SYSTEM AND METHOD FOR PRIVATE SOCIAL NETWORKING

• US 20120023332A1
• Filed: 07/25/2011
• Published: 01/26/2012
• Est. Priority Date: 07/23/2010
• Status: Active Grant

• Current Assignee: Intersections Incorporated (Aura Sub, LLC)
• Original Assignee: Anchorfree Incorporated
• Inventors: Gorodyansky, David
• Granted Patent: US 9,807,100 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

System protects user'"'"'s data on social networking websites by creating a data filter, which operates between the user and the social networks accessed by the user. The filter may be deployed as a user'"'"'s web browser plug-in and operates in the following way. First, the filter encrypts all or some information that is posted by the user on a social network using SSL encryption technology. Second, to enable select other users of the social networking site to view the encrypted information, the instances of the filter executing on the accessing users'"'"' computers verify whether these users have access permission from the owner of the content and, if so, use the decryption key to decrypt the private data and enable the users to view it. The decryption key may be automatically passed to the instances of the filter running on the accessing users'"'"' computers. In an alternative implementation, the encryption and access control may be performed by a security/privacy mediator deployed on the network.

Claims

1. A computerized system comprising:

a. A privacy mediator enabling a first user of a first user terminal to post at least a first content to a social networking website and enabling a second user of a second user terminal to retrieve at least the first posted content from the social networking website, the privacy mediator operable to secure at least a portion of the first content prior to posting on the social networking website and to render accessible the secured portion of the first content prior to furnishing to the second user terminal; and

b. A web server communicatively coupled with the privacy mediator, the first user terminal and the second user terminal and operable to furnish the retrieved first content to the second user terminal, wherein the web server is further operable to receive the first content from the first user terminal and to transmit the first content to the privacy mediator for posting to the social networking website and wherein the first content is posted to the social networking website in a secure form.

2. The system of claim 1, wherein the privacy mediator is operable to secure the at least a portion of the first content by encrypting the at least a portion of the first content and render accessible the secured portion of the first content by decrypting the encrypted at least a portion of the first content.

3. The system of claim 2, wherein the privacy mediator encrypts the at least a portion of the first content using an encryption key and wherein the encryption key is provided to the second user.

4. The system of claim 2, wherein the privacy mediator is operable to receive from the first user terminal designation of the portion of the first content for encryption.

5. The system of claim 4, wherein the remaining portion of the first content not designated for encryption is not encrypted.

6. The system of claim 1, wherein the web server is further operable to receive from the first user terminal a designation of the second user and to enable the designated second user to view the first content.

7. The system of claim 1, wherein the privacy mediator is operable to authenticate the first user and the second user.

8. The system of claim 1, wherein the privacy mediator is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with a reference and render accessible the secured portion of the first content by providing the at least a portion of the first content based on the reference.

9. The system of claim 1, wherein the privacy mediator is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with an obfuscated content and render accessible the secured portion of the first content by providing the at least a portion of the first content based on the obfuscated content.

10. The system of claim 1, wherein the privacy mediator is operable to automatically determine identity of the second user based on a predetermined criterion specified by the first user.

11. A computerized system comprising:

a. A first user terminal comprising a first networking interface operable to establish a first connection with a social networking website and a first central processing unit executing a first instance of a filter application operable to receive from the first user at least a first content and to post the received at least first content to the social networking website, the first instance of the filter operable to secure at least a portion of the first content prior to posting to the social networking website; and

b. A second user terminal comprising a second networking interface operable to establish a second connection with the social networking website and a second central processing unit executing a second instance of the filter enabling a second user of the second user terminal to retrieve the at least the first posted content from the social networking website, the second instance of the filter operable to render accessible the secured portion of the first content prior to furnishing to the second user.

12. The system of claim 11, wherein the first instance of the filter application is operable to secure the at least a portion of the first content by encrypting the at least a portion of the first content and wherein the second instance of the filter application is operable to render accessible the secured portion of the first content by decrypting the encrypted at least a portion of the first content.

13. The system of claim 12, wherein the first instance of the filter application encrypts the at least a portion of the first content using an encryption key and wherein the encryption key is provided to the second instance of the filter application based on authentication of the second user by the second instance of the filter application and access control rules received by the first user by the first instance of the filter application.

14. The system of claim 12, wherein the first instance of the filter application is operable to receive from the first user designation of the portion of the first content for encryption.

15. The system of claim 14, wherein the remaining portion of the first content not designated for encryption is not encrypted.

16. The system of claim 11, wherein the first instance of the filter application is further operable to receive from the first user a designation of the second user and to enable the designated second user to view the first content.

17. The system of claim 11, wherein the first instance of the filter application is operable to authenticate the first user and the second instance of the filter application is operable to authenticate the second user and verify access rights of the second user to the at least first content based on access rules received from the first user.

18. The system of claim 11, wherein the first instance of the filter application is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with a reference and wherein the second instance of the filter application is operable to render accessible the secured portion of the first content by providing the at least a portion of the first content based on the reference.

19. The system of claim 11, wherein the first instance of the filter application is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with an obfuscated content and wherein the second instance of the filter application is operable to render accessible the secured portion of the first content by providing the at least a portion of the first content based on the obfuscated content.