Method and system for protecting internet users' privacy by evaluating web site platform for privacy preferences policy

• US 6,959,420 B1
• Filed: 11/30/2001
• Issued: 10/25/2005
• Est. Priority Date: 11/30/2001
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Goldfeder, Aaron R., Schwieterman, Frank M., Mitchell, Darren, Paya, Cem, Dujari, Rajeev, Purpura, Stephen J.
• Primary Examiner(s): Cabeca, John
• Assistant Examiner(s): Hailu, Tadesse
• Application Number:
  US09/999,175
• Time in Patent Office: 1,425 Days
• Field of Search: 715/740, 715/741, 715/742, 715/745, 715/747, 709/226, 709/203, 709/224, 705/51, 705/53, 705/56, 705/74, 707/10, 707/102, 713/200, 713/201, 345/740, 345/741, 345/742, 345/745, 345/747
• US Class Current: 715/745
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A system and method that evaluates privacy policies from web sites to determine whether each site is permitted to perform operations (e.g., store, retrieve or delete) directed to cookies on a user'"'"'s computer. Various properties of each cookie and the context in which it is being used are evaluated against a user'"'"'s privacy preference settings to make the determination. An evaluation engine accomplishes the evaluation and determination via a number of criteria and considerations, including the cookie properties, its current context, the site, the zone that contains the site, and any P3P data (compact policy) provided with the site'"'"'s response. The user privacy preferences are evaluated against these criteria to determine whether a requested cookie operation is allowed, denied or modified. A formalized distinction between first-party cookies versus third-party cookies may be used in the determination, along with whether the cookie is a persistent cookie or a session cookie.

Claims

1. In a client computer, a method comprising:

receiving a response to a client request for content of a remote server, the response including data directed to a requested operation on a cookie;

determining that standardized policy data is present with the response in the form of a set of at least one valid token;

evaluating the standardized policy data against criteria available to the client to provide a privacy result by processing the set, including;

a) selecting a valid token from the set as selected token;

b) obtaining an obtained result corresponding to the selected token;

c) determining whether the obtained result denies the requested operation,

i) and if so, setting the privacy result so as to deny the requested operation and continuing to step e);

ii) and if not, determining whether the obtained result for the selected token provides more privacy than a current most private result, and if so, setting the current most private result to the obtained result;

d) returning to step a) until no other token in the set remains to be processed, and when no other token remains, selecting the current most private result as the privacy result; and

e) returning the privacy result; and

controlling the requested operation on the cookie based on the privacy result.

2. The method of claim 1 wherein evaluating the standardized policy data against criteria available to the client includes processing the standardized policy data to determine whether it is valid.

3. The method of claim 2 wherein processing the standardized policy data determines that at least part of it is valid, and wherein evaluating the standardized policy data to provide a privacy result comprises accessing at least one database based at least in part on the standardized policy data.

4. The method of claim 1 wherein evaluating the standardized policy data against available criteria comprises accessing at least one database based on each valid token in the set to provide a privacy result for each valid token.

5. The method of claim 1 wherein the standardized policy data is present with the response in the form of a plurality of valid tokens, and wherein evaluating the standardized policy data to provide a privacy result comprises, obtaining a privacy result for each valid token to obtain a plurality of possible results, and selecting one of the plurality of possible results as the privacy result.

6. The method of claim 5 wherein selecting one of the plurality of possible results comprises, selecting as the privacy result the possible result that provides for most privacy based on a precedence ordering of possible results.

7. The method of claim 1 wherein the requested operation on the cookie is to store the cookie, and wherein the privacy result is provided such that controlling the requested operation denies the request.

8. The method of claim 1 wherein the requested operation on the cookie is to store the cookie as a persistent cookie, and wherein the privacy result is provided such that controlling the requested operation downgrades the request so as to store the cookie as a session cookie.

9. The method of claim 1 wherein the requested operation on the cookie is to store the cookie, and wherein the privacy result is provided such that controlling the requested operation stores the cookie as a leashed cookie such that the cookie will not be allowed to be replayed in a third party context.

10. The method of claim 1 wherein the requested operation on the cookie is to store the cookie, and wherein the privacy result is provided such that controlling the requested operation includes providing a prompt to obtain additional user information regarding storing the cookie.

11. The method of claim 1 further comprising, varying the privacy result based on processing at least one rule.

12. The method of claim 11 wherein processing the at least one rule comprises determining whether a rule applies.

13. The method of claim 12 wherein determining whether a rule applies comprises evaluating a logical expression.

14. A computer-readable medium having computer executable instructions for performing the method of claim 1.