Proxy computer system to provide selective decryption
AssigneeStratoKey Pty Ltd.
InventorAnthony Scotney
Life of this patent
Estimating the term…
Abstract
A proxy computer system receives content intended for a client computer from a third-party network service, where the content includes an encrypted portion. The proxy computer system makes a determination as to whether the encrypted portion is to be decrypted for the client computer, where the determination is made based at least in part on a historical analysis of the client computer. The proxy computer system sends the content to the client computer in a form that is based on the determination.
Claims20
A proxy server system comprising:
- a memory resource to store a set of instructions;
- and
- one or more processors to access the set of instructions from the memory resource to perform operations including:
- aggregating proxy-based data comprising usage parameters of a plurality of client devices or associated users when accessing content hosted by a third-party network service through the proxy server system;
- receiving, from a client device, a request including a proxy link that corresponds to a link to content hosted by a third-party network service;
- retrieving the content from the third-party network service on behalf of the client device using the link, the content including one or more sensitive portions of data in an encrypted format and a remainder portion that is not encrypted;
- determining a risk metric for the client device or an associated user based on analyzing the proxy-based data corresponding to the client device or the associated user;
- determining that the client device is approved to view the one or more sensitive portions of data based on the risk metric;
- and
- in response to determining that the client device is approved to view the one or more sensitive portions of data based on the risk metric, providing modified content to the client device, the modified content including the remainder portion that is not encrypted and decrypted versions of the one or more sensitive portions of data.
A method for providing a proxy service between a client device and a third-party network service, the method being implemented by one or more processors of a network computer system and comprising:
- aggregating proxy-based data comprising usage parameters of a plurality of client devices or associated users when accessing content hosted by the third-party network service through the proxy service;
- receiving, from a client device, a request including a proxy link that corresponds to a link to content hosted by the third-party network service;
- retrieving the content from the third-party network service on behalf of the client device using the link, the content including one or more sensitive portions of data in an encrypted format and a remainder portion that is not encrypted;
- determining a risk metric for the client device or an associated user based on analyzing the proxy-based data corresponding to the client device or the associated user;
- determining that the client device is approved to view the one or more sensitive portions of data based on the risk metric;
- and
- in response to determining that the client device is approved to view the one or more sensitive portions of data based on the risk metric, providing modified content to the client device, the modified content including the remainder portion that is not encrypted and decrypted versions of the one or more sensitive portions of data.
A non-transitory computer-readable medium that stores instructions, which when executed by one or more processors of a proxy computer system, cause the proxy computer system to perform operations that include:
- aggregating proxy-based data comprising usage parameters of a plurality of client devices or associated users when accessing content hosted by a third-party network service through a proxy server system;
- receiving, from a client device, a request including a proxy link that corresponds to a link to content hosted by a third-party network service;
- retrieving the content from the third-party network service on behalf the client device using the link, the content including one or more sensitive portions of data in an encrypted format and a remainder portion that is not encrypted;
- determining a risk metric for the client device or an associated user based on analyzing the proxy-based data corresponding to the client device or the associated user;
- determining that the client device is approved to view the one or more sensitive portions of data based on the risk metric;
- and
- in response to determining that the client device is approved to view the sensitive portions of data based on the risk metric, providing modified content to the client device, the modified content including the remainder portion that is not encrypted and decrypted versions of the one or more sensitive portions of data.
Dependencies are inferred from the claim text.