Information processing device, method, and program

The invention aims to address the technical problem of discovering terminals which are conducting activities cooperatively within a network. An information processing device is equipped with: a determination unit that determines the phase of the activity of a terminal by comparing inter-terminal communication and pre-stored patterns; and a correlation analysis unit that, when a phase that has been determined currently or in the past for a first terminal and a phase that has been determined currently or in the past for a second terminal are in common, performs a correlation analysis of the communication by the first terminal and the communication by the second terminal, and thereby determines whether these terminals are conducting activities cooperatively. 本发明将发现在网络内协作地进行活动的终端作为技术问题。在信息处理装置中具备：确定部，其通过将终端间的通信与预先保持的模式进行比较来确定终端的活动的阶段；以及相关分析部，其在关于第终端而在当前或者过去确定的阶段与关于第二终端而在当前或者过去确定的阶段为相同的情况下，进行第终端的通信与第二终端的通信的相关分析，从而判定这些终端是否协作地进行活动。