System and method for private social networking

Patent metadata

Field	Value
Publication number	US-9807100-B2
Application number	US-201113190286-A
Country	US
Kind code	B2
Filing date	Jul 25, 2011
Priority date	Jul 23, 2010
Publication date	Oct 31, 2017
Grant date	Oct 31, 2017

Abstract

System protects user's data on social networking websites by creating a data filter, which operates between the user and the social networks accessed by the user. The filter may be deployed as a user's web browser plug-in and operates in the following way. First, the filter encrypts all or some information that is posted by the user on a social network using SSL encryption technology. Second, to enable select other users of the social networking site to view the encrypted information, the instances of the filter executing on the accessing users' computers verify whether these users have access permission from the owner of the content and, if so, use the decryption key to decrypt the private data and enable the users to view it. The decryption key may be automatically passed to the instances of the filter running on the accessing users' computers. In an alternative implementation, the encryption and access control may be performed by a security/privacy mediator deployed on the network.

First claim

What is claimed is:

1. A computerized system comprising a server comprising a processor and a memory, the computerized system further comprising:
a. a privacy mediator enabling a first user of a first user terminal to post at least a first content to a social networking web site and enabling a second user of a second user terminal to retrieve at least the first posted content from the social networking website, the privacy mediator secures at least a portion of the first content prior to posting on the social networking website and to render accessible the secured portion of the first content prior to furnishing to the second user terminal, wherein the privacy mediator directly communicates with the social networking website and posts the first content comprising the secured portion directly to the social networking website and wherein the privacy mediator secures the at least a portion of the first content by encrypting the at least a portion of the first content and render accessible the secured portion of the first content by decrypting the encrypted at least a portion of the first content; and
b. a web server communicatively coupled with the privacy mediator, the first user terminal and the second user terminal and furnishing the retrieved first content to the second user terminal, wherein the web server is further receiving the first content from the first user terminal and to transmit the first content to the privacy mediator for posting to the social networking website, wherein the first content comprises personal information of the first user, the personal information of the first user being secured by the privacy mediator before reaching the social networking website, wherein the personal information of the first user is directly posted to the social networking website and stored therein in a secure encrypted form and wherein the access to the unencrypted first content posted to the social networking website is controlled independently and outside of the social networking website and an operator of the social networking website and any user of the social networking website other than the first user and the second user have access to the secured encrypted first content but do not have access to the unencrypted first content posted to the social networking website,
wherein the privacy mediator encrypts the at least a portion of the first content using an encryption key and wherein the encryption key is provided to the second user; and
wherein the privacy mediator receives from the first user terminal designation of the portion of the first content for encryption, wherein the designated portion of the first content comprises at least a portion of the personal information of the first user.

2. The system of claim 1 , wherein the remaining portion of the first content not designated for encryption is not encrypted.

3. The system of claim 1 , wherein the web server is further operable to receive from the first user terminal a designation of the second user and to enable the designated second user to view the first content.

4. The system of claim 1 , wherein the first content further comprises data collected by the social networking website without knowledge of the first user, the data collected by the social networking website without knowledge of the first user being secured before reaching the social networking website.

5. The system of claim 1 , wherein the privacy mediator is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with a reference and render accessible the secured portion of the first content by providing the at least a portion of the first content based on the reference.

6. The system of claim 1 , wherein the privacy mediator is operable to secure the at least a portion of the first content by substituting the at least a portion of the first content with an obfuscated content and render accessible the secured portion of the first content by providing the at least a portion of the first content based on the obfuscated content.

7. The system of claim 1 , wherein the privacy mediator is operable to automatically determine identity of the second user based on a predetermined criterion specified by the first user.

8. A computerized system comprising:
a. a first user terminal comprising a first networking interface establishing a first connection with a social networking website and a first central processing unit executing a first instance of a filter application that receives from the first user at least a first content and to post the received at least first content to the social networking website, the first instance of the filter application secures at least a portion of the first content prior to posting to the social networking website, wherein the first instance of the filter application directly communicates with the social networking website and posts the first content comprising the secured portion directly to the social networking web site, wherein the first instance of the filter application securing the at least a portion of the first content by encrypting the at least a portion of the first content and wherein the second instance of the filter application is rendering accessible the secured portion of the first content by decrypting the encrypted at least a portion of the first content; and
b. a second user terminal comprising a second networking interface establishing a second connection with the social networking website and a second central processing unit executing a second instance of the filter application enabling a second user of the second user terminal to retrieve the at least the first posted content from the social networking website, the second instance of the filter application rendering accessible the secured portion of the first content prior to furnishing to the second user, wherein the first content comprises personal information of the first user, the personal information of the first user being secured by the first instance of the filter application before reaching the social networking website, wherein the personal information of the first user is directly posted to the social networking website and stored therein in a secure encrypted form and wherein the access to the unencrypted first content posted to the social networking website is controlled independently and outside of the social networking website and the operator of the social networking website and any user of the social networking web site other than the first user and the second user have access to the secured encrypted first content but do not have access to the unencrypted first content posted to the social networking website,
wherein the first instance of the filter application encrypts the at least a portion of the first content using an encryption key and wherein the encryption key is provided to the second instance of the filter application based on authentication of the second user by the second instance; and
wherein the first instance of the filter application receives from the first user designation of the portion of the first content for encryption, wherein the designated portion of the first content comprises at least a portion of the personal information of the first user.

9. The system of claim 8 , wherein the remaining portion of the first content not designated for encryption is not encrypted.

10. The system of claim 8 , wherein the first instance of the filter application is further operable to receive from the first user a designation of the second user and to enable the designated second user to view the first content.

11. The system of claim 8 , wherein the first instance of the filter application is operable t

Assignees

• Gorodyansky David
• Anchorfree Inc

Inventors

• Gorodyansky David

Classifications

• H04L63/105 Primary

  Multiple levels of security · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title