# US 9,521,118 B2 · Secure network privacy system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,118 B2 - Document ID: US9521118B2 - Status: Granted - Kind: B2 - Application number: 14/682,625 - Filed: 2015-04-09 - Published: 2015-07-30 - Granted: 2016-12-13 - Earliest claimed: 2003-06-25 - Assignees: Ntrepid Corporation - Applicants: Ntrepid Corporation - Inventors: Lance M. Cottrell; James A. Reynolds; Darya Mazandarany; Steve Walsh; Peleus Uhley; Gene Nelson - Web page: https://patentgrep.com/patent/US9521118B2 ## CPC - H04L 63/0281: {Proxies} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 67/56: Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) - H04L 63/0245: {Filtering by information in the payload} - H04L 63/166: {at the transport layer} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The invention provides a method and system of receiving communications from a network device in a network to a source of network data and establishing a secure and/or authenticated network connection between the network device and the source that appears to the network device as a direct connection to the source of network data. Broadly conceptualized, the method and system may also include a parsing module that modifies the network data passing back and forth between the network device and the source of network data. ## Claims ### Claim 1 A method for establishing a network connection between a network device and a network, the method comprising: intercepting, at a proxy server, a request to access network data from the network device, wherein the request comprises an identifier associated with the network device connected to the network; replacing the identifier associated with the network device in the request with another identifier associated with a proxy for the network device; removing or replacing identifying information from packets passing through the proxy server from and/or to a source of the network data; removing or replacing referrer or other identifying headers from the request; removing or replacing cookies from the request or response headers; removing or replacing identifying information from web form submissions; and removing or replacing sensitive information including e-mail addresses or credit card numbers with either false information or alternative information specific to the source of the network data; sending the request for a connection from the network device to the source of the network data; establishing a connection between the proxy for the network device and the source of the network data; and establishing a connection between the network device and the proxy for the network device. ### Claim 2 (depends on 1) The method of claim 1, wherein the connection between the network device and the proxy is a secure connection. ### Claim 3 (depends on 2) The method of claim 2, further comprising receiving network data from the source at the network device via the proxy server. ### Claim 4 (depends on 1) The method of claim 1, wherein the connection between the network device and the proxy is an authenticated connection. ### Claim 5 (depends on 4) The method of claim 4, further comprising receiving network data from the source at the network device via the proxy server. ### Claim 6 A method for establishing a plurality of network connections between at least one network device and a plurality of networks, the method comprising: intercepting, at a proxy server, a plurality of requests to access network data from the at least one network device, wherein the request comprises an identifier associated with the at least one network device connected to the networks; replacing each of the identifiers associated with each of the at least one network device in the requests with another identifier from a plurality of identifiers associated with at least one proxy for the at least one network device; removing or replacing identifying information from packets passing through the proxy server from and/or to a source of the network data; removing or replacing referrer or other identifying headers from the requests; removing or replacing cookies from the requests or response headers; removing or replacing identifying information from web form submissions; and removing or replacing sensitive information including e-mail addresses or credit card numbers with either false information or alternative information specific to the source of the network data; sending the plurality of requests for a connection from the at least one network device to a source of the network data; establishing a connection between the at least one proxy and the source of the network data; and establishing a connection between the network devices and the at least one proxy. ### Claim 7 (depends on 6) The method of claim 6, further comprising: determining the identifier associated with the source of the network data at a key module; associating that identifier with a proxy for a network device; sending a response to a request for a connection from a network device with an identifier associated with the proxy; and establishing a connection between the proxy and the network device. ### Claim 8 (depends on 7) The method of claim 7, wherein the connection between the proxy and the network device is a secure connection. ### Claim 9 (depends on 8) The method of claim 8, further comprising: generating a unique identifier for each request by a network device to access data; associating that identifier with a proxy for the network device; sending the request for a connection from a network device to the source of the network data; and establishing a connection between the proxy and the source of the network data using another identifier unique to that connection. ### Claim 10 (depends on 7) The method of claim 7, wherein the connection between the proxy and the network device is an authenticated connection. ### Claim 11 (depends on 10) The method of claim 10, further comprising: generating a unique identifier for each request by a network device to access data; associating that identifier with a proxy for the network device; sending the request for a connection from a network device to the source of the network data; and establishing a connection between the proxy and the source of the network data using another identifier unique to that connection. ### Claim 12 A non-transitory computer-readable medium having software for establishing a network connection between a network device and a network, the computer-readable medium comprising: logic configured for intercepting, at a proxy server, a request to access network data from the network device, wherein the request comprises an identifier associated with the network device connected to the network; logic configured for replacing the identifier associated with the network device in the request with another identifier associated with a proxy for the network device; logic configured for removing or replacing identifying information from packets passing through the proxy server from and/or to a source of the network data; logic configured for removing or replacing referrer or other identifying headers from the request; logic configured for removing or replacing cookies from the request or response headers; logic configured for removing or replacing identifying information from web form submissions; and logic configured for removing or replacing sensitive information including e-mail addresses or credit card numbers with either false information or alternative information specific to the source of the network data; logic configured for sending the request for a connection from the network device to the source of the network data; logic configured for establishing a connection between the proxy for the network device and the source of the network data; and logic configured for establishing a connection between the network device and the proxy for the network device. ### Claim 13 (depends on 12) The computer-readable medium of claim 12, further comprising logic configured for making secure the connection between the network device and the proxy. ### Claim 14 (depends on 12) The computer-readable medium of claim 12, further comprising logic configured for authenticating the connection between the network device and the proxy. ### Claim 15 (depends on 12) The computer-readable medium of claim 12, further comprising logic configured for making secure the connection between the proxy and the source. ### Claim 16 (depends on 12) The computer-readable medium of claim 12, further comprising logic configured for authenticating the connection between the proxy and the source. ### Claim 17 (depends on 12) The computer-readable medium of claim 12, further comprising logic configured for receiving network data from the source at the network device via the proxy. ### Claim 18 A non-transitory computer-readable medium for establishing a plurality of network connections between at least one network device and a plurality of networks, the computer-readable medium comprising: logic configured for receiving a plurality of requests to access network data from the at least one network device, wherein the request comprises an identifier associated with the at least one network device connected to the networks; logic configured for replacing each of the identifiers associated with each of the at least one network device in the requests with another identifier from a plurality of identifiers associated with at least one proxy for the network devices; logic configured for removing or replacing identifying information from packets passing through the proxy server from and/or to a source of the network data; logic configured for removing or replacing referrer or other identifying headers from the requests; logic configured for removing or replacing cookies from the requests or response headers; logic configured for removing or replacing identifying information from web form submissions; and logic configured for removing or replacing sensitive information including e-mail addresses or credit card numbers with either false information or alternative information specific to the source of the network data; logic configured for sending the plurality of requests for a connection from the at least one network device to the source of the network data; logic configured for establishing a connection between the at least one proxy and the source; and logic configured for establishing a connection between the at least one network device and the at least one proxy. ### Claim 19 (depends on 18) The computer-readable medium of claim 18, further comprising: logic configured for determining the identifier associated with the source of the network data at a key module; logic configured for associating that identifier with a proxy for a network device; logic configured for sending a response to a request for a connection from a network device with an identifier associated with the proxy; and logic configured for establishing a connection between the proxy and the network device. ### Claim 20 (depends on 19) The computer-readable medium of claim 19, further comprising logic configured for making secure the connection between the network device and the proxy. ### Claim 21 (depends on 20) The computer-readable medium of claim 20, further comprising logic configured for authenticating the connection between the network device and the proxy. ### Claim 22 (depends on 19) The computer-readable medium of claim 19, further comprising: logic configured for generating a unique identifier for each request by a network device to access data; logic configured for associating that identifier with a proxy for the network device; logic configured for sending the request for a connection from a network device to the source of the network data; and logic configured for establishing a connection between the proxy and the source of the network data using another identifier unique to that connection. ### Claim 23 (depends on 22) The computer-readable medium of claim 22, further comprising logic configured for making secure the connection between the proxy and the source. ### Claim 24 (depends on 22) The computer-readable medium of claim 22, further comprising logic configured for authenticating the connection between the proxy and the source.