# US 10,455,037 B2 · Systems and methods to anonymize web browsing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,455,037 B2 - Document ID: US10455037B2 - Status: Granted - Kind: B2 - Application number: 15/379,151 - Filed: 2016-12-14 - Published: 2018-06-14 - Granted: 2019-10-22 - Earliest claimed: 2016-12-14 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: James E. Bostick; Jia Chen; Wing L. Leung; Craig M. Trim - Web page: https://patentgrep.com/patent/US10455037B2 ## CPC - H04L 67/56: Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) - H04L 61/5007: Internet protocol [IP] addresses - H04L 61/5061: Pools of addresses - H04L 63/0471: {applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/1025: Dynamic adaptation of the criteria on which the server selection is based - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method includes sending one or more messages, from a computing device to a server, to cause the server to establish a connection with the computing device, to cause the server to identify a first set of anonymization characteristics, and to cause the server to instantiate a first instance of an access application within a first cloud container using the first set of anonymization characteristics. The method also includes receiving, by the computing device, second data from the server via the connection. The second data is determined based on first data received by the server from a first website using the first instance of the access application. ## Claims ### Claim 1 A method comprising: sending one or more messages, from a computing device to a server, to cause the server to establish a connection with the computing device, to cause the server to identify a first set of anonymization characteristics, the first set of anonymization characteristics identified independently of the one or more messages, and to cause the server to instantiate a first instance of an access application within a first cloud container using the first set of anonymization characteristics, wherein the first set of anonymization characteristics correspond to application settings for the first instance of the access application; and receiving, by the computing device, second data from the server via the connection, the second data determined based on first data received by the server from a first website using the first instance of the access application. ### Claim 2 (depends on 1) The method of claim 1, wherein the first cloud container is associated with the connection such that access to the first cloud container is restricted to computing devices communicating with the server via the connection. ### Claim 3 (depends on 2) The method of claim 2, wherein the access application corresponds to an internet browser application. ### Claim 4 (depends on 3) The method of claim 3, wherein the second data corresponds to an internet browser application interface. ### Claim 5 (depends on 4) The method of claim 4, further comprising: sending, to the server via the connection, third data to cause the server to identify a second set of anonymization characteristics and to instantiate a second instance of the access application within a second cloud container using the second set of anonymization characteristics; and receiving, by the computing device, fifth data from the server, the fifth data determined based on fourth data received by the server from a second website using the second instance of the access application. ### Claim 6 (depends on 5) The method of claim 5, wherein the first set of anonymization characteristics is identified, and the first instance of the access application is instantiated, to access the first website during a browsing session, and wherein the second set of anonymization characteristics is identified, and the second instance of the access application is instantiated, to access the second website during the browsing session. ### Claim 7 (depends on 1) The method of claim 1, wherein the first set of anonymization characteristics includes browser attributes that include browser plugins, system fonts, or both. ### Claim 8 An apparatus comprising: a memory storing processor-executable instructions; and one or more processors coupled to the memory and configured to execute the processor-executable instructions, wherein the processor-executable instructions, when executed by the one or more processors, cause the one or more processors to: initiate sending of one or more messages to a server to cause the server to establish a connection with a computing device that includes the one or more processors, to cause the server to identify a first set of anonymization characteristics, the first set of anonymization characteristics identified independently of the one or more messages, and to cause the server to instantiate a first instance of an access application within a first cloud container using the first set of anonymization characteristics, wherein the first set of anonymization characteristics correspond to application settings for the first instance of the access application; and receive second data from the server via the connection, the second data determined based on first data received by the server from a first website using the first instance of the access application. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein the first cloud container is associated with the connection such that access to the first cloud container is restricted to computing devices communicating with the server via the connection. ### Claim 10 (depends on 9) The apparatus of claim 9, wherein the access application corresponds to an internet browser application. ### Claim 11 (depends on 10) The apparatus of claim 10, wherein the second data corresponds to an internet browser application interface. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the processor-executable instructions further include instructions that, when executed by the one or more processors, cause the one or more processors to: initiate sending, to the server via the connection, third data to cause the server to identify a second set of anonymization characteristics and to instantiate a second instance of the access application within a second cloud container using the second set of anonymization characteristics; and receive fifth data from the server, the fifth data determined based on fourth data received by the server from a second website using the second instance of the access application. ### Claim 13 (depends on 12) The apparatus of claim 12, wherein the first set of anonymization characteristics is identified, and the first instance of the access application is instantiated, to access the first website during a browsing session, and wherein the second set of anonymization characteristics is identified, and the second instance of the access application is instantiated, to access the second website during the browsing session. ### Claim 14 (depends on 8) The apparatus of claim 8, wherein the first set of anonymization characteristics are generated randomly, pseudo-randomly, or both. ### Claim 15 A non-transitory processor-readable medium storing processor-executable instructions that, when executed by one or more processors, cause the one or more processors to: initiate sending of one or more messages to a server to cause the server to establish a connection with a computing device that includes the one or more processors, to cause the server to identify a first set of anonymization characteristics, the first set of anonymization characteristics identified independently of the one or more messages, and to cause the server to instantiate a first instance of an access application within a first cloud container using the first set of anonymization characteristics, wherein the first set of anonymization characteristics correspond to application settings for the first instance of the access application; and receive second data from the server via the connection, the second data determined based on first data received by the server from a first website using the first instance of the access application. ### Claim 16 (depends on 15) The non-transitory processor-readable medium of claim 15, wherein the first cloud container is associated with the connection such that access to the first cloud container is restricted to computing devices communicating with the server via the connection. ### Claim 17 (depends on 16) The non-transitory processor-readable medium of claim 16, wherein the access application corresponds to an internet browser application. ### Claim 18 (depends on 17) The non-transitory processor-readable medium of claim 17, wherein the second data corresponds to an internet browser application interface. ### Claim 19 (depends on 18) The non-transitory processor-readable medium of claim 18, wherein the processor-executable instructions further include instructions that, when executed by the one or more processors, cause the one or more processors to: send, to the server via the connection, third data to cause the server to identify a second set of anonymization characteristics and to instantiate a second instance of the access application within a second cloud container using the second set of anonymization characteristics; and receive fifth data from the server, the fifth data determined based on fourth data received by the server from a second website using the second instance of the access application. ### Claim 20 (depends on 19) The non-transitory processor-readable medium of claim 19, wherein the first set of anonymization characteristics is identified, and the first instance of the access application is instantiated, to access the first website during a browsing session, and wherein the second set of anonymization characteristics is identified, and the second instance of the access application is instantiated, to access the second website during the browsing session.