HTTP Cookie Privacy Preservation via Segment Splitting

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for preserving privacy in HTTP communications are inadequate as they treat entire cookie values as single variables, failing to accurately identify unique user identifiers and leading to privacy leaks, while also affecting user experience by blocking advertisements.

Innovation Solution

A method and system that intercepts HTTP requests, extracts cookies, splits cookie values into information segments using a split pattern generated by a cookie format analyzer, and modifies these segments based on predefined rules, allowing for selective blocking or modification of tracking information without affecting legitimate data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If existing methods treat entire cookie values as single variables to preserve privacy, then privacy protection is simplified, but tracking information cannot be accurately identified and modified

Engineering Contradiction:
Improveidentification accuracy of user identifiersVSAvoidcomplexity of cookie processing method
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent divides a cookie value into multiple segments by identifying delimiters (such as dots, hyphens, or underscores) within the cookie string. Each segment is then independently analyzed to determine if it contains tracking information. This segmentation allows the system to precisely identify and modify only the tracking portions while preserving other cookie data, thereby improving identification accuracy without requiring complete cookie blocking.

Inventive Principle:
Principle #1Segmentation

2Object-affected harmful factors

If ad blocking tools block all content from tracking servers to preserve privacy, then tracking information is prevented, but legitimate web content becomes inaccessible

Engineering Contradiction:
Improvetracking information leakageVSAvoidaccess to legitimate web content
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent extracts and modifies only the specific tracking information segments from within the cookie value, rather than blocking the entire cookie or all content from the server. By isolating and modifying just the harmful tracking portions while leaving other segments intact, the system prevents tracking information leakage while maintaining access to legitimate web content and services.

Inventive Principle:
Principle #2Taking out (Extraction)

3Measurement precision

If sophisticated tools like Ghostery or TorBrowser are used to protect privacy, then tracking detection improves, but user experience deteriorates due to blocked advertisements

Engineering Contradiction:
Improvetracking detection capabilityVSAvoidimpact on user experience and advertising ecosystem
Core Design Contradiction:
Measurement precisionVSObject-generated harmful factors

Solution Approach 1:

The patent applies different processing treatments to different segments of the cookie value based on their content. Tracking information segments are modified or removed, while non-tracking segments are preserved in their original form. This localized quality approach allows the system to provide precise tracking protection in specific areas while maintaining the functionality and user experience associated with legitimate content and advertising.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11763032B2Method and system for preserving privacy in an HTTP communication between a client and a server
Publication Date: 2023.09.19 NEC CORP
  • US11763032B2 patent drawing
  • US11763032B2 patent drawing
  • US11763032B2 patent drawing

AI summary

A method preserves privacy in an HTTP communication between a client and a server. The method includes: intercepting an HTTP request that is sent from the client to the server; extracting a cookie from the HTTP request, the cookie including a cookie name and a cookie value; splitting the cookie value into information segments according to a split pattern; and modifying one or more of the information segments based on predefined modification rules. The split pattern for the cookie value is received from a cookie format analyzer. The cookie format analyzer selects the split pattern by: generating multiple lists of data formats based on the cookie name, and selecting one of the lists as the split pattern based on similarity and frequency features associated with the data formats.