Patent US6463533B1 successfully refreshed from Google Patents.
US6463533B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for generating site-specific user aliases in a computer network
Assignee: Microsoft Technology Licensing LLC
•
Filing: 1999-04-15
•
Granted: 2002-10-08
•
Expires: 2019-04-15
Abstract
Abstract An system for allowing a computer network site to recognize an anonymous user without revealing the identity of the user. The system involves generating a user alias based on the user's identity and the computer network site such that it is computationally difficult to determine the user's identity from the alias alone. The system further involves informing the computer network site of the alias upon access of the site by the user. The computer network site may then block access to the site's contents whenever it receives an alias associated with a disruptive user.
Inventors
- 👤 Pablo M. Calamera
- 👤 Jay D. Logue
- 👤 Joseph D. Ternasky
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 19:50
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0407; H04L61/00; H04L61/30; H04L61/301; H04L63/10; H04N; H04N21/00; H04N21/40; H04N21/43; H04N21/438; H04N21/4381; H04N21/60; H04N21/63; H04N21/643; H04N21/64322; H04L2101/00; H04L2101/60; H04L2101/604
Claims Analysis
Total Claims: 70
Claim 1
Independent Claim
93 words
A method for providing a site-specific alias to identify a user to a computer network site, the method comprising the steps of: for each of a plurality of computer network sites accessed by a user having an identity, generating a corresponding, unique alias such that the identity of the user cannot be determined from the alias, and where the user cannot modify the alias; and for at least one of the computer network sites, sending the corresponding alias to the computer network site upon access of the computer network site by the user.
Claim 2
Independent Claim
93 words
A method for providing a site-specific alias to identify a user to a computer network site, the method comprising the steps of: for each of a plurality of computer network sites accessed by a user having an identity, generating a corresponding, unique alias such that the identity of the user cannot be determined from the alias, and where the user cannot modify the alias; and for at least one of the computer network sites, sending the corresponding alias to the computer network site upon access of the computer network site by the user.
Claim 3
Dependent Claim
19 words
The method of claim 1 , wherein the step of generating is carried out without input from the user.
Claim 4
Independent Claim
89 words
A method for allowing a computer network site to recognize a user without revealing the identity of the user to the computer network site, the method comprising the steps of: generating an alias based on the identity of the user and the computer network site such that it is computationally difficult to determine the identity of the user from the alias alone; protecting the alias from modification by the user; and informing the computer network site of the alias upon access of the computer network site by the user.
Claim 5
Independent Claim
89 words
A method for allowing a computer network site to recognize a user without revealing the identity of the user to the computer network site, the method comprising the steps of: generating an alias based on the identity of the user and the computer network site such that it is computationally difficult to determine the identity of the user from the alias alone; protecting the alias from modification by the user; and informing the computer network site of the alias upon access of the computer network site by the user.
Claim 6
Dependent Claim
24 words
The method of claim 3 , wherein the user has an identification code, and where the step of generating includes encrypting the identification code.
Claim 7
Dependent Claim
26 words
The method of claim 3 , wherein the computer network site has a network address, and where the step of generating includes encrypting the network address.
Claim 8
Dependent Claim
42 words
The method of claim 3 , wherein the user has an identification code and the computer network site has a network address, and wherein the step of generating includes encrypting the identification code and the network address using a one-way hash function.
Claim 9
Dependent Claim
32 words
The method of claim 6 , wherein the step of generating includes computing an MD5 hash value of the network address, the identification code, and a data string, concatenated in that order.
Claim 10
Dependent Claim
67 words
The method of claim 7 , wherein the user is one of a plurality of users each having a unique identification code and data string combination, and further comprising the step of determining the user's identification code from the alias by computing a one-way hash value of the network address and each combination of identification code and data string until a value matching the alias is found.
Claim 11
Dependent Claim
91 words
The method of claim 8 , wherein the one-way hash function allows sequential processing of inputs, and wherein the step of determining the user's identification code from the alias includes processing the network address through the one-way hash function to obtain a preliminary value, and then, for each combination of identification code and data string, completing the one-way hash function by processing the identification code and data string through the one-way hash function to obtain a final value from the preliminary value, until a final value matching the alias is obtained.
Claim 12
Dependent Claim
45 words
The method of claim 3 , wherein the user has an identification code and the computer network site has a network address, and where the step of generating includes encrypting the identification code and the network address with at least one is secret encryption key.
Claim 13
Dependent Claim
40 words
The method of claim 10 , wherein the step of generating includes computing a one-way hash value of the secret encryption key and the network address to form a site key, and encrypting the identification code with the site key.
Claim 14
Dependent Claim
42 words
The method of claim 10 , wherein the step of generating includes computing a one-way hash value of the identification code with a data string, and encrypting the identification code, the data string and the one-way hash value to form the alias.
Claim 15
Dependent Claim
59 words
The method of claim 12 , wherein the alias can be decrypted to determine the identification code, the data string and the one-way hash value, and where the decryption can be verified by computing the one-way hash value of the decrypted identification code and the decrypted data string, and comparing the computed hash value with the decrypted hash value.
Claim 16
Dependent Claim
25 words
The method of claim 10 , wherein the alias can be decrypted to determine the identification code using the at least one secret encryption key.
Claim 17
Dependent Claim
23 words
The method of claim 3 , wherein the step of informing is carried out each time the user accesses a computer network site.
Claim 18
Dependent Claim
25 words
The method of claim 3 , wherein the step of informing is carried out if requested by the computer network site accessed by the user.
Claim 19
Dependent Claim
27 words
The method of claim 3 , wherein the step of informing is carried out if the user accesses a computer network site which previously requested the alias.
Claim 20
Dependent Claim
24 words
The method of claim 3 , wherein the step of informing includes sending the alias to the computer network site in an HTTP header.
Claim 21
Dependent Claim
26 words
The method of claim 3 , wherein the step of informing includes sending the alias to the computer network site in the form of a cookie.
Claim 22
Dependent Claim
19 words
The method of claim 3 , wherein the step of informing is carried out using a secure network protocol.
Claim 23
Independent Claim
94 words
A method for providing a site-specific user alias to an Internet site accessed by a user, the method comprising the steps of: assigning an identification code to a user; providing an alias server system connected to the Internet; generating an alias by the server system, where the alias is based on the identification code and the Internet site selected by the user such that it is computationally difficult to determine the identification code from the alias alone; and sending the alias to the Internet site upon access of the Internet site by the user.
Claim 24
Independent Claim
94 words
A method for providing a site-specific user alias to an Internet site accessed by a user, the method comprising the steps of: assigning an identification code to a user; providing an alias server system connected to the Internet; generating an alias by the server system, where the alias is based on the identification code and the Internet site selected by the user such that it is computationally difficult to determine the identification code from the alias alone; and sending the alias to the Internet site upon access of the Internet site by the user.
Claim 25
Dependent Claim
19 words
The method of claim 21 , wherein the step of generating is carried out without input from the user.
Claim 26
Independent Claim
95 words
A method for allowing a computer network site to recognize a user without revealing the identity of the user to the computer network site, the method comprising the steps of: providing an identification code to a user utilizing a user terminal to access a computer network site; generating an alias based on the identification code and the computer network site such that it is impractical to determine the identification code from the alias alone; storing the alias on the user terminal; and configuring the user terminal to inform the computer network site of the alias.
Claim 27
Independent Claim
95 words
A method for allowing a computer network site to recognize a user without revealing the identity of the user to the computer network site, the method comprising the steps of: providing an identification code to a user utilizing a user terminal to access a computer network site; generating an alias based on the identification code and the computer network site such that it is impractical to determine the identification code from the alias alone; storing the alias on the user terminal; and configuring the user terminal to inform the computer network site of the alias.
Claim 28
Dependent Claim
19 words
The method of claim 23 , wherein the step of generating is carried out without input from the user.
Claim 29
Dependent Claim
16 words
The method of claim 23 , wherein the step of generating includes encrypting the identification code.
Claim 30
Dependent Claim
35 words
The method of claim 23 , wherein the computer network site has a network address, and wherein the step of generating includes encrypting the identification code and the network address using a one-way hash function.
Claim 31
Dependent Claim
32 words
The method of claim 26 , wherein the step of generating includes computing an MD5 hash value of the network address, the identification code, and a data string, concatenated in that order.
Claim 32
Dependent Claim
67 words
The method of claim 27 , wherein the user is one of a plurality of users each having a unique identification code and data string combination, and further comprising the step of determining the user's identification code from the alias by computing a one-way hash value of the network address and each combination of identification code and data string until a value matching the alias is found.
Claim 33
Dependent Claim
91 words
The method of claim 28 , wherein the one-way hash function allows sequential processing of inputs, and wherein the step of determining the user's identification code from the alias includes processing the network address through the one-way hash function to obtain a preliminary value, and then, for each combination of identification code and data string, completing the one-way hash function by processing the identification code and data string through the one-way hash function to obtain a final value from the preliminary value, until a final value matching the alias is obtained.
Claim 34
Dependent Claim
39 words
The method of claim 25 , wherein the computer network site has a computer network address, and where the step of generating includes encrypting the identification code and the computer network address with at least one secret encryption key.
Claim 35
Dependent Claim
25 words
The method of claim 30 , wherein the alias can be decrypted to determine the identification code using the at least one secret encryption key.
Claim 36
Dependent Claim
29 words
The method of claim 23 , wherein the step of configuring includes configuring the user terminal to send the alias to the computer network site in an HTTP header.
Claim 37
Dependent Claim
25 words
The method of claim 23 , wherein the step of storing includes storing the alias on the user terminal in the form of a cookie.
Claim 38
Dependent Claim
31 words
The method of claim 33 , wherein the step of configuring includes configuring the user terminal to send the alias to the computer network site in the form of a cookie.
Claim 39
Dependent Claim
20 words
The method of claim 33 , wherein the step of storing includes protecting the alias from modification by the user.
Claim 40
Dependent Claim
44 words
The method of claim 33 , wherein the user terminal is configured to receive a set-cookie command from the computer network site, and where the step of storing is carried out if the user terminal receives a set-cookie command from the computer network site.
Claim 41
Dependent Claim
27 words
The method of claim 23 , wherein the step of configuring includes configuring the user terminal to inform the computer network site using a secure network protocol.
Claim 42
Independent Claim
81 words
A method for blocking access to an Internet site by an anonymous user, where the user has an identification code and a site-specific alias based on the identification code and the Internet site such that it is computationally difficult to determine the identification code from the alias alone, and where the user cannot modify the alias, the method comprising the steps of: receiving the alias if the user accesses the Internet site; and denying the user access to the Internet site.
Claim 43
Independent Claim
81 words
A method for blocking access to an Internet site by an anonymous user, where the user has an identification code and a site-specific alias based on the identification code and the Internet site such that it is computationally difficult to determine the identification code from the alias alone, and where the user cannot modify the alias, the method comprising the steps of: receiving the alias if the user accesses the Internet site; and denying the user access to the Internet site.
Claim 44
Independent Claim
107 words
A system for allowing a computer network site to recognize an anonymous user, the system comprising: a user terminal configured to access a computer network site, where the user terminal is operated by a user having an identification code that cannot be modified by the user; and an alias server system connected to communicate with the user terminal and with a computer network site accessed by the user terminal, where the alias server system is configured to generate an alias based on the identification code and the computer network site such that it is excessively difficult to determine the identity of the user from the alias alone.
Claim 45
Independent Claim
107 words
A system for allowing a computer network site to recognize an anonymous user, the system comprising: a user terminal configured to access a computer network site, where the user terminal is operated by a user having an identification code that cannot be modified by the user; and an alias server system connected to communicate with the user terminal and with a computer network site accessed by the user terminal, where the alias server system is configured to generate an alias based on the identification code and the computer network site such that it is excessively difficult to determine the identity of the user from the alias alone.
Claim 46
Dependent Claim
30 words
The system of claim 39 , wherein the alias server system is configured to inform the computer network site of the alias if the user accesses the computer network site.
Claim 47
Dependent Claim
26 words
The system of claim 40 , wherein the alias server system is configured to send the alias to the computer network site in an HTTP header.
Claim 48
Dependent Claim
28 words
The system of claim 40 , wherein the alias server system is configured to send the alias to the computer network site in the form of a cookie.
Claim 49
Dependent Claim
44 words
The system of claim 39 , wherein the user has an identification code and the computer network site has a network address, and wherein the alias server system is configured to encrypt the identification code and the network address using a one-way hash function.
Claim 50
Dependent Claim
34 words
The system of claim 43 , wherein the alias server system is configured to compute an MD5 hash value of the network address, the identification code, and a data string, concatenated in that order.
Claim 51
Dependent Claim
70 words
The system of claim 44 , wherein the user is one of a plurality of users each having a unique identification code and data string combination, and wherein the alias server system is configured to determine the user's identification code from the alias by computing a one-way hash value of the network address and each combination of identification code and data string until a value matching the alias is found.
Claim 52
Dependent Claim
80 words
The system of claim 45 , wherein the one-way hash function allows sequential processing of inputs, and wherein the alias server system is configured to compute a preliminary value by processing the network address through the one-way hash function, and then for each combination of identification code and data string, compute a final value from the preliminary value by processing the identification code and data string through the one-way hash function until a final value matching the alias is obtained.
Claim 53
Dependent Claim
46 words
The system of claim 39 , wherein the user has an identification code and the computer network site has a network address, and where the alias server system is configured to encrypt the identification code and the network address with at least one secret encryption key.
Claim 54
Dependent Claim
29 words
The system of claim 47 , wherein the alias server system is configured to decrypt the alias using the at least one secret key to determine the identification code.
Claim 55
Dependent Claim
19 words
The system of claim 39 , wherein the alias server system generates the alias without input from the user.
Claim 56
Independent Claim
150 words
A system for allowing a computer network site to recognize an anonymous user, the system comprising: an alias server system connected to communicate with a user terminal, and configured to generate an alias based on the identity of a user and a computer network site accessed by the user, where it is computationally intractable to determine the identity of the user from the alias alone, and where the alias server system is configured to transmit the alias to the user terminal after the alias is generated; and a user terminal for operation by a user, where the user has an identity, and where the user terminal is connected to access a computer network site, and where the user terminal is configured to receive an alias from the alias server system and to send the alias to the computer network site upon access of the computer network site by the user.
Claim 57
Independent Claim
150 words
A system for allowing a computer network site to recognize an anonymous user, the system comprising: an alias server system connected to communicate with a user terminal, and configured to generate an alias based on the identity of a user and a computer network site accessed by the user, where it is computationally intractable to determine the identity of the user from the alias alone, and where the alias server system is configured to transmit the alias to the user terminal after the alias is generated; and a user terminal for operation by a user, where the user has an identity, and where the user terminal is connected to access a computer network site, and where the user terminal is configured to receive an alias from the alias server system and to send the alias to the computer network site upon access of the computer network site by the user.
Claim 58
Dependent Claim
44 words
The system of claim 50 , wherein the user has an identification code and the computer network site has a network address, and where the alias server system is configured to encrypt the identification code and the network address using a one-way hash function.
Claim 59
Dependent Claim
46 words
The system of claim 50 , wherein the user has an identification code and the computer network site has a network address, and where the alias server system is configured to encrypt the identification code and the network address with at least one secret encryption key.
Claim 60
Dependent Claim
25 words
The system of claim 50 , wherein the user terminal is configured to send the alias to the computer network site in an HTTP header.
Claim 61
Dependent Claim
38 words
The system of claim 50 , wherein the user terminal is configured to store the alias in the form of a cookie and to send the alias to the computer network site in the form of a cookie.
Claim 62
Dependent Claim
26 words
The system of claim 50 , wherein the user terminal is configured to send the alias to the computer network site using a secure network protocol.
Claim 63
Dependent Claim
65 words
An alias server system, the system comprising: a computer server configured to receive a request for a user alias, and configured to generate a user alias based on an identification code and a computer network site such that it is impractical to determine the identification code from the alias alone, and where the computer server is configured to transmit the alias to a user terminal.
Claim 64
Dependent Claim
65 words
An alias server system, the system comprising: a computer server configured to receive a request for a user alias, and configured to generate a user alias based on an identification code and a computer network site such that it is impractical to determine the identification code from the alias alone, and where the computer server is configured to transmit the alias to a user terminal.
Claim 65
Dependent Claim
37 words
The system of claim 56 , wherein the computer network site has a network address, and where the alias server system is configured to encrypt the identification code and the network address using a one-way hash function.
Claim 66
Dependent Claim
37 words
The system of claim 56 , wherein the computer network site has a network address and the computer server is configured to encrypt the identification code and the network address using at least one secret encryption key.
Claim 67
Dependent Claim
79 words
A user terminal for identifying an anonymous user to a computer network site, comprising: a user terminal for operation by a user having an identity, where the user terminal is connected to access a computer network site, and where the user terminal is configured to request and receive an alias based on the identity of the user and the computer network site, and where it is computationally difficult to determine the identity of the user from the alias alone.
Claim 68
Dependent Claim
79 words
A user terminal for identifying an anonymous user to a computer network site, comprising: a user terminal for operation by a user having an identity, where the user terminal is connected to access a computer network site, and where the user terminal is configured to request and receive an alias based on the identity of the user and the computer network site, and where it is computationally difficult to determine the identity of the user from the alias alone.
Claim 69
Dependent Claim
32 words
The user terminal of claim 59 , wherein the user terminal is configured to send the alias to the computer network site upon access of the computer network site by the user.
Claim 70
Dependent Claim
27 words
The user terminal of claim 60 , wherein the user terminal is configured to send the alias to the computer network site using a secure network protocol.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-10-07 | 2006-04-08 | 2006-10-08 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-10-07 | 2010-04-08 | 2010-10-08 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-10-07 | 2014-04-08 | 2014-10-08 | $7700.00 | Window Closed / Lapsed |