System and method for securing user information on social networks
View Patent ↗A computer-implemented method for securing personal information of a user on social networks. The method involves: receiving personal information from a user in an unencrypted textual form by a client computer; transmitting the received personal information via a secure virtual private network (VPN) connection to a dedicated VPN server/proxy; receiving the personal information at the dedicated VPN server/proxy; encrypting the received personal information at the dedicated VPN server/proxy using an encryption key; and transmitting the encrypted personal information from the dedicated VPN server/proxy to the social network. Other users of the social network also use the dedicated VPN server/proxy in order to decrypt (access) the personal information of the user, which has been encrypted as specified above.
1. A computer-implemented method for securing personal information of a user, the method comprising:
a. receiving, from the user, personal information, separate and distinct from login credentials of the user, in an unencrypted textual form by a client computer;
b. transmitting the received personal information, separate and distinct from login credentials of the user, via a secure virtual private network (VPN) connection to a dedicated VPN server/proxy;
c. receiving the personal information, separate and distinct from login credentials of the user, at the dedicated VPN server/proxy;
d. encrypting at least a portion of the received personal information, separate and distinct from login credentials of the user, at the dedicated VPN server/proxy using an encryption key;
e. transmitting the encrypted personal information, separate and distinct from login credentials of the user, from the dedicated VPN server/proxy to a social networking service, wherein the encryption key or a corresponding decryption key are not available to the social networking service;
f. establishing a VPN secure network connection between a second client computer and the dedicated VPN server/proxy;
g. receiving, by the second user computer, a request from the second user, for the personal information;
h. requesting, responsive to the received request, by the dedicated VPN server/proxy, the personal information from the social networking service;
i. receiving, at the dedicated VPN server/proxy, the personal information from the social networking service;
j. decrypting, at the dedicated VPN server/proxy, the received personal information; and
k. transmitting the received personal information via a secure virtual private network (VPN) connection to the second user computer.
2. The computer-implemented method of claim 1 , further comprising encrypting the received personal information prior to the transmitting of the received personal information to the dedicated VPN server/proxy.
3. The computer-implemented method of claim 1 , wherein the received personal information is decrypted using a decryption key corresponding to the encryption key.
4. The computer-implemented method of claim 3 , further comprising sharing the decryption and the encryption key.
5. The computer-implemented method of claim 1 , further comprising receiving from a user and storing a specification of the items of the personal information to be encrypted by the dedicated VPN server/proxy before transmission to the social networking service.
6. The computer-implemented method of claim 1 , further comprising storing the encryption key in an encryption key repository.
7. A computer-readable medium embodying a set of computer-readable instructions, which, when executed by one or more processors, cause the one or more processors perform a method for securing personal information of a user, the method comprising:
a. receiving, from the user, personal information, separate and distinct from login credentials of the user, from a user in an unencrypted textual form by a client computer;
b. transmitting the received personal information, separate and distinct from login credentials of the user, via a secure virtual private network (VPN) connection to a dedicated VPN server/proxy;
c. receiving the personal information, separate and distinct from login credentials of the user, at the dedicated VPN server/proxy;
d. encrypting at least a portion of the received personal information, separate and distinct from login credentials of the user, at the dedicated VPN server/proxy using an encryption key; and
e. transmitting the encrypted personal information, separate and distinct from login credentials of the user, from the dedicated VPN server/proxy to a social networking service, wherein the encryption key or a corresponding decryption key are not available to the social networking service;
f. establishing a VPN secure network connection between a second client computer and the dedicated VPN server/proxy;
g. receiving, by the second user computer, a request from the second user, for the personal information;
h. requesting, responsive to the received request, by the dedicated VPN server/proxy, the personal information from the social networking service;
i. receiving, at the dedicated VPN server/proxy, the personal information from the social networking service;
j. decrypting, at the dedicated VPN server/proxy, the received personal information; and
k. transmitting the received personal information via a secure virtual private network (VPN) connection to the second user computer.
8. The computer-readable medium of claim 7 , wherein the method further comprises encrypting the received personal information prior to the transmitting of the received personal information to the dedicated VPN server/proxy.
9. The computer-readable medium of claim 7 , wherein the received personal information is decrypted using a decryption key corresponding to the encryption key.
10. The computer-readable medium of claim 9 , wherein the method further comprises sharing the decryption and the encryption key.
11. The computer-readable medium of claim 7 , wherein the method further comprises receiving from a user and storing a specification of the items of the personal information to be encrypted by the dedicated VPN server/proxy before transmission to the social networking service.
12. The computer-readable medium of claim 7 , wherein the method further comprises storing the encryption key in an encryption key repository.
13. A computerized system for securing personal information of a user, the computerized system comprising:
a. a client computer for receiving, from the user, personal information, separate and distinct from login credentials of the user, from a user in an unencrypted textual form; and
b. a dedicated VPN server/proxy for receiving personal information, separate and distinct from login credentials of the user, via a secure virtual private network (VPN) connection from the client computer; wherein the dedicated VPN server/proxy encrypts at least a portion of the received personal information, separate and distinct from login credentials of the user, at the using an encryption key and transmits the encrypted personal information, separate and distinct from login credentials of the user, to a social networking service, wherein the encryption key or a corresponding decryption key are not available to the social networking service; and
c. a second client computer for establishing VPN secure network connection with the dedicated VPN server/proxy and receiving a request from the second user for the personal information, wherein, responsive to the received request, the dedicated VPN server/proxy receives the personal information from the social networking service, decrypts the received personal information; and transmits the received personal information via the VPN secure network connection to the second user computer.
14. The computerized system of claim 13 , wherein the client computer encrypts the received personal information prior to the transmitting of the received personal information to the dedicated VPN server/proxy.
15. The computerized system of claim 13 , wherein the received personal information is decrypted using a decryption key corresponding to the encryption key.
16. The computerized system of claim 15 , wherein the decryption key and the encryption key are shared.
17. The computerized system of claim 13 , further comprising an encryption key repository for storing the encryption key.