Online privacy management system with enhanced automatic information detection

• US 9,923,900 B2
• Filed: 07/25/2016
• Issued: 03/20/2018
• Est. Priority Date: 12/30/2010
• Status: Active Grant

• Current Assignee: CHEQ AI Technologies (2018) Ltd. (Cheq Technologies Ltd.)
• Original Assignee: Ensighten, Inc. (Cheq Technologies Ltd.)
• Inventors: Goodwin, Joshua C., Manion, Joshua R.
• Primary Examiner(s): ABEDIN, SHANTO
• Application Number:
  US15/218,157
• Publication Number:
  US 20160337367A1
• Time in Patent Office: 603 Days
• Field of Search: 726 2- 4, 726 26- 30
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A privacy management system (PMS) is disclosed for a Chief Privacy Officer (CPO) or other user to use in monitoring and/or controlling in realtime the flow of data (e.g., outflow) about the user and his/her online experience. The PMS may employ pattern recognition software to evaluate analytics data and potentially block private information from being sent within the analytics data. The PMS may provide a dashboard displaying a whitelist and/or blacklist indicating what destinations/sources are blocked or allowed as well as private information settings indicating what types of private information should be blocked. The PMS includes browser-client scripting code and may also include a PMS-certified verification icon and/or lock and unlock icons for display on webpages being monitored/controlled in realtime by the PMS.

Claims

1. A method comprising:

presenting, by a computing device, a user interface configured to receive user input indicating that transmission of a type of private information to a remotely-located computing device is not permitted;

replicating, by the computing device, a first node of an object model of a webpage in a web browser installed on the computing device to obtain a web browser object comprising user-related data of the first node, wherein the web browser object performs push model functionality of a wrapper object that overrides a predefined object;

configuring, by the computing device, the web browser object to perform an analysis of the user-related data responsive to an attempt to access the user-related data by a second node of the object model;

configuring, by the computing device, the web browser object to prevent the second node from accessing the user-related data responsive to determine from the analysis that the user-related data corresponds to the type of private information;

configuring, by the computing device, the web browser object to refrain from providing the user-related data to the second node;

configuring, by the computing device, the web browser object to obtain modified user-related data based on the user-related data of the first node and provide the modified user-related data to the second node instead of the user-related data, wherein a format of the modified user-related data matches a format of the user-related data; and

replacing, by the computing device, the first node of the object model with the web browser object.

2. The method of claim 1, wherein the user interface is further configured to receive additional user input comprising user-specified data and an indication that the user-specified data is not permitted to be transmitted to the remotely-located computing device and further comprising:

configuring the web browser object to prevent the second node from accessing the user-related data responsive to determining from the analysis that the user-related data matches the user-specified data.

3. The method of claim 1, further comprising:

configuring the web browser object to prevent the second node from accessing the user-related data responsive to determining from the analysis that the user-related data corresponds to the type of private information and that the user-related data matches correct user-related data associated with a visitor to the webpage.

4. The method of claim 1, wherein:

the computing device is associated with an owner of the webpage.

5. The method of claim 1, wherein:

the computing device is associated with a visitor to the webpage.