# US 2021/0243229 A1 · Method, system, and non-transitory computer readable recording medium for precise user tracking > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243229 A1 - Document ID: US20210243229A1 - Status: Published application - Kind: A1 - Application number: 17/168,575 - Filed: 2021-02-05 - Published: 2021-08-05 - Earliest claimed: 2020-02-05 - Assignees: Naver Corporation - Applicants: Naver Corporation - Inventors: Youngjin KIM; Moweon LEE - Web page: https://patentgrep.com/patent/US20210243229A1 ## CPC - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 43/0876: Network utilisation, e.g. volume of load or congestion level - H04L 63/166: {at the transport layer} - H04L 63/168: {above the transport layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A user tracking method includes collecting cookies in a log according to a user action on the Internet and collecting chain information by Internet communication as third information different from the cookie, and grouping cookies based on the chain information. ## Claims ### Claim 1 A user tracking method executed by at least one processor in a computer system, the method comprising: collecting cookies in a log according to a user action on the Internet and collecting chain information by Internet communication as information different from the cookies; and grouping cookies based on the chain information. ### Claim 2 (depends on 1) The user tracking method of claim 1, wherein the collecting of the chain information comprises collecting at least one of information related to transport layer security (TLS) parameters, information related to transmission control protocol (TCP) parameters, information related to a Hypertext Transfer Protocol Secure (HTTP) header, and client information by JavaScript (JS)) that is a client-side script language through HTTP over TLS (HTTPS) communication. ### Claim 3 (depends on 1) The user tracking method of claim 1, wherein the collecting of the chain information comprises collecting information stored through a browser local storage of a client. ### Claim 4 (depends on 1) The user tracking method of claim 1, wherein the grouping of the cookies comprises tracking the same browser or the same user based on the cookies and the chain information. ### Claim 5 (depends on 1) The user tracking method of claim 1, wherein the grouping of the cookies comprises tracking the same browser based on the chain information at a timing at which the cookie is changed. ### Claim 6 (depends on 1) The user tracking method of claim 1, wherein the grouping of the cookies comprises tracking the same user using cookies of a login environment among the grouped cookies. ### Claim 7 (depends on 1) The user tracking method of claim 1, further comprising: excluding a portion of the cookies based on at least one of client access information and a cookie issuance time. ### Claim 8 (depends on 7) The user tracking method of claim 7, wherein the excluding of the portion of the cookies comprises merging the cookies based on at least one of a device identifier (ID) and a login ID. ### Claim 9 (depends on 7) The user tracking method of claim 7, wherein the excluding of the portion of the cookies comprises excluding, from a target to be grouped, a cookie having a cookie issuance time that collides with another cookie. ### Claim 10 (depends on 7) The user tracking method of claim 7, wherein the excluding of the portion of the cookies comprises excluding, from a target to be grouped, a cookie having an invariant cookie issuance time among cookies issued at different unit times. ### Claim 11 (depends on 7) The user tracking method of claim 7, wherein the excluding of the portion of the cookies comprises excluding, from a target to be grouped, a cookie corresponding to information stored in a database configured to manage information about an abnormal cookie among the cookies. ### Claim 12 (depends on 7) The user tracking method of claim 7, wherein the excluding of the portion of the cookies comprises excluding, from a target to be grouped, a unique pattern of a cookie issued by a personal mode browser among the cookies. ### Claim 13 (depends on 1) A non-transitory computer-readable recording medium storing instructions that, when executed by a processor, cause the processor to perform the user tracking method of claim 1. ### Claim 14 A computer system comprising: at least one processor configured to execute computer-readable instructions included in a memory, wherein the at least one processor comprises: a log collector configured to collect cookies in a log according to a user action on the Internet and to collect chain information by Internet communication as information different from the cookies; and a sequence analyzer configured to analyze an action sequence by grouping cookies based on the chain information. ### Claim 15 (depends on 14) The computer system of claim 14, wherein the chain information includes at least one of information related to transport layer security (TLS) parameters, information related to transmission control protocol (TCP) parameters, information related to a Hypertext Transfer Protocol Secure (HTTP) header, and client information by JavaScript (JS)) that is a client-side script language through HTTP over TLS (HTTPS) communication. ### Claim 16 (depends on 14) The computer system of claim 14, wherein the sequence analyzer is further configured to track the same browser based on the chain information at a timing at which the cookies are changed, or to track the same user using cookies of a login environment among the grouped cookies. ### Claim 17 (depends on 14) The computer system of claim 14, wherein the sequence analyzer is further configured to exclude a portion of the cookies based on at least one of client access information and a cookie issuance time. ### Claim 18 (depends on 17) The computer system of claim 17, wherein the sequence analyzer is further configured to exclude, from a target to be grouped, a cookie having a colliding cookie issuance time among the cookies. ### Claim 19 (depends on 17) The computer system of claim 17, wherein the sequence analyzer is further configured to exclude, from a target to be grouped, a cookie having an invariant cookie issuance time among cookies issued at different unit times.