US Patent 11182798 Session signatures

A plurality of session signatures and a plurality of inference flags are stored in association with each other, each session signature representing a combination of flag values, each flag value signifying a key event. A plurality of session events are logged, each session event issuing from one of the remote client devices and having a corresponding session ID and associated data. The session events are grouped by their corresponding session IDs to create a plurality of session records, each session record including flag values for a plurality of key events. A session signature is identified for each session record from the stored session signatures based on the key event flag values of the session record, and a value of an inference flag associated with the identified session signature is obtained from a storage device. A predetermined operation is performed based on the obtained value of the inference flag.