Method and system for providing user control over receipt of cookies from e-commerce applications

• US 7,921,152 B2
• Filed: 07/17/2003
• Issued: 04/05/2011
• Est. Priority Date: 07/17/2003
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ashley, Paul Anthony, Vandenwauver, Mark, Muppidi, Sridhar R.
• Primary Examiner(s): Doan; Duyen M
• Assistant Examiner(s): Hussain; Tauqir
• Application Number:
  US10/621,934
• Publication Number:
  US 20050015429A1
• Time in Patent Office: 2,819 Days
• Field of Search: 709/200, 709/203, 709/219, 709225-226, 709/229
• US Class Current: 709/203
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A method, system, apparatus, and computer program product are presented for processing cookies that are transmitted from a server through a proxy server to a client that is operated by a user. The proxy server detects that a response message from the server for the client has an associated cookie. The proxy server extracts a domain identifier associated with the server from the response message, and the proxy server retrieves a set of parameters that contain domain identifiers that are associated with indications of whether to block transmission of cookies from servers associated with the domain identifiers. The proxy server then processes the cookie in the response message in accordance with the retrieved set of parameters and the extracted domain identifier, either blocking or not blocking cookies from the identified domain. Blocked cookies are cached for subsequent use. Multiple sets of parameters may be configured by the user.

Claims

1. A method for processing at a proxy server data transmitted between a server and a client that is operated by a user, wherein the proxy server communicates with the client and the server through a network, the method comprising:

receiving a set of parameters in a client message at the proxy server, wherein the set of parameters are configured by the user at the client;

storing the set of parameters at the proxy server, wherein the parameters comprise a list of non-filtered domains and a list of filtered domains;

receiving at the proxy server a response message from the server for the client;

detecting at the proxy server a cookie associated with the response message;

extracting from the response message a domain identifier associated with the server;

retrieving the set of parameters; and

processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, wherein the processing step comprises;

serving the response message from the proxy server to the client if the extracted domain identifier is on the list of non-filtered domains;

if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, caching the cookie and forwarding a modified response message from the proxy server to the client; and

if the extracted domain identifier is not on the list of non-filtered domains and is not on the list of filtered domains, prompting the user to enter a parameter for the extracted domain identifier, and adding that parameter to the set of parameters.

2. The method of claim 1 wherein after adding that parameter to the set of parameters, the processing step further comprises:

sending the response message along with its associated cookie to the client.

3. The method of claim 1 further comprising:

determining, prior to processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, if the set of parameters contains an indication that the user has enabled cookie processing by the proxy server.

4. The method of claim 1 further comprising:

managing multiple sets of parameters for the user at the proxy server, wherein each set of parameters is associated with an identifier; and

selecting by the user a first identifier that is associated with the set of parameters prior to retrieving the set of parameters, wherein the set of parameters is retrieved in accordance with the selected first identifier.

5. The method of claim 4 wherein the first identifier is selecting during an authentication operation.

6. The method of claim 4 further comprising:

selecting a second identifier; and

processing the cookie at the proxy server in accordance with a set of parameters that is associated with the second identifier.

7. The method of claim 4 wherein identifiers that are associated with sets of parameters are chosen from a group comprising a type of client device or a client location.

24. The method of claim 1 wherein if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, the processing step further comprises:

blocking the cookie from transmission from the proxy server to the client.

25. The method as described in claim 1 wherein the set of parameters comprise a first subset of parameters associated with a first profile associated with the user, and a second subset of parameters associated with the user.

26. The method as described in claim 1 wherein the step of retrieving the set of parameters retrieves the first subset of parameters or the second subset of parameters based on a configuration setting associated with the user.

8. An apparatus for processing at a proxy server data transmitted between a server and a client that is operated by a user, wherein the proxy server communicates with the client and the server through a network, the apparatus comprising:

a processor;

a computer memory holding computer program instructions which when executed by the processor perform a method comprising;

receiving a set of parameters in a client message at the proxy server, wherein the set of parameters are configured by the user at the client;

storing the set of parameters at the proxy server, wherein the parameters comprise a list of non-filtered domains and a list of filtered domains;

receiving at the proxy server a response message from the server for the client;

detecting at the proxy server a cookie associated with the response message;

extracting from the response message a domain identifier associated with the server;

retrieving the set of parameters; and

processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, wherein the processing step comprises;

serving the response message from the proxy server to the client if the extracted domain identifier is on the list of non-filtered domains;

if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, caching the cookie and forwarding a modified response message from the proxy server to the client; and

if the extracted domain identifier is not on the list of non-filtered domains and is not on the list of filtered domains, prompting the user to enter a parameter for the extracted domain identifier, and adding that parameter to the set of parameters.

9. The apparatus of claim 8 wherein if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, the processing step of the method further comprises:

blocking the cookie from transmission from the proxy server to the client.

10. The apparatus of claim 8 wherein after adding that parameter to the set of parameters, the processing step of the method further comprises:

sending the response message along with its associated cookie to the client.

11. The apparatus of claim 8 wherein the method further comprises:

determining, prior to processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, if the set of parameters contains an indication that the user has enabled cookie processing by the proxy server.

12. The apparatus of claim 8 wherein the method further comprises:

managing multiple sets of parameters for the user at the proxy server, wherein each set of parameters is associated with an identifier; and

selecting by the user a first identifier that is associated with the set of parameters prior to retrieving the set of parameters, wherein the set of parameters is retrieved in accordance with the selected first identifier.

13. The apparatus of claim 12, wherein the first identifier is selecting during an authentication operation.

14. The apparatus of claim 12 wherein the method further comprises:

selecting a second identifier; and

processing the cookie at the proxy server in accordance with a set of parameters that is associated with the second identifier.

15. The apparatus of claim 12 wherein identifiers that are associated with sets of parameters are chosen from a group comprising a type of client device or a client location.

16. A computer program product in a non-transitory computer readable medium for use at a proxy server for processing data transmitted between a server and a client that is operated by a user, wherein the proxy server communicates with the client and the server through a network, the computer program product holding computer program instructions which when executed by the proxy server perform a method comprising:

receiving a set of parameters in a client message at the proxy server, wherein the set of parameters are configured by the user at the client;

storing the set of parameters at the proxy server, wherein the parameters comprise a list of non-filtered domains and a list of filtered domains;

receiving at the proxy server a response message from the server for the client;

detecting at the proxy server a cookie associated with the response message;

extracting from the response message a domain identifier associated with the server;

retrieving the set of parameters; and

processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, wherein the processing step comprises;

serving the response message from the proxy server to the client if the extracted domain identifier is on the list of non-filtered domains;

if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, caching the cookie and forwarding a modified response message from the proxy server to the client; and

if the extracted domain identifier is not on the list of non-filtered domains and is not on the list of filtered domains, prompting the user to enter a parameter for the extracted domain identifier, and adding that parameter to the set of parameters.

17. The computer program product of claim 16 wherein if the extracted domain identifier is not on the list of non-filtered domains but is on the list of filtered domains, the processing step of the method further comprises:

blocking the cookie from transmission from the proxy server to the client.

18. The computer program product of claim 16 wherein after adding that parameter to the set of parameters, the processing step of the method further comprises:

sending the response message along with its associated cookie to the client.

19. The computer program product of claim 16 wherein the method further comprises:

determining, prior to processing the cookie at the proxy server in accordance with the retrieved set of parameters and the extracted domain identifier, if the set of parameters contains an indication that the user has enabled cookie processing by the proxy server.

20. The computer program product of claim 16 wherein the method further comprises:

managing multiple sets of parameters for the user at the proxy server, wherein each set of parameters is associated with an identifier; and

selecting by the user a first identifier that is associated with the set of parameters prior to retrieving the set of parameters, wherein the set of parameters is retrieved in accordance with the selected first identifier.

21. The computer program product of claim 20 wherein the first identifier is selecting during an authentication operation.

22. The computer program product of claim 20 wherein the method further comprises:

selecting a second identifier; and

processing the cookie at the proxy server in accordance with a set of parameters that is associated with the second identifier.

23. The computer program product of claim 20 wherein identifiers that are associated with sets of parameters are chosen from a group comprising a type of client device or a client location.