Securing information exchanged via a network
View Patent ↗A privacy key is provided over a network. An information page is provided over the network. A submission of data that is to be transmitted over the network in response to the information page is detected. A subset of the data is to be encrypted using the privacy key is determined. The privacy key is used to encrypt the subset of the data.
1. A method, comprising:
detecting a first submission of data that is to be transmitted over a network;
determining that a subset of the first submission of data is to be encrypted using a stored privacy key;
retrieving the stored privacy key along with an identifier that is one of a plurality of identifiers for the stored privacy key;
using the stored privacy key to encrypt the subset of the first submission of data; and
transmitting the encrypted subset of the first submission of data and the identifier for the stored privacy key via the network;
detecting a second submission of data that is to be transmitted over the network;
determining that a subset of the second submission of data is to be encrypted using the stored privacy key;
retrieving the stored privacy key from local storage along with a second identifier of the plurality of identifiers for the stored privacy key;
using the stored privacy key to encrypt the subset of the second submission of data; and
transmitting the encrypted subset of the second submission of data and the second identifier for the stored privacy key via the network.
2. The method of claim 1 , further comprising, prior to detecting the first submission of data:
receiving a privacy key over the network; and
locally storing the received privacy key.
3. The method of claim 2 , wherein the received privacy key is transmitted over the network using a secure protocol.
4. The method of claim 1 , further comprising, prior to retrieving the stored privacy key, determining if the privacy key is locally stored, and downloading the privacy key from a remote device when the privacy key is not locally stored.
5. The method of claim 1 , wherein retrieving the stored privacy key includes retrieving the privacy key from one of a cookie, a script included in an information page, and a cache.
6. The method of claim 1 , wherein determining that a subset of a submission of data is to be encrypted includes:
determining which data is sensitive and a candidate for interception.
7. The method of claim 1 ,
wherein the plurality of identifiers identifies a combination of the stored privacy key and at least one of a user and a device associated with data to be transmitted.
8. The method of claim 1 , tangibly embodied as computer-executable instructions stored on a non-transitory computer-readable medium.
9. The method of claim 1 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.
10. A method, comprising:
receiving a privacy key and an information page over a network;
detecting a first submission of data that is to be transmitted over the network in response to the information page;
determining that a subset of the first submission of data is to be encrypted using the privacy key;
using the privacy key to encrypt the subset of the first submission of data; and
transmitting the encrypted subset of the first submission of data and an identifier that is one of a plurality of identifiers for the privacy key to a remote device over the network,
wherein the identifier for the privacy key is a concatenated string of the privacy key and another string that has been encrypted;
detecting a second submission of data that is to be transmitted over the network;
determining that a subset of the second submission of data is to be encrypted using the privacy key;
using the privacy key to encrypt the subset of the second submission of data; and
transmitting the encrypted subset of the second submission of data and a second identifier for the privacy key via the network.
11. The method of claim 10 , wherein the privacy key is transmitted over the network using a secure protocol.
12. The method of claim 10 , wherein determining that a subset of a submission of a submission of data is to be encrypted includes:
determining which data is sensitive and a candidate for interception.
13. The method of claim 10 , tangibly embodied as computer-executable instructions stored on a non-transitory computer-readable medium.
14. The method of claim 10 , wherein the identifier is encrypted by the remote device using a key known only to the remote device.
15. The method of claim 10 , wherein the other string is a nonce.
16. The method of claim 10 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.
17. A system, comprising a computing device having a processor and a memory, the memory storing instructions executable by the processor whereby the computing device is configured to:
receive a privacy key and an information page over a network;
detect a first submission of data that is to be transmitted over the network in response to the information page;
determine that a subset of the first submission of data is to be encrypted using the privacy key;
use the privacy key to encrypt the subset of the first submission of data; and
transmit the encrypted subset of the first submission of data and an identifier that is one of a plurality of identifiers for the privacy key to a remote device over the network, wherein the identifier for the privacy key is a concatenated string of the privacy key and another string that has been encrypted;
detect a second submission of data that is to be transmitted over the network;
determine that a subset of the second submission of data is to be encrypted using the privacy key;
use the privacy key to encrypt the subset of the second submission of data; and
transmit the encrypted subset of the second submission of data and a second identifier for the privacy key via the network.
18. The system of claim 17 , wherein the privacy key is transmitted over the network using a secure protocol.
19. The system of claim 17 , wherein determining that a subset of a submission of data is to be encrypted includes:
determining which data is sensitive and a candidate for interception.
20. The system of claim 17 , wherein the identifier is encrypted by the remote device using a key known only to the remote device.
21. The system of claim 17 , wherein the other string is a nonce.
22. The system of claim 17 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.