Method and apparatus for anonymously tracking TV and internet usage

• US 7,472,423 B2
• Filed: 03/27/2002
• Issued: 12/30/2008
• Est. Priority Date: 03/27/2002
• Status: Active Grant

• Current Assignee: Comcast Cable Communications Management LLC (Comcast Corporation)
• Original Assignee: TVWorks LLC (Comcast Corporation)
• Inventors: Xiao, Sihai, DeCenzo, Christopher J
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/107,599
• Publication Number:
  US 20030188171A1
• Time in Patent Office: 2,470 Days
• Field of Search: 726/26, 726/2, 725/2, 725/110, 725/100, 725/131, 725/139, 725/151, 713/185, 713/193, 713/175
• US Class Current: 726/26
• CPC Class Codes: H04H 60/33 Arrangements for monitoring the users' behaviour or opinions
• CPC Class Codes: H04H 60/45 for identifying users
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04N 21/25891 being end-user preferences retrieval of video data in a video database based on user preferences G06F16/739; arrangements for recognizing users' preferences H04H60/46; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/44213 Monitoring of end-user related data arrangements for monitoring the users' behaviour or opinions in broadcast systems H04H60/33
• CPC Class Codes: H04N 21/4751 for defining user accounts, e.g. accounts for children
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/4755 for defining user preferences, e.g. favourite actors or genre retrieval personalisation and generation of user profiles for the retrieval of video data G06F16/739; user profiles in network data switching protocols H04L67/306
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 7/17327 with deferred transmission or handling of upstream communications

Abstract

A system provides for tracking the behavior of television viewers and Internet browsers while protecting the privacy of the user. The level of privacy is under control of the user. In one embodiment, an arbitrary anonymous identifier is assigned to the user. The selection of a new arbitrary anonymous identifier is under the control of the user. In a second embodiment, a private anonymous identifier is based on a user entered password. The user history data is stored on a history server using the private anonymous identifier. An authentication server is provided to validate the private anonymous identifier before transferring the user history data to the history server.

Claims

1. In a settop box having a memory for storing a plurality of user actions at said settop box, a method for anonymously reporting said user actions from said settop box, said method comprising:

receiving a user selected password by said settop box, wherein said user selected password is never permanently recorded or stored;

generating a private anonymous identifier based on said user selected password and said unit identifier associated with said settop box by at least;

concatenating said user selected password and said unit identifier; and

hashing said concatenated user selected password and said unit identifier to form said private anonymous identifier; and

transmitting said private anonymous identifier and said stored user actions from said settop box.

2. A method in accordance with claim 1, wherein said unit identifier is associated with said user.

3. A method in accordance with claim 1, said method further comprising:

concatenating said user selected password and said private anonymous identifier;

hashing said concatenated user selected password and said private anonymous identifier to form a private anonymous identifier check; and

transmitting said private anonymous identifier check from said settop box.

4. In a network system including a settop box, a service provider, a user history server and an authentication server, said settop box having a memory for storing user actions, a method for anonymously reporting said user actions from said settop box, said method comprising:

receiving a user selected password into said settop box, wherein said user selected password is never permanently recorded or stored;

generating a private anonymous identifier based on said user selected password;

a transmitting said user selected password and said private anonymous identifier based on said user selected password to said authentication server;

computing a private anonymous identifier check at said authentication server based on said user selected password and said private anonymous identifier received from said settop box at said authentication server to form a computed private anonymous identifier check;

transmitting said computed private anonymous identifier check to said service provider; and

receiving an indication from said service provider at said authentication server as to whether said computed private anonymous identifier check received from said authentication server is a valid private anonymous identifier check;

computing a validation ticket based on said private anonymous identifier at said authentication server if said indication received from said service provider indicates that said private anonymous identifier check is valid; and

transmitting said validation ticket from said authentication server to said settop box.

5. In a network system in accordance with claim 4, said method further comprising:

transmitting said validation ticket, said private anonymous identifier and said stored user actions from said settop box to said authentication server.

6. In a network system in accordance with claim 5, said method further comprising:

receiving said validation ticket, said private anonymous identifier and said stored user actions from said settop box at said authentication server;

determining whether said validation ticket received from said settop box is valid; and

transmitting said user actions to said user history server, if said validation ticket is determined to be valid.

7. In a network system in accordance with claim 4, said method further comprising:

transmitting said user actions from said authentication server to said user history server, if said indication received from said service provider indicates that said computed private anonymous identifier check is a valid private anonymous identifier check.

8. In a network system in accordance with claim 4, said method further comprising:

transmitting said private anonymous identifier and said stored user actions from said settop box to said authentication server.

9. In a network system in accordance with claim 8, said method further comprising:

transmitting said private anonymous identifier and said stored user actions from said authentication server to said user history server.

10. In a settop box in a network having a service provider, a method for verifying that a re-entered password entered by a user is the same password as a prior password previously entered by said user into said settop box, said method comprising:

computing a first private anonymous identifier based on said password entered by said user;

wherein said user selected password is never permanently recorded or stored;

computing a first private anonymous identifier check based on said first private anonymous identifier;

storing said first private anonymous identifier check in said settop box;

computing a second private anonymous identifier based on said re-entered password entered by said user;

computing a second private anonymous identifier check based on said second private anonymous identifier;

comparing said second private anonymous identifier check and said first private anonymous identifier check stored in said settop box and

transmitting said first private anonymous identifier check from said settop box to said service provider if said second private anonymous identifier check matches said first private anonymous identifier check.

11. In a settop box in accordance with claim 10, said method further comprising:

generating an error message indicating an incorrect password to said user if said second private anonymous identifier check and said first private anonymous identifier check stored in said settop box are not equal.

12. In a settop box in accordance with claim 10, said method further comprising:

transmitting said first private anonymous identifier check from said service provider to said settop box.