Systems and methods for automatically blocking the use of tracking tools

Patent metadata

Field	Value
Publication number	US-11968229-B2
Application number	US-202217942242-A
Country	US
Kind code	B2
Filing date	Sep 12, 2022
Priority date	Jul 28, 2020
Publication date	Apr 23, 2024
Grant date	Apr 23, 2024

Abstract

Embodiments of the present invention provide methods, apparatus, systems, computing devices, computing entities, and/or the like for permitting or blocking tracking tools used through webpages. In particular embodiments, the method involves: scanning a webpage to identify a tracking tool configured for processing personal data; determining a data destination location that is associated with the tracking tool; and generating program code configured to: determine a location associated with a user who is associated with a rendering of the webpage; determine a prohibited data destination location based on the location associated with the user; determine that the data destination location associated with the tracking tool is not the prohibited data destination location; and responsive to the data destination location associated with the tracking tool not being the prohibited data destination location, permit the tracking tool to execute.

First claim

We claim:

1. A method comprising:
scanning, by computing hardware, a webpage to identify a tracking tool that is associated with the webpage;
determining, by the computing hardware, a data destination location that is associated with the tracking tool, wherein the determining step is based on at least one of (a) a location for a computing device that invokes the tracking tool, (b) a location of a computing device that receives data via the tracking tool, or (c) a location of a computing device or a storage device that stores the data; and
generating, by the computing hardware, program code, wherein the program code is configured to:
determine a location associated with a user who is associated with a rendering of the webpage;
determine a prohibited data destination location based on a data structure mapping the location associated with the user to the prohibited data destination location;
determine that the data destination location associated with the tracking tool is the prohibited data destination location; and
responsive to determining that the data destination location associated with the tracking tool is the prohibited data destination location, perform at least one of disabling the tracking tool from executing or disabling functionality of the tracking tool configured for processing the data from executing.

2. The method of claim 1 , wherein the program code is further configured to:
determine a second location associated with a second user who is associated with a second rendering of the webpage;
determine a second prohibited data destination location based on the data structure mapping the second location associated with the user to the second prohibited data destination location;
determine that the data destination location associated with the tracking tool is not the second prohibited data destination location; and
responsive to determining that the data destination location associated with the tracking tool is not the second prohibited data destination location, permit the tracking tool to execute.

3. The method of claim 1 further comprising generating, by the computing hardware, a computer-readable file comprising an identifier for the tracking tool and an identifier for the data destination location associated with the tracking tool, wherein the program code comprises the computer-readable file and is configured to identify the data destination location associated with the tracking tool from the computer-readable file.

4. The method of claim 3 , wherein the computer-readable file further comprises the data structure.

5. The method of claim 3 , wherein the program code is configured, prior to determining the location associated with the user, to determine that the tracking tool is authorized to run from the computer-readable file.

6. The method of claim 1 , wherein the program code is configured, prior to determining the location associated with the user, to determine that the user has provided consent for the tracking tool.

7. The method of claim 1 , wherein the program code is configured, prior to determining the location associated with the user to:
determine that the user has not provided consent for the tracking tool; and
responsive to determining the user has not provided the consent for the tracking tool, obtain the consent from the user.

8. A method comprising:
receiving, by computing hardware, a Hypertext Transfer Protocol (HTTP) request to render a webpage; and
responsive to receiving the HTTP request, sending, by the computing hardware, a HTTP response comprising a script to a computing device associated with a user,
wherein the computing device is configured to execute, within a browser and during a rendering of the webpage, the script to perform operations comprising:
identifying a source script attempting to execute;
identifying the source script is configured to invoke a tracking tool based on information on the tracking tool found embedded in the script; and
responsive to identifying the source script is configured to invoke the tracking tool:
determining a location associated with the user;
determining a prohibited data destination location based on a data structure mapping the location associated with the user to the prohibited data destination location;
determining a data destination location associated with the tracking tool based on the information embedded in the script;
determining that the data destination location associated with the tracking tool is the prohibited data destination location; and
responsive to determining that the data destination location associated with the tracking tool is the prohibited data destination location, perform at least one of disabling the tracking tool from executing or disabling functionality of the tracking tool involving processing certain data from executing.

9. The method of claim 8 , wherein the script further performs operations comprising, after disabling the functionality, permitting the source script to execute to invoke the tracking tool for the webpage.

10. The method of claim 8 further comprising:
receiving, by the computing hardware, a second Hypertext Transfer Protocol (HTTP) request to render the webpage; and
responsive to receiving the second HTTP request, sending, by the computing hardware, a second HTTP response comprising the script to a second computing device associated with a second user,
wherein the second computing device is configured to execute, within a second browser and during a second rendering of the webpage, the script to perform operations comprising:
identifying the source script attempting to execute;
identifying the source script is configured to invoke the tracking tool based on the information on the tracking tool found embedded in the script; and
responsive to identifying the source script is configured to invoke the tracking tool:
determining a second location associated with the second user;
determining a second prohibited data destination location based on the data structure mapping the second location associated with the second user to the second prohibited data destination location;
determining the data destination location associated with the tracking tool based on the information embedded in the script;
determining that the data destination location associated with the tracking tool is not the second prohibited data destination location; and
responsive to determining that the data destination location associated with the tracking tool is not the second prohibited data destination location, permitting the tracking tool to execute for the webpage.

11. The method of claim 10 , wherein permitting the tracking tool to execute for the webpage comprises permitting the source script to execute to invoke the tracking tool.

12. The method of claim 8 , wherein the script is configured to determine the location associated with the user based on at least one of (a) a geographical location of the user, (b) a network address associated with the user, (c) browser information on the user, (d) a language associated with the user, or (e) consent data associated with the user.

13. The method of claim 8 , wherein the data destination location associated with the tracking tool is based on at least one of (a) a location for a computing device that invokes the tracking tool, (b) a location of a computing device that receives the data, or (c) a location of a computing device or a storage device that stores the data.

14. A non-transitory computer-readable medium having computer-executable instructions that are stored thereon, the computer-executable instructions executable by one or more processing

Assignees

• Onetrust Llc

Inventors

• Brannon Jonathan Blake
• Whitney Patrick
• Chavva Sharath Chandra
• Baucom Jeffrey

Classifications

• H04L63/1475 Primary

  Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• G06F21/554 Primary

  involving event detection and direct action · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06F2221/2119

  Authenticating web pages, e.g. with suspicious links · CPC title