IP Library Granted Patent US 8,559,637
Granted Patent B2
US 8,559,637 · App. 12/207,837 · Granted Oct 15, 2013

Securing information exchanged via a network

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,559,637
App. No.
12/207,837
Granted
Oct 15, 2013
Kind
B2
Abstract

A privacy key is provided over a network. An information page is provided over the network. A submission of data that is to be transmitted over the network in response to the information page is detected. A subset of the data is to be encrypted using the privacy key is determined. The privacy key is used to encrypt the subset of the data.

Claims (57)

1. A method, comprising:

detecting a first submission of data that is to be transmitted over a network;

determining that a subset of the first submission of data is to be encrypted using a stored privacy key;

retrieving the stored privacy key along with an identifier that is one of a plurality of identifiers for the stored privacy key;

using the stored privacy key to encrypt the subset of the first submission of data; and

transmitting the encrypted subset of the first submission of data and the identifier for the stored privacy key via the network;

detecting a second submission of data that is to be transmitted over the network;

determining that a subset of the second submission of data is to be encrypted using the stored privacy key;

retrieving the stored privacy key from local storage along with a second identifier of the plurality of identifiers for the stored privacy key;

using the stored privacy key to encrypt the subset of the second submission of data; and

transmitting the encrypted subset of the second submission of data and the second identifier for the stored privacy key via the network.

2. The method of claim 1 , further comprising, prior to detecting the first submission of data:

receiving a privacy key over the network; and

locally storing the received privacy key.

3. The method of claim 2 , wherein the received privacy key is transmitted over the network using a secure protocol.

4. The method of claim 1 , further comprising, prior to retrieving the stored privacy key, determining if the privacy key is locally stored, and downloading the privacy key from a remote device when the privacy key is not locally stored.

5. The method of claim 1 , wherein retrieving the stored privacy key includes retrieving the privacy key from one of a cookie, a script included in an information page, and a cache.

6. The method of claim 1 , wherein determining that a subset of a submission of data is to be encrypted includes:

determining which data is sensitive and a candidate for interception.

7. The method of claim 1 ,

wherein the plurality of identifiers identifies a combination of the stored privacy key and at least one of a user and a device associated with data to be transmitted.

8. The method of claim 1 , tangibly embodied as computer-executable instructions stored on a non-transitory computer-readable medium.

9. The method of claim 1 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.

10. A method, comprising:

receiving a privacy key and an information page over a network;

detecting a first submission of data that is to be transmitted over the network in response to the information page;

determining that a subset of the first submission of data is to be encrypted using the privacy key;

using the privacy key to encrypt the subset of the first submission of data; and

transmitting the encrypted subset of the first submission of data and an identifier that is one of a plurality of identifiers for the privacy key to a remote device over the network,

wherein the identifier for the privacy key is a concatenated string of the privacy key and another string that has been encrypted;

detecting a second submission of data that is to be transmitted over the network;

determining that a subset of the second submission of data is to be encrypted using the privacy key;

using the privacy key to encrypt the subset of the second submission of data; and

transmitting the encrypted subset of the second submission of data and a second identifier for the privacy key via the network.

11. The method of claim 10 , wherein the privacy key is transmitted over the network using a secure protocol.

12. The method of claim 10 , wherein determining that a subset of a submission of a submission of data is to be encrypted includes:

determining which data is sensitive and a candidate for interception.

13. The method of claim 10 , tangibly embodied as computer-executable instructions stored on a non-transitory computer-readable medium.

14. The method of claim 10 , wherein the identifier is encrypted by the remote device using a key known only to the remote device.

15. The method of claim 10 , wherein the other string is a nonce.

16. The method of claim 10 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.

17. A system, comprising a computing device having a processor and a memory, the memory storing instructions executable by the processor whereby the computing device is configured to:

receive a privacy key and an information page over a network;

detect a first submission of data that is to be transmitted over the network in response to the information page;

determine that a subset of the first submission of data is to be encrypted using the privacy key;

use the privacy key to encrypt the subset of the first submission of data; and

transmit the encrypted subset of the first submission of data and an identifier that is one of a plurality of identifiers for the privacy key to a remote device over the network, wherein the identifier for the privacy key is a concatenated string of the privacy key and another string that has been encrypted;

detect a second submission of data that is to be transmitted over the network;

determine that a subset of the second submission of data is to be encrypted using the privacy key;

use the privacy key to encrypt the subset of the second submission of data; and

transmit the encrypted subset of the second submission of data and a second identifier for the privacy key via the network.

18. The system of claim 17 , wherein the privacy key is transmitted over the network using a secure protocol.

19. The system of claim 17 , wherein determining that a subset of a submission of data is to be encrypted includes:

determining which data is sensitive and a candidate for interception.

20. The system of claim 17 , wherein the identifier is encrypted by the remote device using a key known only to the remote device.

21. The system of claim 17 , wherein the other string is a nonce.

22. The system of claim 17 , wherein each identifier of the plurality of identifiers is a unique identifier from each other identifier of the plurality of identifiers and is generated using an asymmetric public key associated with a device or user specific key.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 18, 2009
From: VERIZON CORPORATE SERVICES GROUP INC.
To: VERIZON PATENT AND LICENSING INC.
Reel/Frame 023111/0717 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2008
From: WHITEHEAD, STEVEN D.
To: VERIZON CORPORATE SERVICES GROUP, INC.
Reel/Frame 021508/0405 →