Dynamic user identification for network content filtering

• US 10,379,802 B2
• Filed: 06/16/2015
• Issued: 08/13/2019
• Est. Priority Date: 06/16/2015
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Munn, Jude M.
• Primary Examiner(s): Vu, Viet D
• Assistant Examiner(s): Edwards, James A
• Application Number:
  US14/741,351
• Publication Number:
  US 20160371045A1
• Time in Patent Office: 1,519 Days
• Field of Search: None
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 3/1415 with means for detecting differences between the image stored in the host and the images displayed on the displays
• CPC Class Codes: G09G 2358/00 Arrangements for display data security
• CPC Class Codes: G09G 2370/022 Centralised management of display operation, e.g. in a server instead of locally
• CPC Class Codes: G09G 2370/16 Use of wireless transmission of display information
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04N 21/00 Selective content distribution, e.g. interactive television or video on demand [VOD] real-time bi-directional transmission of motion video data H04N7/14 ; broadcast or conference over packet switching networks H04L12/18

Abstract

Techniques described herein may be used to dynamically apply content filters to a user device by identifying the user operating the user device. An analytics server may collect information relevant to identifying the user, or the type of user (e.g., a child, a teenager, or an adult), and cause a content filter to be applied to the user device based on the user and content requested by the user. As such, systems and methods described herein provide techniques for applying a content filters based on the actual user that is operating the user device, as opposed to the just the user device itself.

Claims

1. A method performed by a server device, comprising:

receiving, by the server device, network traffic from a plurality of user devices;

identifying, by the server device, a particular user device, of the plurality of user devices, by analyzing the network traffic that is associated with the plurality of user devices;

identifying, by the server device and based on the network traffic, a particular user of the particular user device by;

determining a usage pattern of the particular user device by analyzing the identified network traffic associated with the particular user device,

comparing the determined usage pattern of the particular device to a plurality of user profiles that each correspond to a respective user of a plurality of users, wherein each of the user profiles further indicates a usage pattern associated with a corresponding respective user, and

determining, based on the comparing, that the usage pattern, determined based on analyzing the identified network traffic associated with the particular user device, corresponds to a particular usage pattern indicated by particular user profile information associated with a particular user, of the plurality of users;

monitoring, by the server device, network content requested by the particular user device;

identifying, by the server device, a particular content filter policy associated with the particular user, wherein the particular content filter policy indicates parameters of content that is not appropriate for the particular user, wherein the particular content filter policy is different from one or more other content filter policies associated with one or more other users of the plurality of users;

determining, by the server device, whether the requested network content is appropriate for the particular user based on a comparison of the network content and the particular content filter policy associated with the particular user;

initiating, by the server device, a content filter service for the particular user device when determining that the network content is not appropriate for the particular user; and

forgoing initiating, by the server device, the content filter service for the particular user device when determining that the network content is appropriate for the particular user.

2. The method of claim 1, wherein initiating the content filter service includes notifying a content filter server to apply a content filter to the network content requested by the particular user device.

3. The method of claim 1, wherein the particular content filter policy is a first content filter policy, the method further comprising:

continuing to monitor network traffic associated with the particular user device after the initiating or the forgoing of the initiating of the content filter service;

identifying, based on the continuing to monitor, that another user is using the particular user device;

monitoring additional network content requested by the particular user device after identifying that the other user is using the particular user device;

determining whether to initiate the content filter service to filter the additional network content, based on a comparison of the network content and a second content filter policy associated with the other user; and

initiating or forgoing initiating the content filter service for the particular user device, to filter the additional network content, in accordance with the second content filter policy, based on determining whether to initiate the content filter service.

4. The method of claim 1, wherein the server device is part of a wireless telecommunications network in communication with a local area network to which the particular user device is connected.

5. The method of claim 1, wherein:

identifying the particular user device includes monitoring network traffic associated with startup operations of the particular user device, and

identifying the particular user includes monitoring network traffic associated with post-startup operations of the particular user device.

6. The method of claim 1, further comprising:

monitoring network activity associated with the particular user; and

updating the particular user profile information associated with the particular user based on the monitored network activity.

7. The method of claim 6, wherein updating the particular user profile information includes enhancing an existing user profile of the particular user by updating the existing user profile with the monitored network activity.

8. The method of claim 1, wherein the particular user is identified based on:

at least one Uniform Resource Locator (URL) associated with content accessed by the particular user device, and

a date corresponding to the accessing of the content associated with the at least one URL and a time of day corresponding to the accessing of the content associated with the at least one URL.

9. The method of claim 1, wherein the particular user is identified based on:

whether a keystroke speed, of input received by the particular user device, is associated with a keystroke speed of the particular user indicated by the particular user profile information, and

whether at least one application, initiated after the particular user device has completed startup operations, matches at least one application indicated by the particular user profile information.

10. A server device comprising:

a non-transitory memory device storing a plurality of processor-executable instructions; and

a processor configured to execute the processor-executable instructions, wherein executing the processor-executable instructions causes the processor to;

receive network traffic from a plurality of user devices;

identify a particular user device, of the plurality of user devices, by analyzing the network traffic that is associated with the plurality of user devices;

identify, based on the network traffic, a plurality of websites accessed by the particular user device during a particular time window;

compare the plurality of websites, accessed by the particular user device during the particular time window, to a plurality of user profiles that each correspond to a respective user of a plurality of users, wherein each of the user profiles further indicates a usage pattern associated with a corresponding respective user, the usage pattern including a set of websites accessed by the respective user;

determine that the identified plurality of websites, accessed during the particular time window, correspond to usage patterns indicated by particular user profile information associated with a particular user;

identify that the particular user is associated with the particular user device during the particular time window based on the determination that the identified plurality of websites, accessed during the particular time window, correspond to the usage patterns indicated by the particular user profile information associated with the particular user;

monitor network content requested by the particular user device;

identify a particular content filter policy associated with the particular user, wherein the particular content filter policy indicates parameters of content that is not appropriate for the particular user, wherein the particular content filter policy is different from one or more other content filter policies associated with one or more other users of the plurality of users;

determine whether the requested network content is appropriate for the particular user based on a comparison of the network content and the particular content filter policy associated with the particular user;

initiate a content filter service for the particular user device when determining that the network content is not appropriate for the particular user; and

forgo initiating the content filter service for the particular user device when determining that the network content is appropriate for the particular user.

11. The server device of claim 10, wherein, to initiate the content filter service, the processor-executable instructions further cause the processor to:

notify a content filter server to apply a content filter to the network content requested by the particular user device.

12. The server device of claim 10, wherein the server device is part of a wireless telecommunications network in communication with a local area network to which the particular user device is connected.

13. The server device of claim 10, wherein the processor-executable instructions, to identify the particular user device, include processor-executable instructions to:

monitor network traffic associated with startup operations of the particular user device,

monitor network traffic associated with post-startup operations of the particular user device, and

determine that the network traffic associated with the startup operations and the post-startup operations match startup and post-startup network traffic patterns, respectively, associated with the particular user profile information.

14. The server device of claim 10, wherein the processor-executable instructions further cause the processor to:

monitor network activity associated with the particular user; and

update the particular user profile information associated with the particular user based on the monitored network activity.

15. The server device of claim 14, wherein, to update the particular user profile information, the processor-executable instructions further cause the processor to:

enhance the particular user profile information of the particular user by adding information, associated the with the monitored network activity, to the particular user profile information.

16. The server device of claim 10, wherein the particular user is further identified based on a date corresponding to the accessing of the plurality of websites and a time of day corresponding to the accessing of the plurality of websites.

17. The server device of claim 10, wherein the particular user is identified further based on:

whether a keystroke speed, of input received by the particular user device, is associated with a keystroke speed of the particular user indicated by the particular user profile information, and

whether at least one application, initiated after the particular user device has completed startup operations, matches at least one application indicated by the particular user profile information.

18. A server device, comprising:

a non-transitory memory device storing a plurality of processor-executable instructions; and

a processor configured to execute the processor-executable instructions, wherein executing the processor-executable instructions causes the processor to;

detect network traffic corresponding to a user device;

compare the network traffic to historical network usage patterns associated with a plurality of user profiles respectively associated with a plurality of candidate users, wherein each of the user profiles further indicates a usage pattern associated with a corresponding respective user;

identify a particular user of the user device, out of the plurality of candidate users, based on comparing the network traffic to the historical network usage patterns associated with the plurality of user profiles associated with the plurality of candidate users;

determine, based on identifying the user, that a content filter should be applied for content sent to the user device; and

initiate, based on determining that the content filter should be applied, a content filter service for content sent to the user device.

19. The server device of claim 18, wherein the historical network usage patterns include:

a Transmission Control Protocol (TCP) timestamp,

at least one port associated with the network traffic,

at least one Uniform Resource Locator (URL) associated with a startup operation of the user device, or

at least one User Agent (UA) string associated with the user device.

20. The server device of claim 18, wherein the historical network usage patterns include

at least one type of network content requested by the user device.