ANONYMOUS AND SECURE NETWORK-BASED INTERACTION

• US 20110238829A1
• Filed: 06/08/2011
• Published: 09/29/2011
• Est. Priority Date: 06/28/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Peltonen, Kyle, Flake, Gary, Brunell, Bradly A., Dumais, Susan T., Naam, Ramez, Gupta, Anoop, Goodman, Joshua T., Meek, Christopher A., Horvitz, Eric J.
• Granted Patent: US 8,458,349 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 61/2539 Hiding addresses; Keeping addresses anonymous
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

The subject disclosure pertains to anonymous network interaction. More specifically, mechanisms are provided to ensure anonymity with respect network interaction such that third parties are unable to determine the source and/or intent of communications. Accordingly, entities may anonymize all outgoing and/or incoming data packets so as to mitigate outside entities from learning about information being sought and/or provided. For example, a user or corporation may employ an anonymizer with respect to web searching so that outside entities are not able to determine what information is attempted to be accessed and by whom.

Claims

1. A system that facilitates private and secure network-based interaction comprising the following computer-implemented components:

a computer implemented interface component that receives a network-based communication, the interface component resides within a network; and

a computer implemented anonymizer component that disguises a source identity of the network-based communication so as to minimize adverse effects on communication capabilities, and transmits the network-based communication that is disguised to a target destination outside the network, wherein the anonymizer component disguises the source identity at least by;

monitor network traffic on the network to determine that a user has set preference information for the target destination via a current cookie, the preference information enabling the user to conduct a particular type of search query on the target destination, and

automatically replace the current cookie with a new cookie to hold the preference information to enable the user to repeat the particular type of search query on the target destination via the preference information.

2. The system of claim 1, wherein the anonymizer component maps a device IP address to a random address associated with the system such that the random address is utilized to communicate with other devices rather than the device IP address.

3. The system of claim 1, wherein the anonymizer component disguises an intent of the network-based communication.

4. The system of claim 1, wherein the anonymizer component modifies values returned to a script interpreter.

5. The system of claim 1, wherein the anonymizer component augments or deletes one or more client header values associated with a hypertext transport protocol to mask source software identifying information.

6. The system of claim 1, wherein the anonymizer component alters or removes one or more accept header values to obfuscate types of supported communication.

7. The system of claim 1, wherein the new cookie becomes the current cookie after replacement, and wherein the anonymizer component is to repeat the replacement of the current cookie with another new cookie to hold the preference information.

8. The system of claim 1, wherein the network-based communication includes one of voice-over-IP communication, a search query, or a network navigation.

9. The system of claim 1, further comprising a filter component that controls application of the anonymizer component based on context.

10. A method, comprising:

disguising a source identity of a network-based communication by using an anonymerizer component to at least;

monitor network traffic on a network to determine that a user has set preference information for a target destination via a current cookie, the preference information enabling the user to conduct a particular type of search query on the target destination; and

automatically replace the current cookie with a new cookie to hold the preference information to enable the user to repeat the particular type of search query on the target destination via the preference information; and

transmit the network-based communication that is disguised to the target destination.

11. The method of claim 10, wherein the target destination is outside of the network.

12. The method of claim 10, further comprising mapping, via the anonymerizer component, a device IP address to a random address such that the random address is utilized to communicate with other devices rather than the device IP address.

13. The method of claim 10, wherein the disguising the source identity disguises an intent of the network-based communication.

14. The method of claim 10, further comprising modifying, via the anonymizer component, values returned to a script interpreter.

15. The method of claim 10, further comprising augmenting or deleting, via the anonymzier component, one or more client header values associated with a hypertext transport protocol to mask source software identifying information.

16. The method of claim 10, further comprising altering or removing, via the anonymizer component, one or more accept header values to obfuscate types of supported communication.

17. The method of claim 10, wherein the new cookie becomes the current cookie after replacement, and wherein the anonymizer component repeats the replacement of the current cookie with another new cookie to hold the preference information.

18. The method of claim 10, wherein the network-based communication includes one of voice-over-IP communication, a search query, or a network navigation.

19. A system that facilitates private and secure network-based interaction comprising the following computer-implemented components:

a computer implemented interface component that receives a network-based communication, the interface component resides within a network; and

a computer implemented anonymizer component that disguises a source identity of the network-based communication so as to minimize adverse effects on communication capabilities, and transmits the network-based communication that is disguised to a target destination, wherein the anonymizer component disguises the source identity at least by;

monitor network traffic on the network to determine that a user has set preference information for the target destination via a current cookie, the preference information enabling the user to conduct a particular type of search query on the target destination;

automatically replace the current cookie with a new cookie to hold the preference information to enable the user to repeat the particular type of search query on the target destination via the preference information; and

deleting one or more client header values associated with a hypertext transport protocol of the network-based communication to mask source software identifying information.

20. The system of claim 19, wherein the new cookie becomes the current cookie after replacement, and wherein the anonymizer component is to repeat the replacement of the current cookie with another new cookie to hold the preference information.