Abstract: A computer implemented method of constructing a computer implemented knowledge base, of evaluating a plurality of invoices, of knowledge refinement and generation, as well as a computer implemented knowledge base for analyzing a plurality of invoices. The methods comprise receiving the invoices, semantic and logically analyzing them to identify the invoice items (parameters and algorithms of service providers, billing plans, user profile, consumption pattern and debits) and relations connecting them and construct the knowledge base. The knowledge base comprises a hierarchic taxonomy of billing plans related to services of any domain (telecommunications services, banking, insurance, utilities etc.) and a computer implemented generic invoice constructed in reverse engineering logic for simulating debits. Debit simulations are done in order to achieve: 1. recommendations for optimal billing plans. 2. Recommendations for possible detected billing errors. 3.

Abstract: A method and system for capturing and characterizing data displayed on a workstation screen, and user manipulation, to support auditing and data mining of user information access. Capture and characterization are independent of application and network connectivity, so data from different applications can be captured, characterized, and analyzed and correlated in a uniform manner. Screen data is captured as machine-readable text-string words associated with meta-data attributes detailing circumstances and characteristics of screen data presentation, and user control of software applications and windows. Characteristics include: workstation identifier; application; date and time of display; coordinates of screen data; window opening, closing, and scrolling; searching, copying, printing, and saving. The invention can be used to determine patterns of normal operation, to investigate information access misuse, and as a watchdog for alerts to potentially abusive information access practices.