Systems and methods to anonymize web browsing

• US 10,455,413 B2
• Filed: 12/14/2016
• Issued: 10/22/2019
• Est. Priority Date: 12/14/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bostick, James E., Chen, Jia, Leung, Wing L., Trim, Craig M.
• Primary Examiner(s): Patel, Chirag R
• Application Number:
  US15/379,112
• Publication Number:
  US 20180167464A1
• Time in Patent Office: 1,042 Days
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/009 specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A method includes, in response to a request from a computing device, establishing a connection between a server and the computing device. The method additionally includes identifying a first set of anonymization characteristics for a first instance of an access application. The method additionally includes instantiating, within a first cloud container corresponding to the connection, the first instance of the access application using the first set of anonymization characteristics. The method additionally includes retrieving first data using the first instance of the access application. The method additionally includes sending second data to the computing device via the connection. The second data is determined based on the first data.

Claims

1. A method comprising:

in response to a request from a computing device, establishing a connection between a server and the computing device;

identifying a first set of anonymization characteristics for a first instance of an internet browser application, the first set of anonymization characteristics including browser attributes;

instantiating, within a cloud container corresponding to the connection, the first instance of the internet browser application including the browser attributes;

generating, using the first instance of the internet browser application, a second header based on the browser attributes;

generating, using the first instance of the internet browser application, a second request by replacing a first header of the request with the second header;

sending, using the first instance of the internet browser application, the second request to a second server;

receiving, using the first instance of the internet browser application, first data from the second server responsive to the second request; and

sending second data to the computing device via the connection, the second data determined based on the first data.

2. The method of claim 1, wherein the second data corresponds to an internet browser application interface.

3. The method of claim 1, wherein the first set of anonymization characteristics is randomly selected.

4. The method of claim 3, wherein the browser attributes include browser plugins, system fonts, or both.

5. The method of claim 1, further comprising:

receiving, via the connection, third data from the computing device;

identifying a second set of anonymization characteristics responsive to receiving the third data; and

instantiating a second instance of the internet browser application within a second cloud container using the second set of anonymization characteristics.

6. The method of claim 5, wherein the first set of anonymization characteristics is identified, and the first instance of the internet browser application is instantiated, to access a first website during a browsing session, and wherein the second set of anonymization characteristics is identified, and the second instance of the internet browser application is instantiated, to access a second website during the browsing session.

7. The method of claim 1, further comprising assigning a communication address to the cloud container, wherein the communication address corresponds to an internet protocol (IP) address within an IP address range associated with the public cloud.

8. An apparatus comprising:

a memory storing processor-executable instructions; and

one or more processors coupled to the memory and configured to execute the processor executable instructions, wherein the processor-executable instructions, when executed by the one or more processors, cause the one or more processors to;

in response to a request from a computing device, establish a connection between a server and the computing device;

identify a first set of anonymization characteristics for a first instance of an internet browser application, the first set of anonymization characteristics including browser attributes;

instantiate, within a first cloud container corresponding to the connection, the first instance of the internet browser application including the browser attributes;

generate, using the first instance of the internet browser application, a second header based on the browser attributes;

generate, using the first instance of the internet browser application, a second request by replacing a first header of the request with the second header;

send, using the first instance of the internet browser application, the second request to a second server;

receive, using the first instance of the internet browser application, first data from the second server responsive to the second request; and

initiate sending second data to the computing device via the connection, the second data determined based on the first data.

9. The apparatus of claim 8, wherein the second data corresponds to an internet browser application interface.

10. The apparatus of claim 8, wherein, when executed, the processor executable instructions cause the one or more processors to randomly select the first set of anonymization characteristics.

11. The apparatus of claim 8, wherein the browser attributes include browser plugins, system fonts, or both.

12. The apparatus of claim 8, wherein the processor-executable instructions further include instructions that, when executed by the one or more processors, cause the one or more processors to:

receive, via the connection, third data from the computing device;

identify a second set of anonymization characteristics responsive to receiving the third data; and

instantiate a second instance of the internet browser application within a second cloud container using the second set of anonymization characteristics.

13. The apparatus of claim 12, wherein the first set of anonymization characteristics is identified, and the first instance of the internet browser application is instantiated, to access a first website during a browsing session, and wherein the second set of anonymization characteristics is identified, and the second instance of the internet browser application is instantiated, to access a second website during the browsing session.

14. The apparatus of claim 8, wherein the processor-executable instructions further include instructions that, when executed by the one or more processors, cause the one or more processors to assign a communication address to the first cloud container, wherein the communication address corresponds to an internet protocol (IP) address within an IP address range associated with the public cloud.

15. A non-transitory processor-readable medium storing processor-executable instructions that, when executed by one or more processors, cause the one or more processors to:

initiate receiving, at a first server from a computing device, a first request to navigate to a first website;

in response to receiving the first request, establish a connection between the first server and the computing device;

identify a first set of anonymization characteristics for a first instance of an access application;

instantiate, within a first cloud container corresponding to the connection, the first instance of the access application using the first set of anonymization characteristics;

generate, using the first instance of the access application, a second header based on the first set of anonymization characteristics;

generate, using the first instance of the access application, a second request by replacing a first header of the first request with the second header;

send, using the first instance of the access application, the second request from the first server to a second server that hosts the first website;

receive, using the first instance of the access application, first data from the second server responsive to the second request; and

initiate sending second data from the first server via the connection to the computing device, the second data determined based on the first data.

16. The non-transitory processor-readable medium of claim 15, wherein the access application corresponds to an internet browser application.

17. The non-transitory processor-readable medium of claim 16, wherein the second data corresponds to an internet browser application interface.

18. The non-transitory processor-readable medium of claim 15, wherein the processor-executable instructions further include instructions that, when executed by the one or more processors, cause the one or more processors to:

receive, via the connection, third data from the computing device;

identify a second set of anonymization characteristics responsive to receiving the third data; and

instantiate a second instance of the access application within a second cloud container using the second set of anonymization characteristics,

wherein the first set of anonymization characteristics is identified, and the first instance of the access application is instantiated, to access a first website during a browsing session, and

wherein the second set of anonymization characteristics is identified, and the second instance of the access application is instantiated, to access a second website during the browsing session.