Cloud Container Proxy for Web Browsing Anonymity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Websites can track users based on their internet protocol (IP) addresses and browser attributes, compromising user anonymity during web browsing.

Innovation Solution

A method involving a server acting as a proxy, which establishes connections with computing devices and instantiates access applications within cloud containers using randomly assigned anonymization characteristics, preventing identification by websites.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If websites use IP addresses and browser attributes to track users, then user identification capability is improved, but user anonymity is compromised

Engineering Contradiction:
Improveuser identification capabilityVSAvoiduser anonymity
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a proxy server as an intermediary between the user's computing device and websites. The proxy server establishes connections to websites on behalf of the user, masking the user's real IP address and browser attributes. Websites interact with the proxy server instead of the user's device, preventing direct tracking of the user's identity while maintaining browsing functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The proxy server dynamically changes identification parameters such as IP addresses and browser attributes for each browsing session or request. By randomly selecting and rotating these parameters, the system prevents websites from consistently identifying and tracking the same user across different sessions, thereby protecting user anonymity while allowing legitimate browsing activities.

Inventive Principle:
Principle #35Parameter changes

2Object-affected harmful factors

If a proxy server instantiates access applications with randomly assigned anonymization characteristics for each connection, then user anonymity is improved, but system complexity increases

Engineering Contradiction:
Improveuser anonymityVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent segments the proxy server functionality into multiple independent cloud containers, with each container handling a specific browsing connection. Each container instantiates its own access application with unique anonymization characteristics. This segmentation allows the system to manage complexity by isolating each browsing session into separate, manageable units rather than handling all connections in a single monolithic system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The proxy server implements a universal architecture where cloud containers can be dynamically created, configured, and destroyed based on browsing connections. The same infrastructure and processes are reused across multiple connections and sessions, reducing overall system complexity despite serving multiple users and connections simultaneously. The modular design allows the system to handle diverse browsing requirements using a standardized approach.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10455413B2Systems and methods to anonymize web browsing
Publication Date: 2019.10.22 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US10455413B2 patent drawing
  • US10455413B2 patent drawing
  • US10455413B2 patent drawing

AI summary

A method includes, in response to a request from a computing device, establishing a connection between a server and the computing device. The method additionally includes identifying a first set of anonymization characteristics for a first instance of an access application. The method additionally includes instantiating, within a first cloud container corresponding to the connection, the first instance of the access application using the first set of anonymization characteristics. The method additionally includes retrieving first data using the first instance of the access application. The method additionally includes sending second data to the computing device via the connection. The second data is determined based on the first data.