METHODS AND SYSTEMS FOR PRIVACY PRESERVING THIRD PARTY EXTENSION

• US 20170039390A1
• Filed: 08/08/2016
• Published: 02/09/2017
• Est. Priority Date: 08/08/2015
• Status: Abandoned Application

• Current Assignee: Jalal Kawash, James Alexander King, Ken Barker
• Original Assignee: Ken Barker
• Inventors: KING, James Alexander, BARKER, Ken, KAWASH, Jalal
• Application Number:
  US15/231,582
• Publication Number:
  US 20170039390A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/9574 of access to content, e.g. by caching
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform is disclosed. The method includes receiving private and non-private user data from a user, providing non-private user data to a remote extension component, receiving remote extension data from the remote extension component and storing it on a local extension cache on the web application platform, providing private user data and remote extension data to a local extension component installed on the platform, executing local extension component instructions in a restricted operating system environment on the platform, receiving local extension data from the local extension component, and providing the local extension data to a user. A non-transitory computer-readable medium storing instructions to implement the method of preserving privacy of private user data using third party extensions on a web application platform, and a related system are also disclosed.

Claims

1. A computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform, comprising executing on at least one computer processor the steps of:

receiving private and non-private user data from a user on the web application platform;

providing non-private user data to a remote extension component executing on a third party computer processor;

receiving remote extension data from the remote extension component and storing the remote extension data on a local extension cache on the web application platform;

providing private user data and remote extension data to a local extension component installed on the web application platform;

executing local extension component instructions in a restricted operating system environment on the web application platform and receiving local extension data from the local extension component; and

providing the local extension data to a user.

2. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

storing private and non-private user data in a user database accessible by the web application platform.

3. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, wherein the restricted operating system environment is configured to prevent communication between the local extension component and any computer processor or electronic device outside the web application platform.

4. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, wherein the restricted operating system environment is configured to prevent transfer of private user data outside of the local extension cache.

5. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, wherein the restricted operating system environment comprises at least one of:

a sandbox running natively on the web application platform; and

a virtualized operating system environment executing on the web application platform.

6. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

installing a local extension component on the web application platform wherein said installing comprises a mutual identity authentication between the third party remote extension component and the web application platform.

7. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

receiving a permission from the user to access the private user data by the local extension component.

8. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

receiving a permission from the user to access the non-private user data by the remote extension component.

9. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

receiving a privacy policy comprising one or more privacy access rules for determining access to the private and non-private user data by the local and remote extension components.

10. The computer-implemented method of preserving privacy of private user data using third party extensions on a web application platform according to claim 1, additionally comprising executing on at least one computer processor the step of:

receiving updated remote extension data from the remote extension component and storing the updated remote extension data on a local extension cache on the web application platform for access by the local extension component.

11. A non-transitory computer-readable medium storing computer-executable instructions to implement a method of preserving privacy of private user data using third party extensions on a web application platform, comprising computer-executable instructions to:

receive private and non-private user data from a user on the web application platform;

provide non-private user data to a remote extension component executing on a third party or untrusted computer processor;

receive remote extension data from the remote extension component and store the remote extension data on a local extension cache on the web application platform;

provide private user data and remote extension data to a local extension component installed on the web application platform;

execute local extension component instructions in a restricted operating system environment on the web application platform and receive local extension data from the local extension component; and

provide the local extension data to a user.

12. The non-transitory computer-readable medium according to claim 11, wherein the method of preserving privacy of private user data using third party extensions on a web application platform additionally comprises executing on at least one computer processor the step of:

storing private and non-private user data in a user database accessible by the web application platform.

13. The non-transitory computer-readable medium according to claim 11, wherein the restricted operating system environment is configured to prevent communication between the local extension component and any computer processor or electronic device outside the web application platform.

14. The non-transitory computer-readable medium according to claim 11, wherein the restricted operating system environment is configured to prevent transfer of private user data outside of the local extension cache.

15. The non-transitory computer-readable medium according to claim 11, wherein the restricted operating system environment comprises at least one of:

a sandbox running natively on the web application platform; and

a virtualized operating system environment executing on the web application platform.

16. The non-transitory computer-readable medium according to claim 11, wherein the method of preserving privacy of private user data using third party extensions on a web application platform additionally comprises executing on at least one computer processor the step of:

installing a local extension component on the web application platform wherein said installing comprises a mutual identity authentication between the third party remote extension component and the web application platform.

17. The non-transitory computer-readable medium according to claim 11, wherein the method of preserving privacy of private user data using third party extensions on a web application platform additionally comprises executing on at least one computer processor the step of:

receiving a permission from the user to access the private user data by the local extension component.

18. The non-transitory computer-readable medium according to claim 11, wherein the method of preserving privacy of private user data using third party extensions on a web application platform additionally comprises executing on at least one computer processor the step of:

receiving a permission from the user to access the non-private user data by the remote extension component.

19. The non-transitory computer-readable medium according to claim 11, wherein the method of preserving privacy of private user data using third party extensions on a web application platform additionally comprises executing on at least one computer processor the step of:

receiving a privacy policy comprising one or more privacy access rules for determining access to the private and non-private user data by the local and remote extension components.

20. A system for preserving privacy of private user data using third party extensions on a web application platform, the system comprising:

at least one computer processor;

at least one network interface;

a non-transitory computer-readable memory module; and

computer-readable instructions stored in the computer-readable memory module, wherein the computer-readable instructions when executed, are operable to configure the at least one computer processor to;

receive private and non-private user data from a user on the web application platform;

provide non-private user data to a remote extension component executing on a third party computer processor;

receive remote extension data from the remote extension component and store the remote extension data on a local extension cache on the web application platform;

provide private user data and remote extension data to a local extension component installed on the web application platform;

execute local extension component instructions in a restricted operating system environment on the web application platform and receive local extension data from the local extension component; and

provide the local extension data to a user.