Secure proxy service

• US 10,115,141 B1
• Filed: 09/24/2014
• Issued: 10/30/2018
• Est. Priority Date: 09/24/2014
• Status: Expired due to Fees

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Warman, Leon Robert, Kufeld, Kurt, Vosshall, Peter Sven, Peterson, Kyle Bradley, Hill, Peter Frank, Krueger, Chelsea Celest, Sundaram, Arun
• Primary Examiner(s): Fadok, Mark A
• Application Number:
  US14/495,843
• Time in Patent Office: 1,497 Days
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/387 Payment using discounts or coupons relating to marketing G06Q30/02
• CPC Class Codes: G06Q 20/405 Establishing or using transaction specific rules
• CPC Class Codes: G06Q 30/0615 Anonymizing
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A system is configured to receive a network resource request from a user device configured with a browsing application, wherein the request includes identification data associated with the user device. The system transmits, to a network resource provider, a request for the network resource, wherein the request transmitted to the network resource provider excludes identification data included in the request received from the user device. The system receives from the network resource provider a response, including a document comprising a field configured to receive payment information for an item purchase. The system receives from the browsing application an indication that an anonymous payment instrument, associated with a first entity different than the user, is to be used to purchase a first item at a first price. The system causes information regarding the anonymous payment instrument to be provided to the network resource provider.

Claims

1. A computing system comprising one or more computing devices, said computing system programmed to implement:

a proxy server configured to receive requests, for network resources hosted on third party sites, from browsers hosted on remote computing devices and to perform one or more browser functions on behalf of the browsers hosted on remote computing devices, the proxy server further comprising an anonymizer module, the proxy server configured to;

receive, over a network, a request for a network resource hosted on a third party site, the request received over a secure, encrypted channel from a user computing device configured with a browser application,

wherein the browser application of the user computing device is in communication with the proxy server, and

wherein the request includes browser session and identification data associated with the user computing device, the data comprising at least one of an IP address of the user computing device, a MAC address of the user computing device, a cookie stored on the user computing device, a beacon, a session-id, a request-id, a user agent identifier, or a unique browser identifier;

in response to receiving the request from the user computing device for the network resource hosted on the third party site, transmit over the network, to a network resource provider comprising the third party site, a request for the network resource requested by the user computing device, wherein the request transmitted to the network resource provider does not comprise at least a portion of the identification data included in the request received from the user computing device;

receive, over the network, a first response from the network resource provider comprising the third party site, the first response including a user interface comprising one or more corresponding form fields configured to receive shipping address information to which an item is to be shipped to as part of a transaction;

determine, using an examination of phrases associated with the first response, that the response comprises a shipping webpage comprising shipping form fields;

provide an anonymous shipping control via which the user can indicate whether an anonymous shipping address associated with a different entity than the user, is to be used as a shipment destination is to be used for the shipment of the item, wherein if the user does not activate the anonymous shipping control an anonymous shipping address will not be used for the shipment of the item;

receive, over the network, from the browser application an indication that the user has activated the anonymous shipping control;

receive, over the network, an indication from the user as to which shipping address is to be used as a final destination shipping address;

generate an anonymous email address and assign the anonymous email address to be used, with respect to email communications, only for the transaction involving the shipment of the item;

automatically populate corresponding shipping form fields with the anonymous shipping address, and enable the anonymous shipping address to be provided to the network resource provider;

scan information from a shipping-related label on the item after receipt at the anonymous shipping address, wherein the shipping-related label does not include the final destination shipping address;

identify the final destination shipping address using the information scanned from the shipping-related label on the received item;

cause, at least in part, the received item to be shipped to the final destination shipping address.

2. The system of claim 1, the proxy server further configured to:

receive an item return request from the browser application;

generate a first shipping label document, including a first unique identifier and a destination address associated with a re-shipping service, for application on packaging for the item being returned;

provide the first shipping label document to the user computing device;

receive an indication that the packaged item has been received at the re-shipping service, the indication based at least in part on a reading of the first unique identifier; and

provide a second shipping label document including an address associated with a seller of the item being returned for application to the item packaging.

3. The system of claim 1, the proxy server further configured to determine that a document comprises fields configured to receive shipping address information based at least in part on an examination of terms in the document.

4. The system of claim 1, wherein the anonymous shipping address is unique to the user.

5. The system of claim 1, the proxy server further configured to:

identify a first ancillary service, or a first accessory product, or both a first ancillary service and a first accessory product associated with the item;

transmit an offer of at least one of the identified first ancillary service or the identified first accessory product to the browser application of the user computing device.

6. The system of claim 1, the proxy server further configured to:

identify one or more accessory products associated with the item;

transmit an offer of one or more of the identified accessory products to the browser application of the user computing device;

receive an acceptance from the browser application of the user computing device of an offer for a first of the identified accessory products;

cause the first identified accessory product to be packaged with the item after the item is received at the anonymous shipping address and before the item is received at the final destination address.

7. The system of claim 1, the proxy server further configured to:

identify one or more ancillary services associated with the item;

transmit an offer of one or more of the identified ancillary services to the browser application of the user computing device;

receive an acceptance from the browser application of the user computing device of an offer for a first of the identified ancillary services; and

at least partly in response to determining that the item has been delivered to the final destination address, causing the first ancillary service to be provided.

8. A computer storage system comprising a non-transitory storage device, said computer storage system having stored thereon executable program instructions that direct a computer system to at least:

receive a request transmitted over a network for a network resource hosted on a third party site, the request received over a secure, encrypted channel from a user computing device configured with a browser application,

wherein the browser application of the user computing device is in communication with the computer system, and

wherein the request includes browser session and identification data associated with the user computing device, the data comprising at least one of an IP address of the user computing device, a MAC address of the user computing device, a cookie stored on the user computing device, a beacon, a session-id, a request-id, a user agent identifier, or a unique browser identifier;

in response to receiving the request for the network resource hosted on the third party site, transmit over the network, to a network resource provider comprising the third party site, a request for the network resource requested by the user computing device, wherein the request transmitted to the network resource provider does not comprise at least a portion of the identification data included in the request received from the user computing device;

receive a first response from the network resource provider comprising the third party site, the first response including a user interface comprising one or more fields configured to receive shipping address information to which an item is to be shipped to as part of a transaction;

determine, using an examination of phrases associated with the first response, that the response comprises a shipping webpage comprising shipping form fields;

provide an anonymous shipping control via which the user can indicate whether an anonymous shipping address associated with a different entity than the user, is to be used as a shipment destination is to be used for the shipment of the item, wherein if the user does not activate the anonymous shipping control an anonymous shipping address will not be used for the shipment of the item;

receive over the network, from the browser application an indication that the user has activated the anonymous shipping control;

receive an indication from the user as to which shipping address is to be used as a final destination shipping address;

generate an anonymous email address and assign the anonymous email address to be used, with respect to email communications, only for the transaction involving the shipment of the item;

automatically populate corresponding shipping form fields with the anonymous shipping address, and enable the anonymous shipping address to be provided to the network resource provider;

scan information from a shipping-related label on the item after receipt at the anonymous shipping address, wherein the shipping-related label does not include the final destination shipping address;

identify the final destination shipping address using the information scanned from the shipping-related label on the received item;

cause, at least in part, the received item to be shipped to the final destination shipping address.

9. The computer storage system of claim 8, wherein the program instructions are further configured to direct the computer system to:

receive an item return request from the browser application;

generate a first shipping label document, including a first unique identifier and a destination address associated with a re-shipping service, for application on packaging for the item being returned;

provide the first shipping label document to the user computing device;

receive an indication that the packaged item has been received at the re-shipping service, the indication based at least in part on a reading of the first unique identifier; and

provide a second shipping label document including an address associated with a seller of the item being returned for application to the item packaging.

10. The computer storage system of claim 8, wherein the program instructions are further configured to direct the computer system to:

identify a first ancillary service, or a first accessory product, or both a first ancillary service and a first accessory product associated with the item;

transmit an offer of at least one of the identified first ancillary service or the identified first accessory product to the browser application of the user computing device.

11. The computer storage system of claim 8, wherein the program instructions are further configured to direct the computer system to:

identify one or more accessory products associated with the item;

transmit an offer of one or more of the identified accessory products to the browser application of the user computing device;

receive an acceptance from the browser application of the user computing device of an offer for a first of the identified accessory products;

cause the first identified accessory product to be packaged with the item after the item is received at the anonymous shipping address and before the item is received at the final destination address.

12. The computer storage system of claim 8, wherein the program instructions are further configured to direct the computer system to:

identify one or more ancillary services associated with the item;

transmit an offer of one or more of the identified ancillary services to the browser application of the user computing device;

receive an acceptance from the browser application of the user computing device of an offer for a first of the identified ancillary services; and

at least partly in response to determining that the item has been delivered to the final destination address, causing the first ancillary service to be provided.