Method and system for monitoring online computer network behavior and creating online behavior profiles

• US 8,321,952 B2
• Filed: 06/24/2011
• Issued: 11/27/2012
• Est. Priority Date: 06/30/2000
• Status: Expired due to Term

• Current Assignee: Connexity Audience, Inc.
• Original Assignee: Hitwise Pty. Ltd. (Experian plc)
• Inventors: Spalink, Jan-Dieter, Gullette, Brian R. D., Hatchell, Andrew, Nortman, Randall C.
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US13/168,881
• Publication Number:
  US 20110255688A1
• Time in Patent Office: 522 Days
• Field of Search: None
• US Class Current: 726/26
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method and system for monitoring users on one or more computer networks, disassociating personally identifiable information from the collected data, and storing it in a database so that the privacy of the users is protected. In one embodiment, the system generates an anonymized identifier and associates that anonymized identifier with collected network data. An embodiment of the system may further anonymize data such as resource location identifiers, by identifying and removing personal information.

Claims

1. A computer-implemented method for collecting network usage data about one or more users accessing a network and resources thereon without associating personally identifiable information with the usage data, comprising:

maintaining an anonymized identifier relating to a user of a computer network, wherein the anonymized identifier does not reveal personal information of the user;

identifying first data relating to a network communication session between an external network system and the user;

identifying a record of a network request comprising a resource location identifier, the network request being related to the network communication session;

generating a second resource location identifier, wherein generating the second resource location identifier comprises stripping personally identifying data from the resource location identifier based on matching one or more patterns against the resource location identifier; and

storing the second resource location identifier in association with the anonymized identifier and the data relating to the network communication session.

2. The computer-implemented method of claim 1, wherein the anonymized identifier is created by applying a one-way hashing function to data comprising the obtained identifier.

3. The computer-implemented method of claim 2, wherein the data to which the one-way hashing function is applied further comprises a security key.

4. The computer-implemented method of claim 2, wherein the one-way hashing function includes one or more of the following hashing functions:

the Secure Hashing Algorithm 1 (SHA-1), the Message Digest 4 (MD4) algorithm, the Message Digest 5 (MD5) algorithm, or Digital Encryption Standard (DES).

5. The computer-implemented method of claim 1, further comprising monitoring network traffic, collecting data about network transactions and recording the collected data.

6. The computer-implemented method of claim 5, further comprising creating one or more online behavioral profiles, based at least in part on the collected data.

7. The computer-implemented method of claim 1, wherein matching one or more patterns against the resource location identifier comprises searching for a predefined set of words in the resource location identifier.

8. The computer-implemented method of claim 1, wherein the resource location identifier is a Uniform Resource Locator.

9. The computer-implemented method of claim 1, further comprising associating the anonymized identifier with a physical location of the user.

10. The computer-implemented method of claim 9, wherein the physical location of the user is based on a billing address of the user.

11. The computer-implemented method of claim 9, wherein the physical location of the user identifies the general location of that address without revealing personally identifying information of the user.

12. A computer system configured to collect network usage data, the computer system comprising:

computer storage having stored thereon a plurality of modules implemented as executable instructions;

one or more computer processors configured to execute the executable instructions stored on the computer storage medium; and

a user information storage medium having stored thereon an anonymized identifier relating to a user of a computer network, wherein the anonymized identifier does not reveal personal information of the user;

the plurality of modules including a first module configured to identify first data relating to a network communication session between an external network system and the user;

the plurality of modules including a second module configured to identify a record of a network request comprising a resource location identifier, the network request being related to the network communication session;

the plurality of modules including a third module configured to generate a second location identifier, wherein generating the second resource location identifier comprises stripping personally identifying data from the resource location identifier based on matching one or more patterns against the resource location identifier; and

the plurality of modules including a fourth module configured to store the second resource location identifier in association with the anonymized identifier and the data relating to the network communication session.

13. The computer system of claim 12, wherein the anonymized identifier is created by applying a one-way hashing function to data comprising the obtained identifier.

14. The computer system of claim 13, wherein the data to which the one-way hashing function is applied further comprises a security key.

15. The computer system of claim 13, wherein the one-way hashing function includes one or more of the following hashing functions:

the Secure Hashing Algorithm 1 (SHA-1), the Message Digest 4 (MD4) algorithm, the Message Digest 5 (MD5) algorithm, or Digital Encryption Standard (DES).

16. The computer system of claim 12, wherein the plurality of modules further includes a fifth module configured to monitor network traffic, collecting data about network transactions and recording the collected data.

17. The computer system of claim 16, wherein the plurality of modules further includes a sixth module configured to create one or more online behavioral profiles, based at least in part on the collected data.

18. The computer system of claim 12, wherein matching one or more patterns against the resource location identifier comprises searching for a predefined set of words in the resource location identifier.

19. The computer system of claim 12, wherein the resource location identifier is a Uniform Resource Locator.

20. The computer system of claim 12, wherein the plurality of modules further includes a fifth module configured to associate the anonymized identifier with a physical location of the user.

21. The computer system of claim 20, wherein the physical location of the user is based on a billing address of the user.

22. The computer system of claim 20, wherein the physical location of the user identifies the general location of that address without revealing personally identifying information of the user.

23. Non-transitory computer storage having stored thereon a plurality of executable instructions configured to cause one or more processors to perform operations comprising:

reading an anonymized identifier relating to a user of a computer network, wherein the anonymized identifier does not reveal personal information of the user;

identifying first data relating to a network communication session between an external network system and the user;

identifying a record of a network request comprising a resource location identifier, the network request being related to the network communication session;

generating a second resource location identifier, wherein generating the second resource location identifier comprises stripping personally identifying data from the resource location identifier based on matching one or more patterns against the resource location identifier; and

storing the second resource location identifier in association with the anonymized identifier and the data relating to the network communication session.