Reverse Mapping Method and Apparatus for Form Filling

• US 20090287923A1
• Filed: 07/29/2009
• Published: 11/19/2009
• Est. Priority Date: 07/30/2003
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: HOHENSTEIN, Eric, TOPALOV, Ognian Z.
• Granted Patent: US 8,413,252 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 15/167 using a common memory, e.g. mailbox
• CPC Class Codes: G06F 40/174 Form filling; Merging

Abstract

In the presently preferred embodiment of the invention, every time a user submits a form the client software tries to match the submitted information with the stored profile of that user. If a match is discovered, the program tags the field of the recognized data with a corresponding type. The resulting profile can be used after that to help all subsequent users to fill the same form.

Claims

1. A method for downloading a user'"'"'s profile in a reverse mapping form fill application without challenging said user with a higher level of authentication, comprising the steps of:

encrypting said user profile with a user specific symmetric key, stored in a user database; and

storing said encrypted profile on said user'"'"'s system after a first time said user authenticates with a higher-level authentication from said system.

2. A method for downloading a user'"'"'s profile in a reverse mapping form fill application without challenging said user with a higher level of authentication, comprising the step of:

using less than every character from said user profile when downloading said user profile;

wherein only a subset of said user profile is potentially revealed, while sufficient confidence is obtained in said user profile to generate a reverse mapping.

3. A method for maintaining privacy with regard to a user'"'"'s profile in a reverse mapping form fill application, comprising the steps of:

generating a large, random number token at a server, said server signing said token with a certificate, and storing said token persistently on said user'"'"'s system a first time said user authenticates with a second level password;

flagging said user to prevent issuing of multiple tokens for a same user;

wherein the random number used in said token assures that real user identities are not traceable; and

wherein communications are identifiable for unique users without knowing an actual identity of said users themselves.

4. The method of claim 3, wherein said token and signature are included in all communications between said user and a reverse mapping server.

5. An apparatus for downloading a user'"'"'s profile in a reverse mapping form fill application without challenging said user with a higher level of authentication, comprising:

a module for encrypting said user profile with a user specific symmetric key, stored in a user database; and

a memory storing said encrypted profile on said user'"'"'s system after a first time said user authenticates with a higher-level authentication from said system.

6. An apparatus for downloading a user'"'"'s profile in a reverse mapping form fill application without challenging said user with a higher level of authentication, comprising:

a module for using less than every character from said user profile when downloading said user profile;

wherein only a subset of said user profile is potentially revealed, while sufficient confidence is obtained in said user profile to generate a reverse mapping.

7. An apparatus for maintaining privacy with regard to a user'"'"'s profile in a reverse mapping form fill application, comprising:

a pseudo-random number generator for generating a large, random number token at a server;

a module associated with said server for signing said token with a certificate;

a memory for storing said token persistently on said user'"'"'s system a first time said user authenticates with a second level password;

a module for flagging said user to prevent issuing of multiple tokens for a same user;

wherein the random number used in said token assures that real user identities are not traceable; and

wherein communications are identifiable for unique users without knowing an actual identity of said users themselves.

8. The apparatus of claim 7, wherein said token and signature are included in all communications between said user and a reverse mapping server.