IP Library Granted Patent US 10,659,551
Granted Patent B1
US 10,659,551 · App. 14/560,906 · Granted May 19, 2020

Method and apparatus for storing information in a browser storage area of a client device

Inventors: Bjorn Markus Jakobsson (Portola Valley, CA); Ari Juels (Brookline, MA)
Assignee: RavenWhite Security, Inc.
H04L67/2842G06F16/9566G06F16/9574H04L67/02H04L67/42
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,659,551
App. No.
14/560,906
Granted
May 19, 2020
Kind
B1
Abstract

Disclosed is a method and apparatus for performing steps to cause encoded information to be stored at a client device during a first network session between a server and the client device. To cause encoded information to be stored at a client device, the server first determines a set of network resource requests that encode the information. These network resource requests may include requests for one or more specific URLs and/or requests for one or more files. The server then causes the client device to initiate the network resource requests. The server may cause this initiation by, for example, redirecting the client device to the network resources. The client device initiating the network resource requests causes data representative of the network resource requests to be stored at the client device.

Claims (28)

1. A system, comprising:

a set of one or more interfaces configured to receive, from a client device, a request for content;

a set of one or more processors configured to:

determine, during a first network session, a first set of network resource requests for data that encode information usable to identify the client device; and

cause the client device to initiate the first set of network resource requests for data, wherein data associated with at least some of the first set of network resource requests for data is stored at the client device;

wherein, during a second network session, a server is configured to transmit a sequence of messages to the client device , wherein the sequence of messages causes the client device to initiate a second set of network resource requests for data, and wherein the server is configured to identify the client device at least in part by determining, from the second set of network resource requests for data caused to be initiated by the sequence of messages, whether the client device requests a network resource in the one or more network resources or retrieves a local copy of the network resource, and wherein data associated with at least some of the second set of network resource requests for data is withheld from the client device; and

a memory coupled to the set of one or more processors and configured to provide the set of one or more processors with instructions.

2. The system of claim 1 wherein at least some of the first set of network resource requests for data are expressed as Uniform Resource Locators (URLs).

3. The system of claim 1 wherein at least some of the first set of network resource requests for data are associated with Temporary Internet Files.

4. The system of claim 1 wherein the one or more network data associated with the first set of network resource requests for data are stored in a storage associated with a browser of the client device.

5. The system of claim 1 wherein the one or more network resources associated with the first set of network resource requests for data stored at the client device includes one or more elements associated with a graph structure.

6. The system of claim 5 wherein the set of one or more processors is further configured to cause at least one element associated with the graph structure to encode representations of subsets of users.

7. The system of claim 5 wherein the one or more network resources associated with the first set of network resource requests for data comprise includes nodes associated with a tree structure.

8. The system of claim 7 wherein the set of one or more processors is further configured to traverse the tree structure.

9. The system of claim 7 wherein resource identifiers are stored at secret addresses.

10. The system of claim 9 wherein determining the first set of network resources requests for data that encode information usable to identify the client device further comprises determining a first portion of the encoded information if a first secret address in the secret addresses is known.

11. A system, comprising:

a set of one or more interfaces configured to transmit, during a network session, a sequence of messages, wherein the sequence of messages causes the client device to initiate a set of network resources requests for data, and wherein, during a previous network session, one or more network resources were caused to be stored at the client device;

a set of one or more processors configured to:

identify the client device based at least in part by determining, from the set of network resource requests for data caused to be initiated by the sequence of messages, whether the client device requests a network resource in the one or more network resources or retrieves a local copy of the network resource; and

withhold data associated with at least some of the set of network resource requests or data from the client device; and

a memory coupled to the set of one or more processors and configured to provide the set of one or more processors with instructions.

12. The system of claim 11 wherein the client device is configured to reveal a first portion of an identity of the client device, wherein the identity comprises the first portion and a second portion.

13. The system of claim 12 wherein the set of one or more processors is configured to cause the client device to initiate the set of network resource requests to reveal the second portion of the identity of the client device..

14. A method, comprising:

transmitting, during a network session and via a set of one or more interfaces, a sequence of messages, wherein the sequence of messages causes a client device to initiate a set of network resource requests for data, and wherein, during a previous network session, one or more network resources were caused to be stored at the client device;

identifying, using a set of one or more processors, the client device at least in part by determining, from the set of network resource requests for data caused to be initiated by the sequence of messages, whether the client device requested a network resource in the one or more network resources or retreived a local copy of the network resource; and

withholding data associated with at least some of the set of network resource requests for data from the client device.

Assignments (1)
CHANGE OF NAME Recorded May 24, 2019
From: RAVENWHITE INC.
To: RAVENWHITE SECURITY, INC.
Reel/Frame 049287/0025 →
Continuity (3)
Continuation 13964988 · Aug 12, 2013
Continuation 11590083 · Oct 31, 2006
Provisional Application 60732025 · Nov 1, 2005