# US 2021/0243233 A1 · Method and sytem for protecting privacy of users in session recordings > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243233 A1 - Document ID: US20210243233A1 - Status: Published application - Kind: A1 - Application number: 16/780,445 - Filed: 2020-02-03 - Published: 2021-08-05 - Earliest claimed: 2020-02-03 - Assignees: Citrix Systems, Inc. - Applicants: Citrix Systems, Inc. - Inventors: Manbinder Pal Singh; Georgy Momchilov - Web page: https://patentgrep.com/patent/US20210243233A1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 65/1066: Session management - G06F 3/048: Interaction techniques based on graphical user interfaces [GUI] - G06F 21/60: Protecting data - H04L 12/56: {Packet switching systems} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 67/142: Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms - H04L 2012/5618: {Bridges, gateways [GW] or interworking units [IWU]} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer system is provided. The computer system includes a memory and a processor. The processor is configured to scan user interface (UI) data representative of a plurality of UI controls; detect a portion of the UI data associated with private information, the portion corresponding to a UI control of the plurality of UI controls; record first session data comprising an obfuscated version of the UI control and unobfuscated versions of other UI controls of the plurality of UI controls; record second session data comprising an unobfuscated version of the UI control; encrypt the second session data to generate encrypted session data; and store the encrypted session data in association with the first session data. ## Claims ### Claim 1 A computer system comprising: a memory; and at least one processor coupled to the memory and configured to scan user interface (UI) data representative of a plurality of UI controls; detect at least one portion of the UI data associated with private information, the at least one portion of UI data corresponding to at least one UI control of the plurality of UI controls; record, during an interactive computing session of a user, first session data comprising an obfuscated version of the at least one UI control and unobfuscated versions of other UI controls of the plurality of UI controls; record, during the same interactive computing session of the user, second session data comprising an unobfuscated version of the at least one UI control; encrypt the second session data to generate encrypted session data; and store the encrypted session data in association with the first session data. ### Claim 2 (depends on 1) The computer system of claim 1, wherein the at least one processor comprises a plurality of processors including one or more first processors and one or more second processors, the computer system comprises a gateway including the one or more first processors, and the one or more first processors are configured to scan the UI data. ### Claim 3 (depends on 1) The computer system of claim 1, wherein to detect the at least one portion comprises to compare the at least one portion to a set of UI data associated with private information. ### Claim 4 (depends on 3) The computer system of claim 3, wherein the set of UI data comprises one or more of application names, window titles, universal resource identifiers, portions of universal resource identifiers, hypertext markup language elements, and user interface automation elements. ### Claim 5 (depends on 1) The computer system of claim 1, wherein to detect the at least one portion comprises to detect one or more portions of the UI data that correspond to one or more UI controls selectable to cause the at least one processor to render the at least one UI control via a user interface. ### Claim 6 (depends on 1) The computer system of claim 1, wherein to record the first session data comprises to record the unobfuscated versions of other UI controls and to omit recording of the at least one UI control. ### Claim 7 (depends on 1) The computer system of claim 1, wherein to record the first session data comprises to record the unobfuscated versions of other UI controls and to record an unintelligible version of the at least one UI control. ### Claim 8 (depends on 1) The computer system of claim 1, wherein the at least one processor is further configured to generate a symmetric encryption key and to encrypt the second session data using the symmetric encryption key. ### Claim 9 (depends on 8) The computer system of claim 8, wherein the at least one processor is further configured to store the symmetric encryption key in association with the encrypted session data. ### Claim 10 (depends on 9) The computer system of claim 9, wherein the at least one processor is further configured to: receive, from a session player, a request to review the first session data; and transmit, to the session player, the first session data. ### Claim 11 (depends on 10) The computer system of claim 10, wherein the at least one processor is further configured to: receive, from the session player, a request to clarify the obfuscated version of the at least one UI control; and transmit, to the session player, the encrypted session data and the symmetric encryption key. ### Claim 12 (depends on 11) The computer system of claim 11, further comprising a user interface, wherein the at least one processor is further configured to: decrypt, via execution of the session player, the encrypted session data with the symmetric encryption key to render the second session data via the user interface. ### Claim 13 (depends on 12) The computer system of claim 12, wherein the at least one processor is further configured to: transmit, to a notification agent in response to reception of the request to clarify, a request to authorize rendering of the second session data; and receive, from the notification agent, a response to the request to clarify including an indication that the request to clarify is granted. ### Claim 14 (depends on 13) The computer system of claim 13, wherein the notification agent is associated with a designated user. ### Claim 15 A method of protecting private information using a computer system, the method comprising: scanning user interface (UI) data representative of a plurality of UI controls; detecting at least one portion of the UI data associated with private information, the at least one portion of UI data corresponding to at least one UI control of the plurality of UI controls; recording, during an interactive computing session of a user, first session data comprising an obfuscated version of the at least one UI control and unobfuscated versions of other UI controls of the plurality of UI controls; recording, during the same interactive computing session of the user, second session data comprising an unobfuscated version of the at least one UI control; encrypting the second session data to generate encrypted session data; and storing the encrypted session data in association with the first session data. ### Claim 16 (depends on 15) The method of claim 15, wherein detecting the at least one portion comprises detecting one or more portions of the UI data that correspond to one or more UI controls selectable to initiate rendering of the at least one UI control. ### Claim 17 (depends on 15) The method of claim 15, further comprising: receiving a request to review the first session data; transmitting the first session data to a session player; receiving a request to clarify the obfuscated version of the at least one UI control; transmitting a request to authorize rendering of the second session data to a notification agent; receiving a response to the request to clarify including an indication that the request to clarify is granted; transmitting the encrypted session data and a symmetric encryption key to the session player; and decrypting the encrypted session data with the symmetric encryption key to render the second session data via a user interface. ### Claim 18 (depends on 17) The method of claim 17, wherein transmitting the request to authorize comprises transmitting the request to authorize to a notification agent associated with a user associated with the private information. ### Claim 19 A non-transitory computer readable medium storing processor executable instructions to protect private information, the instructions comprising instructions to: scan user interface (UI) data representative of a plurality of UI controls; detect at least one portion of the UI data associated with private information, the at least one portion of UI data corresponding to at least one UI control of the plurality of UI controls; record, during an interactive computing session of a user, first session data comprising an obfuscated version of the at least one UI control and unobfuscated versions of other UI controls of the plurality of UI controls; record, during the same interactive computing session of the user, second session data comprising an unobfuscated version of the at least one UI control; encrypt the second session data to generate encrypted session data; and store the encrypted session data in association with the first session data. ### Claim 20 (depends on 19) The non-transitory computer readable medium of claim 19, wherein the instructions further comprise instructions to: receive a request to review the first session data; transmit the first session data to a session player; receive a request to clarify the obfuscated version of the at least one UI control; transmit a request to authorize rendering of the second session data to a notification agent associated with a user associated with the private information; receive a response to the request to clarify including an indication that the request to clarify is granted; transmit the encrypted session data and a symmetric encryption key to the session player; and decrypt the encrypted session data with the symmetric encryption key to render the second session data via a user interface.