the spirit and broad scope of the appended claims. All publications, patents and patent applications mentioned in this specification are herein incorporated in their entirety by reference into the specification, to the same extent as if each individual publication, patent or patent application was specifically and individually indicated to be incorporated herein by reference. In addition, citation or identification of any reference in this application shall not be construed as an admission that such reference is available as prior art to the present invention.

Claims

WHAT IS CLAIMED IS:
1) A method of identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions (X1, ...XΝ}, the method comprising: a) given a plurality PC1VEN of hypercells {&;,... /ZM} for the N dimensions, each said hypercell /i, e PGIVEN having a respective participating-dimension set D1 c {xi,...xΝ}, for said each hypercell h, of said given plurality PC1VEN, categorizing
S201, in accordance with a respective outlier score of said each hypercell h,, said each hypercell h, as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality PXCAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P1 CAT of said hypercells is categorized as less-likely-outliers; b) selecting S209 a sub-plurality PSUB CZ P2CAT of hypercells {&/,...£/,} from said second categorized plurality P2 CAT of less-likely-outliers in accordance with said outlier scores of hypercells said sub-plurality PSUB cz P2 CAT of hypercells; c) from said sub-plurality PsυB of hypercells, forming S213 a one-level-extension hypercell set of P1EXT including, for each hypercell kj of Psm, a respective at least one one-level extension of said each hypercell k} of PSUB ; d) defining S225 a set P'GIVEN which includes at least some hypercells of PXEXT such that there is at least one one-level-extension hypercell he, which is a one- level extension of a member cell me me e P2 CAT that is included in P'GIVEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and e) assigning 8217P07^ = P'CIVEN and repeating steps (a)-(d).
2) The method of claim 1 wherein hypercells of PC1VEN are dimensionally inhomogenous.
3) The method of claim 1 wherein hypercells of PGIVEN are dimensionally homogenous.
4) The method of claim 1 wherein a majority of hypercells of PCIVEN are primitive hypercells where every dimension participates.
5) The method of claim 1 wherein PGIVEN includes primitive hypercells from a majority of dimensions of the N dimensions of the dimensions {XI,...XΝ} .
6) The method of claim 1 wherein PGlVEN includes a majority of possible primitive hypercells.
7) The method of claim 1 wherein PC1VEN is a majority spanning plurality of hypercells.
8) The method of claim 1 wherein said one-level extension of step (c) is dimensionally homogeneous.
9) The method of claim 1 wherein said one-level extension of step (c) is dimensionally inhomogeneous.
10) The method of claim 1 wherein P'C1VEN includes, for at least one hypercell of P2 CAT , a majority of possible one-dimensional extensions which are not previously considered hypercells and not subcells of a previously categorized likely-outlier hypercell.
11) The method of claim 1 wherein: i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b) providing a representation the categoried outlier hypercells to a user.
12) The method of claim 1 wherein: i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), billing or crediting a subscriber.
13) The method of claim 1 wherein: i) the hypercells are descriptive of discrepancies between two metering systems; and ii) the method further comprises: e) in accordance with identities of the categorized hypercells of a plurality of iterations of step (b), adjusting an operating parameter of at least one of the two metering systems.
14) The method of claim 1 wherein both metering systems measures at least one of water consumption, oil consumption, gas consumption, electricity consumption and telecommunications services consumption.
15) A system for identifying outlier hyper-cells in an N-dimensional hierarchical datset having dimensions {XI,...XΝ}, the system comprising: a) a data storage 310 for storing a representation of a plurality PCIVEN of hypercells{Λ;,... &M} for the N dimensions, each said hypercell ht e PG1VEN having a respective participating-dimension set D1 c {XI,...XΝ}, for said each hypercell h, of said given plurality PGIVEN, ' b) a hypercell categorizer 330 for categorizing S201, in accordance with a respective outlier score of said each hypercell h,, said each hypercell h, as one of: i) a likely outlier hypercell; and ii) a less-likely outlier hypercell, such that: i) a first categorized plurality PXCAT of said hypercells is categorized as likely-outliers; and ii) a second categorized plurality P2 CAT of said hypercells is categorized as less-likely-outliers; c) a hypercell selector 350 operative to select S209 a sub-plurality Psm a P2 CAT of hypercells {&/,... A/,} from said second categorized plurality P2 CAT of less- likely-outliers in accordance with said outlier scores of hypercells said sub- plurality PSUB Ci P2CAT of hypercells; d) a hypercell extendor 370 operative to form S213 from said sub-plurality PSUB of hypercells, a one-level-extension hypercell set of PXEXT including, for each hypercell k} of PSUB , a respective at least one one- level extension of said each hypercell k} of Psm ; e) a recursion set selector 410 operative to define S225 a set P'CIVEN which includes at least some hypercells of PXEXΓ such that there is at least one one-level- extension hypercell he, which is a one-level extension of a member cell me me e P2 CAT that is included in P'G1VEN only if: i) he is not a previously considered hypercell; ii) he is not a subcell of a previously categorized likely-outlier hypercell; and f) a recursion manager 430 operative to:
A) pass the representation of PGIVEN to the hypercell categorizer 330 and receive a representation of P1 'CAT from the hypercell categorizer 330;
B) pass the received representation of P2 CAT to the hypercell 350 selector and receive a representation of PSUB from the hypercell selector 350;
C) pass the received representation of Psm to the hypercell extender 360 and receive a representation of Pιεxτ from the hypercell extender 360;
D) pass the representation of Pλεxτ to the recursion set selector 350 and to receive a representation of P'G[VEN from the recursion set selector 350;
E) set PC1VEN = P' civEN in tne memory and repeat steps (A)-(D).
16) The system of claim 15 where the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a user output module 190 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to provide a representation the categoried outlier hypercells to a user.. 17) The system of claim 15 where the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a billing adjuster 170 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to bill or credit a subscriber.
18) The system of claim 15 where the hypercells are descriptive of discrepancies between two metering systems, and the system further comprises: g) a meter adjuster 180 configured, in accordance with identities of the categorized outlier hypercells of a plurality of iterations of step (b), to adjust an operating parameter of at least one of the metering systems.
PCT/IL2008/000684 2007-05-20 2008-05-20 Methods, systems and computer code for finding outlier hyper cells in multidimentional hierachical data sets WO2008142682A2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US12/600,516 US8050989B2 (en) 2007-05-20 2008-05-20 Methods, systems and computer code for finding outlier hyper cells in multidimensional hierachical data sets

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US93906807P 2007-05-20 2007-05-20
US60/939,068 2007-05-20

Publications (2)

Publication Number Publication Date
WO2008142682A2 true WO2008142682A2 (en) 2008-11-27
WO2008142682A3 WO2008142682A3 (en) 2010-02-25

Family

ID=40032263

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IL2008/000684 WO2008142682A2 (en) 2007-05-20 2008-05-20 Methods, systems and computer code for finding outlier hyper cells in multidimentional hierachical data sets

Country Status (2)

Country Link
US (1) US8050989B2 (en)
WO (1) WO2008142682A2 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8280314B2 (en) 2009-06-30 2012-10-02 Alcatel Lucent Method and apparatus for compensating for transceiver impairments
USRE49334E1 (en) 2005-10-04 2022-12-13 Hoffberg Family Trust 2 Multifactorial optimization system and method

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10303677B2 (en) 2015-10-14 2019-05-28 The Climate Corporation Computer-generated accurate yield map data using expert filters and spatial outlier detection
US11687804B2 (en) * 2020-06-30 2023-06-27 Fair Isaac Corporation Latent feature dimensionality bounds for robust machine learning on high dimensional datasets

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040068199A1 (en) * 2000-10-20 2004-04-08 The Trustees Of The University Of Pennsylvania Unified probabilistic framework for predicting and detecting seizure onsets in the brain and multitherapeutic device
US20060212413A1 (en) * 1999-04-28 2006-09-21 Pal Rujan Classification method and apparatus
US20070087756A1 (en) * 2005-10-04 2007-04-19 Hoffberg Steven M Multifactorial optimization system and method

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6842753B2 (en) * 2001-01-12 2005-01-11 Microsoft Corporation Sampling for aggregation queries
US20020133441A1 (en) * 2001-03-14 2002-09-19 Tanaka David T. Methods and systems for identifying attributable errors in financial processes
JP3870043B2 (en) * 2001-07-05 2007-01-17 インターナショナル・ビジネス・マシーンズ・コーポレーション Systems, computer programs, and servers for searching, detecting, and identifying major and outlier clusters in large databases

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060212413A1 (en) * 1999-04-28 2006-09-21 Pal Rujan Classification method and apparatus
US20040068199A1 (en) * 2000-10-20 2004-04-08 The Trustees Of The University Of Pennsylvania Unified probabilistic framework for predicting and detecting seizure onsets in the brain and multitherapeutic device
US20070087756A1 (en) * 2005-10-04 2007-04-19 Hoffberg Steven M Multifactorial optimization system and method

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
USRE49334E1 (en) 2005-10-04 2022-12-13 Hoffberg Family Trust 2 Multifactorial optimization system and method
US8280314B2 (en) 2009-06-30 2012-10-02 Alcatel Lucent Method and apparatus for compensating for transceiver impairments

Also Published As

Publication number Publication date
WO2008142682A3 (en) 2010-02-25
US20100161464A1 (en) 2010-06-24
US8050989B2 (en) 2011-11-01

Similar Documents

Publication Publication Date Title
Ahmed et al. On sampling from massive graph streams
Seshadri et al. Mobile call graphs: beyond power-law and lognormal distributions
Umayaparvathi et al. Applications of data mining techniques in telecom churn prediction
Pitt et al. Application of data mining techniques to load profiling
US7822629B2 (en) Customer profiling apparatus for conducting customer behavior pattern analysis, and method for comparing customer behavior patterns
Xing et al. Employing latent dirichlet allocation for fraud detection in telecommunications
US9148521B2 (en) Methods and systems for categorizing a customer of a service as a churner of a non-churner
Hoff et al. Modeling dependencies in international relations networks
KR100841876B1 (en) Automatic monitoring and statistical analysis of dynamic process metrics to expose meaningful changes
Cahill et al. Detecting fraud in the real world
CN111614690B (en) Abnormal behavior detection method and device
US6480844B1 (en) Method for inferring behavioral characteristics based on a large volume of data
US20030046303A1 (en) Olap-based web access analysis method and system
US20130138479A1 (en) Classification of network users based on corresponding social network behavior
US8050989B2 (en) Methods, systems and computer code for finding outlier hyper cells in multidimensional hierachical data sets
Doyle et al. Predicting complex user behavior from CDR based social networks
Li et al. Enabling customer relationship management in ISP services through mining usage patterns
EP1704500B1 (en) Clustering technique for cyclic phenomena
Ramezani et al. Dani: A fast diffusion aware network inference algorithm
Johnson et al. Self-exciting point process models for political conflict forecasting
Oliveira et al. Measurement-driven mobile data traffic modeling in a large metropolitan area
Renedo-Mirambell et al. Identifying bias in network clustering quality metrics
WO2006090354A1 (en) Detection of misuse of a database
He et al. Sampling method applied to the clustering of temporal patterns of public transit smart card users
EP4238322A1 (en) Method for allocating resources in a geographic area

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08751372

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 12600516

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 08751372

Country of ref document: EP

Kind code of ref document: A2