Protection of sensitive data of a user from being utilized by web services

• US 9,686,242 B2
• Filed: 03/14/2013
• Issued: 06/20/2017
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation), Alcatel-Lucent USA, Inc. (Nokia Corporation)
• Inventors: Shrivastava, Nisheeth, Shukla, Saurabh, Nandi, Animesh, Woo, Thomas, Jaiswal, Sharad, Panjwani, Saurabh
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US13/826,456
• Publication Number:
  US 20140280870A1
• Time in Patent Office: 1,559 Days
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Systems and methods for preventing web services from using sensitive data in customizing web pages for a user. In one embodiment, a protection system is implemented between the user and the web service. The protection system identifies past interactions of the user with the web service, identifies text in the past interactions between the user and the web service, and identifies subjects discussed in the text. The protection system then communicates with the user to determine which of the subjects are sensitive to the user, and deletes a history stored by the web service for the user that relates to the sensitive subjects.

Claims

1. An apparatus comprising:

a protection system comprising a hardware controller implemented in a network in a data path between a device of a user and a web server that provides a web service;

the hardware controller intercepts communications exchanged between the user and the web service over the network, identifies text in the communications between the user and the web service, and identifies subjects discussed in the text;

the controller communicates with the device to display the subjects to the user and determine which of the subjects are sensitive to the user, and interacts with the web server over the network to delete a history for the user from the web server that relates to the sensitive subjects.

2. The apparatus of claim 1 wherein:

the protection system further includes an interface; and

the hardware controller queries the web service through the interface for past communications between the user and the web service.

3. The apparatus of claim 2 wherein:

the past communications comprise past queries to a search engine.

4. The apparatus of claim 1 wherein:

the protection system further includes an interface; and

the hardware controller queries the device of the user through the interface for cookies stored by the device.

5. The apparatus of claim 1 wherein:

the hardware controller assigns sensitivity scores to the subjects, and displays the sensitivity scores for the subjects to the user.

6. The apparatus of claim 5 wherein:

the hardware controller receives input from the user on the sensitivity scores through an interface, and adjusts the sensitivity scores for the subjects based on the input from the user.

7. The apparatus of claim 1 wherein:

the hardware controller intercepts a request for the web service as initiated by the user, parses the request to determine if the request includes text that relates to a sensitive subject, and sends an alert to the user that includes at least one option for handling the request.

8. The apparatus of claim 7 wherein:

the hardware controller makes the request anonymous before sending the request to the web service in response to input from the user.

9. The apparatus of claim 7 wherein:

the hardware controller blocks the request from being sent to the web service in response to input from the user.

10. A method operable in a protection system comprising a hardware controller that is implemented in a network in a data path between a device of a user and a web server that provides a web service, the method comprising:

intercepting, by the hardware controller of the protection system, communications exchanged between the user and the web service over the network;

identifying, by the hardware controller, text in the communications between the user and the web service;

identifying, by the hardware controller, subjects discussed in the text;

communicating, by the hardware controller, with the device to display the subjects to the user and determine which of the subjects are sensitive to the user; and

interacting, by the hardware controller, with the web server over the network to delete a history for the user from the web server that relates to the sensitive subjects.

11. The method of claim 10 further comprising:

querying the web service for past communications between the user and the web service.

12. The method of claim 11 wherein querying the web service for past communications comprises:

querying the web service for past queries to a search engine.

13. The method of claim 10 further comprising:

querying the device of the user for cookies stored by the device.

14. The method of claim 10 further comprising:

assigning sensitivity scores to the subjects; and

displaying the sensitivity scores for the subjects to the user.

15. The method of claim 14 further comprising:

receiving input from the user on the sensitivity scores; and

adjusting the sensitivity scores for the subjects based on the input from the user.

16. The method of claim 10 further comprising:

intercepting a request for the web service as initiated by the user;

parsing the request to determine if the request includes text that relates to a sensitive subject; and

sending an alert to the user that includes at least one option for handling the request.

17. The method of claim 16 further comprising:

anonymizing the request before sending the request to the web service in response to input from the user.

18. The method of claim 16 further comprising:

blocking the request from being sent to the web service in response to input from the user.

19. A non-transitory computer readable medium that stores instructions that, when executed by a computing system, causes the computing system to perform a method of:

intercepting, by a hardware controller of a protection system, communications exchanged between a user and a web service over a network, wherein the hardware controller is implemented in a network in a data path between a device of the user and a web server that provides the web service;

identifying, by the hardware controller, text in the communications between the user and the web service;

identifying, by the hardware controller, subjects discussed in the text;

communicating, by the hardware controller, with the device to display the subjects to the user and determine which of the subjects are sensitive to the user; and

interacting, by the hardware controller, with the web server over the network to delete a history for the user from the web server that relates to the sensitive subjects.

20. The computer readable medium of claim 19, wherein the method further comprises:

intercepting a request for the web service as initiated by the user;

parsing the request to determine if the request includes text that relates to a sensitive subject; and

sending an alert to the user that includes at least one option for handling the request.