System and method for monitoring secure data on a network

• US 9,401,897 B2
• Filed: 08/04/2014
• Issued: 07/26/2016
• Est. Priority Date: 07/24/2002
• Status: Expired due to Term

• Current Assignee: The Nielsen Company LLC (MOOD Media Corporation)
• Original Assignee: The Nielsen Company LLC (MOOD Media Corporation)
• Inventors: Zhou, Todd Tao, Batista, Ricardo
• Primary Examiner(s): HO, DAO Q
• Application Number:
  US14/451,224
• Publication Number:
  US 20150019861A1
• Time in Patent Office: 722 Days
• Field of Search: 713/168, 709/224
• US Class Current: 1/1
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A system and method for monitoring secure digital data on a network are provided. An exemplary network monitoring system may include a network device in communication with a user and a network. Further, a server may be in communication with the network. A browser and monitoring program may be stored on the network device, and the network device may receive secure digital data from the network. The browser may convert the secure digital data or a portion thereof into source data, and the monitoring program may transfer the source data or a portion thereof to the server. In an exemplary embodiment, the monitoring program may include a service component and an interface program.

Claims

1. A method of monitoring, the method comprising:

instructing a browser on a network device to decrypt secure digital data and store the decrypted secure digital data in a first storage area of the network device, the secure digital data received from a content provider in communication with the network device, the instructing of the browser performed by a processor of the network device executing a monitoring program, the monitoring program received from a monitoring entity;

accessing the decrypted secure digital data from the first storage area to generate a tree structure associated with the decrypted secure digital data;

when a node of the tree structure includes a secure uniform resource locator (URL), storing the node of the tree structure associated with the secure URL in a second storage area;

determining auxiliary data from the stored node of the tree structure;

filtering the auxiliary data to remove sensitive information;

encrypting the auxiliary data; and

transmitting the encrypted auxiliary data to a server of the monitoring entity to monitor activity of the browser, the server being different from the network device and different from the content provider.

2. The method as defined in claim 1, wherein the auxiliary data includes timer data and input tracking data.

3. The method as defined in claim 2, wherein the timer data includes at least one of a duration of content download, a duration of browsing activity, or a duration of exposure to a web page.

4. The method as defined in claim 2, wherein the input tracking data includes at least one of a cursor position, spatial input locations with respect to the display of the network device, keystrokes, or an orientation of a peripheral input device.

5. The method as defined in claim 1, wherein the auxiliary data is gathered in a secure hypertext transfer protocol session.

6. The method as defined in claim 1, wherein the sensitive information further includes credit card and address information.

7. An apparatus comprising:

a storage device including instructions for execution by a hardware processor in communication with a network device, the instructions, when executed, to cause the hardware processor to;

instruct a browser on the network device to decrypt secure digital data and store the decrypted secure digital data in a storage area of the network device, the secure digital data received from a content provider in communication with the network device; and

access the decrypted secure digital data from the storage area to generate a tree structure associated with the decrypted secure digital data;

when a node of the tree structure includes a secure uniform resource locator (URL), determine auxiliary data from the node of the tree structure;

filter the auxiliary data to remove sensitive information;

encrypt the auxiliary data; and

transmit the encrypted auxiliary data to a server of a monitoring entity to monitor activity of the browser, the server being different from the network device and different from the content provider.

8. The apparatus according to claim 7, wherein the auxiliary data includes timer data and input tracking data.

9. The apparatus according to claim 8, wherein the timer data includes at least one of a duration of content download, a duration of browsing activity, or a duration of exposure to a web page.

10. The apparatus according to claim 8, wherein the input tracking data includes at least one of a cursor position, spatial input locations with respect to the display of the network device, keystrokes, or orientation of a peripheral input device.

11. The apparatus according to claim 7, wherein the auxiliary data is gathered in a secure hypertext transfer protocol.

12. The apparatus according to claim 7, wherein the sensitive information further includes credit card and address information.

13. A tangible computer readable storage device or storage disc comprising instructions that, when executed, cause a network device to execute a monitoring program to at least:

instruct a browser on the network device to decrypt secure digital data and store the decrypted secure digital data in a storage area of the network device, the secure digital data received from a content provider in communication with the network device, the instructing of the browser performed by a processor of the network device executing the monitoring program, the monitoring program received from a monitoring entity;

access the decrypted secure digital data from the storage area to generate a tree structure associated with the decrypted secure digital data;

when a node of the tree structure includes a secure uniform resource locator (URL), determine auxiliary data from the node of the tree structure;

filter the auxiliary data to remove sensitive information;

encrypt the auxiliary data; and

transmit the encrypted auxiliary data to a server of the monitoring entity to monitor activity of the browser, the server being different from the network device and different from the content provider.

14. The storage device or storage disc according to claim 13, wherein the auxiliary data includes timer data and input tracking data.

15. The storage device or storage disc according to claim 14, wherein the timer data includes at least one of a duration of content download, a duration of browsing activity, or a duration of exposure to a web page.

16. The storage device or storage disc according to claim 14, wherein the input tracking data includes at least one of a cursor position, spatial input locations with respect to the display of the network device, keystrokes, or orientation of a peripheral input device.

17. The storage device or storage disc according to claim 13, wherein the sensitive information further includes credit card and address information.