SOCIAL NETWORK PRIVACY AUDITOR

• US 20150312263A1
• Filed: 12/06/2012
• Published: 10/29/2015
• Est. Priority Date: 12/06/2012
• Status: Abandoned Application

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Bhamidipati, Sandilya, Fawaz, Nadia
• Application Number:
  US14/647,878
• Publication Number:
  US 20150312263A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 2212/1032 Reliability improvement, data loss prevention, degraded operation etc
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A privacy auditor determines discrepancies between user privacy settings in a social network and installed applications. The privacy auditor can employ a privacy determinator that tests an installed application on various privacy levels to determine actual privacy settings of the installed application. The privacy auditor then uses a privacy comparator to derive differences between the actual privacy settings of the installed application and the user privacy settings from the social network.

Claims

1. A system that evaluates privacy settings, comprising:

a privacy determinator that determines data access levels of an application associated with a social network; and

a privacy comparator that compares social network privacy settings of a user of the social network to the determined data access levels.

2. The system of claim 1, wherein the data access levels are based on a degree of association of a user of the social network and a user who initiates an installation of the application associated with the social network.

3. The system of claim 1, wherein the privacy determinator emulates a user with different degrees of association with a primary user to determine the data access levels of the application associated with the social network.

5. The system of claim 1, wherein the privacy comparator sends a notification when it detects differences between the social network privacy settings and the determined data access levels.

6. The system of claim 1, wherein the privacy comparator creates a user interface that shows the compared information between the social network privacy settings and the determined data access levels.

4. The system of claim I, wherein the social network privacy settings are based on at least one of user settings, social network settings, social network default settings and combinations of user settings and social network settings.

7. A method for evaluating privacy settings, comprising:

building a network of interconnected user accounts with degrees of association to a primary user, the network based on user accounts from a social network;

obtaining privacy levels for data types and association degrees between the primary user and other users;

creating privacy data testers at various nodes in the social network to test data access by other entities; and

comparing data retrieved by the privacy data testers to data authorized to be accessible according to specified privacy levels of the primary user of the social network.

8. The method of claim 7 further comprising:

displaying comparison data between the privacy settings and the tested data access.

9. The method of claim 7 further comprising:

notifying at least one of the social network, the primary user and another entity of differences in the compared data.

10. The method of claim 7, wherein the degrees of association include at least one of a friend, a friend of a friend, a relative and a user unknown to the primary user.

11. A system that determines data privacy discrepancies, comprising:

a means for determining data access levels of an application associated with a social network; and

a means for comparing social network privacy settings of a user of the social network to the determined data access levels.

12. The system of claim 11 further comprising:

a means for building a network of interconnected user accounts with degrees of association to a primary user, the network based on user accounts from a social network;

a means for specifying different privacy levels for data types and association degrees between the primary user and other users;

a means for creating test applications at various nodes in the social network to test data access by other applications; and

a means for comparing data retrieved by the test applications to data authorized to be accessible according to specified privacy levels of the primary user of the social network.

13. The system of claim 11 further comprising:

a means for displaying the compared information.

14. The system of claim 11 further comprising:

a means for providing notification when a difference is detected between the compared information.