# US 10,484,387 B1 · Tracking submission of confidential data in a computer system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,387 B1 - Document ID: US10484387B1 - Status: Granted - Kind: B1 - Application number: 15/224,032 - Filed: 2016-07-29 - Granted: 2019-11-19 - Earliest claimed: 2016-07-29 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Krishnaram Kenthapadi; Ahsan Chudhary; Stephanie Chou; Joseph Florencio; Ryan Wade Sandler; Anthony Duane Duerr - Web page: https://patentgrep.com/patent/US10484387B1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 63/102: {Entity profiles} - G06F 3/0482: Interaction with lists of selectable items, e.g. menus - G06F 21/602: {Providing cryptographic facilities or services} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04W 4/21: for social networking applications - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/033: of the user plane, e.g. user's traffic - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In an example embodiment, a submission of confidential data is received from a user via a first computerized user interface. An identification of the user is obtained, and details regarding the submission are stored in a submission table. Then a request to display, to the user, statistical information derived from confidential data from users other than the user, is received from a second computerized user interface. Based on information stored in the submission table, a determination is made that the request to display, to the user, statistical information derived from confidential data from users other than the user should be granted. In response to the determining, the statistical information derived from confidential data from users other than the user is displayed via the second computerized user interface. ## Claims ### Claim 1 A computerized method for improving computer security when storing confidential information, the method comprising: receiving, via a first computerized user interface, a submission of confidential data from a user; obtaining an identification of the user; storing details regarding the submission in a first submission table, wherein the details regarding the submission include primary attributes obtained from a member profile of the user on a social networking system; encrypting the submitted confidential data using a first key; storing the encrypted submitted confidential data in a first column of the first submission table; storing a randomly generated transaction identification corresponding to the submission in a second column of the first submission table and also in a first column of a second submission table; encrypting the identification of the user using a second key; storing the encrypted identification of the user in a second column of the second submission table; receiving, from a second computerized user interface, a request to display, to the user, statistical information derived from confidential data, stored in encrypted form in the first submission table, from users other than the user; based on information stored in the first submission table, determining that the request to display, to the user, statistical information derived from confidential data from users other than the user should be granted; and in response to the determining, causing the statistical information derived from confidential data from users other than the user to be displayed via the second computerized user interface. ### Claim 2 (depends on 1) The method of claim 1, wherein the details regarding the submission include a time and date of the submission and the determining involves determining that the time and date of the submission is within a predetermined threshold of time from a current time. ### Claim 3 (depends on 1) The method of claim 1, wherein the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from plurality of member profiles. ### Claim 4 (depends on 1) The method of claim 1, wherein the details regarding the submission include primary attributes obtained from usage information for the user on the social networking system and the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from usage information. ### Claim 5 (depends on 1) The method of claim 1, wherein the first computerized user interface is a web page. ### Claim 6 (depends on 1) The method of claim 1, wherein the transaction identification is encrypted. ### Claim 7 A system for improving computer security when storing confidential information, the system comprising: a non-transitory computer-readable medium having instructions stored there on, which, when executed by a processor, cause the system to: receive, via a first computerized user interface, a submission of confidential data from a user; obtain an identification of the user; store details regarding the submission in a first submission table, wherein the details regarding the submission include primary attributes obtained from a member profile of the user on a social networking system; encrypt the submitted confidential data using a first key; store the encrypted submitted confidential data in a first column of the first submission table; store a randomly generated transaction identification corresponding to the submission in a second column of the first submission table and also in a first column of a second submission table; encrypt the identification of the user using a second key; store the encrypted identification of the user in a second column of the second submission table; receive, from a second computerized user interface, a request to display, to the user, statistical information derived from confidential data, stored in encrypted form in the first submission table, from users other than the user; based on information stored in the first submission table, determine that the request to display, to the user, statistical information derived from confidential data from users other than the user should be granted; and in response to the determining, cause the statistical information derived from confidential data from users other than the user to be displayed via the second computerized user interface. ### Claim 8 (depends on 7) The system of claim 7, wherein the details regarding the submission include a time and date of the submission and the determining involves determining that the time and date of the submission is within a predetermined threshold of time from a current time. ### Claim 9 (depends on 7) The system of claim 7, wherein the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from member profiles. ### Claim 10 (depends on 7) The system of claim 7, wherein the details regarding the submission include primary attributes obtained from usage information for the user on the social networking system and the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from usage information. ### Claim 11 (depends on 7) The system of claim 7, wherein the first computerized user interface is a web page. ### Claim 12 (depends on 7) The system of claim 7, wherein the transaction identification is encrypted. ### Claim 13 A non-transitory machine-readable storage medium comprising instructions, which when implemented by one or more machines, cause the one or more machines to perform operations for improving computer security when storing confidential information, the operations comprising: receiving, via a first computerized user interface, a submission of confidential data from a user; obtaining an identification of the user; storing details regarding the submission in a first submission table, wherein the details regarding the submission include primary attributes obtained from a member profile of the user on a social networking system; encrypting the submitted confidential data using a first key; storing the encrypted submitted confidential data in a first column of the first submission table; storing a randomly generated transaction identification corresponding to the submission in a second column of the first submission table and also in a first column of a second submission table; encrypting the identification of the user using a second key; storing the encrypted identification of the user in a second column of the second submission table; receiving, from a second computerized user interface, a request to display, to the user, statistical information derived from confidential data, stored in encrypted form in the first submission table, from users other than the user; based on information stored in the first submission table, determining that the request to display, to the user, statistical information derived from confidential data from users other than the user should be granted; and in response to the determining, causing the statistical information derived from confidential data from users other than the user to be displayed via the second computerized user interface. ### Claim 14 (depends on 13) The non-transitory machine-readable storage medium of claim 13, wherein the details regarding the submission include a time and date of the submission and the determining involves determining that the time and date of the submission is within a predetermined threshold of time from a current time. ### Claim 15 (depends on 13) The non-transitory machine-readable storage medium of claim 13, wherein the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from member profiles. ### Claim 16 (depends on 13) The non-transitory machine-readable storage medium of claim 13, wherein the details regarding the submission include primary attributes obtained from usage information for the user on the social networking system and the determining includes determining that the primary attributes satisfy a predicate on primary attributes obtained from usage information. ### Claim 17 (depends on 13) The non-transitory machine-readable storage medium of claim 13, wherein the transaction identification is encrypted.