US 11,777,909 B1Granted

Identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page

AssigneeGen Digital Inc.

InventorsIskander Sanchez Rola, David Luz Silva, Daniel Marino, Leylya Yumer, Petros Efstathopoulos

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page. Tracking capabilities of an external domain may be removed by altering web requests and/or responses to API calls. Once these tracking capabilities of the external domain have been removed, the altered web requests and/or altered responses to API calls may be transmitted to a web browser and/or entity making the API call thereby protecting user privacy while allowing the external domain to interact with the host web page.

Claims20

Dependent claims

A computer-implemented method for identifying and removing a tracking capability from an external domain that performs a tracking activity on a host web page, the computer-implemented method comprising:

accessing a host web page through a web browser, the host web page including a frame that executes an external code that loads content from an external domain;
determining that the host web page is not affiliated with the external domain;
determining that the external domain is a known tracking domain;
injecting code into the frame, the injected code containing a script necessary to intercept API calls that originate from the external domain;
intercepting an API call that originates from the external domain;
identifying, within the intercepted API call, a portion of external code that contains instructions to read from or write to a storage that is accessible to the web browser;
transmitting the API call to the web browser;
receiving an API response from the web browser, the API response including a response to the portion of external code that contains instructions to read from or write to the storage that is accessible to the web browser;
creating an altered API response by obfuscating the response to the portion of external code that contains instructions to read from or write to the storage that is accessible to the web browser;
and
transmitting the altered API response to the external domain.

8 more elements

accessing a host web page through a web browser, the host web page executing an internal code that loads content from a permissible content provider, wherein the permissible content provider is the host web page itself, an external domain that shares a common owner with the host web page, or an external domain that is not a known tracking domain;
injecting code into the host web page, the injected code containing a script necessary to intercept API calls that originate from the permissible content provider;
intercepting an API call that originates from the permissible content provider;
identifying, within the intercepted API call, a portion of internal code that contains instructions to read from or write to a storage that is accessible to the web browser;
throwing an exception that creates an error in the intercepted API call on the web browser;
analyzing a stack trace of the exception that includes an output of the error;
identifying, within the output of the error, a hidden external domain that is responsible for the portion of internal code that contains instructions to read from or write to the storage that is accessible to the web browser;
determining that the host web page is not affiliated with the hidden external domain;
determining that the hidden external domain is a known tracking domain;
transmitting the API call to the web browser;
receiving an API response from the web browser, the API response including a response to the portion of internal code that contains instructions to read from or write to the storage that is accessible to the web browser;
creating an altered API response by obfuscating the response to the portion of internal code that contains instructions to read from or write to the storage that is accessible to the web browser;
and
transmitting the altered API response to the hidden external domain.

11 more elements

accessing a host web page through a web browser, the host web page including a frame that executes a frame code that loads content from a permissible content provider, wherein the permissible content provider is the host web page itself, an external domain that shares a common owner with the host web page, or an external domain that is not a known tracking domain;
injecting code into the frame, the injected code containing a script necessary to intercept API calls that originate from the permissible content provider;
intercepting an API call that originates from the permissible content provider through the frame;
identifying, within the intercepted API call, a portion of frame code that contains instructions to read from or write to a storage that is accessible to the web browser;
throwing an exception that creates an error in the intercepted API call on the web browser;
analyzing a stack trace of the exception that includes an output of the error;
identifying, within the output of the error, a hidden external domain that is responsible for the portion of frame code that contains instructions to read from or write to the storage that is accessible to the web browser;
determining that the host web page is not affiliated with the hidden external domain;
determining that the hidden external domain is a known tracking domain;
transmitting the API call to the web browser;
receiving an API response from the web browser, the API response including a response to the portion of frame code that contains instructions to read from or write to the storage that is accessible to the web browser;
creating an altered API response by obfuscating the response to the portion of frame code that contains instructions to read from or write to the storage that is accessible to the web browser;
and
transmitting the altered API response to the hidden external domain.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/052,842Filed 4 Nov 2022 · continuation
Priority: 19 Aug 2021
Granted: 3 Oct 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/0414
Wherein the identity of one or more communicating identities is hidden: during transmission, i.e. party's identity is protected against…
H04W 12/02
Security arrangements; Authentication; Protecting privacy or anonymity: protecting privacy or anonymity, e.g. protecting personally identifiable…
H04L 63/0236
Filtering policies: filtering by address, protocol, port number or service, e.g. IP-address or URL
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…