Web Page Privacy Risk Detection

• US 20110016533A1
• Filed: 08/18/2008
• Published: 01/20/2011
• Est. Priority Date: 08/18/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Hachamovitch, Dean J., Zeigler, Andrew, Ganjam, Anantha P., Hitchcock, Jessica A., Patton, Mara B., Chor, Anthony T.
• Granted Patent: US 8,621,635 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

Various embodiments enable detection of third party content sources that may pose a privacy risk to a user. In at least some embodiments, webpages navigated to via a browser can be processed to identify third party content sources that provide content for the webpages. Data may be stored to relate the third party content sources to webpages in which the third party content is encountered. The data may then be analyzed to determine when a particular third party is in a position to observe browsing habits of a user. Responsive to determining a privacy risk, notification may be output in a variety of ways to inform a user of potentially risky content. In at least some other embodiments, notification can be made by way of a user interface instrumentality that is automatically presented to a user to inform the user of a potentially risky third party content source.

Claims

1. A computer-implemented method comprising:

receiving HTML code associated with a webpage;

processing the HTML code to identify one or more third parties providing content for the webpage;

for individual identified third parties, storing data to relate a third party to one or more webpages for which the third party provides content;

detecting whether a particular third party is in a position to observe browsing habits of a user according to data stored relative to the particular third party; and

responsive to said detecting, outputting a user interface instrumentality that can enable the user to take one or more actions regarding content from the particular third party.

2. The computer-implemented method of claim 1, wherein said detecting and outputting are performed by a Web browser.

3. The computer-implemented method of claim 1, wherein the user interface instrumentality comprises a pop-up window.

4. The computer-implemented method of claim 1, wherein the user interface instrumentality comprises one or more selectable buttons to enable the user to provide input to specify whether to block or allow the content.

5. The computer-implemented method of claim 1, wherein the user interface instrumentality comprises a selectable link to enable the user to obtain additional information regarding the particular third party.

6. The computer-implemented method of claim 5, wherein the selectable link, when selected, causes a redirection to a website of the particular third party to enable the user to obtain the additional information from the particular third party

7. The computer-implemented method of claim 1, wherein the detecting comprises incrementing a counter associated with the particular third party each time the particular third party is related to a different webpage.

8. The computer-implemented method of claim 1 further comprising:

receiving input from the user via the user interface instrumentality; and

blocking or allowing the content from the particular third party in accordance with the input from the user.

9. A computer-implemented method comprising:

receiving HTML code associated with a webpage;

processing the HTML code to identify content from a third party content source to be included in the webpage;

calculating a number of times content from the third party content source has been encountered in webpages navigated to by an application;

based upon a calculated number of times, ascertaining whether the third party content source is in a position to observe browsing habits of the user of the application.

10. The computer-implemented method of claim 0, further comprising responsive to said ascertaining, outputting a user interface instrumentality to notify the user of a detected third party content source.

11. The computer-implemented method of claim 10, further comprising:

assigning a perceived level of risk to a third party content source based upon the calculated number of times; and

presenting the perceived level of risk via the user interface instrumentality output to notify the user of the detected third party content source.

12. The computer-implemented method of claim 10, wherein the user interface instrumentality is in the form of a menu bar item appearing in a menu bar of the application.

13. The computer-implemented method of claim 0, further comprising responsive to said ascertaining, outputting a user interface instrumentality having a plurality of selectable portions to enable the user to take actions with respect to the detected third party content source, the plurality of selectable portions including at least:

a selectable button to block content from the third party content source; and

a selectable button to allow content from the third party content source.

14. The computer-implemented method of claim 0, wherein the application is a Web browser.

15. The computer-implemented method of claim 0, wherein the ascertaining comprises comparing the calculated number of times content from the third party content source has been encountered to one or more threshold values indicative of a perceived level of risk.

16. A system comprising:

one or more computer readable storage media;

computer readable instructions embodied on the one or more computer readable storage media which, when executed, implement a Web browser configured to;

calculate a number of times a third party content source provides content for webpages navigated to by the Web browser;

determine when the third party content source is in a position to observe browsing habits of a user based upon a calculated number of times; and

output a notification to communicate that the third party content source is in a position to observe browsing habits of the user.

17. The system of claim 16, wherein the Web browser is configured to output the notification as a pop-up window.

18. The system of claim 16, wherein the Web browser is configured to output the notification as a menu bar item of the Web browser.

19. The system of claim 16, wherein the notification that is output includes a plurality of selectable portions to enable a user to allow, block, or ignore the third party content source that is determined to be in a position to observe browsing habits.

20. The system of claim 16, wherein the Web browser is configured to:

maintain a database describing encounters in webpages with multiple content items from third party content sources, wherein the database is configured to store data to match uniform resource indicators (URIs) of each of said content items with webpages in which the content items are encountered; and

merge content items in the database based at least in part upon similarities in URIs of said content items to arrive at the calculated number of times the third party content source provides content for webpages.